last executing test programs: 15m0.691462387s ago: executing program 2 (id=471): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa1, 0x0, &(0x7f0000000180)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8ee261713c11bee936390009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94de97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62cd98e8a769e328b576d95a704", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 15m0.322003356s ago: executing program 2 (id=473): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="100e04"], 0x0, 0x0}) 14m58.405442422s ago: executing program 2 (id=478): openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) sendmmsg$sock(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x40, &(0x7f00000003c0)}}], 0x1, 0x40500f0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f015, 0x4}) 14m57.680821819s ago: executing program 2 (id=479): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x2000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r1, 0x18, 0x0, 0x4) 14m57.427980985s ago: executing program 2 (id=481): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) r6 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x2, [0x2, 0xb, 0x8, 0x8, 0x2, 0x4, 0x6, 0x1, 0x7, 0x7, 0xb84, 0x7, 0x200, 0x2, 0x6, 0x8fee, 0x8, 0x6, 0x1, 0x8000, 0x1, 0x78e5, 0x3, 0x8, 0xae4, 0x300, 0x4, 0x9, 0x7fff, 0x401, 0xd874, 0x100, 0x9, 0x9, 0x4, 0x67, 0x1, 0xfff8, 0x58f, 0x3a4, 0xfff, 0x4, 0x7, 0x7, 0xbdcf, 0x9, 0x0, 0x93], 0xfffffa6a}}) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4d"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) 14m56.4040826s ago: executing program 2 (id=484): socket$can_bcm(0x1d, 0x2, 0x2) sigaltstack(0x0, &(0x7f0000000080)={&(0x7f0000000280)=""/2, 0x0, 0x2}) sigaltstack(&(0x7f0000000100)={0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x66}}]}, 0x2c}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys3\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys3\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys3/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='vivid.0\x00', 0x8) 14m41.253388045s ago: executing program 32 (id=484): socket$can_bcm(0x1d, 0x2, 0x2) sigaltstack(0x0, &(0x7f0000000080)={&(0x7f0000000280)=""/2, 0x0, 0x2}) sigaltstack(&(0x7f0000000100)={0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x66}}]}, 0x2c}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys3\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys3\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys3/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='vivid.0\x00', 0x8) 11m23.900185392s ago: executing program 3 (id=1631): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000ac0)={0x4}) 11m23.841897713s ago: executing program 3 (id=1632): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x40004) 11m23.618664479s ago: executing program 3 (id=1633): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e003000028008000300", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 11m23.381236554s ago: executing program 3 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x8, 0x0) 11m22.950082714s ago: executing program 3 (id=1638): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x3, 0x1, '@'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240), 0x8) 11m22.415017637s ago: executing program 3 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r6, 0x10042}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff", 0x13}, {&(0x7f00000022c0)="02", 0x1}], 0x2}, 0x4005) 11m21.829933011s ago: executing program 33 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r6, 0x10042}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff", 0x13}, {&(0x7f00000022c0)="02", 0x1}], 0x2}, 0x4005) 6m43.500790245s ago: executing program 1 (id=2573): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m41.347600545s ago: executing program 1 (id=2574): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 6m34.859750587s ago: executing program 1 (id=2577): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) 6m33.101527887s ago: executing program 1 (id=2584): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 6m26.047900962s ago: executing program 1 (id=2601): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 6m23.501116381s ago: executing program 1 (id=2612): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) 6m8.229954188s ago: executing program 34 (id=2612): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) 2m24.260076344s ago: executing program 4 (id=3365): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0xfffffffffffffffe, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r4 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x9492, 0x110101, 0x6, 0x388}, &(0x7f0000000b40), &(0x7f0000000ac0), &(0x7f0000000b00)) io_uring_enter(r4, 0x69e1, 0x70b5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2m23.9925925s ago: executing program 4 (id=3367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f0000000640)=""/16, 0x10}, 0x3}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2m22.530254934s ago: executing program 4 (id=3375): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0xfffffffffffffffe, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r4 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x9492, 0x110101, 0x6, 0x388}, &(0x7f0000000b40), &(0x7f0000000ac0), &(0x7f0000000b00)) io_uring_enter(r4, 0x69e1, 0x70b5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 2m21.796279461s ago: executing program 4 (id=3379): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="ec8a7649f1", 0x5}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb", 0x8f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6", 0xd1}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b164f2aeed196dde83e668def7842fb0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6b353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d00"/161, 0xa1}, {&(0x7f00000011c0)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42", 0x24}], 0x3}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m21.538286547s ago: executing program 4 (id=3381): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x32, 0x0, 0x1, 0x4}]}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000808"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) setns(0xc9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m21.256791394s ago: executing program 4 (id=3383): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x210006, &(0x7f0000000000), 0x1, 0x56e, &(0x7f0000000e40)="$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") socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) getpgid(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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") 2m6.175710006s ago: executing program 35 (id=3383): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x210006, &(0x7f0000000000), 0x1, 0x56e, &(0x7f0000000e40)="$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") socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) getpgid(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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") 1m40.206614792s ago: executing program 5 (id=3535): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="98ca000000000000000000000000000000000000e9ff"], 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m38.98826913s ago: executing program 5 (id=3541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB], 0x28}}, 0x0) 1m37.70592029s ago: executing program 5 (id=3552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cce63b152f4f235135cd164df5cbec6929499dd14d101c2ebfea774d7fc9c6352470a4041e7eefa0af59e82c6cc79a432584707b31324753e034b9e62156ef937610325daa0c7a215ed52b9418c16d0ffd7be7f9e66e8b069e1c06085244d4444b42b6371837677a7caca2aeba263a67f228fb9be53428b7de8d165754f5fd2a4192a22ffd351f3336edbe0cf7dc299385e9593d5c7f0714378cf083f72e26a5bd1e8a8d08ee0bec243ceacf2582908a00cac0d83ce3062b1e0752126a1bd945ce2680f3c9519795d9876988f2a32943d1ab821b69b1cbcb2b9e0edb3a3368abaefd34103585f5a2ea10867a73354246e2d44a1c358c73b260d1f57f0cd5e4b0cc2e3de70e388c201cd23d0a59e44d031604895b81d25c9ca35c2837e83a0d89e7d8735029566a933ad82c49993843767ec4856d48c12df87ba099c9b7e77b211a277a8e8d3def4fe7e2b1c6e5fa7bdde283881faedbca089d0156cbcc70cd365547d1a917d73c145b6f3ab45ab5ed187a15b6b86e8d6d1f4a637f2aea028d46e4148e4c70803b367c0435fb5f3d450e3eb93e1c752ab28ce7baa89d309341ed1e3767b9bc082cbc8a024d16e5538a3612432a9864198d7a20e45c67460b3ea869cf667fc48614925104ce05bcc5260cd3e2fdb8ee9bbeb69db6aedb22b31cfb808e7147af7ac7e4c41918645ac9e0d3e9aa6ecdd957bef547e8d4fc1329e9494308b2739cf4d7926bfce3474de8795844a2d61ad43af119c0ae2b7e0dfd0077720f364cdd46d21722e87fecb5c2c0e0d93325d7d3e8f7dc8373ac493fd5119f3d0760951b0b2fa4ac7fa2e8f56af2cb20fc7cbe57c7166ca4c15aeae7ec8348c41d98b76fd12cffd5b34f4b97b9daf780f3191eba3306fcfed2bcba7e21ea12881f1ad4365d2e1c783290ecf18545b2ca5490bf7eb7d41c6b35ea56524fd1bb1e7116e828ef4b1062124ec15e9ea23f6905314d27480fcbd9900aa05aba98d679c97a43d0cb940927c292178e817330d0656b4cb4ed3df31f685b23fab9ef679f7512fbed0dcef4a35cc3a6b84c46a2e5dacccdc7b78ffe71b49c1093816f9df2743777bbe443e33132b7f97ea4b4ea1404e1ef56a220f699be0e4e63272e477ec4969f6c6cd0cba029361d223640d123f42b9ffda812feb630c3b91f1d6e6fdd0e435a5cc88ae2ed0aed207e811bf374872496218ebe8f76a1feafbdda1bbefa5ee48bf6e4e7323ee2cbb4ce35ef994c4e781a89cb6ed05cfeeb3885a443c1d0f344427524c640d42b1b56f2c19869d60d8c63956456aabd12fc47d46ca660d945e31dfd6e07bbfe1cfbd051ce2db33ea691c5c4f3f8e912b8de1b312bd5f7873aaf4924645c6a3b1445655548d212ec3081e8d13eebdf6da7ed7c191bc758455fb1dbccef24baf75564bb603fc72e21dd9187259f9ab6ae4cf9f439f93a65da4c9389d6f3731901beca82631eb781e01c0d9c91495f63c78e99fe05bc4c1eb97a84a5756b3572fa68c3cb148933012a7c7c853b2a226d814f0559d13f32c060943cda1ac58cd617cf951e83fff0581a4cdc1db11bbdd2cac106004968cb5ffc26fac08af9212a8c59e94c9736325f61d179b9c5e8fea7e06a61d8b1cfad62a9839a56615be390b9dceaa0fa46841df5f5cb172a6c014ab380745a2b0461d57137a2a86ec508022960faf2b2c638c75c56043be513daab7d5907e3bcd416f1d0d75e0096f1f3ce9c620375d40b2355eaa059697c2a615b3cf8cec387405a5a320605b846ff5b6311fd93df025ece92add51e3092a10b8ff0e1abb60b32fae6a037c6ba7771b0fdc8fd0d5792db39a36b0b99bbd1e5bf4caa0c5e253cfbf4314b5b60dd682653862659a5277f79ed1d8324c63893b35e55da568bbe8404f1d2763c776a930a1fc6c945f5bda517e1179a2c610392a9c4fe8bb3df289ff29de2cc52c49701f4feef0481bb84a5fd52df64dd165163aaefbae89ba84d73c57eb123f771e52596b49ed11687830ff1a1d056d42298fe73599ac07c950abe68b6622c394f27e0b54eee55a1a0f3dc47f8d55d95cdc4372d547ea3280fb7cccd85332541e1fb20cc45198e480ed518ac6e634049f2e7cb05c150cc889a891a18cdf3492fe2ce8d436b3586584ec0851faa3168be699b1c9caa18760e45674ca8bea7d891f31b9e995c0aacecb2fd8439e5398d31fc8aae6f5ac2b5a6183f8368d3c0de1a55be202e4ffa60ef71b46e0e0ee061cc43311c5305c02d14d6be4347d2327c35ff9328b76d55aa3f11ecfd4c3213b008c49d0a2dc0ce12c2392eb6df7cbc632db538f706c3c5bc5635434657747dffd9ee56e16058c67e9e80c141f11b0b5ae8838cbc981ce923ac66bcd6a6c7a92d9f7cad10480336edd67058c241b2016592af3c5e8b4a7069559b190aafc0d0af085601439e8819b05ba2ea5ba8a7f4fc585657bd5857e1d88d74a7eeff2ce6049efaa7e41e742583ef20c0a5c60e18e6da9f5342ae957a2cb62994cf9f35c3e914460d3b8e8e1fb6fbb37ac5e6f51b680a67d760259ed3797001f72e85701bfedcccd82e7945da63b3cf6ed19b2bb611eb31937ca13df724b81cec4ba6bdbe603783d1e9818a8cf22fb2f9f4c96940e667848a3177b617bec1f3d81d11da80079b65923434475e3756f51d1ef833d24a77c33b0eba2a89cb2019cc0af083e7c8fde8871db6536dd11b7c713f3a88c0d85fb7567d34e77e1f23c5ff3b2e0f9f302021163f1aeef73faf6bebc0c8783ee5a50a0fb72f0ecc7be3931570a4584c2ec79642e62289d524497e3a0ca7928d2273a057f6428d8c9b6ce047e8ad880bd212a9b902ac13407c80dae76d6db04fde7584203d98bd453c0b722fb2469665ed09739dc79c4856f7c2c1e7fd860161fc393b26c38a7de3c056ef8fc1bdbb53b136cf9e04b5a342fb8828cec4b3b8955cdfd8eda47492d4227289e81a40ff6bff03d3fc983df2097fbe413605189a06ed4305101555b611e541f037189ffad1ff5002a126db8f2d2504294081dbb9b211fbb6042c913ff34ae9537a560432c104470271aa687de030e3609c34ddb061011dbc08b66db1b45c43cfea804d1bea8c1c91d3a982f51593f5e209470d618cd430b44acead709936519b6937f3db2946a942153d78fe218eb4114af5ed60bc79e4ff8d48a9e8462b598cc4918124926711ca81b84e080b2a1b2d213904b9e2f3559f66521f9636ede23db18e3416ddef5a22956840ceab1bac6435716448fcf89d45d129120cb2ac92dbcb97be56b169523a7fc44ba32d3f62414b3868b1b8ab078d8cf65c967bcf702f16cdf099bd345787bc0b189a15c343322eae2958e6469f5715ab2eb81ec0a85311d53adb831a3350419ea4746c0d98bbb51d0eba63db662762c6c4af089d26fb57c5f1f7b78fded3e57d726ba3a61a57241681ba43ac35da7e13e860a1984cd0ab43f29b119885eea68941faa4e30f3cc4b3e98e015111a6c24a609ab4d686ceff1b218d68273ac3e87f150ca7ef2c6fba616bc626a009e551cf6801c942a8801c3a78d428ba626c1d449c17b962a7cbccff1a41fdf21e6847b6a0cd272ff01b685048a3ea03156bdf804016d6e558cdfd790772fc82f96adac5770d4a8eafc2d4d9cab076c38edf2cf4b3e830fb2acde872294b79250aaa30c152d83e991faa29f9c07483cb54c08f39099c12fca9579d847e3f7733b978c454c85ed6213673e475458e45f0b93d1eb1f484b0e181905097d79cd8bc565a14cb1c8835c3fc287d72d9616b99aa042c186a06aa91c5f4c00a7d86549767cb785a0f468d153003726516ecba477f3173bb05f2df60da83d5c4ddf889549e9504fb4052dfe5d3465563aeba8e5253b3cc9eda8dc0b8ffc74fdbd4d49e64de3eef79be08569042a7c5bf942cca6da27b90ba4c4832ada245b4f9ebdad645776b238af65073fd31924c1a1a04cd1a83f212caabb5601d11fa6375b1d4781ab75f398cf1d94d2881c105f15530b9a5c50fa852c3999cfea0f9b7c13a862a5bc21c28d6dcf9148a88ef5e6997bbb28aef8b637fc95e0359c741e32db2a267d96aba13aed03f89f5395ae5d19a5c2fd2564ee10523737a83856be448bd4186e2368b6631bea63142bc4d270fee89062bf7d61e5f6e49c798054760e624910c732737fb89aee6d51ac1dcc2b0a43bbbac1e23d691f42509d1475fb29cbdfd32599e95dda27424b288b3ec59109f6113bca5df34a870ad5f78a18864641e1196f47ab679914de32be7b4568c40d28c637c37c4bc61e561af71e867bd477ad8d8ff48208e781aeee17f7e4e89a795fc725b341df564859a33823af64535a81c56dfc0463d7264608be7eb101584031afcb2dd9fde4e9898c979973c2370b87cd0c28b16de10548ddc457fbc34309663418dc7df60c4ed965bbc5655ee79aa95aed1f33742034cf18df47530912cd19da57d44493b54c5a625e2c237d4ec4496df293d301359126d0129465a45aef9340515c2627f1919efa25c0fa5bf515a67ae10d527977138ade3e7422e41215aa75d6133b7710426c1e27f725e6040f01c6e7524e3789fefcb4640442cd4f72a03edec97bd47d12624053419048431ac781e6a17b9ab5030a5705ca11efb3dc58aaa41f9a6cfe397f774f0dc74610ac72624ca48af1ecba87376df745bccd434351f5831bcdc946bfa4ebb025412679f1e5011f1391935b6648007c98f5af3f0366eaa928de4180024188bae3aecea59a27edaf0cd199c57ef290c205dfbb89c82e9733d1bd12b59863a7f8a34b51f0a6da8b8f8ea6a571460938d4ea26f097e78af31c40501eeb8ad0f9feed8a6430149b85cdd7ed62c2e12cfa6a3c7292a1dfd3ca438e583d7f3af6ca123fe1c80352490c831ea385b132d792b4b6e0e570d0df29d9b39a761cf3b07ab29255cf4c3c281c71c47654144b0b61cda5830fa9d1feec4c305e89b12694fccab28759239b1e52377fdee05785867c281411372bab2a315403519199af83e75a402051fcfd2fdd179f4307ec96d1236cd9e24054582d242ed1e4113f1b244be3e26f78ad1668fbeee0e5e51b81d8302a85c64b2c8b3dbf6f126e289e216dd22902df37905872be8610c1e31fb2b0bcce23b7bbe76bc1eb69fac2ffffe06601273dda4769075823293cc94eb1a3a06b8cd13db4b1c7dc9ddd6ed4eeff148e3cd8494d81826d4586f780177664e4495fbb0045da95dfdfb96fcbbcd6ec5f78b66e2c738e1a6edc0c7bb17f5d764cff4eb5d572fb2e376b258a891ae25f16ee9d0803ae7b9ecbbdfe6d5de3cf4535d2f7cdbbb522d91693fc511589b2be769927954ae4574917c492bf4d75ffb0914939526f1d76fc73fc6a785f71707f41bb4766741926eda68c2783dd8a651c67edf80a4e5235fc72c343189eaf9563faced85942ddf1521b3f8f72565bd30de38f289ea131e228dbe53267b35e08575bd529c062c8d102ae61ef2af9c76132f53727e418c6bb903b0c8258f30f0b629701ce741434542e59a866766bd78d77274e6d56d40b2d8abb0cdb4ee7060ffe569f6080ddf7a7b696d8fba17ef2305547250ad5cde88c94f957febfd5c1a788b67d044369ceeb64bdcd8ec631658245eee03acc3de7fd4649060fde28c424f5e9f4f7f2013773a208c2faa4212e8c38685fc3773f04466329beca3ebd6ccf4a162fc1e5481fe537649c61c44e784c93db71036417dd96271cd21811178af52aa76b5b69342710c935707f792be532a346e47ffe576999f7ccd065eb1e439768cce2908a600d9e62148f4", 0x1000}], 0x1}}], 0x1, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 1m36.592289646s ago: executing program 5 (id=3563): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m34.876135486s ago: executing program 5 (id=3573): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) socket$inet6(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m34.027992956s ago: executing program 5 (id=3578): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x1060, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m33.217227045s ago: executing program 36 (id=3578): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x1060, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 8.726945397s ago: executing program 6 (id=3895): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0xa0000013}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x0, 0xb97534d5fe9704cf, 0x70bd3c, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6aea}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x44884}, 0xc808) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r7, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r6) 8.600140139s ago: executing program 8 (id=3896): socket$kcm(0x21, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35c60100ef000000500012800e0001006970366772657461700000003c00028014000600fe", @ANYRES64=r0], 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 8.116569841s ago: executing program 8 (id=3899): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r1 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1]) 8.070431692s ago: executing program 0 (id=3900): mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 