last executing test programs: 12m41.539599541s ago: executing program 1 (id=210): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x14) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x84, @empty, 0x4e20, 0x3, 'sed\x00', 0x3, 0x1, 0x5f}, 0x2c) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) write$tun(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) 12m41.229446253s ago: executing program 1 (id=213): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x10) 12m39.27304151s ago: executing program 1 (id=215): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x4004000) 12m37.678893016s ago: executing program 1 (id=219): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f0000000240)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,fmask=00000000000000000000000,utf8,allow_utime=00000000000000000000015,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=maccenteuro,utf8,dmask=00000000000000002000000,dmask=00000000\x00\x000000000000001,\x00'], 0x1, 0x1548, &(0x7f0000003300)="$eJzs3AuYTlXbOPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJEmSJKfklCZ5JSExhCQNSUgOQxJDSA4Tk8b5fD4kJEmTJCE5Jet/Tbi8vdW/vq++1/e9c/+ua1+z7mfve+21n3s/z7P2npnnm65DazauVa0hEcFfghd+JAJALAAMBIDcABAAQLm4cnGZ67NLTPxrO2F/rwdTrvQI2JXE9c/auP5ZG9c/a+P6Z21c/6yN65+1cf2zNq4/Y1nZpmkFruEl6y58////uNi/ksyf//9BMkqN/WJNqeu6AcT8ia2zA9c/y+P6/8cK/sxGXP+sjeufVf2laSP7P+DpP7ENv/6zgmy/u4brn7Vx/RnLyq70/ec/vyAA/P39QuR/2XNwJPuFwvyb9nelzz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDaX+ZAoBL7Ss9LsYYY4wxxhhjjP19fLYrPQLGGGOMMcYYY4z9z0MQIEFBADGQDWIhO+QAAQBXQy7IDRG4BuLgWsgD10FeyAf5oQDEQ0EoBBoMWCAIoTAUgShcD0XhBigGxaEElAQHpaA03Ahl4CYoCzdDObgFysOtUAEqQiWoDLdBFbgdqsIdUA3uhOpQA2pCLbgLasPdUAfugbpwL9SD+6A+3A8N4AFoCA9CI3gIGsPD0AQegabQDJpDC2j5+/ntEOB38p+DnvA89ILekAh9oC+8AP2gPwyAF2EgvASD4GUYDK9AEgyBofAqDIPXYDi8DiNgJIyCN2A0vAljYCyMg/GQDBNgIrwFk+BtmAzvwBSYCikwDabDuzADZsIseA9mw/swB+bCPJgPqfABLICFkAYfwiL4CNJhMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74GHbCJ7ALdsMe+BT2wmf/xfxT/5LfDQEBBQpUqDAGYzAWYzEH5sCcmBNzYS6MYATjMA7zYB7Mi3kxP+bHeIzHQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOiyNpbEM3oRlsSyWw3JYHstjBayIFbEyVsYqWAWrYlWshtWwOlbHmlgT78K7sA/WwTpYF+tiPax36fYUNsSG2AgbYWNsjE2wCTbFptgcm2NLbImtsBW2xtbYFttie2yPHbADJmACdsSO2Ak7YWfsjF2wC3bFrtgNu2P3jOeyAT6Pz2NvrC76YF/si/0wKdsAfBFfxJdwEL6ML+MrmIRDcCi+iq/iazgcT+IIHImjcBRWEW/iGByLJMZjMibjRJyIk3BS5ukG7+BUTMFpOB2n4wyciTPxPZyN7+P7OBfn4nxMxVRcgAsxDdNwEZ7CdFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9GBYCf4G7cjUm4F/fiPtyH+3E/HsADmIEZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/CZ+K8afVx8dRKITEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEHpFH5BV5RX6RX8SLeFFIFBJGGEEijAEAERVRUVQUFcVEMVFClBBOOFFalBZlRBlRVpQV5cQtory4VVQQFUUbV1lUFlVEW1dV3CGqiWqiuqghaopaopaoLWqLOqKOqCvqinqinqgv7hcNRB8cgA+KzMo0FkOwiRiKTUUzIS++g7USw7G1aCPainZiJI7ADqKVSxBPio5iDHYS/xBj8WnRRYzHruJZ0U10Fz3Ec6KnaO16id5iMvYRfcVU7Cf6iwHiRTEDa4j3cHb2muIVkSSGiKHiVTEfXxPDxetihBgpRok3so8Wb4oxYqwYJ8aLZDFBTBRviUnibTFZvCOmiKkiRUwT08W7YoaYKWaJ98Rs8b6YI+aKeWK+SBUfiAVioUgTH4pF4iORLhaLJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosd4mOxU3widondYo/4VOwVn4l94nOxX3whDogvRYb4ShwUX4tD4htxWHwrjojvxFFxTBwX34sT4gdxUpwSp8UZcVb8KM6Jn8R54QVIlEJKqWQgY2Q2GSuzyxzyKplTBhef3WtknLxW5pHXybwyn8wvC8h4WVAWkloaaSXJUBaWRWRUXi+LyhtkMVlclpAlpZOlZGl5oywjb5Jl5c2ynLxFlpe3ygqyoqwkK8vbZBV5u4TIhX1UlzVkTVlL3iUT4W5ZR94j68p7ZT15n6wv75cN5AOyoXxQNpIPycbyYdlEPiKbymayuWwhW8pHZSv5mGwt28i2sp1sLx+XHeQTMkE+KTtKf/EUeVp2kc/IrvJZ2U12lz3kT/K89LKX7C2hD8i+8gXZT/aXA2IBQL4kB8mX5WD5ikySQ+RQ+aocJl+Tw+XrcoQcKUfJN+Ro+aYcI8fKcXK8TJYT5ET5lpwk35aT5TtyipwqU+Q0OUAO/LmnWVL+Yf5bv5E/+Oe9b5Sb5Ga5RW6V2+R2uUN+LHfKnXKX3CX3yD1yr9wr98l9cr/cLw/IAzJDZsiD8qA8JA/Jw/KwPCKPyKPymDwjv5cn5A/ypDwlT8kz8qw8K89dfA5AoRJKKqUCFaOyqViVXeVQV6mc6mqVS+VWEXWNist8F1bXqbwqn8qvCqh4VVAVUloZZRWpUBVWRVRUXY8XTxhVQpVUTpVSpdWNF/LVtSrPH+erouoGVUwV/0X+pfEl/s74WqqWqpVqpVqr1qqtaqvaq/aqg+qgElSC6qg6qk6qk+qsOqsuqovqqrqqbqqb6qF6qJ6qp+qleqlElaj6qhdUP9VfDVAvqoHqJTVIDVKD1WCVpJLUUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVLJKVhPVRDVJTVKT1WQ1RU1RKSpFTVfT1Qw1Q81Ss9RsNVvNUXPUPDVPpapUtUAtUGkqTS1Si1S6WqwWq6VqqVqulquVaqVarVartWqtWq/Wq3S1SW1SW9QWtU1tUzvUDrVT7VS71C61R+1Re9VetU/tU/vVfnVAHVAZKkMdVAfVIXVIHVaH1RF1RB1VR9VxdVydUCfUSXVSnVan1Vl1Vp1T59R5dT5z2heIQAQqUEFMEBPEBrFBjiBHkDPIGeQKcgWRIBLEBXFBnuC6IG+QL8gfFAjig4JBoUAHJrCBuFj0aHB9UDS4ISgWFA9KBCUDF5QKSgc3BmWCm4Kywc1BueCWoHxwa1AhqBhUCioHtwVVgtuDqsEdQbXgzqB6UCOoGdQK7gpqB3cHdYJ7grrBvUG94L6gfnB/0CB4IGgYPBg0Ch4KGgcPB02CR4KmQbOgedAiaPm39u/9yXyPuV66t07UfXRf/YLup/vrAfpFPVC/pAfpl/Vg/YpO0kP0UP2qHqZf08P163qEHqlH6Tf0aP2mHqPH6nF6vE7WE/RE/ZaepN/Wk/U7eoqeqlP0ND1dv6tn6Jl6ln5Pz9bv6zl6rp6n5+tU/YFeoBfqNP2hXqQ/0ul6sV6il+plerleoVfqVXq1XqPX6nV6vQK9UW/Sm/UWvVVv09v1Dv2x3qk/0bv0br1Hf6r36s/0Pv253q+/0Af0lzpDf6UP6q/1If2NPqy/1Uf0d/qoPqaP6+/1Cf2DPqlP6dP6jD6rf9Tn9E/6vPaZk/vMj3ejjDIxJsbEmliTw+QwOU1Ok8vkMhETMXEmzuQxeUxek9fkN/lNvIk3hUwhk4kMmcKmsImaqClqippippgpYUoYZ5wpbUqbMqaMKWvKmnKmnClvypsKpoKpZCqZ28xt5nZzu7nD3GHuNHeaGqaGqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYpqapaW6am5ampWllWpnWprVpa9qa9qa96WA6mASTYDqajqaT6WQ6m86mi+liupquppvpZnqYHqan6Wl6mV4m0SSavqav6Wf6mQFmgBloBppBZpAZbAabJJNkhpqhZpgZZoab4WaEGWlGZU5UzZtmjBlrxpnxJtkkm4lmoplkJpnJZrKZYqaYFJNippvpZoaZYWaZWWa2mW3mmDlmnplnUk2qWWAWmDSTZhaZRSbdpJslZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPXI4DZb/abA+aAyTAZ5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5oQ5YU6ak+a0OW3OmnwXPy+9ibXZbQ57lc1pr7a5bG77r3F+W8DG24K2kNU2r833i9hYa4vZ4raELWmdLWVL2xt/FVewFW0lW9neZqvY223VX8W17d22jr3H1rX32lr2rl/E9ex9tr592DZABLDNbCPbwja2D9sm9hHb1DazzW0L294+bjvYJ2yCfdJ2tE/9Kl5gF9pVdrVdY9faXXa3PW3P2EP2G3vW/mh72d52oH3JDrIv28H2FZtkh/wqHmXfsKPtm3aMHWvH2fG/iqfYqTbFTrPT7bt2hp35qzjVfmBn2zQ7x8618+z8n+PMMaXZD+0i+5FNtwEssUvtMrvcrrArL43V57br7Qa70e60n9gtdqvdZrfbHZcmwna33WM/tXvtZ/ag/drut1/YA/awzbBf/RxnHt9h+609Yr+zR+0xe9x+b0/YH9Sl7Mxj/97+ZM9bb4GQgCQpCiiGslEsZaccdBXlpKspF+WmCF1DcXQt5aHrKC/lo/xUgOKpIBUiTYYsEYVUmIpQlK6nS8MrQSXJUSkqTTdSGbqJytLNVI5uofJ0K1WgilSJKtNtVIVup6p0B1WjO6k61aCaVIvuotp0N9Whe6gu3Uv16D6qT/dTA3qAGtKD1Igeosb0MDWhR6gpNaPm1IJa0qPUih6j1tSG2lI7ak+PUwd6ghLoSepIT1En+gd1pqepCz1DXelZ6kbdqQc9Rz3peepFvSmR+lBfeoH6UX8aQC/SQHqJBtHLNJheoSQaQkPpVRpGr9Fwep1G0EgaRW/QaHqTxtBYGkfjKZkm0ER6iybR2zSZ3qEpNJVSaBpNp3dpBs2kWfQezab3aQ7NpXk0n1LpA1pACymNPqRF9BGl02JaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9DHtpE9oF+2mPfQp7aXPaB99TvvpCzpAX1IGfUUH6Ws6RN/QYfrW96bv6Cgdo+P0PZ2gH+gknaLTdIbO0o90jn6i8+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGuMHcYCa8J48JrwzzhdWHeMF+YPywQxocFw0KhDk1oQwrDsHBYJIyG14dFwxvCYmHxsERYMnRhqbB0eGNYJrwpLBveHJYLbwnLh7eGFcKK4cP3Vg5vC6uEt4dVwzvCauGdYfWwRlgzrBXeFdYO7w7rhPeEdcN7w7LhfWH98P6wQfhA2DB8MGwUPhQ2Dh8Om4SPhE3DZmHzsEXYMnw0bBU+FrYO24Rtw3Zh+/DxsEP4RJgQPhl2DJ/6ef19C39/fWLYJ+wbvhC+EHp/j5wXnR9NjX4QXRBdGE2LfhhdFP0omh5dHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3Rj1vlY2cOiEk065wMW4bC7WZXc53FUup7va5XK5XcRd4+LctS6Pu87ldflcflfAxbuCrpDTzjjryIWusCviou56V9Td4Iq54q6EK+mcK+VKuxaupWvpWrnHXGvXxrV17Vw797h73D3hnnBPuo7uKdfJ/cN1dk+7Lu4Z94x71nVz3V0P95zr6SbkuvCaTHR9XV/Xz/VzA9wAN9ANdIPcIDfYDXZJLskNdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbtkN9FNdJPcJDfZTXZT3BSX4lLcdDfdzXAzXJWZF/Yyx81x89w8l+pS3QKXOWdMc4vcIpfu0t0St8Qtc8vcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3A63w+10O90un/tCp26v2+f2uf1uvzvgvnQZ7it30H3tDrlv3GH3rTvivnNH3TF33H3vTrgf3El3yp12Z9xZ96M7535y5513yZEJkYmRtyKTIm9HJkfeiUyJTI2kRKZFpkfejcyIzIzMirwXmR15PzInMjcyLzI/khr5ILIgsjCSFvkwsijyUSQ9sjiyJLI0siyyPOJ9wS2hL+yL+Ki/3hf1N/hivrgv4Ut650v50v5GX8bf5Mv6m305f4sv72/1FXxFX8k/4pv6Zr65b+Fb+kd9K/+Yb+3b+La+nW/vH/cd/BM+wT/pO/qnfCf/D9/ZP+27+Gd8V/+s7+a7+x7+Od/TP+97+d4+0ffxff0Lvp/v7wf4F/1A/5If5F/2g/0rPskP8UP9q36Yf80P96/7EX6kHxXzhh996RIZxvtkP8FP9G/5Sf5tP9m/46f4qT7FT/PT/bt+hp/pZ/n3/Gz/vp/j5/p5fr5P9R/4BX6hT/Mf+kX+I5/uF1+6qexX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/iP/U7/id/ld/s9/lO/13/m9/nP/X7/hT/gv/QZ/it/0H/tD/lv/GH/rT/iv/NH/TF/3H/vT/gf/El/yp/2Z/xZ/6M/53/y5/l/1hhjjDHG/pQJl5vil2su3M7v8xs54p827gsAV28tkPHP6zNnlOvyXmj3F/HtIwDwZO+uD15aqldPTEy8uG26hKDIXIBLvwnKFAOX48XQFh6HBGgDZX5z/P1F97P0B/1HbwHI8U85sXA5vtz/5wCY+Bv9P9pu1ILy4em4/0//cwGKFbmckx0ux4uh7c/3V9pA2d8Zf75WfzD+7F8kA7T+p5yccCk+ePHbGjLHXxoeg6cg4RdbMsYYY4wxxhhjF/QXlTpfuv689Befv3V9Hq8u52SDy/EfXZ8zxhhjjDHGGGPsynu6e48nHk1IaNP5v96o+t/K+tONJvA/1TM3frPhPcClRxQA/MUOATIb8t95FJv/LftKuvjS+ddVy874AP53lPLvaFzhNybGGGOMMcbY3+7ypP+Xj6srNSDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+nd8ndiVPkbGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvt/AQAA///BeAKt") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 12m37.258082797s ago: executing program 1 (id=222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071106a0000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) 12m36.410725428s ago: executing program 1 (id=229): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r0 = socket$inet(0x2, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x8c0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002440)={0x14, r4, 0xad9a673c54048f09, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 12m35.197323422s ago: executing program 32 (id=229): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r0 = socket$inet(0x2, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x8c0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002440)={0x14, r4, 0xad9a673c54048f09, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3m18.873557135s ago: executing program 5 (id=2942): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffff00}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) mkdir(0x0, 0x2) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000006780), 0x0, 0x840) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) 3m18.42165009s ago: executing program 5 (id=2945): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x100000000001, 0x0) read$watch_queue(r1, &(0x7f0000000540)=""/222, 0xe80) 3m16.21557656s ago: executing program 5 (id=2953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m15.97754739s ago: executing program 5 (id=2954): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3f, 0x0) 3m15.086352059s ago: executing program 5 (id=2957): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 3m14.729037038s ago: executing program 5 (id=2959): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x58864b00}], '\x00'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0xffffffffffffffff, 0x933, 0x6, 0xfffffff7, 0x1, 0x0, [{0xfc, 0x4e3, 0x8}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 3m14.223153093s ago: executing program 33 (id=2959): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x58864b00}], '\x00'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0xffffffffffffffff, 0x933, 0x6, 0xfffffff7, 0x1, 0x0, [{0xfc, 0x4e3, 0x8}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 2m34.291497222s ago: executing program 6 (id=2960): sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x4000811) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) write$dsp(r0, 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) recvfrom(r1, 0x0, 0x0, 0x2040, 0x0, 0x0) 2m30.217407934s ago: executing program 6 (id=3047): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6", 0xbd}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec57", 0x10}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m29.944562869s ago: executing program 6 (id=3049): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'pim6reg1\x00', 0x4}, 0x18) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2m29.629463912s ago: executing program 6 (id=3051): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 2m12.950613631s ago: executing program 34 (id=3051): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 51.359618009s ago: executing program 4 (id=3251): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x30aa, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) timerfd_create(0x9, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x200c}) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) 50.045179569s ago: executing program 4 (id=3253): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x33, "e1311f9c593f4a917dec10b643b9ea3b1d3b16854d1c31808475773411cb182e8460601ed1678734a66f1cede036166bd9e257"}, &(0x7f00000001c0)=0x3b) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, 0x0, 0x0) 46.304503705s ago: executing program 4 (id=3264): socket$can_raw(0x1d, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) fdatasync(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002240)=@deltfilter={0xd8, 0x2d, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0xfff3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_cgroup={{0xb}, {0x98, 0x2, [@TCA_CGROUP_EMATCHES={0x94, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x1c, 0x1, 0x0, 0x0, {{0xb335, 0x0, 0x40}, "39fa49f75db232bff4d3b99a7b41b2"}}, @TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0xb1, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x72, 0x2}, {0x6, 0x0, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x15f4}, {0x401, 0xfffffff9, 0xd4, 0x29530faa}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x503d, 0x9, 0xc}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @remote}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x1, 0x4f4, &(0x7f00000005c0)="$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") gettid() mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x5031, 0xffffffffffffffff, 0xc2dcc000) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a1) 15.766986723s ago: executing program 0 (id=3341): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f0", 0x44}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2", 0x8f}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 14.393570573s ago: executing program 7 (id=3346): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], &(0x7f00000001c0), 0xa8, 0x0, 0xfffffffc, 0x1, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) socket$caif_stream(0x25, 0x1, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@overlay={0x80000000, 0xd, 0x4, 0x10, 0x9, {r6, r7/1000+10000}, {0x0, 0x2, 0x8f, 0x7, 0x3, 0x6, "0300"}, 0x6, 0x3, {}, 0x1d8}) 14.318957695s ago: executing program 0 (id=3347): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x402) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000200)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 13.235185306s ago: executing program 7 (id=3348): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040), 0x1, 0x4a6, &(0x7f0000000a40)="$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") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) unshare(0x60040000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) timerfd_create(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000800)='cgroup2\x00', 0x1) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 11.687950335s ago: executing program 7 (id=3351): r0 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="ba37bc6e74cc160f3f46dd21efc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240)="9795679a6bce772b7a7a0bb0ecaed3278718305ba6a9046b3fea157cc4f08a68b63da6d30aa53fd1f6200774ea79c8abd9996ad3187a8282cbe90af965643b917c2414a7649c53ade8a741a5cd91dc9252b8822fbcaee533d66d819af21e2698ea61d1b4001bec21288685cf1fac689f19f64165514d955683d1dde9b63a7fd8da21f13823e0c53edb72eb4072a25c762b51e117d117b8e196455e6cb598e2608df7a3a39364d3d0289e7775dc1bcb2f49064e791cba0bf70d494d2081a8"}, 0x1c) ioctl$NBD_DISCONNECT(r0, 0xab08) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) socket$unix(0x1, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000002b00)={0x0, 0x41}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) 9.349243056s ago: executing program 3 (id=3356): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f0", 0x44}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2", 0x8f}, {&(0x7f0000000900)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.96985315s ago: executing program 7 (id=3358): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b80)=""/112, 0x70}], 0x1}}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 8.521535955s ago: executing program 3 (id=3359): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r1 = socket$inet(0x2, 0x1, 0x0) listen(r1, 0x0) read$FUSE(r0, &(0x7f00000054c0)={0x2020}, 0x2020) 8.141810178s ago: executing program 3 (id=3360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.808619684s ago: executing program 7 (id=3361): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000014) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[@ANYBLOB='1-'], 0x31) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0xa) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r6, 0x8994, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 6.125036346s ago: executing program 3 (id=3362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) socket$inet(0x2b, 0x801, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r6, 0x0, 0x8000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0x25) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x5, &(0x7f0000000300)=[{0x6, 0xb3, 0x9, 0x5}, {0xac7, 0x0, 0x3, 0x8}, {0x0, 0x2, 0x3, 0x1}, {0x7, 0x0, 0x3, 0x1fffc000}, {0x5, 0x17, 0x3, 0x3}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r7 = epoll_create1(0x0) fcntl$dupfd(r7, 0x25, 0xffffffffffffffff) io_uring_setup(0x4d3f, &(0x7f0000000140)={0x0, 0xb18d, 0x8, 0x3, 0x105}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 6.086301662s ago: executing program 2 (id=3363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x2204c96, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='\x00', 0x0, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x2a}, 0x28) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) 5.193456062s ago: executing program 2 (id=3364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xb, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.914630728s ago: executing program 3 (id=3365): syz_open_dev$hidraw(0x0, 0x9, 0x240c0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) syz_usb_disconnect(r0) 4.797475667s ago: executing program 0 (id=3366): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xa) 4.7858146s ago: executing program 2 (id=3367): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$qrtr(0x2a, 0x2, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x8c, 0x31, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7a}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc020}, 0x20000044) alarm(0x1) 4.634345405s ago: executing program 0 (id=3368): socket$can_raw(0x1d, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) fdatasync(0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002240)=@deltfilter={0xd8, 0x2d, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0xfff3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_cgroup={{0xb}, {0x98, 0x2, [@TCA_CGROUP_EMATCHES={0x94, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x1c, 0x1, 0x0, 0x0, {{0xb335, 0x0, 0x40}, "39fa49f75db232bff4d3b99a7b41b2"}}, @TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0xb1, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x72, 0x2}, {0x6, 0x0, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x15f4}, {0x401, 0xfffffff9, 0xd4, 0x29530faa}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x503d, 0x9, 0xc}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @remote}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x1, 0x4f4, &(0x7f00000005c0)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x5031, 0xffffffffffffffff, 0xc2dcc000) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a1) 4.555763798s ago: executing program 4 (id=3270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.308952617s ago: executing program 2 (id=3369): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x200800c, &(0x7f0000000340)=ANY=[], 0x0, 0x24a, &(0x7f0000000680)="$eJzsmDtrFFEUx//3zmvH1aCNhY2FARXJPmabNCkiCFYiJL4qXcwYYjZZ2R3BXRAJNjbaWQg2Fn4Bi4CpUtj5BSJaqCAouIWFTZqR+5jZyc5kdzLY5fyKu/8599x7zzlz5xQLgiAOLd+//f36/OLsIhhwFNNwtP2nATCmNE/4f3n18MLLuUuv331++2F96vFWZDf0r1gShokFDCiNOd8EsD1v4El8Urx6N8QnTOuHRXChfwl9DRzntf0GGCpa3wHHda19MNzS+n5Ct4V/pXJvpeVX7rZbS0LUxFAXgyeGhna1ovgGGwxL2hiGBlgi/m6vv9pstfxOQph6LmOqkIgLm4EFG4N5LmPF9pSMUFTx5rOnG8IU1aam6iepg6Ou92uAYUHbZ+FEtVElSeR/yozyFxUYzT+d7e576SsmJiVZUmLuz38plhA2lDgxU2yfqNqjU8dTlvGCy7KM7GNF9ev2+kLl3dAodnWkMPe5iyx6g3b8Qg92RFksv5I3ixcugOIvF+g5GRFaKctBs1DCUKtODrY+pn1+pFc5eyoWsslHsPz3p5T/riLzruYXLvqrvFDFJgS2s6n6R/iG4SyG/cNM9I9qsPag2u31Z1bWmsv+sr/ueQ2nHHc8v1aV7Sjd+OJ+6Mr+dCSxv5XdKmFzG4+aQdCpq9FmNlwEQceTz17is1nYbP++rZcFuAzgzPDY4cdipMOylQ+XvkKdSzuhvE+EBEEQBEEQBEEQBEEQBEEQ4zgNJv8FFewcA1xtD/fiXZXWfwEAAP//XYhBpQ==") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 2.315358813s ago: executing program 4 (id=3370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='cubic', 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4080891, &(0x7f000005ffe4)={0xa, 0x4e20, 0x80000001, @empty, 0x9}, 0x1c) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) setuid(0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000002c0)={0x1, 0x0, [{0x0, 0x0, &(0x7f0000000280)}]}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x3ffff, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x5319) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 2.298102555s ago: executing program 0 (id=3371): socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000240)='net/packet\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 1.932818627s ago: executing program 0 (id=3372): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r0) 595.86652ms ago: executing program 2 (id=3373): r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f0000004000), 0x5, 0x2, 0x0, 0x0, 0xb601fffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0xfffd) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7817, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000000640)}}], 0x2, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 529.438672ms ago: executing program 3 (id=3374): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1400, 0x0, 0x3) 529.105562ms ago: executing program 4 (id=3375): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x80000) pipe2$9p(0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2002}) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="92", 0x1}], 0x1, 0xf) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x80000001, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0x10, 0xa, 0xfffffffc}) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x7, 0x584e4f53, 0x35315852, 0x7, [{0x0, 0xdf}, {0x5, 0x2}, {0x1002}, {0x7}, {0xb487, 0x3316aa71}, {0x0, 0x80040}, {0x100000, 0x13ff}, {0x100000}], 0x0, 0x0, 0x6}}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x190) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x48000) 165.715382ms ago: executing program 7 (id=3376): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0xa, 0x401, 0x6, 0x3, 0xf4c4, 0x5, 0x0, 0x1, 0x800, 0x999, 0x5, 0x9}}, 0x0, 0x0, 0x0, 0x0}) poll(&(0x7f0000000840)=[{0xffffffffffffffff, 0x700}], 0x1, 0x7f) 0s ago: executing program 2 (id=3377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r9, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff880000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a14", 0x3d}], 0x1}, 0x8bb3a301eb085f) kernel console output (not intermixed with test programs): .2.2735': attribute type 8 has an invalid length. [ 636.595379][T13139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2735'. [ 636.645787][T13144] device syzkaller0 entered promiscuous mode [ 636.852112][ T26] audit: type=1326 audit(2000000400.727:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.0.2741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ea7d9c819 code=0x0 [ 637.917964][ T4971] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 638.128293][ T4971] usb 6-1: unable to get BOS descriptor or descriptor too short [ 638.159748][ T4971] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.207638][ T4971] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 638.252689][T13176] netlink: 'syz.2.2749': attribute type 2 has an invalid length. [ 638.260891][T13176] netlink: 'syz.2.2749': attribute type 8 has an invalid length. [ 638.273771][T13176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2749'. [ 638.288825][ T4971] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 638.326876][ T4971] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 638.353176][ T4971] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 638.397079][ T4971] usb 6-1: config 1 interface 1 has no altsetting 0 [ 638.480695][ T4971] usb 6-1: string descriptor 0 read error: -22 [ 638.515073][ T4971] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 638.552276][ T4971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.973891][T13197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2753'. [ 639.171178][ T4971] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 639.472055][ T26] audit: type=1326 audit(2000000403.170:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.2.2756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42c5b9c819 code=0x0 [ 639.619630][ T4971] usb 6-1: 2:0: failed to get current value for ch 1 (-71) [ 639.747857][ T4971] usb 6-1: USB disconnect, device number 46 [ 641.284644][T13230] device syzkaller0 entered promiscuous mode [ 643.130947][ T26] audit: type=1326 audit(2000000406.604:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13252 comm="syz.4.2770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2519d9c819 code=0x0 [ 643.549488][ T4311] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 644.023068][ T4311] usb 6-1: unable to get BOS descriptor or descriptor too short [ 644.065957][ T4311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.078526][ T4311] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 644.115800][ T4311] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 644.128245][ T4311] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 644.146005][ T4311] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 644.203223][ T4311] usb 6-1: config 1 interface 1 has no altsetting 0 [ 644.264149][ T4311] usb 6-1: string descriptor 0 read error: -22 [ 644.289218][ T4311] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 644.323106][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.803136][ T4311] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 645.586919][ T4311] usb 6-1: 2:0: failed to get current value for ch 1 (-71) [ 645.631078][ T4311] usb 6-1: USB disconnect, device number 47 [ 645.710037][T13278] 9pnet_virtio: no channels available for device syz [ 647.772200][T11789] udevd[11789]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.906664][ T4405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.338965][T13293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 648.354281][T13293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 648.367736][T13293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 648.380780][T13293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 648.394598][T13293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 648.403691][T13293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 648.423886][ T4405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.728283][ T4405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.816302][T13298] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 649.100530][ T4405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.031138][ T4405] tipc: Disabling bearer [ 650.039769][ T4405] tipc: Left network mode [ 650.383338][T13332] 9pnet_virtio: no channels available for device syz [ 650.621167][T13293] Bluetooth: hci0: command 0x0409 tx timeout [ 651.020550][T13292] chnl_net:caif_netlink_parms(): no params data found [ 652.146236][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.334592][T13348] loop5: detected capacity change from 0 to 2048 [ 652.371940][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.380304][T13292] device bridge_slave_0 entered promiscuous mode [ 652.414893][T13348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.840853][T13293] Bluetooth: hci0: command 0x041b tx timeout [ 652.907988][T13357] overlayfs: failed to clone upperpath [ 652.951290][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.989176][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.007667][T13292] device bridge_slave_1 entered promiscuous mode [ 653.670622][T13292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.683456][T13292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.418166][T13377] loop5: detected capacity change from 0 to 2068 [ 654.448106][T13377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 654.626241][T13292] team0: Port device team_slave_0 added [ 654.722850][T13292] team0: Port device team_slave_1 added [ 654.844917][T13292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.855092][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.947167][T13292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.958265][ T4313] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 655.106334][T13293] Bluetooth: hci0: command 0x040f tx timeout [ 655.162777][T13292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.173071][ T4313] usb 5-1: unable to get BOS descriptor or descriptor too short [ 655.199387][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.208132][T13385] loop5: detected capacity change from 0 to 2048 [ 655.240613][T13385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.258529][ T4313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.316036][ T4313] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 655.352159][ T4313] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 655.367169][T13292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.431191][ T4313] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 655.460132][ T4313] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 655.480241][ T4313] usb 5-1: config 1 interface 1 has no altsetting 0 [ 655.516290][ T4313] usb 5-1: string descriptor 0 read error: -22 [ 655.534055][ T4313] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 655.552345][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.791741][T13292] device hsr_slave_0 entered promiscuous mode [ 655.808270][T13292] device hsr_slave_1 entered promiscuous mode [ 655.816330][T13292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.877212][T13292] Cannot create hsr debugfs directory [ 655.894506][T13397] 9pnet_virtio: no channels available for device syz [ 656.736196][T13397] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 656.746938][T13397] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 656.758608][T13397] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 657.326551][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 657.340168][ T4313] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 657.650071][ T4313] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 658.042787][ T4313] usb 5-1: USB disconnect, device number 47 [ 660.100277][T13428] loop4: detected capacity change from 0 to 2048 [ 660.123998][T13428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 660.985296][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 660.997062][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.303145][T13418] loop5: detected capacity change from 0 to 32768 [ 661.347307][ C1] vcan0: j1939_simple_recv: Received already invalidated message [ 661.389014][T13418] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2814 (13418) [ 661.581962][T13418] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 661.658292][T13418] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 661.715684][T13418] BTRFS info (device loop5): setting nodatacow, compression disabled [ 661.767170][T13418] BTRFS info (device loop5): force clearing of disk cache [ 661.794910][ T4405] device hsr_slave_0 left promiscuous mode [ 661.810944][T13418] BTRFS info (device loop5): turning off barriers [ 661.835313][ T4405] device hsr_slave_1 left promiscuous mode [ 661.841708][T13418] BTRFS info (device loop5): use no compression [ 661.848123][T13418] BTRFS info (device loop5): disabling free space tree [ 661.866989][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.921208][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.934576][T13418] BTRFS info (device loop5): enabling ssd optimizations [ 661.942629][T13418] BTRFS info (device loop5): using spread ssd allocation scheme [ 661.988814][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.997236][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.005862][ T4405] device bridge_slave_1 left promiscuous mode [ 662.027278][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.041552][T13418] BTRFS info (device loop5): not using ssd optimizations [ 662.049800][T13418] BTRFS info (device loop5): not using spread ssd allocation scheme [ 662.207196][ T4405] device bridge_slave_0 left promiscuous mode [ 662.437502][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.395080][ T4405] device veth1_macvtap left promiscuous mode [ 663.442701][ T4405] device veth0_macvtap left promiscuous mode [ 663.497130][T13418] BTRFS error (device loop5): open_ctree failed: -12 [ 663.610231][ T4405] device veth1_vlan left promiscuous mode [ 663.677491][ T4405] device veth0_vlan left promiscuous mode [ 663.921151][T13489] loop4: detected capacity change from 0 to 2048 [ 665.630228][T13489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 666.143068][ T26] audit: type=1326 audit(2000000428.137:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.2.2834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42c5b9c819 code=0x0 [ 667.263696][ T4405] team0 (unregistering): Port device team_slave_1 removed [ 667.323521][T13491] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 667.351104][ T4405] team0 (unregistering): Port device team_slave_0 removed [ 669.129301][T13491] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 