6.678599274s ago: executing program 6 (id=3901): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x6, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'xfrm0\x00'}) sendto$packet(r2, &(0x7f0000000000)="3bfaab0d", 0x4, 0x20008801, 0x0, 0x0) 6.675506645s ago: executing program 7 (id=3902): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x1d, &(0x7f0000000300), 0x4) 6.574139107s ago: executing program 8 (id=3903): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="ec8a7649f1", 0x5}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705ee", 0x6c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6", 0xd1}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b164f2aeed196dde83e668def7842fb0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6b353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d00"/161, 0xa1}, {&(0x7f00000011c0)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42", 0x24}], 0x3}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.516039408s ago: executing program 0 (id=3904): getpid() r0 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) truncate(&(0x7f0000000100)='./file0\x00', 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0xfffffffffffffff5, 0x6, {0x8, 0xbffffffe, 0x0, {0x0, 0x5, 0x0, 0x200000000000, 0xffffffffffff87b8, 0x0, 0x1, 0x3966, 0x1, 0x2000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.199895385s ago: executing program 7 (id=3905): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c39f", 0xdf}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2fde502b8", 0x71}, {&(0x7f0000000880)="6697624319e115b3b12c54b477244af3979b03fafbcbe555a59252423d41131d33d81eefbc306e247aeb9a5e6891b7ff731babe242dbc2169c193466b1", 0x3d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac2", 0x61}], 0x1}}], 0x2, 0x4000000) 6.193414705s ago: executing program 8 (id=3906): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 6.188259216s ago: executing program 6 (id=3907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) 6.175732076s ago: executing program 0 (id=3908): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4000080, 0x0, 0x0) 5.875165403s ago: executing program 7 (id=3909): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0xa0000013}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x0, 0xb97534d5fe9704cf, 0x70bd3c, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6aea}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x44884}, 0xc808) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r7, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r6) 5.800938055s ago: executing program 6 (id=3910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000001dc0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 'veth1_to_team\x00'}}, 0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xee7d3000) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000002e80)) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x80) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) setregid(r6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x2, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00']}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8000, &(0x7f0000000300)=ANY=[]) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000016c0)={{0xffffffffffffffff, &(0x7f0000000140)='\x87\x00', 0x250000, &(0x7f0000000180)={@align=0xf, {0x100, 0x0, 0x1, 0xe0}}, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0xffffff6c}, 0x4, &(0x7f0000001600)=[{0x3, 0xfb, &(0x7f00000002c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0}, {0x1, 0x9, 0x0, &(0x7f0000000400), 0x0, 0x8}, {0x2, 0x4c, &(0x7f0000000500)='&--\'\'!$-/\x00', &(0x7f0000000540), 0x0, 0x8}, {0x3, 0x3, 0x0, 0x0, 0x0, 0x8}]}) 5.800423675s ago: executing program 0 (id=3911): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) r1 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1]) 4.260168191s ago: executing program 7 (id=3912): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}}, 0x28) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="01", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001a010000010000001400"], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/83, 0x53}], 0x1}, 0x2) 2.103535781s ago: executing program 0 (id=3913): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'sh\x00', 0x5, 0x8, 0x74}, {@rand_addr=0x64010102, 0x4e22, 0x2, 0x6, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.059959182s ago: executing program 8 (id=3914): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) 400.519231ms ago: executing program 6 (id=3915): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="ec8a7649f1", 0x5}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93", 0x7e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6", 0xd1}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b164f2aeed196dde83e668def7842fb0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6b353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d00"/161, 0xa1}, {&(0x7f00000011c0)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42", 0x24}], 0x3}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 373.359781ms ago: executing program 7 (id=3916): getpid() r0 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) truncate(&(0x7f0000000100)='./file0\x00', 0x8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0xfffffffffffffff5, 0x6, {0x8, 0xbffffffe, 0x0, {0x0, 0x5, 0x0, 0x200000000000, 0xffffffffffff87b8, 0x0, 0x1, 0x3966, 0x1, 0x2000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 270.723454ms ago: executing program 0 (id=3917): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) 151.414797ms ago: executing program 8 (id=3918): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r3, 0x0], &(0x7f0000000140), 0x0, 0xffffffffffffffff}) 8.62516ms ago: executing program 6 (id=3919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f00007bd000/0x1000)=nil, 0x1000, 0x14) 0s ago: executing program 7 (id=3920): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0xa0000013}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x0, 0xb97534d5fe9704cf, 0x70bd3c, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6aea}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x44884}, 0xc808) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r7, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r6) kernel console output (not intermixed with test programs): C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 532.594940][ T5813] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 533.116706][ T5763] hub 5-1:0.0: hub_ext_port_status failed (err = 3) [ 533.442598][T11743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1956'. [ 534.646929][ T5813] usb 6-1: USB disconnect, device number 7 [ 534.836120][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1966'. [ 535.071215][ T5818] usb 5-1: reset high-speed USB device number 50 using dummy_hcd [ 535.098113][ T5818] usb 5-1: device reset changed ep0 maxpacket size! [ 535.138767][ T5818] usb 5-1: USB disconnect, device number 50 [ 535.524632][ T5818] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 535.753491][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.804310][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.865557][ T5818] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 535.905055][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.938803][ T5818] usb 5-1: config 0 descriptor?? [ 535.977210][ T5818] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 536.310163][ T5813] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 536.439961][ T5818] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 536.496085][ T5813] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 536.506500][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.517414][ T5813] usb 6-1: Product: syz [ 536.524254][ T5813] usb 6-1: Manufacturer: syz [ 536.529168][ T5813] usb 6-1: SerialNumber: syz [ 536.543719][ T5813] usb 6-1: config 0 descriptor?? [ 536.629960][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 536.653953][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.666317][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.684239][ T5818] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 536.695527][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.712769][ T5818] usb 1-1: config 0 descriptor?? [ 536.742607][ T5818] hub 1-1:0.0: USB hub found [ 536.762775][ T5813] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 536.935814][ T5818] hub 1-1:0.0: 1 port detected [ 536.966800][ T5813] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 537.542728][ T5818] hub 1-1:0.0: hub_ext_port_status failed (err = 3) [ 537.856562][ T5763] usb 5-1: USB disconnect, device number 51 [ 538.788753][T11842] IPVS: Error connecting to the multicast addr [ 539.080752][ T5763] usb 6-1: USB disconnect, device number 8 [ 539.384108][ T5813] usb 1-1: USB disconnect, device number 76 [ 540.139865][ T5813] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 540.300054][ T5818] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 540.343919][ T5813] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 540.361467][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.379447][ T5813] usb 5-1: Product: syz [ 540.388857][ T5813] usb 5-1: Manufacturer: syz [ 540.398297][ T5813] usb 5-1: SerialNumber: syz [ 540.407615][ T5813] usb 5-1: config 0 descriptor?? [ 540.490793][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 540.502448][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.517620][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.528110][ T5818] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 540.554068][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.583270][ T5818] usb 1-1: config 0 descriptor?? [ 540.605214][ T5818] hub 1-1:0.0: USB hub found [ 540.625692][ T5813] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 540.824040][ T5818] hub 1-1:0.0: 1 port detected [ 540.841672][ T5813] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 540.942020][T11883] netlink: 'syz.5.2016': attribute type 4 has an invalid length. [ 541.436946][ T5818] hub 1-1:0.0: activate --> -90 [ 541.647830][ T5818] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 541.674714][ T5818] usb 1-1: USB disconnect, device number 77 [ 541.905278][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2024'. [ 541.917070][T11901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.025503][T11901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.473456][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2029'. [ 542.522597][T11914] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2029'. [ 542.897679][ T5813] usb 5-1: USB disconnect, device number 52 [ 542.979838][ T8] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 543.159402][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2033'. [ 543.200158][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.236884][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.272910][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 543.310360][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.367395][ T8] usb 1-1: config 0 descriptor?? [ 543.401589][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 543.569551][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 543.597388][T11932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.691928][T11932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.750671][ T8] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 543.950618][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 543.957437][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.985771][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.016707][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 544.027493][T11943] syzkaller0: entered promiscuous mode [ 544.037062][T11943] syzkaller0: entered allmulticast mode [ 544.047404][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.074467][ T8] usb 5-1: config 0 descriptor?? [ 544.114239][ T8] hub 5-1:0.0: USB hub found [ 544.297470][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2039'. [ 544.309584][T11946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2039'. [ 544.338181][ T8] hub 5-1:0.0: 1 port detected [ 544.680056][ T5763] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 544.875773][ T5763] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 544.889350][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.902610][ T5763] usb 6-1: Product: syz [ 544.906949][ T5763] usb 6-1: Manufacturer: syz [ 544.913253][ T5763] usb 6-1: SerialNumber: syz [ 544.923830][ T5763] usb 6-1: config 0 descriptor?? [ 544.956878][ T8] hub 5-1:0.0: activate --> -90 [ 545.145057][ T5763] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 545.163232][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 545.174859][ T8] usb 5-1: USB disconnect, device number 53 [ 545.356746][ T5763] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 545.746227][ T5763] usb 1-1: USB disconnect, device number 78 [ 546.034218][T11963] ipvlan0: Caught tx_queue_len zero misconfig [ 546.044943][T11975] block nbd0: not configured, cannot reconfigure [ 546.356503][ C0] hrtimer: interrupt took 63598 ns [ 546.652430][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2051'. [ 547.548169][ T8] usb 6-1: USB disconnect, device number 9 [ 547.759256][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2057'. [ 547.822345][T11998] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2057'. [ 547.962585][ T5813] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 548.191222][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 548.231198][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.302528][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.376759][ T5813] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 548.431057][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.512720][ T5813] usb 5-1: config 0 descriptor?? [ 548.568722][ T5813] hub 5-1:0.0: USB hub found [ 548.610638][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2061'. [ 548.820846][ T5813] hub 5-1:0.0: 1 port detected [ 549.443224][ T5813] hub 5-1:0.0: activate --> -90 [ 549.644889][ T5763] usb 5-1: USB disconnect, device number 54 [ 549.869976][ T5818] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 550.071733][ T5818] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 550.088998][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.106639][ T5818] usb 1-1: Product: syz [ 550.114793][ T5818] usb 1-1: Manufacturer: syz [ 550.129578][ T5818] usb 1-1: SerialNumber: syz [ 550.157322][ T5818] usb 1-1: config 0 descriptor?? [ 550.408563][ T5818] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 550.517037][T12030] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 550.557726][T12030] netlink: 'syz.4.2069': attribute type 2 has an invalid length. [ 550.616186][ T5818] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 551.141667][T12040] syzkaller0: entered promiscuous mode [ 551.165991][T12040] syzkaller0: entered allmulticast mode [ 552.681926][ T5763] usb 1-1: USB disconnect, device number 79 [ 553.043787][T12066] syzkaller0: entered promiscuous mode [ 553.084350][T12066] syzkaller0: entered allmulticast mode [ 553.226502][T12071] netlink: 'syz.5.2085': attribute type 12 has an invalid length. [ 553.240863][T12071] netlink: 'syz.5.2085': attribute type 29 has an invalid length. [ 553.276829][T12071] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2085'. [ 553.328779][T12071] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2085'. [ 555.671108][T12108] netlink: 'syz.4.2096': attribute type 12 has an invalid length. [ 555.738875][T12108] netlink: 'syz.4.2096': attribute type 29 has an invalid length. [ 555.806630][T12108] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2096'. [ 555.916803][T12108] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2096'. [ 557.815044][T12137] netlink: 'syz.5.2107': attribute type 12 has an invalid length. [ 557.930922][T12137] netlink: 'syz.5.2107': attribute type 29 has an invalid length. [ 558.017359][T12137] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2107'. [ 558.153296][T12137] netlink: 59 bytes leftover after parsing attributes in process `syz.5.2107'. [ 558.363271][T12114] loop4: detected capacity change from 0 to 32768 [ 558.488546][T12114] tmpfs: Bad value for 'nr_inodes' [ 559.411715][ T8] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 559.461329][ T5763] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 559.624688][ T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 559.640894][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.674198][ T5763] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.739442][ T8] usb 6-1: Product: syz [ 559.761388][ T8] usb 6-1: Manufacturer: syz [ 559.766574][ T8] usb 6-1: SerialNumber: syz [ 559.801829][ T5763] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 559.853210][ T8] usb 6-1: config 0 descriptor?? [ 559.869360][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.932181][ T5763] usb 1-1: config 0 descriptor?? [ 559.974914][ T5763] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 560.162775][ T8] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 560.788870][ T8] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 561.983679][ T5818] usb 6-1: USB disconnect, device