669.142376][T13491] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.151924][T13491] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.164111][T13491] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.172539][T13491] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.182335][T13491] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.193718][T13491] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.201747][T13491] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.217317][T13491] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.229660][T13491] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.253223][T13491] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.282167][T13491] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.405173][T13491] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.549729][T13491] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.587404][T13491] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.599348][T13491] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.638797][T13491] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.650271][T13491] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.662499][T13491] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.670505][T13491] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.680191][T13491] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.692930][T13491] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.764461][T13491] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 669.775462][T13491] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 669.802772][T13491] usb 6-1: config 0 interface 0 has no altsetting 0 [ 669.844962][T13491] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 669.862928][T13491] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 669.883700][T13491] usb 6-1: Product: syz [ 669.892779][T13491] usb 6-1: Manufacturer: syz [ 669.903746][T13491] usb 6-1: SerialNumber: syz [ 669.928008][T13491] usb 6-1: config 0 descriptor?? [ 669.970225][T13491] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 670.241219][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 670.241476][ T4335] usb 6-1: USB disconnect, device number 48 [ 670.273271][ T4335] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 670.362026][T13292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 670.399322][T13292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 670.442693][T13292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 670.487646][T13292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 670.835666][T13292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.898104][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 670.933981][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 670.977953][T13292] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.006363][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 671.035607][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 671.061462][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.068653][ T8280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.108375][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 671.162976][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 671.187213][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 671.219867][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.227439][ T8280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.284011][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 671.344406][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 671.384439][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 671.455080][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 671.493539][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 671.567916][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 671.604304][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 671.676887][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 671.729270][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.768463][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 671.814505][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.890362][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 672.670615][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 672.706672][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 672.770103][T13292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.957514][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 672.994280][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 673.132733][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.145586][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.184658][T13292] device veth0_vlan entered promiscuous mode [ 673.205910][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.238994][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.266509][T13292] device veth1_vlan entered promiscuous mode [ 673.360271][T13292] device veth0_macvtap entered promiscuous mode [ 673.414147][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 673.429284][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 673.453764][T13292] device veth1_macvtap entered promiscuous mode [ 673.480114][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 673.511186][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 673.599580][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.639139][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.655069][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.689211][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.710691][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.761816][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.784151][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.803218][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.831312][T13292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.851303][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 673.867378][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 673.890704][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.906508][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.932305][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.965363][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.005100][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.045941][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.057031][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.068334][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.097045][T13292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.126920][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 674.160119][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 674.202504][T13292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.214303][T13292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.226369][T13292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.254318][T13292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.502586][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.511762][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.743856][T13677] loop4: detected capacity change from 0 to 1024 [ 674.800115][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 675.107723][T13677] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=1 [ 675.117649][T13677] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 675.135052][T13677] EXT4-fs (loop4): mount failed [ 675.236725][ T4466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.281588][ T4466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.290929][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 675.827595][T13690] device syzkaller0 entered promiscuous mode [ 676.616822][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.711246][T13293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 676.725871][T13293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 676.747231][T13293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 676.756248][T13293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 676.764152][T13293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 676.771861][T13293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 676.855113][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.023055][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.164868][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.296672][T13701] chnl_net:caif_netlink_parms(): no params data found [ 677.662271][T13701] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.689780][T13701] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.713985][T13701] device bridge_slave_0 entered promiscuous mode [ 677.757018][T13701] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.808292][T13701] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.840922][T13701] device bridge_slave_1 entered promiscuous mode [ 677.899649][ T4971] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 677.967185][T13701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.999013][T13701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.116714][ T4971] usb 1-1: unable to get BOS descriptor or descriptor too short [ 678.143156][ T4971] usb 1-1: not running at top speed; connect to a high speed hub [ 678.152377][T13491] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 678.198313][ T4971] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 678.218151][T13701] team0: Port device team_slave_0 added [ 678.241906][ T4971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.284501][ T4971] usb 1-1: Product: syz [ 678.288783][ T4971] usb 1-1: Manufacturer: syz [ 678.293466][ T4971] usb 1-1: SerialNumber: syz [ 678.312670][T13701] team0: Port device team_slave_1 added [ 678.380515][T13491] usb 6-1: Using ep0 maxpacket: 16 [ 678.388265][T13491] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.448879][T13701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.481219][T13491] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 678.496055][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.524588][T13491] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 678.569372][T13491] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 678.601993][ T4971] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 678.604185][T13701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.664375][T13491] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.689955][T13491] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 678.709872][T13491] usb 6-1: SerialNumber: syz [ 678.741879][T13727] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 678.761036][T13727] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 678.777178][T13491] hub 6-1:1.0: bad descriptor, ignoring hub [ 678.787402][T13491] hub: probe of 6-1:1.0 failed with error -5 [ 678.997587][T13727] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 679.011589][T13293] Bluetooth: hci2: command 0x0409 tx timeout [ 679.027916][T13727] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 679.039077][T13701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.052572][ T4971] gp8psk: usb in 138 operation failed. [ 679.068154][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.072998][ T4971] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 679.107058][ T4971] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 679.140863][ T4971] usb 1-1: USB disconnect, device number 2 [ 679.180520][T13701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.295243][T13701] device hsr_slave_0 entered promiscuous mode [ 679.311449][T13701] device hsr_slave_1 entered promiscuous mode [ 679.331530][T13495] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 679.339527][T13701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.350461][T13701] Cannot create hsr debugfs directory [ 679.546764][T13495] usb 5-1: Using ep0 maxpacket: 8 [ 679.554433][T13495] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 679.574444][T13495] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 679.595691][T13495] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 679.635919][T13495] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 679.677158][T13495] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.735005][T13491] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 679.763032][T13495] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 679.796888][T13495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.053483][T13495] usb 5-1: GET_CAPABILITIES returned 0 [ 680.062562][T13495] usbtmc 5-1:16.0: can't read capabilities [ 680.313641][T13495] usb 5-1: USB disconnect, device number 48 [ 680.773424][T13769] device syzkaller0 entered promiscuous mode [ 681.223295][T13293] Bluetooth: hci2: command 0x041b tx timeout [ 681.249426][T13495] usb 6-1: USB disconnect, device number 49 [ 681.256904][T13495] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 683.448044][T13293] Bluetooth: hci2: command 0x040f tx timeout [ 685.675015][T13293] Bluetooth: hci2: command 0x0419 tx timeout [ 687.681698][T13701] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 687.740313][T13701] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 687.801301][ T9] device hsr_slave_0 left promiscuous mode [ 687.827787][ T9] device hsr_slave_1 left promiscuous mode [ 687.852149][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.884962][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.900197][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.910861][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.920396][ T9] device bridge_slave_1 left promiscuous mode [ 687.928736][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.938795][ T9] device bridge_slave_0 left promiscuous mode [ 687.958695][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.006312][ T9] device veth1_macvtap left promiscuous mode [ 688.014347][ T9] device veth0_macvtap left promiscuous mode [ 688.021983][ T9] device veth1_vlan left promiscuous mode [ 688.031904][T13836] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 688.041511][ T9] device veth0_vlan left promiscuous mode [ 688.072803][T13491] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 688.264999][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 688.423140][T13491] usb 5-1: unable to get BOS descriptor or descriptor too short [ 688.600967][T13491] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.791469][T13491] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 688.821839][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 688.847163][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 688.886331][ T7] usb 1-1: no configurations [ 688.892968][T13491] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 688.906938][ T7] usb 1-1: can't read configurations, error -22 [ 688.936732][T13491] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 688.959879][T13491] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 688.975674][T13491] usb 5-1: config 1 interface 1 has no altsetting 0 [ 688.983648][T13847] trusted_key: encrypted_key: insufficient parameters specified [ 689.035111][T13491] usb 5-1: string descriptor 0 read error: -22 [ 689.045998][T13491] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 689.075894][T13491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.319294][T13491] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 689.762956][T13491] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 689.986587][ T9] team0 (unregistering): Port device team_slave_1 removed [ 690.048469][ T9] team0 (unregistering): Port device team_slave_0 removed [ 690.674086][T13701] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 690.716553][T13855] netlink: 'syz.0.2926': attribute type 10 has an invalid length. [ 690.782618][T13855] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 690.811553][T13701] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 691.004829][ T4311] usb 5-1: USB disconnect, device number 49 [ 691.117049][T13701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.188780][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 691.206963][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 691.236397][T13701] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.276027][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 691.324156][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 691.361207][ T8280] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.368787][ T8280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.402676][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 691.444379][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 691.471592][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 691.501892][ T8280] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.509182][ T8280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.596890][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 691.662680][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 691.693969][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 691.736998][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 691.804318][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 691.831634][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 691.881852][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 691.955018][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 691.978696][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 692.040044][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 692.064934][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 692.133245][T13701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 692.272040][T13870] loop0: detected capacity change from 0 to 32768 [ 693.116836][T13870] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2930 (13870) [ 693.250355][T13870] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 693.316372][T13870] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 693.405399][T13870] BTRFS info (device loop0): setting nodatacow, compression disabled [ 693.413693][T13870] BTRFS info (device loop0): enabling auto defrag [ 693.446224][T13870] BTRFS info (device loop0): max_inline at 0 [ 693.489446][T13903] loop5: detected capacity change from 0 to 4096 [ 693.493555][T13870] BTRFS info (device loop0): using free space tree [ 693.541665][T13903] EXT4-fs: Ignoring removed bh option [ 693.553000][ T4405] wlan1: Trigger new scan to find an IBSS to join [ 693.721226][T13903] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 693.763665][T13903] EXT4-fs error (device loop5): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.5.2939: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 693.953999][T13903] EXT4-fs (loop5): Remounting filesystem read-only [ 693.983417][T13903] EXT4-fs error (device loop5): ext4_get_first_dir_block:3605: inode #12: comm syz.5.2939: directory missing '..' [ 694.062212][T13903] EXT4-fs (loop5): Remounting filesystem read-only [ 694.273638][ T5067] EXT4-fs (loop5): unmounting filesystem. [ 694.484872][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 694.492536][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 694.546719][T13701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.672233][T13292] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 694.744304][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 694.759695][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 694.880172][T13701] device veth0_vlan entered promiscuous mode [ 694.925825][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 694.950484][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 695.023603][T13701] device veth1_vlan entered promiscuous mode [ 695.066576][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 695.084027][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 695.141116][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 695.188497][T13813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (13813) [ 695.265797][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 695.289718][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 695.336255][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 695.376965][T13701] device veth0_macvtap entered promiscuous mode [ 695.406417][T13701] device veth1_macvtap entered promiscuous mode [ 695.560378][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.620540][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.670900][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.705916][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.756406][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.783805][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.806233][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.834636][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.864442][T13701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.889061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 695.908500][T13970] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 695.919939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 695.939580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 695.948742][T13969] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 695.996125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 696.050324][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.070200][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.094951][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.115569][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.124288][T13970] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.137593][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.153639][T13969] usb 5-1: unable to get BOS descriptor or descriptor too short [ 696.164139][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.185892][T13970] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 696.196328][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 696.197574][T13969] usb 5-1: not running at top speed; connect to a high speed hub [ 696.228229][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.228894][T13970] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 696.259860][T13701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.277656][T13970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.287934][T13969] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 696.294999][T13701] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.311760][T13969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.322555][T13970] usb 1-1: Product: syz [ 696.326961][T13970] usb 1-1: Manufacturer: syz [ 696.342846][T13969] usb 5-1: Product: syz [ 696.347755][T13970] usb 1-1: SerialNumber: syz [ 696.352148][T13701] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.353629][T13969] usb 5-1: Manufacturer: syz [ 696.381152][T13970] cdc_mbim 1-1:1.0: skipping garbage [ 696.397371][T13969] usb 5-1: SerialNumber: syz [ 696.409504][T13701] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.447399][T13701] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.491919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 696.517438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 696.621937][T13976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 696.665562][T13969] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 696.729312][ T5460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.752319][ T5460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.809571][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 696.840811][ T5460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.859680][ T5460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.893039][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 697.093283][T13969] gp8psk: usb out operation failed. [ 697.106338][T13969] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 697.135921][T13969] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 697.188065][T13969] usb 5-1: USB disconnect, device number 50 [ 697.250964][T14003] loop5: detected capacity change from 0 to 512 [ 697.322077][T14003] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 697.336194][T13976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 697.373924][T13970] cdc_mbim 1-1:1.0: dwNtbInMaxSize=6 is too small. Using 2048 [ 697.384394][T13970] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 697.419352][T13999] kvm [13998]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 697.442184][T14003] EXT4-fs (loop5): 1 truncate cleaned up [ 697.457061][T14003] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 697.480598][T13999] kvm [13998]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x80 [ 697.754809][T13970] cdc_mbim 1-1:1.0: setting tx_max = 60 [ 697.790855][T13970] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 697.838186][ T26] audit: type=1800 audit(2000000457.792:451): pid=14003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2954" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 698.011709][T13970] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 8a:33:43:c9:09:2a [ 698.128920][T13970] usb 1-1: USB disconnect, device number 5 [ 698.135468][T13970] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 698.366769][ T5067] EXT4-fs (loop5): unmounting filesystem. [ 698.697627][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 698.710755][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 698.734872][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 698.746035][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 698.754041][ T4276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 698.761870][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 698.806206][ T5460] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.870109][T14017] netlink: 'syz.3.2958': attribute type 1 has an invalid length. [ 698.925336][ T4405] wlan1: Trigger new scan to find an IBSS to join [ 699.137026][ T5460] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.397058][ T5460] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.071425][ T5460] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.084584][ T4466] wlan1: Creating new IBSS network, BSSID fe:66:bb:c0:a7:64 [ 700.549279][T14038] loop0: detected capacity change from 0 to 512 [ 700.614577][T13293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 700.658430][T14038] FAT-fs (loop0): Directory bread(block 199916) failed [ 700.736011][T13293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 700.751011][T13293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 700.761042][T13293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 700.773142][T13293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 700.781440][T13293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 700.799889][T14038] FAT-fs (loop0): Directory bread(block 199917) failed [ 700.973094][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 701.063034][T14038] FAT-fs (loop0): Directory bread(block 199918) failed [ 701.097647][T14038] FAT-fs (loop0): Directory bread(block 199919) failed [ 701.187900][T14046] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 701.442873][T14038] FAT-fs (loop0): Directory bread(block 199920) failed [ 701.474545][T14038] FAT-fs (loop0): Directory bread(block 199921) failed [ 701.530537][T14038] FAT-fs (loop0): Directory bread(block 199922) failed [ 701.582287][T14038] FAT-fs (loop0): Directory bread(block 199923) failed [ 701.847154][T14018] chnl_net:caif_netlink_parms(): no params data found [ 702.577245][T14018] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.592225][T14018] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.618687][T14018] device bridge_slave_0 entered promiscuous mode [ 702.705007][T14018] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.718523][T14018] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.750544][T14018] device bridge_slave_1 entered promiscuous mode [ 702.988669][T14018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.023055][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 703.077866][T14018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.193746][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 703.295126][T14018] team0: Port device team_slave_0 added [ 703.330144][T14036] chnl_net:caif_netlink_parms(): no params data found [ 703.372485][T14018] team0: Port device team_slave_1 added [ 703.555685][T14082] syz.0.2966: attempt to access beyond end of device [ 703.555685][T14082] loop0: rw=2051, sector=799760, nr_sectors = 16128 limit=512 [ 703.890737][T14018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.898234][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.109854][T14018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.225465][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 704.760911][T14018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.776698][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.962074][T14018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.115836][T14100] loop0: detected capacity change from 0 to 764 [ 705.245528][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 705.377852][T14018] device hsr_slave_0 entered promiscuous mode [ 705.386161][T14018] device hsr_slave_1 entered promiscuous mode [ 705.427962][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 705.497307][T14110] loop0: detected capacity change from 0 to 4096 [ 706.471834][T14036] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.494105][T14036] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.529502][T14036] device bridge_slave_0 entered promiscuous mode [ 706.596413][T14036] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.614040][T14036] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.750790][T14036] device bridge_slave_1 entered promiscuous mode [ 706.836022][ T5460] device hsr_slave_0 left promiscuous mode [ 706.851774][ T5460] device hsr_slave_1 left promiscuous mode [ 706.871406][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.879376][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.887927][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.896400][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.905506][ T5460] device bridge_slave_1 left promiscuous mode [ 706.912578][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.921482][ T5460] device bridge_slave_0 left promiscuous mode [ 706.928270][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.957307][ T5460] device veth1_macvtap left promiscuous mode [ 706.963693][ T5460] device veth0_macvtap left promiscuous mode [ 706.970061][ T5460] device veth1_vlan left promiscuous mode [ 706.975927][ T5460] device veth0_vlan left promiscuous mode [ 707.078092][T14132] loop4: detected capacity change from 0 to 2048 [ 707.104948][T14132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.469073][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 707.639035][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 708.221562][T14138] loop0: detected capacity change from 0 to 2048 [ 708.677337][T14138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 709.690758][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 709.867142][ T5460] team0 (unregistering): Port device team_slave_1 removed [ 709.925314][ T5460] team0 (unregistering): Port device team_slave_0 removed [ 710.186864][T14148] loop0: detected capacity change from 0 to 4096 [ 710.219912][T14148] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 710.481488][T13970] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 710.708010][T13970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 710.716969][T13970] usb 5-1: not running at top speed; connect to a high speed hub [ 710.728770][T13970] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 710.754707][T13970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.764121][T13970] usb 5-1: Product: syz [ 710.768323][T13970] usb 5-1: Manufacturer: syz [ 710.787921][T13970] usb 5-1: SerialNumber: syz [ 710.906629][T14036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.923181][T14036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.022572][T13970] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 711.032580][T13970] gp8psk: usb in 128 operation failed. [ 711.039243][T13970] gp8psk: usb in 137 operation failed. [ 711.045210][T13970] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 711.057540][T13970] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 711.070714][T13970] usb 5-1: USB disconnect, device number 51 [ 711.227682][T14137] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.236973][T14137] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.561954][T14137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.620376][T14137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.057707][T14161] kernel profiling enabled (shift: 17) [ 712.972927][T14137] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.983700][T14137] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.994005][T14137] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.004870][T14137] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.105480][T14152] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 713.125006][T14152] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 713.153378][T14152] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 713.182943][T14152] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 713.212424][T14152] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 713.264696][T14152] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 713.280722][T14152] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 713.577103][T14036] team0: Port device team_slave_0 added [ 713.604967][T14036] team0: Port device team_slave_1 added [ 713.710768][T14036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.717976][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.857057][T14172] loop0: detected capacity change from 0 to 4096 [ 713.979025][T14036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.083977][T14036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.102281][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.177734][T14036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.530029][T14182] loop4: detected capacity change from 0 to 2048 [ 714.635998][T14182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 714.998042][T14018] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.778920][T14018] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.976034][ T4311] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 