number 10 [ 562.282798][ T5818] usb 1-1: USB disconnect, device number 80 [ 563.287459][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.295221][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.444171][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 564.950140][T12218] pim6reg1: entered promiscuous mode [ 564.998530][T12218] pim6reg1: entered allmulticast mode [ 566.098037][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2136'. [ 566.165734][T12233] syzkaller0: entered promiscuous mode [ 566.188995][T12233] syzkaller0: entered allmulticast mode [ 567.568993][T12256] IPVS: Error connecting to the multicast addr [ 568.981698][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2146'. [ 571.515688][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'. [ 572.504489][ T5818] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 572.518810][T12338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.561510][T12338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.740130][ T5818] usb 6-1: Using ep0 maxpacket: 32 [ 572.782012][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.861917][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.965758][ T5818] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 573.049314][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.135658][ T5818] usb 6-1: config 0 descriptor?? [ 573.182685][ T5818] hub 6-1:0.0: USB hub found [ 573.403905][ T5818] hub 6-1:0.0: 1 port detected [ 574.047417][ T5818] hub 6-1:0.0: activate --> -90 [ 574.253304][ T5818] hub 6-1:0.0: hub_ext_port_status failed (err = 0) [ 574.572670][ T5763] usb 6-1: USB disconnect, device number 11 [ 575.801553][T12376] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2169'. [ 576.991647][T12395] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2181'. [ 577.354206][T12369] loop4: detected capacity change from 0 to 32768 [ 577.537886][T12369] tmpfs: Bad value for 'nr_inodes' [ 578.935866][T12406] tunl0: Caught tx_queue_len zero misconfig [ 580.766408][T12420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2187'. [ 581.315692][ T5777] Bluetooth: hci2: link tx timeout [ 581.376403][ T5777] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 583.442683][T12427] Bluetooth: hci2: command 0x0406 tx timeout [ 584.132671][T12455] IPVS: Error connecting to the multicast addr [ 584.270794][T12457] syzkaller0: entered promiscuous mode [ 584.309983][T12457] syzkaller0: entered allmulticast mode [ 584.646939][T12463] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2200'. [ 586.294536][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2207'. [ 586.528714][T12488] 8021q: adding VLAN 0 to HW filter on device bond4 [ 586.656811][T12490] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 586.766707][T12490] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 587.768748][T12491] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 587.808081][T12491] bond4 (unregistering): Released all slaves [ 588.418795][T12504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.172999][T12512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2216'. [ 589.571766][T12522] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 589.740199][T12522] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 589.881097][T12522] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 593.065847][T12575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2230'. [ 596.884878][T12427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 596.902902][T12427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 596.912966][T12427] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 596.924626][T12427] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.942300][T12427] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 596.952222][T12427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 597.424095][ T8350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.508747][ T8350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.700289][ T8350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.760283][ T8350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.988686][T12621] loop4: detected capacity change from 0 to 32768 [ 599.044782][T12427] Bluetooth: hci0: command tx timeout [ 599.162170][T12618] tmpfs: Bad value for 'nr_inodes' [ 599.737201][ T8350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.798896][ T8350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.407723][ T8350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.471969][ T8350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.122511][T12427] Bluetooth: hci0: command tx timeout [ 601.352084][ T8] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 601.542506][ T8350] tipc: Left network mode [ 601.597261][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.720868][ T8] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 601.824574][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.911312][ T8] usb 5-1: config 0 descriptor?? [ 602.165833][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 602.257297][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 602.356656][ T8] usb 5-1: USB disconnect, device number 55 [ 602.574499][T12615] chnl_net:caif_netlink_parms(): no params data found [ 602.821679][ T8] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 602.928439][T12652] IPVS: Error connecting to the multicast addr [ 603.033666][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.110002][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 603.187633][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.207201][T12427] Bluetooth: hci0: command tx timeout [ 603.291556][ T8] usb 5-1: config 0 descriptor?? [ 604.280067][ T8] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 604.357557][ T8] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32 [ 604.368128][T12639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.464494][T12639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.876413][ T5818] usb 5-1: USB disconnect, device number 56 [ 604.876478][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 604.945105][T12665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2255'. [ 605.280503][T12427] Bluetooth: hci0: command tx timeout [ 606.366660][ T8350] gretap0 (unregistering): left promiscuous mode [ 606.431766][T12615] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.461159][T12615] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.504746][T12615] bridge_slave_0: entered allmulticast mode [ 606.526536][T12615] bridge_slave_0: entered promiscuous mode [ 606.685471][T12615] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.716732][T12615] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.767749][T12615] bridge_slave_1: entered allmulticast mode [ 606.828037][T12615] bridge_slave_1: entered promiscuous mode [ 607.042543][ T8350] IPVS: stopping master sync thread 6729 ... [ 607.266257][T12615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.386845][T12615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.233529][ T8350] bond0: left promiscuous mode [ 608.238950][ T8350] bond_slave_0: left promiscuous mode [ 608.319157][ T8350] bond_slave_1: left promiscuous mode [ 608.561160][ T8350] hsr_slave_0: left promiscuous mode [ 608.613045][ T8350] hsr_slave_1: left promiscuous mode [ 608.665362][ T8350] bridge_slave_1: left allmulticast mode [ 608.705471][ T8350] bridge_slave_1: left promiscuous mode [ 608.758621][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.014675][ T8350] veth1_macvtap: left promiscuous mode [ 609.056831][ T8350] veth0_macvtap: left promiscuous mode [ 609.099981][ T8350] veth1_vlan: left promiscuous mode [ 609.139098][ T8350] veth0_vlan: left promiscuous mode [ 609.441050][T12697] loop5: detected capacity change from 0 to 32768 [ 609.630745][T12697] tmpfs: Bad value for 'nr_inodes' [ 611.253399][ T8350] bond1 (unregistering): Released all slaves [ 612.728138][ T8350] team0 (unregistering): Port device team_slave_0 removed [ 612.852162][ T8350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.968888][ T8350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.733509][ T8350] bond0 (unregistering): Released all slaves [ 613.917770][T12615] team0: Port device team_slave_0 added [ 613.947860][T12705] IPVS: Error connecting to the multicast addr [ 614.311141][T12615] team0: Port device team_slave_1 added [ 614.739963][T12615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.747790][T12615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.109776][T12615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.229192][T12615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.304762][T12615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.484893][T12615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.943295][T12615] hsr_slave_0: entered promiscuous mode [ 615.996640][T12615] hsr_slave_1: entered promiscuous mode [ 616.051565][T12615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.160746][T12615] Cannot create hsr debugfs directory [ 616.346116][T12747] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2271'. [ 618.077964][T12766] IPVS: Error connecting to the multicast addr [ 618.740021][ T5763] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 618.999571][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.105342][ T5763] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 619.208828][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.341342][ T5763] usb 6-1: config 0 descriptor?? [ 619.691116][ T5763] usbhid 6-1:0.0: can't add hid device: -71 [ 619.699284][ T5763] usbhid: probe of 6-1:0.0 failed with error -71 [ 619.820087][ T5763] usb 6-1: USB disconnect, device number 12 [ 620.259980][ T5763] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 620.472559][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.520405][ T5763] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 620.565720][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.594193][ T5763] usb 6-1: config 0 descriptor?? [ 621.463925][ T5763] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 621.472794][T12774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.522347][ T5763] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input33 [ 621.544055][T12774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.888085][ T5819] usb 6-1: USB disconnect, device number 13 [ 621.888176][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 622.450615][T12768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.014762][T12768] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.027493][T12768] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.046811][T12768] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.064632][T12768] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.729219][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.752932][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.093098][T12615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 626.232126][T12615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 626.306417][T12615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 626.429136][T12615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 627.151261][T12801] loop4: detected capacity change from 0 to 32768 [ 627.166012][T12615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.312484][T12799] tmpfs: Bad value for 'nr_inodes' [ 627.419591][T12615] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.546398][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.554433][ T8350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.947070][T12803] loop5: detected capacity change from 0 to 32768 [ 627.978000][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.986125][ T8350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.111532][T12803] tmpfs: Bad value for 'nr_inodes' [ 630.449859][T12824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2283'. [ 632.060716][T12615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.653771][T12615] veth0_vlan: entered promiscuous mode [ 632.784248][T12615] veth1_vlan: entered promiscuous mode [ 634.087830][T12615] veth0_macvtap: entered promiscuous mode [ 634.371939][T12615] veth1_macvtap: entered promiscuous mode [ 634.566042][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.660193][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.739814][T12615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.840816][T12615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.921971][T12615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.099953][T12615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.216500][T12615] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.310654][T12615] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.410439][T12615] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.489933][T12615] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.649156][T12873] syzkaller0: entered promiscuous mode [ 635.698803][T12873] syzkaller0: entered allmulticast mode [ 636.469134][T12864] loop5: detected capacity change from 0 to 32768 [ 636.582340][T12864] tmpfs: Bad value for 'nr_inodes' [ 638.264617][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.430028][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.805297][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.904981][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.806881][ T5813] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 640.067106][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.153913][ T5813] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 640.257744][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.354282][ T5813] usb 6-1: config 0 descriptor?? [ 640.691689][ T5813] usbhid 6-1:0.0: can't add hid device: -71 [ 640.766521][ T5813] usbhid: probe of 6-1:0.0 failed with error -71 [ 640.873385][ T5813] usb 6-1: USB disconnect, device number 14 [ 641.072877][T12924] syzkaller0: entered promiscuous mode [ 641.151517][T12924] syzkaller0: entered allmulticast mode [ 641.333984][ T5813] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 641.621137][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.741195][ T5813] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 641.851233][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.982521][ T5813] usb 6-1: config 0 descriptor?? [ 642.902040][T12907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.911850][ T5813] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 642.982324][ T5813] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input34 [ 643.023717][T12907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.435553][ T8] usb 6-1: USB disconnect, device number 15 [ 643.442274][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 646.195824][T12975] syzkaller0: entered promiscuous mode [ 646.253724][T12975] syzkaller0: entered allmulticast mode [ 652.199944][ T5813] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 652.448730][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.553691][ T5813] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 652.661231][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.804902][ T5813] usb 1-1: config 0 descriptor?? [ 653.091363][ T5813] usbhid 1-1:0.0: can't add hid device: -71 [ 653.187204][ T5813] usbhid: probe of 1-1:0.0 failed with error -71 [ 653.335883][ T5813] usb 1-1: USB disconnect, device number 81 [ 653.811168][ T5813] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 654.007494][T12427] Bluetooth: hci2: Malformed Event: 0x2f [ 654.051892][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.084922][ T5813] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 654.147187][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.210093][ T5813] usb 1-1: config 0 descriptor?? [ 655.084594][ T5813] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 655.094964][T13044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.160098][ T5813] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35 [ 655.174995][T13044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.479582][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 655.488712][ T5813] usb 1-1: USB disconnect, device number 82 [ 657.164721][T13085] loop4: detected capacity change from 0 to 32768 [ 657.351471][T13085] tmpfs: Bad value for 'nr_inodes' [ 659.949166][T13129] netlink: 'syz.4.2355': attribute type 12 has an invalid length. [ 659.998416][T13129] netlink: 'syz.4.2355': attribute type 29 has an invalid length. [ 660.060745][T13129] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2355'. [ 660.630159][ T8] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 660.892183][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.006281][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.069816][ T8] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 661.125628][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.228944][ T8] usb 6-1: config 0 descriptor?? [ 661.896032][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 661.936770][ T8] usbhid: probe of 6-1:0.0 failed with error -71 [ 661.974896][ T8] usb 6-1: USB disconnect, device number 16 [ 662.367619][T13163] netlink: 'syz.4.2366': attribute type 12 has an invalid length. [ 662.450280][T13163] netlink: 'syz.4.2366': attribute type 29 has an invalid length. [ 