717.009710][T14036] device hsr_slave_0 entered promiscuous mode [ 717.043420][T14036] device hsr_slave_1 entered promiscuous mode [ 717.044060][T14036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.044141][T14036] Cannot create hsr debugfs directory [ 717.072100][T14018] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.203006][ T4311] usb 5-1: Using ep0 maxpacket: 32 [ 717.233662][T14018] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.251959][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 717.274132][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 717.274165][ T4311] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 717.276494][ T4311] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 717.437249][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.456459][ T4311] usb 5-1: Product: syz [ 717.478347][ T4311] usb 5-1: Manufacturer: syz [ 717.491380][ T4311] usb 5-1: SerialNumber: syz [ 717.500486][ T4311] usb 5-1: config 0 descriptor?? [ 717.672813][ T5460] tipc: Disabling bearer [ 717.688495][ T5460] tipc: Left network mode [ 717.798459][T14018] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 717.831387][T14018] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 717.872551][T14018] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 717.878885][ T4311] usb 5-1: USB disconnect, device number 52 [ 717.950263][T14018] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 718.233049][T14208] loop3: detected capacity change from 0 to 32768 [ 718.471515][T14208] (syz.3.3000,14208,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 718.890336][T14036] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 719.036165][T14036] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 719.055611][T14208] (syz.3.3000,14208,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 719.109867][T14036] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 719.308793][T14036] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 719.316358][T14208] JBD2: Ignoring recovery information on journal [ 719.626117][T14229] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 719.633217][T14229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 719.642973][T14229] vhci_hcd vhci_hcd.0: Device attached [ 719.653786][T14232] vhci_hcd: connection closed [ 719.672766][ T8288] vhci_hcd: stop threads [ 719.719603][ T8288] vhci_hcd: release socket [ 719.720627][T14208] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 719.724200][ T8288] vhci_hcd: disconnect device [ 719.850822][T14036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.972123][T14018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.090391][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 720.110996][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 720.122965][T14036] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.144194][T14018] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.310651][T14036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 720.322018][T14036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 720.366077][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 720.434935][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 720.510976][T14247] loop0: detected capacity change from 0 to 2048 [ 720.579442][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 720.627411][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 720.668259][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.675523][ T8288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.738504][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 720.835244][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 720.955712][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.963054][ T8288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.028235][T14247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.481910][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 722.531768][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 722.557636][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 722.572293][T13701] ocfs2: Unmounting device (7,3) on (node local) [ 722.620595][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 722.714288][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 722.783587][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 722.833806][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 722.886957][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 722.933576][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 722.988057][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 723.022963][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 723.032745][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 723.041871][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 723.182941][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 723.229627][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 723.267266][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.274660][ T8283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.340349][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 723.385720][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 723.429096][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.436422][ T8283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.466500][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 723.498220][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 723.647908][T14279] loop0: detected capacity change from 0 to 4096 [ 723.666395][T14271] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 723.690113][T14271] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 723.777791][T14271] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 723.805804][T14271] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 723.874421][T14271] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 723.989835][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 724.008671][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 724.068313][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 724.110350][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 724.152121][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 724.198667][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.307717][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.356983][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 724.386712][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.565354][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 724.773254][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 725.018622][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 725.031320][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 725.992428][T14036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.401310][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 727.407765][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.624136][ T5460] device hsr_slave_0 left promiscuous mode [ 727.654991][ T5460] device hsr_slave_1 left promiscuous mode [ 727.661943][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.696772][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.725357][ T5460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.771491][ T5460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.794072][ T5460] device bridge_slave_1 left promiscuous mode [ 727.800737][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.855210][ T5460] device bridge_slave_0 left promiscuous mode [ 727.882441][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.043823][T14319] loop0: detected capacity change from 0 to 4096 [ 728.068149][ T5460] device veth1_macvtap left promiscuous mode [ 728.078683][ T5460] device veth1_vlan left promiscuous mode [ 728.095762][ T5460] device veth0_vlan left promiscuous mode [ 728.103510][T14319] EXT4-fs: Ignoring removed bh option [ 728.116220][T14326] loop3: detected capacity change from 0 to 4096 [ 728.195149][T14328] loop4: detected capacity change from 0 to 128 [ 728.621222][T14328] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 728.715063][T14319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 729.026772][T13292] EXT4-fs (loop0): unmounting filesystem. [ 730.233123][T14353] loop3: detected capacity change from 0 to 2048 [ 730.291978][T14353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 730.680084][ T46] smc: removing ib device syz0 [ 731.691366][ T5460] team0 (unregistering): Port device team_slave_1 removed [ 731.801146][ T5460] team0 (unregistering): Port device team_slave_0 removed [ 732.238286][ T4342] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 733.290028][T14360] loop0: detected capacity change from 0 to 164 [ 734.024152][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 734.031755][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 734.119651][T14018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.250042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 734.273581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 734.361857][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 734.398041][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 734.455006][T14018] device veth0_vlan entered promiscuous mode [ 734.504877][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 734.513066][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 734.606164][T14018] device veth1_vlan entered promiscuous mode [ 734.804720][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 734.854062][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 734.875494][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 734.990398][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 735.019364][T14018] device veth0_macvtap entered promiscuous mode [ 735.068131][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 735.080758][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 735.139745][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 735.150244][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 735.163581][T14018] device veth1_macvtap entered promiscuous mode [ 735.200941][T14387] loop4: detected capacity change from 0 to 4096 [ 735.228081][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.282440][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.305046][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 735.328068][ T14] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 735.369331][ T14] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 735.377651][ T14] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 735.386467][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.465607][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.502717][ T14] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 735.548968][T14018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.586008][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 735.637047][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.657270][ T14] usb 4-1: config 0 has no interface number 0 [ 735.686224][ T14] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 735.713210][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.757430][ T14] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 735.785919][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.819097][ T14] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 735.839367][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.874208][ T14] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.892294][T14018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.926985][T14018] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.957960][T14018] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.976836][T14018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.988172][T14018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.988332][T14390] loop0: detected capacity change from 0 to 32768 [ 736.010499][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 736.020695][ T14] usb 4-1: config 0 interface 125 has no altsetting 0 [ 736.028620][ T14] usb 4-1: config 0 interface 125 has no altsetting 2 [ 736.050866][ T14] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 736.071207][T14390] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 736.071489][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 736.090793][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.100070][ T14] usb 4-1: Product: syz [ 736.104268][ T14] usb 4-1: Manufacturer: syz [ 736.118035][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 736.126808][ T14] usb 4-1: SerialNumber: syz [ 736.130704][T14390] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 736.154294][ T14] usb 4-1: config 0 descriptor?? [ 736.167781][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 736.175758][T14390] BTRFS info (device loop0): setting nodatacow, compression disabled [ 736.178155][ T14] usb 4-1: selecting invalid altsetting 2 [ 736.196306][T14390] BTRFS info (device loop0): enabling auto defrag [ 736.217631][T14390] BTRFS info (device loop0): max_inline at 0 [ 736.270977][T14036] device veth0_vlan entered promiscuous mode [ 736.277730][T14390] BTRFS info (device loop0): using free space tree [ 736.324263][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 736.368377][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 736.431116][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 736.444026][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 736.527511][T14036] device veth1_vlan entered promiscuous mode [ 736.671710][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 736.693816][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 736.730654][ T4466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.734570][T14036] device veth0_macvtap entered promiscuous mode [ 736.774122][ T4466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.807897][T14036] device veth1_macvtap entered promiscuous mode [ 736.824989][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 736.840007][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 736.849223][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 736.881384][ T4794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.920093][ T4794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.928440][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.969619][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.020556][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.057558][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.067735][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.241187][ C0] usb 4-1: async_complete: urb error -71 [ 737.247410][ C0] usb 4-1: async_complete: urb error -71 [ 737.256095][ T14] get_1284_register: usb error -71 [ 737.477505][ T14] usb 4-1: USB disconnect, device number 2 [ 737.568990][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.658123][T14036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.697177][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 737.709254][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 737.719626][T13812] udevd[13812]: setting mode of /dev/bus/usb/004/002 to 020664 failed: No such file or directory [ 737.763929][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 737.775767][T13812] udevd[13812]: setting owner of /dev/bus/usb/004/002 to uid=0, gid=0 failed: No such file or directory [ 737.794272][T14419] device vlan2 entered promiscuous mode [ 737.800022][T14419] device bridge0 entered promiscuous mode [ 737.821327][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.848325][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.858735][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.878179][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.889184][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.905393][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.930265][T14036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.953885][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 737.976342][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 737.994911][T14036] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.015679][T14036] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.027993][T14036] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.046492][T14036] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.074635][T13292] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 738.430517][ T4794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.450105][ T4794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.519514][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 738.614891][ T4466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.635070][ T4466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.675366][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 738.846331][T14440] loop3: detected capacity change from 0 to 2048 [ 738.992301][T14440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 741.364360][T14458] comedi comedi0: Minor 3 could not be opened [ 741.690344][T14474] loop2: detected capacity change from 0 to 512 [ 