662.515699][T13163] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2366'. [ 663.129788][ T5763] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 663.400808][ T5763] usb 1-1: Using ep0 maxpacket: 16 [ 663.454883][ T5763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 663.564043][ T5763] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 663.637674][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.722729][ T5763] usb 1-1: Product: syz [ 663.728807][ T5763] usb 1-1: Manufacturer: syz [ 663.795886][ T5763] usb 1-1: SerialNumber: syz [ 663.854275][ T5763] usb 1-1: config 0 descriptor?? [ 663.908012][ T5763] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 663.975541][ T5763] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 664.533466][ T5763] em28xx 1-1:0.0: chip ID is em28174 [ 664.875194][ T5763] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 664.942731][ T5763] em28xx 1-1:0.0: board has no eeprom [ 665.209786][ T5763] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 665.259770][ T5763] em28xx 1-1:0.0: dvb set to bulk mode. [ 665.300864][ T5819] em28xx 1-1:0.0: Binding DVB extension [ 665.348631][ T5763] usb 1-1: USB disconnect, device number 83 [ 665.421092][ T5763] em28xx 1-1:0.0: Disconnecting em28xx [ 665.640379][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 665.748680][ T5819] em28xx 1-1:0.0: Registering input extension [ 665.916548][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.009949][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.074575][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 666.127136][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.146265][ T5819] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 666.220321][ T5819] Registered IR keymap rc-empty [ 666.234122][ T9] usb 5-1: config 0 descriptor?? [ 666.338944][ T5819] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 666.460338][ T5819] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input36 [ 666.622891][ T5819] em28xx 1-1:0.0: Input extension successfully initialized [ 666.671163][T13207] syzkaller0: entered promiscuous mode [ 666.694263][ T5763] em28xx 1-1:0.0: Closing input extension [ 666.710047][T13207] syzkaller0: entered allmulticast mode [ 666.929993][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 666.959097][ T5763] em28xx 1-1:0.0: Freeing device [ 666.978532][ T9] usbhid: probe of 5-1:0.0 failed with error -71 [ 667.061798][ T9] usb 5-1: USB disconnect, device number 57 [ 669.310822][T13238] syzkaller0: entered promiscuous mode [ 669.362769][T13238] syzkaller0: entered allmulticast mode [ 670.541041][T13251] IPVS: Error connecting to the multicast addr [ 671.743992][T13263] syzkaller0: entered promiscuous mode [ 671.768241][T13263] syzkaller0: entered allmulticast mode [ 671.861349][T13268] syzkaller0: entered promiscuous mode [ 671.887333][T13268] syzkaller0: entered allmulticast mode [ 678.260864][T13302] IPVS: Error connecting to the multicast addr [ 680.371681][T13333] syzkaller0: entered promiscuous mode [ 680.398459][T13333] syzkaller0: entered allmulticast mode [ 685.531580][T13354] IPVS: Error connecting to the multicast addr [ 686.166671][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.173954][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.713625][T13382] syzkaller0: entered promiscuous mode [ 687.734245][T13382] syzkaller0: entered allmulticast mode [ 689.379535][T13377] tmpfs: Bad value for 'nr_inodes' [ 695.107817][T13415] IPVS: Error connecting to the multicast addr [ 696.939155][T13439] syzkaller0: entered promiscuous mode [ 696.979912][T13439] syzkaller0: entered allmulticast mode [ 697.880992][T13434] loop4: detected capacity change from 0 to 32768 [ 698.001617][T13432] tmpfs: Bad value for 'nr_inodes' [ 707.133909][T13486] syzkaller0: entered promiscuous mode [ 707.189324][T13486] syzkaller0: entered allmulticast mode [ 708.074865][T13482] loop5: detected capacity change from 0 to 32768 [ 708.151741][T13482] tmpfs: Bad value for 'nr_inodes' [ 715.717779][T13530] syzkaller0: entered promiscuous mode [ 715.764417][T13530] syzkaller0: entered allmulticast mode [ 716.714783][T13523] loop5: detected capacity change from 0 to 32768 [ 716.826679][T13541] fuse: Bad value for 'fd' [ 716.922856][T13523] tmpfs: Bad value for 'nr_inodes' [ 719.995416][T13580] fuse: Bad value for 'fd' [ 722.080147][T13608] syzkaller0: entered promiscuous mode [ 722.086365][T13608] syzkaller0: entered allmulticast mode [ 722.920733][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 724.439244][T13641] syzkaller0: entered promiscuous mode [ 724.485980][T13641] syzkaller0: entered allmulticast mode [ 725.202766][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2520'. [ 726.984025][T13679] syzkaller0: entered promiscuous mode [ 727.029037][T13679] syzkaller0: entered allmulticast mode [ 727.343895][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2530'. [ 731.954815][T13715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2540'. [ 732.250194][T13715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 732.335807][T13716] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 732.382052][T13716] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 732.477961][T13722] syzkaller0: entered promiscuous mode [ 732.519848][T13722] syzkaller0: entered allmulticast mode [ 733.316455][T13730] syzkaller0: entered promiscuous mode [ 733.350697][T13730] syzkaller0: entered allmulticast mode [ 734.735885][T13753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2551'. [ 734.932601][T13753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.103809][T13755] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 735.200340][T13755] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 735.586366][T13740] loop4: detected capacity change from 0 to 32768 [ 735.762144][T13738] tmpfs: Bad value for 'nr_inodes' [ 736.739272][T13768] syzkaller0: entered promiscuous mode [ 736.777485][T13768] syzkaller0: entered allmulticast mode [ 736.922715][T13770] binder: BINDER_SET_CONTEXT_MGR already set [ 736.972304][T13770] binder: 13769:13770 ioctl 4018620d 200000004a80 returned -16 [ 742.661332][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'. [ 744.741851][T12427] Bluetooth: hci2: command 0x0406 tx timeout [ 745.321881][T13798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.499080][T13812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 745.750659][T13823] fuse: Bad value for 'fd' [ 745.838736][T13806] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 746.079873][T13806] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 746.921132][ T5819] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 747.200945][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.263245][ T5819] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 747.321920][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.401231][ T5819] usb 6-1: config 0 descriptor?? [ 747.616386][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.631058][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.739375][ T5819] usbhid 6-1:0.0: can't add hid device: -71 [ 747.756347][ T5819] usbhid: probe of 6-1:0.0 failed with error -71 [ 747.836493][ T5819] usb 6-1: USB disconnect, device number 17 [ 747.916035][T13827] ALSA: mixer_oss: invalid OSS volume 'V' [ 748.024236][T13830] loop4: detected capacity change from 0 to 32768 [ 748.202925][T13829] tmpfs: Bad value for 'nr_inodes' [ 748.668693][ T5819] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 748.948779][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.031029][ T5819] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 749.130247][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.211585][ T5819] usb 6-1: config 0 descriptor?? [ 750.132852][T13836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.142507][ T5819] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 750.200288][T13836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.234373][ T5819] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input37 [ 755.369996][ T9] usb 6-1: USB disconnect, device number 18 [ 755.376684][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 756.039405][T13856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2578'. [ 758.071752][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2581'. [ 758.292302][T13882] 8021q: adding VLAN 0 to HW filter on device bond4 [ 758.471341][T13885] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 758.591021][T13885] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 759.240604][T13897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2588'. [ 761.098179][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 761.359930][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.421331][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.509745][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 761.599823][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.674155][ T9] usb 1-1: config 0 descriptor?? [ 761.726842][T13902] loop5: detected capacity change from 0 to 32768 [ 761.885734][T13902] tmpfs: Bad value for 'nr_inodes' [ 762.495805][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 763.048642][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 763.292098][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 763.369848][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 763.438762][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 763.591144][ T9] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 763.791725][ T9] playstation 0003:054C:0DF2.0006: Invalid byte count transferred, expected 20 got 0 [ 763.858792][T13930] loop5: detected capacity change from 0 to 2048 [ 763.923474][ T9] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 764.042894][ T9] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 764.184680][ T9] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 764.307326][ T9] playstation: probe of 0003:054C:0DF2.0006 failed with error -22 [ 764.484786][ T9] usb 1-1: USB disconnect, device number 84 [ 765.164413][T13943] syzkaller0: entered promiscuous mode [ 765.250328][T13943] syzkaller0: entered allmulticast mode [ 782.072776][T13986] syzkaller0: entered promiscuous mode [ 782.078880][T13986] syzkaller0: entered allmulticast mode [ 783.978001][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 783.992189][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 784.002016][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 784.012957][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 784.021881][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 784.030164][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 787.079777][ T52] Bluetooth: hci3: command tx timeout [ 787.152722][T14020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 787.716785][T14006] chnl_net:caif_netlink_parms(): no params data found [ 788.849182][T14006] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.490070][ T52] Bluetooth: hci3: command tx timeout [ 791.695135][T14006] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.802520][T14006] bridge_slave_0: entered allmulticast mode [ 791.881132][T14006] bridge_slave_0: entered promiscuous mode [ 791.992111][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2629'. [ 792.092579][T14037] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 792.432328][T14006] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.210208][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.218360][T14006] bridge_slave_1: entered allmulticast mode [ 793.339894][T14006] bridge_slave_1: entered promiscuous mode [ 793.519897][ T52] Bluetooth: hci3: command tx timeout [ 793.590877][T14006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.650397][T14056] pim6reg1: entered promiscuous mode [ 793.656363][T14056] pim6reg1: entered allmulticast mode [ 794.340443][T14006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.872088][T14006] team0: Port device team_slave_0 added [ 794.949258][T14006] team0: Port device team_slave_1 added [ 795.266650][T14006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.321345][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.689641][ T52] Bluetooth: hci3: command tx timeout [ 795.792961][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 795.914360][T14006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.006554][T14006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.035749][T14065] loop4: detected capacity change from 0 to 32768 [ 796.060774][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.123436][T14065] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 796.510864][T14006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.735457][T14072] IPVS: Error connecting to the multicast addr [ 796.826090][T14052] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 797.441687][T14006] hsr_slave_0: entered promiscuous mode [ 797.596067][T14006] hsr_slave_1: entered promiscuous mode [ 797.686669][T14006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 797.761234][T14006] Cannot create hsr debugfs directory [ 797.808127][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2640'. [ 798.064512][T14078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 799.705664][T14081] bond3 (unregistering): Released all slaves [ 801.138008][T14098] loop5: detected capacity change from 0 to 32768 [ 801.270388][T14097] tmpfs: Bad value for 'nr_inodes' [ 801.479990][ T5818] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 802.050062][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 802.161146][ T5818] usb 1-1: unable to get BOS descriptor or descriptor too short [ 802.240166][ T5818] usb 1-1: config 127 has an invalid interface number: 124 but max is 0 [ 802.249521][ T5818] usb 1-1: config 127 has no interface number 0 [ 802.333974][T14006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 802.349712][ T5818] usb 1-1: config 127 interface 124 has no altsetting 0 [ 802.431440][ T5818] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 802.499686][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.569388][ T5818] usb 1-1: Product: syz [ 802.594234][T14006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 802.625458][ T5818] usb 1-1: Manufacturer: syz [ 802.678239][ T5818] usb 1-1: SerialNumber: syz [ 802.732421][T14006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 803.085431][T14006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 803.580082][ T5818] usb 1-1: reset high-speed USB device number 85 using dummy_hcd [ 803.770428][T14006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.922069][ T5818] usb 1-1: unable to get BOS descriptor or descriptor too short [ 803.992517][T14006] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.328881][ T5818] usb 1-1: device firmware changed [ 804.864954][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.873047][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.900341][ T5818] usb 1-1: USB disconnect, device number 85 [ 805.077527][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.085591][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.515489][T14137] pim6reg1: entered promiscuous mode [ 806.600226][T14137] pim6reg1: entered allmulticast mode [ 807.264131][T14006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.391929][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 807.718018][T14145] 8021q: adding VLAN 0 to HW filter on device bond6 [ 808.749750][ T5763] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 808.898483][T14148] bond6 (unregistering): Released all slaves [ 808.993253][ T5763] usb 6-1: Using ep0 maxpacket: 16 [ 809.027081][ T5763] usb 6-1: unable to get BOS descriptor or descriptor too short [ 809.072526][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.079789][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.110898][ T5763] usb 6-1: config 127 has an invalid interface number: 124 but max is 0 [ 809.156973][ T5763] usb 6-1: config 127 has no interface number 0 [ 809.194824][ T5763] usb 6-1: config 127 interface 124 has no altsetting 0 [ 809.341321][ T5763] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 809.408596][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.471192][ T5763] usb 6-1: Product: syz [ 809.475884][ T5763] usb 6-1: Manufacturer: syz [ 809.546070][ T5763] usb 6-1: SerialNumber: syz [ 811.109965][ T5763] usb 6-1: USB disconnect, device number 19 [ 811.733748][T14006] veth0_vlan: entered promiscuous mode [ 811.801661][T14186] pim6reg1: entered promiscuous mode [ 811.867517][T14186] pim6reg1: entered allmulticast mode [ 812.463131][T14006] veth1_vlan: entered promiscuous mode [ 812.717253][T14006] veth0_macvtap: entered promiscuous mode [ 812.836724][T14006] veth1_macvtap: entered promiscuous mode [ 813.042546][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.085883][ T5818] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 813.105442][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.172545][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.218462][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.253223][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.291140][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.313263][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 