741.794593][T14474] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 741.868537][T14474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 742.037378][ T126] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 742.082417][T14474] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3043: invalid indirect mapped block 4294967295 (level 1) [ 742.312734][T14474] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3043: invalid indirect mapped block 4294967295 (level 1) [ 742.591937][T14474] EXT4-fs (loop2): 2 truncates cleaned up [ 742.697673][T14474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 742.881629][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 742.915625][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.967087][ T126] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.021935][ T126] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.052948][ T126] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.109585][ T126] usb 5-1: config 0 interface 0 has no altsetting 0 [ 743.138224][ T126] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 743.147429][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.213421][ T126] usb 5-1: config 0 descriptor?? [ 743.230615][T14018] EXT4-fs (loop2): unmounting filesystem. [ 743.497442][T14502] loop2: detected capacity change from 0 to 512 [ 743.573837][T14502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 743.651165][T14502] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.743064][ T126] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 743.765525][ T126] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 743.800547][ T126] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 743.838020][ T126] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 743.921654][ T126] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 745.451339][ T126] corsair-psu 0003:1B1C:1C09.0004: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 745.495276][T14018] EXT4-fs (loop2): unmounting filesystem. [ 745.504751][T14521] loop6: detected capacity change from 0 to 2048 [ 745.531682][ T126] corsair-psu 0003:1B1C:1C09.0004: unable to initialize device (-38) [ 745.565903][ T126] corsair-psu: probe of 0003:1B1C:1C09.0004 failed with error -38 [ 745.624576][ T126] usb 5-1: USB disconnect, device number 53 [ 745.707421][T14501] loop0: detected capacity change from 0 to 40427 [ 745.810077][T14501] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 745.817955][T14501] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 745.850041][T14521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 745.909709][T14501] F2FS-fs (loop0): invalid crc value [ 745.990869][T14501] F2FS-fs (loop0): Found nat_bits in checkpoint [ 746.000670][T14522] fido_id[14522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 746.044682][T13971] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 746.220247][T14501] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 746.238887][T14501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 746.260089][T13971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.282255][T13971] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 746.339880][T13971] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.544041][T13971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.553131][T13971] usb 3-1: Product: syz [ 746.558168][T13971] usb 3-1: Manufacturer: syz [ 746.562976][T13971] usb 3-1: SerialNumber: syz [ 746.576095][T13971] cdc_mbim 3-1:1.0: skipping garbage [ 746.795031][T14524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 747.466881][T14524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 747.474600][T13971] cdc_mbim 3-1:1.0: dwNtbInMaxSize=6 is too small. Using 2048 [ 747.497818][T13971] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 747.857110][T13971] cdc_mbim 3-1:1.0: setting tx_max = 60 [ 747.887260][T13971] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 747.948573][T13971] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 2e:87:3b:3f:87:d2 [ 748.021947][T13971] usb 3-1: USB disconnect, device number 4 [ 748.029597][T13971] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 748.422625][T13292] syz-executor: attempt to access beyond end of device [ 748.422625][T13292] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 750.025945][T14570] loop2: detected capacity change from 0 to 16 [ 750.127436][T14570] erofs: (device loop2): mounted with root inode @ nid 36. [ 753.025701][T14603] loop0: detected capacity change from 0 to 4096 [ 755.034568][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3071'. [ 755.601835][T14630] loop3: detected capacity change from 0 to 16 [ 755.654223][T14630] erofs: (device loop3): mounted with root inode @ nid 36. [ 759.413046][T14653] loop4: detected capacity change from 0 to 1024 [ 759.456265][T13813] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 761.079934][T14657] loop2: detected capacity change from 0 to 4096 [ 761.816790][T14687] loop3: detected capacity change from 0 to 128 [ 761.848587][T14687] FAT-fs (loop3): Directory bread(block 414) failed [ 761.902625][T14687] FAT-fs (loop3): Directory bread(block 415) failed [ 761.934808][T14687] FAT-fs (loop3): Directory bread(block 416) failed [ 761.941574][T14687] FAT-fs (loop3): Directory bread(block 417) failed [ 762.009582][T14687] FAT-fs (loop3): Directory bread(block 418) failed [ 762.016624][T14687] FAT-fs (loop3): Directory bread(block 419) failed [ 762.034970][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.038816][T14687] FAT-fs (loop3): Directory bread(block 420) failed [ 762.046829][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.061621][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.093616][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.116759][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 762.137178][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.252277][T14687] FAT-fs (loop3): Directory bread(block 421) failed [ 762.412403][T14687] FAT-fs (loop3): FAT read failed (blocknr 128) [ 763.023084][ T8280] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.077487][ T8280] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.141610][T14728] loop4: detected capacity change from 0 to 4096 [ 764.319752][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 764.469921][ T8280] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.515830][T14741] loop3: detected capacity change from 0 to 512 [ 764.634139][T14741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 764.649139][T14741] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.783159][ T8280] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.854043][T14694] chnl_net:caif_netlink_parms(): no params data found [ 765.137811][T14755] overlayfs: failed to resolve './file1': -2 [ 765.378727][ T5460] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 765.489992][T14694] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.548050][T14694] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.607828][T14694] device bridge_slave_0 entered promiscuous mode [ 765.657144][T14694] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.704293][T14694] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.432786][T14771] loop4: detected capacity change from 0 to 2048 [ 766.880553][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 766.916712][T13701] EXT4-fs (loop3): unmounting filesystem. [ 766.929015][T14771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 766.948017][T14694] device bridge_slave_1 entered promiscuous mode [ 768.900692][T14694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.008517][T14694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.105085][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 769.325871][T14694] team0: Port device team_slave_0 added [ 770.187788][T14694] team0: Port device team_slave_1 added [ 770.630560][T14694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.716999][T14694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.782615][T14798] loop3: detected capacity change from 0 to 128 [ 770.786888][T14694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.853619][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 772.464381][T14806] netlink: 'syz.4.3112': attribute type 29 has an invalid length. [ 774.031490][T14818] fuse: Bad value for 'fd' [ 775.183094][T14694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.201395][T14694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.457240][T14694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.475455][T14806] netlink: 'syz.4.3112': attribute type 29 has an invalid length. [ 775.496800][T14817] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 775.506507][T14817] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 775.517227][T14817] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 775.857983][T14822] loop3: detected capacity change from 0 to 2048 [ 775.906868][T14822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 776.284903][T14694] device hsr_slave_0 entered promiscuous mode [ 776.338236][T14694] device hsr_slave_1 entered promiscuous mode [ 776.390313][T14694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.425055][T14694] Cannot create hsr debugfs directory [ 776.596896][T14828] loop2: detected capacity change from 0 to 2048 [ 776.768804][T14828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 779.032425][ T4311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 779.165391][T14860] loop4: detected capacity change from 0 to 2048 [ 779.255574][T14860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 779.291303][ T4311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.360408][ T4311] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 779.465553][ T4311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 779.518583][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.578355][ T4311] usb 1-1: Product: syz [ 779.604497][ T4311] usb 1-1: Manufacturer: syz [ 779.635038][ T4311] usb 1-1: SerialNumber: syz [ 779.715074][ T4311] cdc_mbim 1-1:1.0: skipping garbage [ 779.906220][T14848] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 780.603302][T14848] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 780.611130][ T4311] cdc_mbim 1-1:1.0: dwNtbInMaxSize=6 is too small. Using 2048 [ 780.628758][ T4311] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 780.764334][T14874] loop2: detected capacity change from 0 to 164 [ 781.006102][ T4311] cdc_mbim 1-1:1.0: setting tx_max = 60 [ 781.036389][ T4311] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 781.344929][ T4311] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 56:68:dc:25:bb:30 [ 781.439311][T14884] loop4: detected capacity change from 0 to 2048 [ 781.471233][ T4311] usb 1-1: USB disconnect, device number 6 [ 782.956049][ T4311] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 783.033129][T14884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 783.552631][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 784.342521][T14888] loop0: detected capacity change from 0 to 128 [ 784.674164][T14694] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 784.755643][T14694] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 786.589915][T14694] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 787.792695][T14694] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 788.890846][T14925] loop3: detected capacity change from 0 to 2048 [ 789.009953][T14925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 789.601968][T14933] loop2: detected capacity change from 0 to 164 [ 789.629513][ T8280] device hsr_slave_0 left promiscuous mode [ 789.659851][T13701] EXT4-fs (loop3): unmounting filesystem. [ 789.666306][T14015] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 789.691219][ T8280] device hsr_slave_1 left promiscuous mode [ 789.766945][ T8280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.824573][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.842326][ T8280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.851692][ T8280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.860417][ T8280] device bridge_slave_1 left promiscuous mode [ 789.867113][ T8280] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.876933][ T8280] device bridge_slave_0 left promiscuous mode [ 789.883931][ T8280] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.915820][T14937] loop4: detected capacity change from 0 to 2048 [ 789.933544][ T8280] device veth1_macvtap left promiscuous mode [ 789.953784][ T8280] device veth0_macvtap left promiscuous mode [ 789.960389][ T8280] device veth1_vlan left promiscuous mode [ 790.045644][ T8280] device veth0_vlan left promiscuous mode [ 790.180031][T14937] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 790.954931][T13964] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 791.198399][T13964] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 791.212853][T13964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.222003][T13964] usb 1-1: Product: syz [ 791.226791][T13964] usb 1-1: Manufacturer: syz [ 791.231433][T13964] usb 1-1: SerialNumber: syz [ 791.249545][T13964] usb 1-1: config 0 descriptor?? [ 791.281734][T13964] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 792.434676][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 792.441417][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 792.542036][T14955] comedi comedi1: multiq3: a I/O base address must be specified [ 792.898070][ T7] usb 1-1: USB disconnect, device number 7 [ 793.632351][ T8280] team0 (unregistering): Port device team_slave_1 removed [ 793.955801][ T8280] team0 (unregistering): Port device team_slave_0 removed [ 794.128142][ T8280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.142334][ T8280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.113292][T14974] mmap: syz.0.3156 (14974) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 798.248756][ T8280] bond0 (unregistering): Released all slaves [ 798.415475][T14999] loop3: detected capacity change from 0 to 2048 [ 798.664367][T14999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 798.721951][T14694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.749342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 798.759603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 798.775652][T14694] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.817081][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 798.839945][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 798.913553][T15010] loop2: detected capacity change from 0 to 256 [ 798.920612][T13701] EXT4-fs (loop3): unmounting filesystem. [ 798.954761][ T4794] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.962452][ T4794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.222837][T15010] FAT-fs (loop2): Directory bread(block 64) failed [ 799.356798][T15010] FAT-fs (loop2): Directory bread(block 65) failed [ 799.485805][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 799.550587][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 799.565587][T15010] FAT-fs (loop2): Directory bread(block 66) failed [ 799.699860][T15010] FAT-fs (loop2): Directory bread(block 67) failed [ 799.757120][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 799.789120][T15010] FAT-fs (loop2): Directory bread(block 68) failed [ 799.796535][T15010] FAT-fs (loop2): Directory bread(block 69) failed [ 799.803287][T15010] FAT-fs (loop2): Directory bread(block 70) failed [ 799.810798][T15010] FAT-fs (loop2): Directory bread(block 71) failed [ 799.817854][T15010] FAT-fs (loop2): Directory bread(block 72) failed [ 799.824614][T15010] FAT-fs (loop2): Directory bread(block 73) failed [ 799.854260][ T4794] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.862028][ T4794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.303083][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 801.809947][ T8288] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 802.702397][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 802.799400][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 802.891181][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 802.927465][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 802.951722][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 803.192220][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 803.713242][T15053] loop0: detected capacity change from 0 to 2048 [ 803.802297][T15053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 803.824162][T15037] device vlan2 entered promiscuous mode [ 803.829900][T15037] device bridge0 entered promiscuous mode [ 804.086433][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 804.283015][T15054] loop4: detected capacity change from 0 to 2048 [ 804.301498][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 804.393223][T14694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.469730][T15054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 804.521649][T14694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 804.763010][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 