813.328528][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.355132][T14006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.397794][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.453346][T14006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.489943][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 813.546929][T14006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.581594][ T5818] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 813.942622][T14006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.463290][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.486162][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2675'. [ 814.536912][T14196] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 814.541865][ T5818] usb 1-1: config 0 descriptor?? [ 814.798453][T14006] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.928729][T14006] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.037821][T14006] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.115577][T14006] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.491026][ T5818] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0007/input/input38 [ 815.823958][ T5818] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0007/input/input39 [ 815.860791][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 816.067386][ T8354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.161010][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 816.186669][ T8354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.216355][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 816.316072][ T9] usb 6-1: config 127 has an invalid interface number: 124 but max is 0 [ 816.346952][ T5818] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 816.410080][ T9] usb 6-1: config 127 has no interface number 0 [ 816.459742][ T9] usb 6-1: config 127 interface 124 has no altsetting 0 [ 816.527006][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 816.565089][ T5818] usb 1-1: USB disconnect, device number 86 [ 816.667689][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.743549][ T9] usb 6-1: Product: syz [ 816.825015][ T9] usb 6-1: Manufacturer: syz [ 816.873936][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.874006][ T9] usb 6-1: SerialNumber: syz [ 816.909426][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.961304][T14218] syzkaller0: entered promiscuous mode [ 817.007634][T14216] fido_id[14216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 817.071600][T14218] syzkaller0: entered allmulticast mode [ 818.199872][ T9] usb 6-1: USB disconnect, device number 20 [ 818.786033][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2685'. [ 824.319840][ T5818] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 825.099774][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 825.179850][ T5818] usb 6-1: unable to get BOS descriptor or descriptor too short [ 825.280063][ T5818] usb 6-1: config 127 has an invalid interface number: 124 but max is 0 [ 825.346976][ T5818] usb 6-1: config 127 has no interface number 0 [ 825.429231][ T5818] usb 6-1: config 127 interface 124 has no altsetting 0 [ 825.532032][ T5818] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 825.610873][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.699680][ T5818] usb 6-1: Product: syz [ 825.750824][ T5818] usb 6-1: Manufacturer: syz [ 825.817438][ T5818] usb 6-1: SerialNumber: syz [ 827.050512][ T5818] usb 6-1: USB disconnect, device number 21 [ 828.055461][ T8] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 828.319981][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 828.384326][ T8] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 829.732782][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.038471][ T8] usb 1-1: config 0 descriptor?? [ 832.289837][ T8] usb 1-1: can't set config #0, error -71 [ 832.390178][ T8] usb 1-1: USB disconnect, device number 87 [ 832.884898][T14286] IPVS: Error connecting to the multicast addr [ 833.682920][T14294] pim6reg1: entered promiscuous mode [ 833.688889][T14294] pim6reg1: entered allmulticast mode [ 833.880066][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 834.129662][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 834.158041][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 834.220882][ T9] usb 6-1: config 127 has an invalid interface number: 124 but max is 0 [ 834.273224][ T9] usb 6-1: config 127 has no interface number 0 [ 834.361209][ T9] usb 6-1: config 127 interface 124 has no altsetting 0 [ 834.420576][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 834.485229][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.546995][ T9] usb 6-1: Product: syz [ 834.585770][ T9] usb 6-1: Manufacturer: syz [ 834.652121][ T9] usb 6-1: SerialNumber: syz [ 835.789664][ T9] usb 6-1: USB disconnect, device number 22 [ 836.313519][T14302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2711'. [ 836.386227][T14302] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 836.410874][T14312] IPVS: Error connecting to the multicast addr [ 839.584524][T14340] Bluetooth: MGMT ver 1.22 [ 840.730079][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2726'. [ 841.456633][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 841.478326][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 841.488619][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 841.512246][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 841.521882][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 841.540159][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 841.879874][ T11] tipc: Left network mode [ 843.601097][ T52] Bluetooth: hci1: command tx timeout [ 845.695797][ T52] Bluetooth: hci1: command tx timeout [ 846.809394][T14365] tipc: Started in network mode [ 846.901475][T14365] tipc: Node identity 42892d97199e, cluster identity 4711 [ 846.909755][T14365] tipc: Enabled bearer , priority 0 [ 847.471058][T14364] tipc: Resetting bearer [ 847.531552][T14361] tipc: Disabling bearer [ 847.760142][ T52] Bluetooth: hci1: command tx timeout [ 849.350430][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2736'. [ 849.840725][ T52] Bluetooth: hci1: command tx timeout [ 850.343685][T14410] syzkaller0: entered promiscuous mode [ 850.423938][T14410] syzkaller0: entered allmulticast mode [ 850.855857][T14423] loop6: detected capacity change from 0 to 512 [ 850.931894][T14423] EXT4-fs: Ignoring removed oldalloc option [ 851.027403][T14423] EXT4-fs (loop6): Test dummy encryption mode enabled [ 851.107075][T14412] tipc: Started in network mode [ 851.128633][T14412] tipc: Node identity e20159d146df, cluster identity 4711 [ 851.210719][T14412] tipc: Enabled bearer , priority 0 [ 851.228416][T14423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.274003][T14424] tipc: Resetting bearer [ 851.354507][T14409] tipc: Resetting bearer [ 851.422829][T14423] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz.6.2740: Directory block failed checksum [ 851.544135][T14409] tipc: Disabling bearer [ 851.647308][T14006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.690162][T14351] chnl_net:caif_netlink_parms(): no params data found [ 852.425074][ T11] hsr_slave_0: left promiscuous mode [ 852.493881][ T5763] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 852.624870][ T11] hsr_slave_1: left promiscuous mode [ 852.740247][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.781959][ T5763] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 852.805389][ T11] bridge_slave_1: left allmulticast mode [ 852.842688][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.872396][ T11] bridge_slave_1: left promiscuous mode [ 852.931117][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.948848][ T5763] usb 6-1: config 0 descriptor?? [ 853.023823][ T5763] cp210x 6-1:0.0: cp210x converter detected [ 853.095731][ T11] bridge_slave_0: left allmulticast mode [ 853.146683][ T11] bridge_slave_0: left promiscuous mode [ 853.240131][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.484104][ T5763] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 853.653586][ T5763] usb 6-1: cp210x converter now attached to ttyUSB0 [ 853.799200][ T5763] usb 6-1: USB disconnect, device number 23 [ 853.925473][ T5763] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 854.078686][ T5763] cp210x 6-1:0.0: device disconnected [ 854.085863][ T11] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 854.962828][T14458] loop5: detected capacity change from 0 to 512 [ 855.077590][T14458] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2748: iget: bad i_size value: 38620345925642 [ 855.186019][T14458] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2748: couldn't read orphan inode 15 (err -117) [ 855.291576][T14458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.607209][T14467] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.2748: bg 0: block 5: invalid block bitmap [ 855.748474][ T11] bond2 (unregistering): Released all slaves [ 855.777233][T14467] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 855.877290][ T11] bond1 (unregistering): Released all slaves [ 855.950098][T14467] EXT4-fs (loop5): This should not happen!! Data will be lost [ 855.950098][T14467] [ 856.062268][T14467] EXT4-fs (loop5): Total free blocks count 0 [ 856.142158][T14467] EXT4-fs (loop5): Free/Dirty block details [ 856.148906][T14467] EXT4-fs (loop5): free_blocks=0 [ 856.217190][T14467] EXT4-fs (loop5): dirty_blocks=156 [ 856.257740][T14467] EXT4-fs (loop5): Block reservation details [ 856.308489][T14467] EXT4-fs (loop5): i_reserved_data_blocks=156 [ 856.539281][ T42] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 148 with error 28 [ 860.185657][T14493] loop5: detected capacity change from 0 to 4096 [ 860.290463][T14493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.466646][T10665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.253959][ T11] team0 (unregistering): Port device team_slave_1 removed [ 861.728382][ T11] team0 (unregistering): Port device team_slave_0 removed [ 861.990958][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.450907][ T52] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 862.486589][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.783279][ T11] bond0 (unregistering): Released all slaves [ 865.041017][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2746'. [ 865.551357][T14351] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.605415][T14351] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.668131][T14351] bridge_slave_0: entered allmulticast mode [ 865.728159][T14351] bridge_slave_0: entered promiscuous mode [ 865.792278][T14351] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.824760][T14351] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.882964][T14351] bridge_slave_1: entered allmulticast mode [ 865.938755][T14351] bridge_slave_1: entered promiscuous mode [ 866.140340][T14351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.272464][T14351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.996890][T14351] team0: Port device team_slave_0 added [ 867.051421][T14351] team0: Port device team_slave_1 added [ 867.406930][T14351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.488066][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.556467][T14587] loop6: detected capacity change from 0 to 512 [ 867.587241][T14587] EXT4-fs: Ignoring removed bh option [ 867.701427][T14351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.742976][T14587] EXT4-fs (loop6): 1 truncate cleaned up [ 867.805386][T14587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.830873][T14351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.838502][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.038386][T14351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.224252][T14006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.280773][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.838784][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.169363][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.247388][T14351] hsr_slave_0: entered promiscuous mode [ 869.274466][T14351] hsr_slave_1: entered promiscuous mode [ 869.298361][T14351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 869.324357][T14351] Cannot create hsr debugfs directory [ 869.344642][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2792'. [ 869.520138][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.687802][T14601] loop6: detected capacity change from 0 to 32768 [ 869.972908][T14601] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 870.422399][T14601] XFS (loop6): Ending clean mount [ 870.590764][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.597237][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.407208][T14006] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 871.511574][T14641] fuse: Bad value for 'fd' [ 871.627376][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2801'. [ 871.931324][ T11] tipc: Left network mode [ 873.043460][T14655] syz_tun: entered allmulticast mode [ 873.218717][T14657] pim6reg: entered allmulticast mode [ 873.277806][T14660] pim6reg: left allmulticast mode [ 873.331645][T14660] syz_tun: left allmulticast mode [ 874.734082][T14694] syzkaller0: entered promiscuous mode [ 874.804504][T14694] syzkaller0: entered allmulticast mode [ 875.534244][T14689] loop6: detected capacity change from 0 to 32768 [ 875.724725][T14689] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 875.749722][T14706] fuse: Bad value for 'fd' [ 876.105248][T14689] XFS (loop6): Ending clean mount [ 876.377825][T14714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'. [ 876.432690][T14006] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 877.373700][T14729] syz_tun: entered allmulticast mode [ 877.460265][T14730] syz_tun: left allmulticast mode [ 877.837415][T14351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 878.258810][T14351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 878.325934][T14745] syzkaller0: entered promiscuous mode [ 878.353398][T14745] syzkaller0: entered allmulticast mode [ 879.114161][T14351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 879.509853][T14351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 879.531507][T14744] loop6: detected capacity change from 0 to 32768 [ 880.092710][T14744] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 880.151248][ T11] hsr_slave_0: left promiscuous mode [ 880.188495][ T11] hsr_slave_1: left promiscuous mode [ 880.228840][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.277425][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.293120][T14744] XFS (loop6): Ending clean mount [ 880.323070][ T11] bridge_slave_1: left allmulticast mode [ 880.363068][ T11] bridge_slave_1: left promiscuous mode [ 880.368853][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.467818][ T11] bridge_slave_0: left allmulticast mode [ 880.474720][T14006] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 880.504510][ T11] bridge_slave_0: left promiscuous mode [ 880.545254][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.804503][T14776] fuse: Bad value for 'fd' [ 880.833015][ T11] veth1_macvtap: left promiscuous mode [ 880.838625][ T11] veth0_macvtap: left promiscuous mode [ 880.899728][ T11] veth1_vlan: left promiscuous mode [ 880.940349][ T11] veth0_vlan: left promiscuous mode [ 881.415844][ T11] bond6 (unregistering): Released all slaves [ 881.455318][ T11] bond5 (unregistering): Released all slaves [ 881.507735][ T11] bond4 (unregistering): (slave batadv2): Releasing backup interface [ 881.817678][ T11] bond4 (unregistering): Released all slaves [ 881.878795][ T11] bond3 (unregistering): Released all slaves [ 881.904568][ T11] bond2 (unregistering): Released all slaves [ 882.212780][ T11] bond1 (unregistering): Released all slaves [ 883.272337][ T11] team0 (unregistering): Port device team_slave_1 removed [ 883.383016][ T11] team0 (unregistering): Port device team_slave_0 removed [ 883.482350][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.592570][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.429150][ T11] bond0 (unregistering): Released all slaves [ 885.132136][T14788] syzkaller0: entered promiscuous mode [ 885.137767][T14788] syzkaller0: entered allmulticast mode [ 885.191363][T14792] loop6: detected capacity change from 0 to 2048 [ 885.391524][T14792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.462499][T14792] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 885.650406][T14792] overlayfs: missing 'lowerdir' [ 886.110345][T14805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.623791][T14351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.775318][T14351] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.827092][T14815] fuse: Bad value for 'fd' [ 886.887391][T12897] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.894912][T12897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.023961][T12897] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.031260][T12897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.427793][T14351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.144500][T14853] syzkaller0: entered promiscuous mode [ 889.172980][T14853] syzkaller0: entered allmulticast mode [ 889.975243][T14351] veth0_vlan: entered promiscuous mode [ 890.057039][T14351] veth1_vlan: entered promiscuous mode [ 890.084474][T14867] 9pnet_fd: Insufficient options for proto=fd [ 890.184011][T14351] veth0_macvtap: entered