804.819578][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 805.199443][T15064] autofs4:pid:15064:autofs_fill_super: called with bogus options [ 805.736336][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 805.762578][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 805.828132][T14694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.043921][T15064] loop3: detected capacity change from 0 to 8192 [ 806.702884][T15087] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 809.427281][T15109] loop4: detected capacity change from 0 to 16 [ 809.525276][T15109] erofs: (device loop4): mounted with root inode @ nid 36. [ 809.591039][T15109] overlayfs: failed to resolve './file1': -2 [ 810.042898][ T4280] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 810.054184][ T4280] Bluetooth: hci0: Injecting HCI hardware error event [ 810.064426][ T4276] Bluetooth: hci0: hardware error 0x00 [ 810.091633][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 810.450278][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 810.888537][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 810.897211][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 810.967756][T14694] device veth0_vlan entered promiscuous mode [ 811.016593][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 811.078765][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 811.160348][T14694] device veth1_vlan entered promiscuous mode [ 811.207212][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 811.317813][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 811.401959][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 811.412798][T14694] device veth0_macvtap entered promiscuous mode [ 811.480933][T14694] device veth1_macvtap entered promiscuous mode [ 811.642336][T14694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.742616][T14694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.824313][T14694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.907773][T14694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.024083][T14694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.034683][T14694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.046224][T14694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.054130][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 812.072568][T15135] loop4: detected capacity change from 0 to 2048 [ 812.076256][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 812.158304][T15135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 812.184867][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 812.233803][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 812.416888][T14694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.434151][T14694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.451803][T14694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.467999][T14694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.511944][T14694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.644982][T14694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.832481][T14694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.379967][T14694] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.740788][T14694] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.792185][T14694] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.841255][T14694] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.883671][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 813.983290][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 814.160086][ T4276] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 814.913065][ T4773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.934149][ T4773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.008657][ T8288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 815.067021][ T4773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.077204][ T4773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.913132][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 816.509100][ T4276] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 816.523727][ T4276] Bluetooth: hci2: Injecting HCI hardware error event [ 816.533895][ T4280] Bluetooth: hci2: hardware error 0x00 [ 818.163254][T15206] loop3: detected capacity change from 0 to 512 [ 818.289105][T15206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 818.330698][T15206] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.859473][ T4280] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 820.052795][T13701] EXT4-fs (loop3): unmounting filesystem. [ 820.479083][T15225] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 821.643016][T13971] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 823.702714][T13971] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.753535][T13971] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 823.831103][T13971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 823.882013][T13971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.965508][T13971] usb 1-1: Product: syz [ 824.002377][T13971] usb 1-1: Manufacturer: syz [ 824.039623][T13971] usb 1-1: SerialNumber: syz [ 824.091893][T13971] cdc_mbim 1-1:1.0: skipping garbage [ 824.304216][T15236] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 824.350573][T15265] loop3: detected capacity change from 0 to 256 [ 824.647286][T15271] loop4: detected capacity change from 0 to 512 [ 825.426639][T15236] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 825.442459][T13971] cdc_mbim 1-1:1.0: dwNtbInMaxSize=6 is too small. Using 2048 [ 825.444548][T15271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 825.460945][T13971] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 825.521867][T15271] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.665727][T13971] cdc_mbim 1-1:1.0: setting tx_max = 60 [ 825.688210][T13971] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 826.692423][T13971] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 6a:64:7f:1c:56:11 [ 826.812315][T13971] usb 1-1: USB disconnect, device number 8 [ 826.884055][T13971] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 827.724020][T15308] loop0: detected capacity change from 0 to 2048 [ 831.986566][T15308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 832.165980][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 834.264105][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 834.675085][T13966] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 834.909900][T13966] usb 5-1: Using ep0 maxpacket: 16 [ 834.920819][T13966] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.949134][T13966] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 834.967133][T13966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 834.975433][T13966] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 834.985311][T13966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.010601][T13966] usb 5-1: config 0 descriptor?? [ 835.334862][T15338] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 835.477527][T13966] usbhid 5-1:0.0: can't add hid device: -71 [ 835.495034][T13966] usbhid: probe of 5-1:0.0 failed with error -71 [ 835.591091][T13966] usb 5-1: USB disconnect, device number 54 [ 836.848577][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 836.858828][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 839.165589][T15382] loop7: detected capacity change from 0 to 128 [ 839.466731][T15382] EXT4-fs (loop7): Test dummy encryption mode enabled [ 839.490516][T15382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 839.507817][T15382] System zones: 1-3, 19-19, 35-36 [ 839.565497][T15382] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 839.650338][T15382] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.033566][T15398] kAFS: No cell specified [ 840.618272][T14694] EXT4-fs (loop7): unmounting filesystem. [ 843.951557][T15416] loop7: detected capacity change from 0 to 32768 [ 843.990111][T15416] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.3252 (15416) [ 844.098067][T15416] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 844.131924][T15416] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 844.141839][T15416] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 844.208369][T15416] BTRFS info (device loop7): use zstd compression, level 3 [ 844.238687][T15416] BTRFS info (device loop7): using free space tree [ 845.443738][T15416] BTRFS error (device loop7): open_ctree failed: -12 [ 847.446878][T15479] loop4: detected capacity change from 0 to 164 [ 850.376939][ T4475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.593487][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 850.605874][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 850.617811][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 850.632201][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 850.647333][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 850.670928][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 850.825374][ T4475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.040321][ T4475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.371888][T15529] autofs4:pid:15529:autofs_fill_super: called with bogus options [ 852.860996][ T4475] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.883978][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 853.474181][T15518] chnl_net:caif_netlink_parms(): no params data found [ 853.725755][T15560] loop3: detected capacity change from 0 to 2048 [ 853.920949][T15560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 854.196530][T15518] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.216671][T15518] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.234465][T15518] device bridge_slave_0 entered promiscuous mode [ 854.327959][T13701] EXT4-fs (loop3): unmounting filesystem. [ 854.385005][T15518] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.412797][T15518] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.421569][T15518] device bridge_slave_1 entered promiscuous mode [ 854.492229][T15578] loop7: detected capacity change from 0 to 512 [ 854.570473][T15518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.655506][T15578] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.3282: missing EA_INODE flag [ 854.742159][T15578] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.3282: error while reading EA inode 12 err=-117 [ 855.107000][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 855.759046][T15578] EXT4-fs (loop7): 1 orphan inode deleted [ 855.779197][T15518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.860592][T15578] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 856.941941][T14694] EXT4-fs (loop7): unmounting filesystem. [ 857.045118][T15591] loop3: detected capacity change from 0 to 164 [ 857.100341][T15518] team0: Port device team_slave_0 added [ 857.119987][T14015] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 857.299740][T15518] team0: Port device team_slave_1 added [ 857.329159][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 857.518590][T15518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.670352][T15518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.810090][T15518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.930699][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 857.937296][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 857.992369][T15518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.142739][T15518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.203002][T15623] loop3: detected capacity change from 0 to 256 [ 859.723039][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 859.879960][T15623] FAT-fs (loop3): Directory bread(block 64) failed [ 859.942430][T15623] FAT-fs (loop3): Directory bread(block 65) failed [ 859.951053][T15518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.988358][T15623] FAT-fs (loop3): Directory bread(block 66) failed [ 860.017903][T15623] FAT-fs (loop3): Directory bread(block 67) failed [ 860.018087][T15620] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 860.035509][T15620] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 860.045796][T15620] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 860.182559][T15623] FAT-fs (loop3): Directory bread(block 68) failed [ 860.190427][T15623] FAT-fs (loop3): Directory bread(block 69) failed [ 860.257680][T15623] FAT-fs (loop3): Directory bread(block 70) failed [ 860.278729][T15623] FAT-fs (loop3): Directory bread(block 71) failed [ 860.295283][T15623] FAT-fs (loop3): Directory bread(block 72) failed [ 860.381687][T15630] loop0: detected capacity change from 0 to 512 [ 860.396118][T15623] FAT-fs (loop3): Directory bread(block 73) failed [ 860.535839][T15630] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 861.411529][T15630] EXT4-fs (loop0): 1 truncate cleaned up [ 861.444820][T15630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 861.585200][T15630] overlayfs: failed to resolve './file2': -2 [ 862.122235][T15518] device hsr_slave_0 entered promiscuous mode [ 862.200148][T13292] EXT4-fs (loop0): unmounting filesystem. [ 862.315526][T15518] device hsr_slave_1 entered promiscuous mode [ 862.377580][T15518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.407005][T15654] loop7: detected capacity change from 0 to 512 [ 862.409146][T15518] Cannot create hsr debugfs directory [ 862.666079][T15654] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 862.747246][T15654] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.960258][T15670] overlayfs: failed to resolve './bus': -2 [ 862.988998][ T4475] device hsr_slave_0 left promiscuous mode [ 863.050342][ T4475] device hsr_slave_1 left promiscuous mode [ 863.421087][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.495992][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.534685][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.588900][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.646949][ T4475] device bridge_slave_1 left promiscuous mode [ 863.701796][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.725519][T15678] loop0: detected capacity change from 0 to 256 [ 863.762718][ T4475] device bridge_slave_0 left promiscuous mode [ 863.816081][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.886006][T15678] FAT-fs (loop0): Directory bread(block 64) failed [ 863.954804][T15678] FAT-fs (loop0): Directory bread(block 65) failed [ 864.022665][T15678] FAT-fs (loop0): Directory bread(block 66) failed [ 864.074551][T15678] FAT-fs (loop0): Directory bread(block 67) failed [ 864.496621][ T4475] device veth1_macvtap left promiscuous mode [ 864.503472][T15678] FAT-fs (loop0): Directory bread(block 68) failed [ 864.503712][ T4475] device veth1_vlan left promiscuous mode [ 864.517688][ T4475] device veth0_vlan left promiscuous mode [ 864.528230][T14694] EXT4-fs (loop7): unmounting filesystem. [ 864.553089][T15678] FAT-fs (loop0): Directory bread(block 69) failed [ 864.560101][T15678] FAT-fs (loop0): Directory bread(block 70) failed [ 864.640103][T15678] FAT-fs (loop0): Directory bread(block 71) failed [ 864.659160][T15678] FAT-fs (loop0): Directory bread(block 72) failed [ 864.669925][T15678] FAT-fs (loop0): Directory bread(block 73) failed [ 865.327847][T15694] loop3: detected capacity change from 0 to 512 [ 865.369803][T15694] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 865.564116][T15694] EXT4-fs (loop3): 1 truncate cleaned up [ 865.600277][T15694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 865.894418][T13701] EXT4-fs (loop3): unmounting filesystem. [ 867.020689][T15732] overlayfs: failed to clone upperpath [ 867.517574][ T4475] team0 (unregistering): Port device team_slave_1 removed [ 867.629296][ T4475] team0 (unregistering): Port device team_slave_0 removed [ 869.203439][T15704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.603335][T15704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.840243][T15704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.150084][T15704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.460289][T15768] loop7: detected capacity change from 0 to 128 [ 870.508595][T15768] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 870.524520][T15768] hpfs: filesystem error: improperly stopped [ 870.530850][T15768] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 870.539120][T15768] hpfs: You really don't want any checks? You are crazy... [ 870.547426][T15768] hpfs: hpfs_map_sector(): read error [ 870.553002][T15768] hpfs: code page support is disabled [ 870.565191][T15768] hpfs: hpfs_map_4sectors(): unaligned read [ 870.572322][T15768] hpfs: hpfs_map_4sectors(): unaligned read [ 870.579089][T15768] hpfs: filesystem error: unable to find root dir [ 871.633217][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 871.923534][T15704] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.111307][T15704] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.220910][T15704] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.316597][T15704] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.844595][T15518] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 