promiscuous mode [ 890.266256][T14351] veth1_macvtap: entered promiscuous mode [ 890.370570][T14351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.387800][T14870] fuse: Bad value for 'fd' [ 890.423759][T14351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.475040][T14351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.536332][T14351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.599834][T14351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.673190][T14351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.735538][T14351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.791120][T14351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.839902][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 890.856463][T14351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.896987][T14351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.942263][T14351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.027710][T14351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.092669][T14351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.149213][T14351] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.176575][T14351] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.204609][T14351] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.675917][ T8338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.740717][ T8338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.879936][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.887819][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.934512][T14886] syzkaller0: entered promiscuous mode [ 891.966908][T14886] syzkaller0: entered allmulticast mode [ 891.985261][T14888] 9pnet_fd: Insufficient options for proto=fd [ 893.400803][T14909] 9pnet_fd: Insufficient options for proto=fd [ 893.556605][T14911] syzkaller0: entered promiscuous mode [ 893.589956][T14911] syzkaller0: entered allmulticast mode [ 894.170363][T14925] syzkaller0: entered promiscuous mode [ 894.175998][T14925] syzkaller0: entered allmulticast mode [ 894.545736][T14938] 9pnet_fd: Insufficient options for proto=fd [ 899.586668][T14975] 9pnet_fd: Insufficient options for proto=fd [ 900.197139][T14997] pim6reg: entered allmulticast mode [ 900.234623][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 900.256609][T15002] pim6reg: left allmulticast mode [ 900.408010][T14996] syzkaller0: entered promiscuous mode [ 900.458366][T14996] syzkaller0: entered allmulticast mode [ 901.031362][T15018] 9pnet_fd: Insufficient options for proto=fd [ 902.382157][T15046] loop5: detected capacity change from 0 to 8192 [ 902.438097][T15054] 9pnet_fd: Insufficient options for proto=fd [ 903.630807][T15082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2916'. [ 903.763776][ T52] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 904.426857][T15097] 9pnet_fd: Insufficient options for proto=fd [ 904.707985][T15101] overlayfs: failed to clone upperpath [ 905.881133][T15131] 9pnet_fd: Insufficient options for proto=fd [ 905.986997][T15137] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2934'. [ 908.059487][T15155] pim6reg1: entered promiscuous mode [ 908.066019][T15155] pim6reg1: entered allmulticast mode [ 908.165944][T15161] fuse: Bad value for 'fd' [ 908.403150][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 908.553575][T15171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2945'. [ 908.589299][T15172] 9pnet_fd: Insufficient options for proto=fd [ 908.779675][ T5777] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 909.465949][T15191] pim6reg1: entered promiscuous mode [ 909.509691][T15191] pim6reg1: entered allmulticast mode [ 909.785124][T15204] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2955'. [ 914.419953][ T5819] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 914.642368][ T5819] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 914.688705][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.713101][T15243] syzkaller0: entered promiscuous mode [ 914.740177][T15243] syzkaller0: entered allmulticast mode [ 914.749139][ T5819] usb 5-1: config 0 descriptor?? [ 914.787470][ T5819] cp210x 5-1:0.0: cp210x converter detected [ 914.996450][ T5819] usb 5-1: cp210x converter now attached to ttyUSB0 [ 915.658780][T15270] pim6reg: entered allmulticast mode [ 915.708481][T15270] pim6reg: left allmulticast mode [ 916.506970][ T5777] Bluetooth: hci2: unknown advertising packet type: 0x61 [ 917.158107][ T5819] usb 5-1: USB disconnect, device number 58 [ 917.294941][ T5819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 917.400703][ T5819] cp210x 5-1:0.0: device disconnected [ 917.521131][T15305] syzkaller0: entered promiscuous mode [ 917.586087][T15305] syzkaller0: entered allmulticast mode [ 922.507661][ T8] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 923.517887][T15349] loop5: detected capacity change from 0 to 2048 [ 925.462472][T15349] loop5: p3 < > p4 < > [ 925.530005][T15349] loop5: partition table partially beyond EOD, truncated [ 925.537479][T15349] loop5: p3 start 4284289 is beyond EOD, truncated [ 926.061117][T15375] binder: 15373:15375 ioctl c0306201 200000000080 returned -14 [ 926.182418][T15375] binder: 15373:15375 ioctl c0306201 2000000003c0 returned -14 [ 926.791036][T15394] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 927.259681][ T5819] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 927.411130][T15409] loop5: detected capacity change from 0 to 2048 [ 927.496410][ T5819] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 927.542616][T15409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.556132][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.631366][ T5819] usb 5-1: config 0 descriptor?? [ 927.675243][ T5819] cp210x 5-1:0.0: cp210x converter detected [ 927.690748][T15409] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 927.858293][ T5819] usb 5-1: cp210x converter now attached to ttyUSB0 [ 928.026264][T10665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.086316][ T5819] usb 5-1: USB disconnect, device number 60 [ 930.196250][ T5819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 930.278387][ T5819] cp210x 5-1:0.0: device disconnected [ 931.925556][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.932909][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.432967][T15511] syzkaller0: entered promiscuous mode [ 932.468517][T15511] syzkaller0: entered allmulticast mode [ 935.936730][T15576] syzkaller0: entered promiscuous mode [ 936.059927][T15576] syzkaller0: entered allmulticast mode [ 936.407678][T15583] syzkaller0: entered promiscuous mode [ 936.458237][T15583] syzkaller0: entered allmulticast mode [ 938.834255][T15632] syzkaller0: entered promiscuous mode [ 938.880081][T15632] syzkaller0: entered allmulticast mode [ 939.170683][T15644] netlink: 'syz.6.3071': attribute type 10 has an invalid length. [ 939.235786][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.244032][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.346965][T15645] (null): rxe_set_mtu: Set mtu to 1024 [ 939.459230][T15644] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.466504][T15644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.474248][T15644] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.481480][T15644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.692038][T15644] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 939.794257][T15645] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:bc66:a0ff:fe1f:62d3 error=-28 [ 940.009650][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3074'. [ 940.491291][T15669] syzkaller0: entered promiscuous mode [ 940.514987][T15669] syzkaller0: entered allmulticast mode [ 940.706631][T15645] infiniband syz1: set active [ 940.752827][T15645] infiniband syz1: added bridge_slave_1 [ 940.801326][T15645] syz1: rxe_create_cq: returned err = -12 [ 940.825491][T15645] infiniband syz1: Couldn't create ib_mad CQ [ 940.857874][T15645] infiniband syz1: Couldn't open port 1 [ 941.003737][T15645] RDS/IB: syz1: added [ 941.023919][T15645] smc: adding ib device syz1 with port count 1 [ 941.053372][T15645] smc: ib device syz1 port 1 has pnetid [ 942.106781][T15689] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3085'. [ 942.129966][T15691] binder: BINDER_SET_CONTEXT_MGR already set [ 942.136006][T15691] binder: 15690:15691 ioctl 4018620d 200000004a80 returned -16 [ 942.634629][T15697] syzkaller0: entered promiscuous mode [ 942.664616][T15697] syzkaller0: entered allmulticast mode [ 944.194544][T15719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3096'. [ 944.381066][T15726] syzkaller0: entered promiscuous mode [ 944.399902][T15726] syzkaller0: entered allmulticast mode [ 944.509639][ T8] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 944.725797][ T8] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 944.760681][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.779775][T15734] fuse: Bad value for 'fd' [ 944.813277][ T8] usb 6-1: config 0 descriptor?? [ 944.842382][T15736] i2c i2c-0: delete_device: Extra parameters [ 944.860592][ T8] cp210x 6-1:0.0: cp210x converter detected [ 945.069288][ T8] usb 6-1: cp210x converter now attached to ttyUSB0 [ 945.701584][T15759] binder: BINDER_SET_CONTEXT_MGR already set [ 945.724366][T15759] binder: 15758:15759 ioctl 4018620d 200000004a80 returned -16 [ 946.635428][T15782] fuse: Bad value for 'fd' [ 946.736811][T15784] syzkaller0: entered promiscuous mode [ 946.758926][T15784] syzkaller0: entered allmulticast mode [ 947.737647][ T8] usb 6-1: USB disconnect, device number 24 [ 947.777954][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 947.839066][ T8] cp210x 6-1:0.0: device disconnected [ 949.851761][T15835] loop4: detected capacity change from 0 to 256 [ 950.390604][T15842] syzkaller0: entered promiscuous mode [ 950.418894][T15842] syzkaller0: entered allmulticast mode [ 950.912030][T15850] fuse: Bad value for 'fd' [ 951.125644][T15854] fuse: Bad value for 'fd' [ 951.452764][T15861] loop4: detected capacity change from 0 to 256 [ 954.683023][T15882] syzkaller0: entered promiscuous mode [ 954.701198][T15882] syzkaller0: entered allmulticast mode [ 955.064037][T15886] fuse: Bad value for 'fd' [ 958.017135][T15917] syzkaller0: entered promiscuous mode [ 958.215478][T15917] syzkaller0: entered allmulticast mode [ 959.071006][T15937] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 959.315757][T15944] loop5: detected capacity change from 0 to 256 [ 960.317537][T15953] syzkaller0: entered promiscuous mode [ 960.349924][T15953] syzkaller0: entered allmulticast mode [ 964.394744][T15983] syzkaller0: entered promiscuous mode [ 964.421524][T15983] syzkaller0: entered allmulticast mode [ 964.872609][T15996] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3191'. [ 965.019068][T16003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3191'. [ 965.492983][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 966.909926][T16025] syzkaller0: entered promiscuous mode [ 966.939398][T16025] syzkaller0: entered allmulticast mode [ 968.864930][T16070] syzkaller0: entered promiscuous mode [ 968.919165][T16070] syzkaller0: entered allmulticast mode [ 970.591125][T16105] syzkaller0: entered promiscuous mode [ 970.628871][T16105] syzkaller0: entered allmulticast mode [ 970.675654][T16106] syzkaller0: entered promiscuous mode [ 970.706729][T16106] syzkaller0: entered allmulticast mode [ 971.410080][T16126] binder: 16123:16126 ioctl 4018620d 0 returned -22 [ 972.111974][T16138] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12615] was attempted by " [ 972.801374][T16150] syzkaller0: entered promiscuous mode [ 973.421372][T16150] syzkaller0: entered allmulticast mode [ 973.795077][T16179] netlink: 'syz.6.3255': attribute type 2 has an invalid length. [ 974.315826][T16190] loop5: detected capacity change from 0 to 1024 [ 974.397936][T16190] EXT4-fs: Ignoring removed nomblk_io_submit option [ 974.925323][T16195] binder: 16193:16195 ioctl 4018620d 0 returned -22 [ 974.939266][T16190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.464549][T10665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.557227][T16206] syzkaller0: entered promiscuous mode [ 975.599401][T16206] syzkaller0: entered allmulticast mode [ 975.752966][T16214] loop5: detected capacity change from 0 to 256 [ 981.446025][T16246] syzkaller0: entered promiscuous mode [ 981.483706][T16246] syzkaller0: entered allmulticast mode [ 981.714136][T16253] loop5: detected capacity change from 0 to 256 [ 984.256211][T16270] binder: BINDER_SET_CONTEXT_MGR already set [ 984.291387][T16270] binder: 16269:16270 ioctl 4018620d 200000004a80 returned -16 [ 985.379667][T16291] loop4: detected capacity change from 0 to 256 [ 987.586302][T16317] binder: BINDER_SET_CONTEXT_MGR already set [ 987.641054][T16317] binder: 16316:16317 ioctl 4018620d 200000004a80 returned -16 [ 993.103088][T16353] binder: 16350:16353 ioctl c0306201 0 returned -14 [ 993.245907][T16360] netlink: 'syz.4.3313': attribute type 2 has an invalid length. [ 993.365007][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.371735][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.674915][T16367] loop4: detected capacity change from 0 to 256 [ 993.803681][T16367] FAT-fs (loop4): Directory bread(block 64) failed [ 993.857905][T16367] FAT-fs (loop4): Directory bread(block 65) failed [ 993.922358][T16367] FAT-fs (loop4): Directory bread(block 66) failed [ 993.928952][T16367] FAT-fs (loop4): Directory bread(block 67) failed [ 994.022073][T16367] FAT-fs (loop4): Directory bread(block 68) failed [ 994.086208][T16367] FAT-fs (loop4): Directory bread(block 69) failed [ 994.151919][T16367] FAT-fs (loop4): Directory bread(block 70) failed [ 994.214882][T16367] FAT-fs (loop4): Directory bread(block 71) failed [ 994.259087][T16367] FAT-fs (loop4): Directory bread(block 72) failed [ 994.314370][T16367] FAT-fs (loop4): Directory bread(block 73) failed [ 994.891877][T16367] syz.4.3315: attempt to access beyond end of device [ 994.891877][T16367] loop4: rw=2049, sector=1800, nr_sectors = 4 limit=256 [ 995.671720][T16407] binder: 16406:16407 ioctl c0306201 0 returned -14 [ 1000.730708][T16449] binder: 16446:16449 ioctl c0306201 0 returned -14 [ 1001.209812][T16458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3338'. [ 1001.297949][T16458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1003.274689][T16458] bond1 (unregistering): Released all slaves [ 1004.075509][T16510] mmap: syz.6.3353 (16510) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1004.597866][T16515] loop4: detected capacity change from 0 to 8192 [ 1004.610060][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3356'. [ 1004.811304][T16520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1005.736569][T16523] bond4 (unregistering): Released all slaves [ 1006.211257][T16551] netlink: 'syz.4.3365': attribute type 2 has an invalid length. [ 1006.368797][T16555] netlink: set zone limit has 8 unknown bytes [ 1007.120213][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3371'. [ 1007.266931][T16565] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1008.246090][T16572] bond4 (unregistering): Released all slaves [ 1008.333647][T16589] netlink: 'syz.4.3375': attribute type 2 has an invalid length. [ 1008.934740][T16601] binder: BINDER_SET_CONTEXT_MGR already set [ 1008.973249][T16601] binder: 16600:16601 ioctl 4018620d 200000004a80 returned -16 [ 1009.237658][T16609] loop4: detected capacity change from 0 to 512 [ 1009.251390][T16610] netlink: 'syz.6.3384': attribute type 2 has an invalid length. [ 1009.294050][T16609] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1009.343844][T16609] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 1009.408172][T16609] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 1009.472144][T16609] System zones: 0-2, 18-18, 34-34 [ 1009.512502][T16609] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.3383: bad orphan inode 15 [ 1009.584904][T16609] ext4_test_bit(bit=14, block=18) = 1 [ 1009.614376][T16609] is_bad_inode(inode)=0 [ 1009.641699][T16609] NEXT_ORPHAN(inode)=2264924160 [ 1009.675628][T16609] max_ino=32 [ 1009.694802][T16609] i_nlink=0 [ 1009.752688][T16609] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #15: comm syz.4.3383: corrupted xattr block 19: e_value out of bounds [ 1009.871622][T16609] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 1009.956214][T16609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.181696][T16609] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.3383: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=262156, rec_len=0, size=4096 fake=0 [ 1010.349689][T16625] netlink: 'syz.0.3387': attribute type 2 has an invalid length. [ 1011.077995][T16614] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 80: padding at end of block bitmap is not set [ 1012.973002][T16670] netlink: 'syz.6.3400': attribute type 2 has an invalid length. [ 1013.025071][T16674] syzkaller0: entered promiscuous mode [ 1013.062013][T16674] syzkaller0: entered allmulticast mode [ 1014.285600][T16693] fuse: Bad value for 'group_id' [ 1016.049327][T16712] syzkaller0: entered promiscuous mode [ 1016.097275][T16712] syzkaller0: entered allmulticast mode [ 1024.441912][T14351] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.600537][T16773] syzkaller0: entered promiscuous mode [ 1024.638634][T16773] syzkaller0: entered allmulticast mode [ 1024.985618][T16777] netlink: 'syz.6.3436': attribute type 2 has an invalid length. [ 1025.600632][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1025.612752][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1025.621420][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1025.629135][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1025.637147][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1025.645427][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1027.696966][T16793] chnl_net:caif_netlink_parms(): no params data found [ 1027.760014][ T5777] Bluetooth: hci4: command tx timeout [ 1028.300795][T16857] netlink: 'syz.6.3454': attribute type 2 has an invalid length. [ 1028.346923][T16793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.376999][T16793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.414444][T16793] bridge_slave_0: entered allmulticast mode [ 1028.452993][T16793] bridge_slave_0: entered promiscuous mode [ 1028.492019][T16793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.548463][T16793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.583735][T16793] bridge_slave_1: entered allmulticast mode [ 1028.634952][T16793] bridge_slave_1: entered promiscuous mode [ 1028.806155][T16793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.881404][T16793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.072985][T16793] team0: Port device team_slave_0 added [ 1029.133676][T16793] team0: Port device team_slave_1 added [ 1029.351759][T16793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.409664][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.435671][ C0] vkms_vblank_simulate: vblank timer overrun [ 1029.624634][T16793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.673264][T16793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.731916][T16793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.843645][ T5777] Bluetooth: hci4: command tx timeout [ 1029.849912][ T5763] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1029.888047][T16793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.052796][ T5763] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1030.105231][ T5763] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1030.186877][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.256825][T16793] hsr_slave_0: entered promiscuous mode [ 1030.300387][ T5763] usb 1-1: config 0 descriptor?? [ 1030.309962][T16793] hsr_slave_1: entered promiscuous mode [ 1030.346717][T16793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1030.378668][T16793] Cannot create hsr debugfs directory [ 1030.734458][T16904] netlink: 'syz.5.3467': attribute type 2 has an invalid length. [ 1032.949898][ T5777] Bluetooth: hci4: command tx timeout [ 1033.590690][ T9] usb 1-1: USB disconnect, device number 88 [ 1033.728309][T16793] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1033.846628][T16793] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1033.938247][T16793] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1033.980963][T16793] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1034.396808][T16793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.657441][T16793] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.744625][ T8352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.751865][ T8352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.852293][ T8352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.859566][ T8352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.885104][T16935] fuse: Bad value for 'fd' [ 1034.962617][ T5777] Bluetooth: hci4: command tx timeout [ 1038.978701][T16793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.515583][T16974] fuse: Unknown parameter 'group_id00000000000000000000' [ 1040.784855][T16793] veth0_vlan: entered promiscuous mode [ 1040.874460][T16793] veth1_vlan: entered promiscuous mode [ 1041.072655][T16793] veth0_macvtap: entered promiscuous mode [ 1041.165660][T16793] veth1_macvtap: entered promiscuous mode [ 1041.327924][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.396332][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.438478][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.464486][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.476934][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.501061][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.521831][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.539932][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.588567][T16793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.662502][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.729637][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.797486][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.859573][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.912850][T16793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.962945][T16793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.014893][T16793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.025925][T17020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3500'. [ 1042.175695][T16793] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.238079][T16793] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.289706][T16793] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.349612][T16793] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.781163][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.789237][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.041574][ T8340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.094983][ T8340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.132735][T17070] bond0: (slave bridge0): Releasing backup interface [ 1046.168291][T17070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.176677][T17070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.336668][T17070] bridge_slave_0: left allmulticast mode [ 1046.371427][T17070] bridge_slave_0: left promiscuous mode [ 1046.398323][T17070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.524466][T17070] bridge_slave_1: left allmulticast mode [ 1046.583566][T17070] bridge_slave_1: left promiscuous mode [ 1046.612762][T17070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.662384][T17070] infiniband syz1: set active [ 1046.698424][T17070] bond0: (slave bond_slave_0): Releasing backup interface [ 1046.753061][T17070] bond0: (slave bond_slave_1): Releasing backup interface [ 1046.923491][T17070] team0: Port device team_slave_0 removed [ 1046.976957][T17070] team0: Port device team_slave_1 removed [ 1047.011340][T17070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.061849][T17070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.098019][T17070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.141946][T17070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.415195][T17072] team0: Port device xfrm0 added [ 1048.007339][T17098] binder: 17096:17098 ioctl 4018620d 0 returned -22 [ 1048.420418][T17108] netlink: 'syz.6.3527': attribute type 1 has an invalid length. [ 1048.536865][T17108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1048.637554][T17111] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1048.721738][T17112] bond1: (slave dummy0): making interface the new active one [ 1048.750992][T17112] dummy0: entered promiscuous mode [ 1048.775206][T17112] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1048.807750][T17108] netlink: 'syz.6.3527': attribute type 10 has an invalid length. [ 1048.883596][T17108] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3527'. [ 1048.946176][T17108] bond1: (slave dummy0): Releasing active interface [ 1049.179836][T17117] loop7: detected capacity change from 0 to 1024 [ 1049.288387][T17117] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1049.434961][T17117] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.215593][T16793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.557935][T17175] i2c i2c-0: new_device: Missing parameters [ 1053.901142][T17212] loop5: detected capacity change from 0 to 1024 [ 1053.944157][T17212] EXT4-fs: Ignoring removed bh option [ 1053.949656][T17212] EXT4-fs: Ignoring removed bh option [ 1054.047567][T17212] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1054.537888][T17212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.214577][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.268806][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.548685][T10665] EXT4-fs error (device loop5): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /493/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1055.716676][T10665] EXT4-fs (loop5): Remounting filesystem read-only [ 1056.124175][T10665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.343758][T17244] syzkaller0: entered promiscuous mode [ 1056.380595][T17244] syzkaller0: entered allmulticast mode [ 1056.562260][ T8350] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.220809][T17254] loop7: detected capacity change from 0 to 1024 [ 1057.373745][T17254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1057.440795][ T5777] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1057.450881][ T5777] Bluetooth: hci4: Injecting HCI hardware error event [ 1057.465777][ T5777] Bluetooth: hci4: hardware error 0x00 [ 1057.865003][T16793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.423965][T17272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1058.434693][T17272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1058.444106][T17272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1058.453289][T17272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1058.460891][T17272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1058.474880][T17272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1059.771310][ T5777] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1060.732539][ T5777] Bluetooth: hci1: command tx timeout [ 1062.973372][T17272] Bluetooth: hci1: command tx timeout [ 1063.387585][T17300] loop7: detected capacity change from 0 to 512 [ 1063.407900][T17300] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1063.461818][T17300] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1063.527933][T17300] EXT4-fs (loop7): 1 truncate cleaned up [ 1063.570268][T17300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.920523][T16793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.585934][ T8350] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.760971][ T8350] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.856347][T17272] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 1064.934286][ T8350] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.225702][T17272] Bluetooth: hci1: command tx timeout [ 1065.586029][ T8350] tipc: Left network mode [ 1066.152625][T17333] 9pnet_fd: Insufficient options for proto=fd [ 1066.485017][T17338] loop7: detected capacity change from 0 to 256 [ 1066.707255][T17344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.542916][T17272] Bluetooth: hci1: command tx timeout [ 1067.596144][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3608'. [ 1067.606982][T17354] netlink: 'syz.0.3608': attribute type 1 has an invalid length. [ 1068.247066][T17366] netlink: 'syz.0.3611': attribute type 11 has an invalid length. [ 1068.269085][T17367] 9pnet_fd: Insufficient options for proto=fd [ 1068.817578][T17382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3614'. [ 1069.074666][T17270] chnl_net:caif_netlink_parms(): no params data found [ 1069.212943][T17272] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1069.222938][T17272] Bluetooth: hci3: Injecting HCI hardware error event [ 1069.232819][ T5777] Bluetooth: hci3: hardware error 0x00 [ 1069.752009][ T42] rpcbind: server 127.0.0.1 not responding, timed out [ 1070.568392][T17270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.588656][T17270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.596134][T17270] bridge_slave_0: entered allmulticast mode [ 1070.718900][T17270] bridge_slave_0: entered promiscuous mode [ 1070.760845][T17270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.823586][T17270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.888819][T17270] bridge_slave_1: entered allmulticast mode [ 1070.905868][T17408] loop7: detected capacity change from 0 to 1024 [ 1070.944503][T17270] bridge_slave_1: entered promiscuous mode [ 1070.974575][T17408] EXT4-fs: Ignoring removed bh option [ 1071.022927][T17408] EXT4-fs: Ignoring removed bh option [ 1071.073001][T17408] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1071.141794][ T8350] hsr_slave_0: left promiscuous mode [ 1071.173261][ T8350] hsr_slave_1: left promiscuous mode [ 1071.204555][T17408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.334967][ T8350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.359550][T17408] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1071.372301][ T8350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.440395][ T8350] bridge_slave_1: left allmulticast mode [ 1071.467787][ T5777] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1071.513724][ T8350] bridge_slave_1: left promiscuous mode [ 1071.541478][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.620886][ T8350] bridge_slave_0: left allmulticast mode [ 1071.639092][T16793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.671660][ T8350] bridge_slave_0: left promiscuous mode [ 1071.710432][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.572902][ T8350] veth1_macvtap: left promiscuous mode [ 1072.599762][ T8350] veth0_macvtap: left promiscuous mode [ 1072.622957][ T8350] veth1_vlan: left promiscuous mode [ 1072.647725][ T8350] veth0_vlan: left promiscuous mode [ 1073.314299][ T8350] bond3 (unregistering): Released all slaves [ 1073.397970][ T8350] bond2 (unregistering): Released all slaves [ 1073.654047][T17446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3629'. [ 1073.674418][ T8350] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 1074.730076][ T8350] bond1 (unregistering): Released all slaves [ 1076.047911][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880245bc800: rx timeout, send abort [ 1076.582717][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d72d000: rx timeout, send abort [ 1076.599753][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880245bc800: abort rx timeout. Force session deactivation [ 1076.990524][ T8350] team0 (unregistering): Port device team_slave_1 removed [ 1077.097395][ T8350] team0 (unregistering): Port device team_slave_0 removed [ 1077.141684][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d72d000: abort rx timeout. Force session deactivation [ 1077.198070][ T8350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.308772][ T8350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.126389][ T8350] bond0 (unregistering): Released all slaves [ 1078.366684][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3637'. [ 1078.609711][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3640'. [ 1078.710315][T17270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.762953][T17270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.950785][T17270] team0: Port device team_slave_0 added [ 1079.008301][T17478] syz_tun: entered allmulticast mode [ 1079.042810][T17270] team0: Port device team_slave_1 added [ 1079.049190][T17477] syz_tun: left allmulticast mode [ 1079.233036][T17270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.343222][T17270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.520004][T17270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.611042][T17270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.674997][T17270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.827313][T17270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.090183][T17270] hsr_slave_0: entered promiscuous mode [ 1080.134494][T17270] hsr_slave_1: entered promiscuous mode [ 1080.173393][T17499] syzkaller0: entered promiscuous mode [ 1080.195326][T17499] syzkaller0: entered allmulticast mode [ 1080.602593][T17507] netlink: 'syz.7.3649': attribute type 4 has an invalid length. [ 1080.861183][ T8352] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1083.904037][T17525] loop7: detected capacity change from 0 to 128 [ 1084.058503][T17525] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1084.142293][T17525] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.213774][T17270] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1084.291139][T17270] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1084.803566][T17533] syz.7.3655 (pid 17533) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1084.833165][T17270] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1084.896462][T17270] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1085.399648][T17270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.547946][T17270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.629617][T13966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.636903][T13966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.757978][T14359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.765264][T14359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.849046][ T5818] IPVS: starting estimator thread 0... [ 1085.967269][T17557] IPVS: using max 28 ests per chain, 67200 per kthread [ 1086.321038][T17567] fuse: Unknown parameter 'user_i00000000000000000000' [ 1086.883340][T17270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.243769][T16793] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1088.408577][T17270] veth0_vlan: entered promiscuous mode [ 1088.484825][T17270] veth1_vlan: entered promiscuous mode [ 1088.688741][T17270] veth0_macvtap: entered promiscuous mode [ 1088.750220][T17270] veth1_macvtap: entered promiscuous mode [ 1088.856780][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1088.936427][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.020845][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.068747][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.118987][T17616] fuse: Unknown parameter 'user_i00000000000000000000' [ 1089.130405][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.162073][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.208437][T17270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.298528][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.350995][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.422958][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.500140][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.588154][T17270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.670937][T17270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.732256][T17270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.006343][T17270] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.073632][T17270] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.138975][T17270] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.215615][T17270] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.405887][T17629] syzkaller0: entered promiscuous mode [ 1090.464744][T17629] syzkaller0: entered allmulticast mode [ 1091.149340][ T8352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.157249][ T8352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.602758][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.658824][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.914218][T17653] netlink: 'syz.7.3684': attribute type 1 has an invalid length. [ 1093.742147][T17663] fuse: Unknown parameter 'user_i00000000000000000000' [ 1094.011849][T17669] syzkaller0: entered promiscuous mode [ 1094.017510][T17669] syzkaller0: entered allmulticast mode [ 1094.104132][ T5777] Bluetooth: hci0: unexpected cc 0x1407 length: 11 > 9 [ 1094.112762][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 1095.409019][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3696'. [ 1095.449457][T17693] nfs4: Unknown parameter 'pr' [ 1097.971651][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3700'. [ 1098.078083][T17706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.079605][T17728] nfs4: Unknown parameter 'pr' [ 1100.136864][T17730] loop7: detected capacity change from 0 to 8192 [ 1101.822729][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3706'. [ 1104.032200][T17742] fuse: Unknown parameter 'user_id00000000000000000000' [ 1104.875022][T17761] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3718'. [ 1107.101899][T17799] bridge0: port 1(veth0) entered blocking state [ 1107.145033][T17799] bridge0: port 1(veth0) entered disabled state [ 1107.328612][T17799] veth0: entered allmulticast mode [ 1107.382612][T17799] veth0: entered promiscuous mode [ 1107.784631][T17809] fuse: Unknown parameter 'user_id00000000000000000000' [ 1108.740551][T17834] fuse: Bad value for 'fd' [ 1108.772951][T17831] syzkaller0: entered promiscuous mode [ 1108.778556][T17831] syzkaller0: entered allmulticast mode [ 1110.436741][T17871] fuse: Unknown parameter 'group_id00000000000000000000' [ 1110.614564][T17873] fuse: Bad value for 'fd' [ 1110.734627][T17876] fuse: Bad value for 'fd' [ 1111.391717][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3753'. [ 1111.460030][ T5819] kernel read not supported for file /kmsg (pid: 5819 comm: kworker/0:6) [ 1112.383601][T17907] fuse: Bad value for 'user_id' [ 1112.926470][T17918] loop8: detected capacity change from 0 to 128 [ 1112.934288][T17917] fuse: Bad value for 'fd' [ 1113.069547][T17918] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1113.191721][T17918] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.765854][T17270] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1114.199199][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1114.933153][T17937] fuse: Bad value for 'fd' [ 1115.125668][T17943] fuse: Bad value for 'user_id' [ 1117.303571][T17981] 9pnet_fd: Insufficient options for proto=fd [ 1117.448595][T17983] fuse: Bad value for 'user_id' [ 1117.739563][T17990] fuse: Bad value for 'fd' [ 1119.724046][T18014] 9pnet_fd: Insufficient options for proto=fd [ 1120.519161][T18027] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3789'. [ 1120.741332][T18029] binder: 18028:18029 ioctl c0306201 0 returned -14 [ 1121.762525][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.770221][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.291070][T18057] syzkaller0: entered promiscuous mode [ 1122.310644][T18057] syzkaller0: entered allmulticast mode [ 1124.196677][ T5777] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1124.206678][ T5777] Bluetooth: hci1: Injecting HCI hardware error event [ 1124.216414][T17272] Bluetooth: hci1: hardware error 0x00 [ 1124.305400][T18096] 9pnet_fd: Insufficient options for proto=fd [ 1124.630815][T18101] syzkaller0: entered promiscuous mode [ 1124.668530][T18101] syzkaller0: entered allmulticast mode [ 1124.976653][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3813'. [ 1125.536117][T18123] nfs4: Unknown parameter 'noresvp' [ 1125.658638][T18128] 9pnet_fd: Insufficient options for proto=fd [ 1126.522643][T17272] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1126.962632][T18147] syzkaller0: entered promiscuous mode [ 1126.998652][T18147] syzkaller0: entered allmulticast mode [ 1127.658535][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3825'. [ 1128.041698][T18164] nfs4: Unknown parameter 'noresvpor' [ 1128.166945][T18167] 9pnet_fd: Insufficient options for proto=fd [ 1129.135694][T18190] syzkaller0: entered promiscuous mode [ 1129.181814][T18190] syzkaller0: entered allmulticast mode [ 1130.505243][T17272] Bluetooth: hci0: unexpected event for opcode 0x0004 [ 1130.784943][T18209] loop8: detected capacity change from 0 to 8192 [ 1132.439188][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3835'. [ 1134.488025][T18219] nfs4: Unknown parameter 'noresvpor' [ 1134.531346][T18222] 9pnet_fd: Insufficient options for proto=fd [ 1134.851893][T17272] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1134.861972][T17272] Bluetooth: hci0: Injecting HCI hardware error event [ 1134.871198][ T5777] Bluetooth: hci0: hardware error 0x00 [ 1134.927617][ T5763] IPVS: starting estimator thread 0... [ 1135.088147][T18235] IPVS: using max 28 ests per chain, 67200 per kthread [ 1135.549329][T18241] syzkaller0: entered promiscuous mode [ 1135.591834][T18241] syzkaller0: entered allmulticast mode [ 1135.850580][T18255] nfs4: Unknown parameter 'noresvpor' [ 1136.067056][T18257] 9pnet_fd: Insufficient options for proto=fd [ 1136.977115][T18284] syzkaller0: entered promiscuous mode [ 1137.019436][T18284] syzkaller0: entered allmulticast mode [ 1137.286256][ T5777] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1137.487250][T18293] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3864'. [ 1137.747508][T18299] 9pnet_fd: Insufficient options for proto=fd [ 1138.380142][T18318] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3875'. [ 1138.438128][T18316] syzkaller0: entered promiscuous mode [ 1138.475232][T18316] syzkaller0: entered allmulticast mode [ 1139.213987][T18330] 9pnet_fd: Insufficient options for proto=fd [ 1139.243692][T18328] loop7: detected capacity change from 0 to 512 [ 1139.341490][T18328] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1139.466090][T18328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 1139.539784][T18328] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1139.547620][T18328] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.3878: bg 0: block 361: padding at end of block bitmap is not set [ 1139.896996][T18328] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1139.966965][T18328] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.3878: attempt to clear invalid blocks 33619980 len 1 [ 1140.077151][T18328] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3878: invalid indirect mapped block 1811939328 (level 0) [ 1140.174097][T18328] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3878: invalid indirect mapped block 2185560079 (level 1) [ 1140.283678][T18328] EXT4-fs (loop7): 1 truncate cleaned up [ 1140.322167][T18328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1140.392415][T18347] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3884'. [ 1140.682852][T18328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1140.797611][T18353] 9pnet_fd: Insufficient options for proto=fd [ 1141.107108][T18361] 9pnet_fd: Insufficient options for proto=fd [ 1141.998780][T18380] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3896'. [ 1142.395094][T18386] 9pnet_fd: Insufficient options for proto=fd [ 1142.448279][T18388] 9pnet_fd: Insufficient options for proto=fd [ 1144.309678][ T8340] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.065961][T18423] 9pnet_fd: Insufficient options for proto=fd [ 1147.147849][ T8340] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.014351][ T8340] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.355706][T18442] [ 1150.358105][T18442] ====================================================== [ 1150.365145][T18442] WARNING: possible circular locking dependency detected [ 1150.372187][T18442] syzkaller #0 Not tainted [ 1150.376612][T18442] ------------------------------------------------------ [ 1150.383665][T18442] syz.0.3917/18442 is trying to acquire lock: [ 1150.389738][T18442] ffffffff8ddf6d10 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 1150.399561][T18442] [ 1150.399561][T18442] but task is already holding lock: [ 1150.406936][T18442] ffff8880747cdab0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 1150.416647][T18442] [ 1150.416647][T18442] which lock already depends on the new lock. [ 1150.416647][T18442] [ 1150.427224][T18442] [ 1150.427224][T18442] the existing dependency chain (in reverse order) is: [ 1150.436416][T18442] [ 1150.436416][T18442] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 1150.445135][T18442] down_write+0x97/0x200 [ 1150.450030][T18442] configfs_depend_item_unlocked+0x157/0x430 [ 1150.456631][T18442] usbg_make_tpg+0x1f7/0x580 [ 1150.461854][T18442] target_fabric_make_tpg+0xa4/0x6d0 [ 1150.467733][T18442] configfs_mkdir+0x515/0x9e0 [ 1150.473056][T18442] vfs_mkdir+0x2a5/0x470 [ 1150.477926][T18442] do_mkdirat+0x1dc/0x450 [ 1150.482789][T18442] __x64_sys_mkdir+0x6e/0x80 [ 1150.487903][T18442] do_syscall_64+0x55/0xb0 [ 1150.492889][T18442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1150.499384][T18442] [ 1150.499384][T18442] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 1150.507056][T18442] __mutex_lock+0x135/0xc80 [ 1150.512092][T18442] tcm_set_name+0x2a/0x90 [ 1150.516997][T18442] function_make+0x199/0x350 [ 1150.522152][T18442] configfs_mkdir+0x515/0x9e0 [ 1150.527370][T18442] vfs_mkdir+0x2a5/0x470 [ 1150.532165][T18442] do_mkdirat+0x1dc/0x450 [ 1150.537040][T18442] __x64_sys_mkdir+0x6e/0x80 [ 1150.542180][T18442] do_syscall_64+0x55/0xb0 [ 1150.547131][T18442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1150.553643][T18442] [ 1150.553643][T18442] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1150.561925][T18442] __lock_acquire+0x37ef/0x7d80 [ 1150.567361][T18442] lock_acquire+0x19e/0x420 [ 1150.572421][T18442] __mutex_lock+0x135/0xc80 [ 1150.577474][T18442] configfs_rmdir+0x63c/0x980 [ 1150.582691][T18442] vfs_rmdir+0x352/0x4b0 [ 1150.587495][T18442] do_rmdir+0x29f/0x590 [ 1150.592188][T18442] __x64_sys_unlinkat+0xc4/0xe0 [ 1150.597587][T18442] do_syscall_64+0x55/0xb0 [ 1150.602530][T18442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1150.608950][T18442] [ 1150.608950][T18442] other info that might help us debug this: [ 1150.608950][T18442] [ 1150.619178][T18442] Chain exists of: [ 1150.619178][T18442] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#26 [ 1150.619178][T18442] [ 1150.633874][T18442] Possible unsafe locking scenario: [ 1150.633874][T18442] [ 1150.641324][T18442] CPU0 CPU1 [ 1150.646687][T18442] ---- ---- [ 1150.652067][T18442] lock(&sb->s_type->i_mutex_key#26); [ 1150.657555][T18442] lock(&opts->dep_lock); [ 1150.664511][T18442] lock(&sb->s_type->i_mutex_key#26); [ 1150.672495][T18442] lock(gadget_subsys.su_mutex); [ 1150.677524][T18442] [ 1150.677524][T18442] *** DEADLOCK *** [ 1150.677524][T18442] [ 1150.685669][T18442] 3 locks held by syz.0.3917/18442: [ 1150.690864][T18442] #0: ffff888018f18418 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1150.700140][T18442] #1: ffff8880799e0670 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 1150.710947][T18442] #2: ffff8880747cdab0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 1150.721055][T18442] [ 1150.721055][T18442] stack backtrace: [ 1150.726955][T18442] CPU: 0 PID: 18442 Comm: syz.0.3917 Not tainted syzkaller #0 [ 1150.734417][T18442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1150.744488][T18442] Call Trace: [ 1150.747831][T18442] [ 1150.750823][T18442] dump_stack_lvl+0x18c/0x250 [ 1150.755567][T18442] ? load_image+0x420/0x420 [ 1150.760126][T18442] ? show_regs_print_info+0x20/0x20 [ 1150.765331][T18442] ? print_circular_bug+0x12b/0x1a0 [ 1150.770544][T18442] check_noncircular+0x2fc/0x400 [ 1150.775515][T18442] ? print_deadlock_bug+0x5d0/0x5d0 [ 1150.780758][T18442] ? lockdep_lock+0xf5/0x230 [ 1150.785361][T18442] ? _find_first_zero_bit+0xd6/0x100 [ 1150.790711][T18442] __lock_acquire+0x37ef/0x7d80 [ 1150.795578][T18442] ? verify_lock_unused+0x140/0x140 [ 1150.800788][T18442] ? verify_lock_unused+0x140/0x140 [ 1150.806005][T18442] lock_acquire+0x19e/0x420 [ 1150.810527][T18442] ? configfs_rmdir+0x63c/0x980 [ 1150.815395][T18442] ? __might_sleep+0xe0/0xe0 [ 1150.820024][T18442] ? read_lock_is_recursive+0x20/0x20 [ 1150.825409][T18442] __mutex_lock+0x135/0xc80 [ 1150.829922][T18442] ? configfs_rmdir+0x63c/0x980 [ 1150.834786][T18442] ? configfs_rmdir+0x63c/0x980 [ 1150.839649][T18442] ? mutex_lock_nested+0x20/0x20 [ 1150.844769][T18442] ? __lock_acquire+0x7d80/0x7d80 [ 1150.849815][T18442] ? lockref_put_or_lock+0x72/0xb0 [ 1150.854957][T18442] ? dput+0x3b/0x1e0 [ 1150.858864][T18442] ? dput+0x3b/0x1e0 [ 1150.862777][T18442] configfs_rmdir+0x63c/0x980 [ 1150.867481][T18442] vfs_rmdir+0x352/0x4b0 [ 1150.871732][T18442] do_rmdir+0x29f/0x590 [ 1150.875893][T18442] ? __check_object_size+0x4fc/0xa40 [ 1150.881192][T18442] ? d_delete_notify+0x150/0x150 [ 1150.886153][T18442] ? getname_flags+0x20a/0x500 [ 1150.890936][T18442] __x64_sys_unlinkat+0xc4/0xe0 [ 1150.895813][T18442] do_syscall_64+0x55/0xb0 [ 1150.900247][T18442] ? clear_bhb_loop+0x40/0x90 [ 1150.904946][T18442] ? clear_bhb_loop+0x40/0x90 [ 1150.909635][T18442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1150.915546][T18442] RIP: 0033:0x7f6dc4b9e019 [ 1150.920031][T18442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.939684][T18442] RSP: 002b:00007f6dc5acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1150.948147][T18442] RAX: ffffffffffffffda RBX: 00007f6dc4e25fa0 RCX: 00007f6dc4b9e019 [ 1150.956127][T18442] RDX: 0000000000000200 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1150.964109][T18442] RBP: 00007f6dc4c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1150.972094][T18442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.980087][T18442] R13: 00007f6dc4e26038 R14: 00007f6dc4e25fa0 R15: 00007ffce502adf8 [ 1150.988094][T18442] [ 1151.213052][ T8340] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.129361][ T8340] hsr_slave_0: left promiscuous mode [ 1152.169855][ T8340] hsr_slave_1: left promiscuous mode [ 1152.187949][ T8340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.201865][ T8340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1152.219706][ T8340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1152.235799][ T8340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1152.292939][ T8340] bridge_slave_1: left allmulticast mode [ 1152.328899][ T8340] bridge_slave_1: left promiscuous mode [ 1152.351088][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.385203][ T8340] bridge_slave_0: left allmulticast mode [ 1152.399593][ T8340] bridge_slave_0: left promiscuous mode [ 1152.409690][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.424958][ T8340] veth1_macvtap: left promiscuous mode [ 1152.430569][ T8340] veth0_macvtap: left promiscuous mode [ 1152.439041][ T8340] veth1_vlan: left promiscuous mode [ 1152.444499][ T8340] veth0_vlan: left promiscuous mode [ 1152.723578][ T8340] team0 (unregistering): Port device team_slave_1 removed [ 1152.767676][ T8340] team0 (unregistering): Port device team_slave_0 removed [ 1152.786730][ T8340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.807879][ T8340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.993164][ T8340] bond0 (unregistering): Released all slaves