872.931983][T15518] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 873.030287][T15518] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 873.079114][T15518] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 873.411355][T15518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.483721][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 873.512061][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 873.569382][T15518] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.630584][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 873.663964][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 873.699538][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.707501][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.786036][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 873.816287][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 873.842730][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 873.953185][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.955262][T15810] loop3: detected capacity change from 0 to 512 [ 873.962841][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.994148][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 874.060914][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 874.088174][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 874.098701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 874.107605][T15810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 874.133569][T15518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 874.144898][T15518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.160346][T15810] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.182276][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 874.368495][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 874.474183][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 874.528548][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 874.570538][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 874.624264][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 874.664289][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 874.703696][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 875.038715][T13701] EXT4-fs (loop3): unmounting filesystem. [ 877.453503][T15850] overlayfs: failed to resolve './bus': -2 [ 877.559039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 877.589064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 877.628625][T15518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.046745][T15879] loop7: detected capacity change from 0 to 512 [ 880.178507][T15879] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 880.207589][T15879] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.246380][T15888] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 881.491744][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'. [ 881.511773][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'. [ 881.705143][T14694] EXT4-fs (loop7): unmounting filesystem. [ 882.041334][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 882.101753][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 882.198567][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 882.251159][T15914] block nbd7: NBD_DISCONNECT [ 882.314207][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 882.396496][T15518] device veth0_vlan entered promiscuous mode [ 883.883757][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 883.898495][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 884.162572][T15518] device veth1_vlan entered promiscuous mode [ 884.366025][T15518] device veth0_macvtap entered promiscuous mode [ 884.407720][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 884.440933][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 884.474771][T15518] device veth1_macvtap entered promiscuous mode [ 884.512044][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 884.555158][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 884.716474][T15518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.803983][T15518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.875244][T15518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.886993][T15518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.899094][T15518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.912475][T15518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.927841][T15518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.947098][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 884.973381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 884.999458][T15518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.025174][T15518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.054899][T15518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.072033][T15518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.090505][T15518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.219335][T15518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.281877][T15518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.307397][T15518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.392300][T15518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.493121][T15954] loop3: detected capacity change from 0 to 2048 [ 885.664905][T15954] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 885.826136][T15518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.090742][T15518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.182137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 886.224905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 887.221881][ T4794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.958639][ T4794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.968843][T15589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 888.181400][ T4616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.201555][ T4616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.356447][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 889.316930][T15990] loop4: detected capacity change from 0 to 2048 [ 889.707940][T13951] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 889.854726][T15990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 890.776558][T13951] usb 4-1: device descriptor read/64, error -71 [ 892.326869][T13951] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 892.336081][T16004] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 892.774264][T16016] loop3: detected capacity change from 0 to 1024 [ 892.861736][T16016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 892.883282][T16019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3375'. [ 892.984883][T16016] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 892.988606][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 893.093036][ T26] audit: type=1800 audit(2000000640.516:452): pid=16016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3374" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 893.197607][T16016] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 893.229397][T16016] [ 893.231954][T16016] ====================================================== [ 893.239614][T16016] WARNING: possible circular locking dependency detected [ 893.247166][T16016] syzkaller #0 Not tainted [ 893.251587][T16016] ------------------------------------------------------ [ 893.258876][T16016] syz.3.3374/16016 is trying to acquire lock: [ 893.265843][T16016] ffff888073936518 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 893.275923][T16016] [ 893.275923][T16016] but task is already holding lock: [ 893.283460][T16016] ffff888062214c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2f40 [ 893.293752][T16016] [ 893.293752][T16016] which lock already depends on the new lock. [ 893.293752][T16016] [ 893.304415][T16016] [ 893.304415][T16016] the existing dependency chain (in reverse order) is: [ 893.313924][T16016] [ 893.313924][T16016] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 893.322696][T16016] percpu_down_read+0x44/0x1a0 [ 893.328092][T16016] ext4_writepages+0x20f/0x2f40 [ 893.333551][T16016] do_writepages+0x3ba/0x640 [ 893.338746][T16016] __writeback_single_inode+0x156/0x1160 [ 893.345156][T16016] writeback_single_inode+0x3cb/0x8e0 [ 893.351393][T16016] write_inode_now+0x17f/0x210 [ 893.356685][T16016] iput+0x613/0x980 [ 893.361329][T16016] ext4_xattr_block_set+0x249a/0x32b0 [ 893.367337][T16016] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 893.374644][T16016] __ext4_expand_extra_isize+0x301/0x3e0 [ 893.381092][T16016] __ext4_mark_inode_dirty+0x47f/0x770 [ 893.387350][T16016] ext4_evict_inode+0xa7f/0x1110 [ 893.393083][T16016] evict+0x4c9/0x8d0 [ 893.397596][T16016] ext4_orphan_cleanup+0xbeb/0x1420 [ 893.403361][T16016] ext4_fill_super+0x6ee3/0x78c0 [ 893.408945][T16016] get_tree_bdev+0x3f1/0x610 [ 893.414819][T16016] vfs_get_tree+0x88/0x270 [ 893.419902][T16016] do_new_mount+0x24a/0xa40 [ 893.425052][T16016] __se_sys_mount+0x2e3/0x3d0 [ 893.430359][T16016] do_syscall_64+0x4c/0xa0 [ 893.435393][T16016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.441932][T16016] [ 893.441932][T16016] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 893.449891][T16016] __lock_acquire+0x2d07/0x7d10 [ 893.455448][T16016] lock_acquire+0x1bb/0x4a0 [ 893.460568][T16016] down_write+0x36/0x60 [ 893.465385][T16016] ext4_destroy_inline_data+0x24/0xe0 [ 893.471309][T16016] ext4_writepages+0x670/0x2f40 [ 893.477001][T16016] do_writepages+0x3ba/0x640 [ 893.482386][T16016] filemap_fdatawrite_wbc+0x11e/0x180 [ 893.488391][T16016] file_write_and_wait_range+0x159/0x230 [ 893.494780][T16016] ext4_sync_file+0x23b/0xca0 [ 893.500251][T16016] ext4_buffered_write_iter+0x2f6/0x390 [ 893.506683][T16016] ext4_file_write_iter+0x1cf/0x1710 [ 893.512963][T16016] do_iter_write+0x642/0xb10 [ 893.518343][T16016] do_pwritev+0x23d/0x3a0 [ 893.523859][T16016] do_syscall_64+0x4c/0xa0 [ 893.529163][T16016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.536691][T16016] [ 893.536691][T16016] other info that might help us debug this: [ 893.536691][T16016] [ 893.547600][T16016] Possible unsafe locking scenario: [ 893.547600][T16016] [ 893.555555][T16016] CPU0 CPU1 [ 893.561274][T16016] ---- ---- [ 893.566727][T16016] lock(&sbi->s_writepages_rwsem); [ 893.572275][T16016] lock(&ei->xattr_sem); [ 893.579232][T16016] lock(&sbi->s_writepages_rwsem); [ 893.587073][T16016] lock(&ei->xattr_sem); [ 893.591422][T16016] [ 893.591422][T16016] *** DEADLOCK *** [ 893.591422][T16016] [ 893.599836][T16016] 2 locks held by syz.3.3374/16016: [ 893.605181][T16016] #0: ffff888062212460 (sb_writers#4){.+.+}-{0:0}, at: do_pwritev+0x226/0x3a0 [ 893.614954][T16016] #1: ffff888062214c18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2f40 [ 893.625762][T16016] [ 893.625762][T16016] stack backtrace: [ 893.632100][T16016] CPU: 0 PID: 16016 Comm: syz.3.3374 Not tainted syzkaller #0 [ 893.640246][T16016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 893.651125][T16016] Call Trace: [ 893.654711][T16016] [ 893.657734][T16016] dump_stack_lvl+0x188/0x24e [ 893.662601][T16016] ? load_image+0x400/0x400 [ 893.667281][T16016] ? show_regs_print_info+0x12/0x12 [ 893.672482][T16016] ? print_circular_bug+0x12b/0x1a0 [ 893.677991][T16016] check_noncircular+0x296/0x330 [ 893.683042][T16016] ? add_chain_block+0x940/0x940 [ 893.688186][T16016] ? lockdep_lock+0xf1/0x1f0 [ 893.692792][T16016] ? _find_first_zero_bit+0xcf/0x100 [ 893.698126][T16016] __lock_acquire+0x2d07/0x7d10 [ 893.703101][T16016] ? verify_lock_unused+0x140/0x140 [ 893.708755][T16016] ? mark_lock+0x94/0x320 [ 893.713532][T16016] ? verify_lock_unused+0x140/0x140 [ 893.718762][T16016] ? __lock_acquire+0x12f4/0x7d10 [ 893.724008][T16016] lock_acquire+0x1bb/0x4a0 [ 893.728634][T16016] ? ext4_destroy_inline_data+0x24/0xe0 [ 893.734433][T16016] ? read_lock_is_recursive+0x10/0x10 [ 893.740124][T16016] ? ext4_journal_check_start+0x17e/0x240 [ 893.745949][T16016] down_write+0x36/0x60 [ 893.750491][T16016] ? ext4_destroy_inline_data+0x24/0xe0 [ 893.756141][T16016] ext4_destroy_inline_data+0x24/0xe0 [ 893.761623][T16016] ext4_writepages+0x670/0x2f40 [ 893.766714][T16016] ? __lock_acquire+0x7d10/0x7d10 [ 893.772041][T16016] ? verify_lock_unused+0x140/0x140 [ 893.777605][T16016] ? mark_lock+0x94/0x320 [ 893.781961][T16016] ? __might_sleep+0xd0/0xd0 [ 893.786833][T16016] ? ext4_read_folio+0x370/0x370 [ 893.791938][T16016] ? __lock_acquire+0x7d10/0x7d10 [ 893.797178][T16016] ? do_raw_spin_lock+0x128/0x2f0 [ 893.802871][T16016] ? do_raw_spin_unlock+0x11d/0x230 [ 893.808874][T16016] ? ext4_read_folio+0x370/0x370 [ 893.814181][T16016] do_writepages+0x3ba/0x640 [ 893.819366][T16016] ? filemap_fdatawrite_wbc+0x113/0x180 [ 893.825706][T16016] ? __writepage+0x130/0x130 [ 893.830321][T16016] ? __lock_acquire+0x7d10/0x7d10 [ 893.835868][T16016] ? __rwlock_init+0x140/0x140 [ 893.841716][T16016] ? do_raw_spin_unlock+0x11d/0x230 [ 893.847724][T16016] filemap_fdatawrite_wbc+0x11e/0x180 [ 893.854561][T16016] file_write_and_wait_range+0x159/0x230 [ 893.861985][T16016] ? __filemap_set_wb_err+0x230/0x230 [ 893.868360][T16016] ? __lock_acquire+0x7d10/0x7d10 [ 893.874719][T16016] ? generic_file_direct_write+0x330/0x330 [ 893.882647][T16016] ext4_sync_file+0x23b/0xca0 [ 893.889254][T16016] ext4_buffered_write_iter+0x2f6/0x390 [ 893.896445][T16016] ext4_file_write_iter+0x1cf/0x1710 [ 893.902691][T16016] ? aa_path_link+0x880/0x880 [ 893.908586][T16016] ? ext4_file_read_iter+0x650/0x650 [ 893.915047][T16016] ? end_current_label_crit_section+0x14b/0x170 [ 893.923055][T16016] ? common_file_perm+0x171/0x1c0 [ 893.928186][T16016] do_iter_write+0x642/0xb10 [ 893.933604][T16016] ? vfs_iter_write+0xa0/0xa0 [ 893.939937][T16016] ? rcu_read_lock_any_held+0xb0/0x130 [ 893.946926][T16016] do_pwritev+0x23d/0x3a0 [ 893.952386][T16016] ? do_preadv+0x390/0x390 [ 893.958203][T16016] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 893.964567][T16016] ? lock_chain_count+0x20/0x20 [ 893.970396][T16016] ? lockdep_hardirqs_on+0x94/0x140 [ 893.976829][T16016] ? __x64_sys_pwritev2+0xba/0x100 [ 893.982586][T16016] do_syscall_64+0x4c/0xa0 [ 893.987814][T16016] ? clear_bhb_loop+0x60/0xb0 [ 893.992987][T16016] ? clear_bhb_loop+0x60/0xb0 [ 893.998309][T16016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.005109][T16016] RIP: 0033:0x7f5410b9c819 [ 894.009819][T16016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.031859][T16016] RSP: 002b:00007f5411a07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 894.042635][T16016] RAX: ffffffffffffffda RBX: 00007f5410e15fa0 RCX: 00007f5410b9c819 [ 894.052621][T16016] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 894.060771][T16016] RBP: 00007f5410c32c91 R08: 0000000000000000 R09: 0000000000000003 [ 894.069100][T16016] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000000 [ 894.077695][T16016] R13: 00007f5410e16038 R14: 00007f5410e15fa0 R15: 00007ffd08a235d8 [ 894.086005][T16016] [ 894.090975][T16016] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 483 with error 28 [ 894.104226][T16016] EXT4-fs (loop3): This should not happen!! Data will be lost [ 894.104226][T16016] [ 894.114528][T16016] EXT4-fs (loop3): Total free blocks count 0 [ 894.120797][T16016] EXT4-fs (loop3): Free/Dirty block details [ 894.127379][T16016] EXT4-fs (loop3): free_blocks=20480 [ 894.134138][T16016] EXT4-fs (loop3): dirty_blocks=496 [ 894.139760][T16016] EXT4-fs (loop3): Block reservation details [ 894.148459][T16016] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 894.217166][ T4794] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 894.474219][T13968] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 894.548752][T13964] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 894.678665][T13968] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.696822][T13968] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 894.716174][T13968] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.736619][T13968] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.759045][T13968] usb 8-1: Product: syz [ 894.766016][T13964] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 894.779083][T13964] usb 5-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 894.790831][T13968] usb 8-1: Manufacturer: syz [ 894.795929][T13968] usb 8-1: SerialNumber: syz [ 894.801581][T13964] usb 5-1: config 53 has no interfaces? [ 894.815108][T13968] cdc_mbim 8-1:1.0: skipping garbage [ 894.822870][T13964] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 894.833140][T13964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.030351][T16030] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 895.823017][T13968] cdc_mbim 8-1:1.0: bind() failure [ 895.838038][T13968] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 895.845610][T13968] cdc_ncm 8-1:1.1: bind() failure [ 895.858688][T13968] usb 8-1: USB disconnect, device number 2 [ 896.368056][T13964] usb 5-1: string descriptor 0 read error: -71 [ 896.395680][T13964] usb 5-1: USB disconnect, device number 55