last executing test programs: 13m40.241583827s ago: executing program 32 (id=24): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x80002) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_xfrm(0x10, 0x3, 0x6) stat(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0xc6201) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x8, 0x8}) 13m33.105536254s ago: executing program 33 (id=40): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nobarrier}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@usrquota}]}, 0x1, 0x558, &(0x7f0000000780)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) inotify_init1(0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 12m38.075078587s ago: executing program 34 (id=163): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x37, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x12, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 12m16.435171985s ago: executing program 35 (id=212): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x37, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x12, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r5, 0x0, 0x40000) 10m32.811898089s ago: executing program 6 (id=458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9o02kYB/AnahAUzsXJ4bAOTi6KoxmsJFFRCNEu4qCgiJgpghAhINihzdDSDKVjl1LI0j9T0wwdjpYWOpfSoUehQ6ejXQpdmuOu7+3t9Q8Inw/8ePK+7zd58gy/8Q1+aZfir263m4mI7tWTf7uvlS88u116XH4dkYm3EdHzx28z/5xkUuK/X72T1ptpPTF+rTO49zTb2ni1f/fdYuNSOv+RnuuT7b5TD8e5m8ot3fjZXy0O1XKf14v17YG11ZfTu/ly+0WjOfM8++RDyi2neiXVr1GL7/El3kclKvExqmfUf6y1df/wVrE19+nRQaEzvPAg5UqnnPO4/b/1jLxp1nvvzd4cfVibXynvXD7KVf7H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMWbyi3d+NlfLQ7Vcp/Xi/XtgbXVl9O7+XL7RaM58zz75EPKLad6JdWvUYvv8SXeRyUq8TGqZ9R/rLV1//BWsTX36dFBoTO88CDlSqec87j9v/WMvGnWe+/N3hx9WJtfKe9cPspVrp7THwAAAAAAAAAAAAAAAAAAAICIyBee3S49Lr+OyMTbiGj/3vvvVf9uuu+eSbk76cNm2p8Yv9YZ3HuabW282r/7brHxZ9r/kZ7rk+2+i5+Gk/o7AAD//5Yblcc=") 10m32.307217536s ago: executing program 36 (id=458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") 10m16.880604771s ago: executing program 7 (id=487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x14}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000640)='!'}) 10m16.542712026s ago: executing program 7 (id=489): r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000100), 0x40000000, 0x0) 10m15.334551864s ago: executing program 7 (id=492): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x37, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x12, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x33) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r5, 0x0, 0x40000) 10m12.576791206s ago: executing program 7 (id=494): syz_mount_image$hfsplus(&(0x7f0000000380), &(0x7f0000000640)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="000b9240c8aee6631ad071808fe5ec25c497c626f69d02a71d1d27602d048db08101209e5e4cce0e9628b0636f3baa"], 0x1, 0x639, &(0x7f0000000680)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r0, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 10m11.63944443s ago: executing program 7 (id=497): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000022000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x37, 0x0, &(0x7f00000004c0)="ce010a00009a697f65360c5e86ddd7b03cc3179d35ffb17ec215f25ae69d585bcc43ec9556ee446d2ec7c0663b4ea33b3c9c1edce3a42d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m10.456564358s ago: executing program 7 (id=501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10m9.65786601s ago: executing program 37 (id=501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9m49.812630012s ago: executing program 5 (id=565): r0 = syz_open_dev$loop(&(0x7f0000002140), 0x800, 0x1) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000002180)) 9m49.601418655s ago: executing program 5 (id=566): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000500)={0xa, 0xffff, 0x2, @mcast1, 0x9}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) sendfile(r0, r2, &(0x7f0000000080)=0xa46, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) syz_clone(0x1200700, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) recvmsg(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x2021) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 9m48.715248868s ago: executing program 5 (id=567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) close_range(r2, r3, 0x0) 9m47.495374077s ago: executing program 5 (id=575): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@nombcache}, {@oldalloc}, {@norecovery}, {@errors_remount}, {@noload}, {@inlinecrypt}]}, 0x1, 0x445, &(0x7f00000004c0)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x1c7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 9m45.139406963s ago: executing program 5 (id=579): r0 = getpid() setpgid(0xffffffffffffffff, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x4000000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f00000002c0)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r4, 0x0) madvise(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x15) 9m39.633271387s ago: executing program 5 (id=592): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x37, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x12, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x33) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r5, 0x0, 0x40000) 9m38.826451569s ago: executing program 38 (id=592): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x37, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x12, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x33) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r5, 0x0, 0x40000) 7m41.812761016s ago: executing program 3 (id=901): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7m39.197395256s ago: executing program 3 (id=908): execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r1}, 0x0) 7m38.529978016s ago: executing program 3 (id=913): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) r0 = io_uring_setup(0x2ad5, &(0x7f0000000100)={0x0, 0xfffffffe, 0x0, 0x80000, 0x180}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000240)=""/100) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x3, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x22) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000680)=ANY=[@ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) close(r0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000040)={[{@dax_always}, {@journal_async_commit}]}, 0xfe, 0x49d, &(0x7f0000000780)="$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") 7m34.590078136s ago: executing program 3 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) 7m33.261737916s ago: executing program 3 (id=923): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a80), 0x1, 0x1cf, &(0x7f00000002c0)="$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") 7m32.490755668s ago: executing program 3 (id=926): socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 7m17.387773717s ago: executing program 39 (id=926): socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 7m4.418985934s ago: executing program 1 (id=970): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x7, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) 7m4.00290185s ago: executing program 1 (id=971): ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a918d9678f0c14dceff81869199bbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d37b113e200bcd56a2f892326882a27f6ecf8a3ab9db8f1d61f4131cbb288ce3e8c8aaefd62", 0xcb}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 7m3.204670833s ago: executing program 1 (id=972): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@nobh}, {@debug}, {@nouid32}, {@usrquota}, {@user_xattr}], [{@dont_hash}]}, 0x3, 0x4e1, &(0x7f0000000500)="$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") ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000380)={{r0}, 0x3, &(0x7f0000000100)=[0x9, 0x7f, 0x406], 0x6, 0x1, 0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000a69000/0x1000)=nil, 0x1000, 0x4, 0x810, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) 7m2.06355464s ago: executing program 1 (id=973): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0xfe37, 0x0) 6m54.917278308s ago: executing program 1 (id=987): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x84000, 0x103) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000001240)=[{{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="380000000000000000000000070000009404000083"], 0x38}}], 0x1, 0x14) 6m52.636588953s ago: executing program 1 (id=993): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x7, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) 6m51.343287703s ago: executing program 40 (id=993): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x7, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001}) 3m24.308579527s ago: executing program 9 (id=1379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 3m20.19743576s ago: executing program 9 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0012060, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x22) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSRS485(r3, 0x542f, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x80001, &(0x7f00000004c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x5000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}], [{@fsmagic={'fsmagic', 0x3d, 0xf}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 3m19.682100727s ago: executing program 9 (id=1386): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000005c0), 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x262) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a80), 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4s5mdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//wHCY0w==") openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 3m17.912947034s ago: executing program 9 (id=1389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000009c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x20000000) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") 3m16.724409532s ago: executing program 9 (id=1392): io_setup(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) pipe(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpriority(0x2, r2) 3m14.414556847s ago: executing program 9 (id=1395): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003f80)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000004000)=@req={0x28, &(0x7f0000003fc0)={'\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) truncate(0x0, 0x400007fff) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0xfffffffc, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/4, 0x4}, 0x1}], 0x1, 0x10102, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) 2m54.905788834s ago: executing program 41 (id=1395): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003f80)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000004000)=@req={0x28, &(0x7f0000003fc0)={'\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) truncate(0x0, 0x400007fff) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r6, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0xfffffffc, @loopback}, 0x1c) recvmmsg(r6, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/4, 0x4}, 0x1}], 0x1, 0x10102, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) 2m54.052689337s ago: executing program 0 (id=1429): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$eJzslj2v0lAYx//nlBQwGhNHFwdJ1MHSFjUuJLI4OZj4QhxMJFIJUsRAByEx6Cdwd3Nw9wuY6OqHMOiiC04615yXliOhCNwL3OQ+v4Sn/1POy9PnNP9TEARxbPn+7c8k/l39UQBwEiXk9f2f1qwPN/p/Lfx6+fnWzfqbh++/5CdOcdGccbz6+jkAn2oWonTsv6NL+noXPNX3wHFJ6zoYHK0fgeO+1gEYHmj91NA90d9xnrTDwHncC5tCuCJ4IvgiVObzm75maBr5MeP/wXDUaYRh0N+i+F/9pjWOqpGfuV8OVLauUT8PHJ7WFTDc0fo68kltVEmM5z+bm81vLX1+G9uuiEhljVFnTmVulQ1gszQAdlh7j1f6ld3mO5QhLEiR7OiOV9+BQO5IpLGG2GQvPt5QY5I78Vi1ZZ/TGRPG4xWXsLFR5VN/it8xXDD8SVnJW3nUlKPu8/JgOLrc7jZaQSt45vuVa+4V173ql6URqbjE/4rSn07M5l94JglsZuNFI4r6nopp21dxkeNy6X8cF8+rtnBTe27egqGZ/nF5ld7b+ZCZPUEQxP44ByY9WfpyIvRpAuNb9/YecyQIgiAIgiAIgiAI4mD8DQAA//80kEvd") syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000", 0xc, 0xfffffffffffffffd) pread64(r0, &(0x7f0000000180), 0x0, 0x7fff) r4 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x81, 0x2, 0x6, 0x1}]}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x1}, {0x1}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0) 2m53.064622752s ago: executing program 0 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x14, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xe2, 0x44, &(0x7f00000000c0)=""/68, 0x41000, 0x31, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xf, 0xfae2, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0x1], &(0x7f0000000880), 0x10, 0xfffffffa}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m51.918645779s ago: executing program 0 (id=1431): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_create(0x8, 0x80000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 2m49.975909879s ago: executing program 0 (id=1434): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000040)=ANY=[], 0xfe, 0x4b1, &(0x7f00000021c0)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$uinput_user_dev(r0, &(0x7f0000001d00)={'syz1\x00', {0x3, 0x6, 0x5}, 0x49, [0x3, 0x0, 0x4, 0x1, 0x1, 0x5, 0xf3, 0x0, 0x8, 0x11, 0x7, 0x3, 0xfffffffe, 0x101, 0x400, 0x3, 0x6, 0x3, 0xa, 0x1, 0x79, 0xfffffffe, 0x8, 0x100, 0x8000, 0xfff, 0x400, 0x0, 0x20003, 0x404, 0x9, 0x40003, 0x8, 0xffffffff, 0x4, 0x0, 0x1, 0x7, 0x0, 0x0, 0x1192, 0x8, 0x5, 0x8, 0x5, 0x2, 0x10001, 0x3, 0x2b2, 0x4, 0xfbf, 0x1, 0x6, 0x4, 0xedbe, 0x2, 0x2, 0x8, 0xa1, 0xfffffff8, 0x6, 0x80, 0x2, 0x81], [0x1, 0x80000001, 0x563, 0x2, 0x0, 0x0, 0x4, 0x854f000, 0x2, 0x93, 0xfffffff6, 0x2, 0x8b, 0x8ab, 0x3, 0x2a6d2895, 0x5, 0x13, 0x100, 0x1, 0x6, 0x200, 0x5, 0x7, 0x4a63, 0x1, 0x9, 0x8, 0x1000, 0x9, 0x4, 0xf, 0x7, 0x401, 0x4, 0x8, 0x8000, 0x5, 0x4, 0x7ff, 0x8001, 0xdfcf, 0xc1f40800, 0x9, 0x1, 0xfffffffe, 0x6, 0x0, 0x9, 0xfff, 0x0, 0x0, 0xfffff2a1, 0x9, 0x3cb, 0x5bda, 0x4, 0xde7e, 0xfff, 0x7, 0x5, 0x4000524, 0x8001, 0x1], [0x6, 0x4, 0x7, 0xe000, 0x7, 0x5aa, 0x124, 0xc, 0x1, 0x2, 0x6, 0xfffffff8, 0x200009, 0x300000, 0x80000001, 0x4, 0x8008, 0x4, 0xd, 0x9, 0x8001, 0x9, 0x7, 0x4, 0x7, 0x1, 0x6, 0x2, 0x410, 0x20400, 0xff, 0x166, 0x7, 0xc8f, 0x3, 0x8, 0x3, 0x1, 0x1000, 0x80, 0x9, 0x8, 0x1000, 0x9, 0x8000006, 0xfeb, 0x5, 0x8, 0x3ff, 0x3a, 0xa18858f, 0x9, 0x1, 0x9, 0x0, 0x7, 0x4, 0x10, 0x4, 0x3, 0x3, 0x40, 0x5ff, 0x3a], [0xaeaf, 0x6, 0x2, 0x1007ff, 0x3ff, 0x800, 0x40, 0x6, 0x1, 0x5, 0x2, 0xfffffffe, 0x8a4, 0x5, 0xdd, 0xb5, 0x800002, 0x6, 0x2, 0xcb32, 0x3, 0xf018, 0x9, 0x0, 0xda19, 0x80000001, 0x10001, 0x7ff, 0x10001, 0x1, 0x5, 0xcc1, 0x8, 0x1, 0x2, 0x6, 0x3, 0x0, 0x0, 0xb7b, 0xffffff4a, 0x4, 0x7886, 0xbf8d, 0x9, 0x46da, 0x1, 0x40, 0x9, 0x8, 0x10000, 0x1, 0x8, 0x9, 0x770, 0x0, 0x10001, 0x3ff, 0x5, 0x7, 0x8, 0x7d1, 0x1, 0x9]}, 0x45c) 2m49.312740018s ago: executing program 0 (id=1438): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x271) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0xc26080b) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) 2m46.652722259s ago: executing program 0 (id=1443): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x38f0c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0xfffffffd, 0x4) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) 2m45.152040972s ago: executing program 42 (id=1443): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x38f0c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0xfffffffd, 0x4) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) 21.77479759s ago: executing program 4 (id=1668): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000500)={0xa, 0xffff, 0x2, @mcast1, 0x9}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440), 0x1000a) sendfile(r0, r2, &(0x7f0000000080)=0xa46, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) syz_clone(0x1200700, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) recvmsg(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x2021) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 20.333422272s ago: executing program 4 (id=1670): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001800)={0x44, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.49257813s ago: executing program 4 (id=1675): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001240)=[{{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="380000000000000000000000070000009404000083"], 0x38}}], 0x1, 0x14) 15.711099481s ago: executing program 4 (id=1677): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000ff07"], 0x1c}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.261862254s ago: executing program 8 (id=1678): sigaltstack(0x0, &(0x7f0000000180)={0x0}) 13.036883532s ago: executing program 6 (id=1421): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000001006f9595d6538c6dc80804fa586226a23d71aafd23663ae6610952721f71faa0f9bbbf412166404116aa2b81a0443a169f41457a94c3cc54fe08aab15e489617968f5436df3a99f504fa0088e8b1448974a9b93c6085171af52ad83dc1a0d9db61bc4258ff449644dd8c597ebbcbc361f54e298ca8e5d80a5f64c515683dc72d205fc8529a6f849ee1806cc8d60ce55bbc50c1742c19f75d4d0081b6e6ccfb837bb993d2e941da721d6d88c6ecc94d80a1e22bd8e625"], 0x3, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) userfaultfd(0x80001) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0) r5 = syz_open_dev$hiddev(0x0, 0x8000, 0x208000) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f0000000080)={0x6, 0x0, 0x1, 0x4}) preadv2(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 11.952680849s ago: executing program 8 (id=1682): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x458, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 10.530987541s ago: executing program 6 (id=1683): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100024871c00804232202e639010203010902120001070340f20904"], 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x35, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000580)={0x20, 0x3e, 0x6d, "797c94fc98c47f4bca0c1ca04588ee9da693c141aaa15287d31fb64d419ce99b8e9c26d9ea8eaafecde6357d557e703ec078b4be82928a39b0fa8e0b0d8b443825633e521bcae2f74669fc5bb77e1dced9fdcd74ec3a1ac89a2da8526c468e40dc547d3610a810cae29a969f6e"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x37}}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 10.511271891s ago: executing program 8 (id=1684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) pipe(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpriority(0x2, r2) 9.989383688s ago: executing program 2 (id=1685): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001240)=[{{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="380000000000000000000000070000009404000083"], 0x38}}], 0x1, 0x14) 8.780708157s ago: executing program 2 (id=1686): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x67d, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r2) getsockopt$MRT(r2, 0x0, 0xcf, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x5, &(0x7f0000001340)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000000000000000200000000000850000007b0000905230c914a314e1c70085000000230000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173}, 0x90) futex_waitv(&(0x7f0000000f80), 0x0, 0x0, &(0x7f0000001380)={r3, r4+60000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x1, 0x44f, &(0x7f00000002c0)="$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") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0xa) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r6 = open(0x0, 0x2001, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @aes128, 0x0, @desc2}) 8.662852699s ago: executing program 4 (id=1687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() lseek(0xffffffffffffffff, 0x18000000000, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/77, 0x4d) r2 = open(0x0, 0x10800, 0x0) unlink(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) getuid() getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@dev, @in6}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x1040802, 0x0) 7.536711976s ago: executing program 8 (id=1688): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) 6.060343988s ago: executing program 4 (id=1689): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a918d9678f0c14dceff81869199bbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d37b113e200bcd56a2f892326882a27f6ecf8a3ab9db8f1d61f4131cbb288ce3e8c8aaefd62", 0xcb}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 6.006674309s ago: executing program 6 (id=1690): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x37, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x12, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x33) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40000) 4.936233666s ago: executing program 6 (id=1691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) 3.670643115s ago: executing program 2 (id=1692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x17, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 3.655568355s ago: executing program 6 (id=1693): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x0) listen(r2, 0x0) 3.436699238s ago: executing program 8 (id=1694): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xd3513000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x400c0) 3.33266021s ago: executing program 2 (id=1695): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000005c0), 0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x262) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a80), 0x1, 0x1cf, &(0x7f00000002c0)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x100, r5}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2.220103047s ago: executing program 8 (id=1696): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 751.282549ms ago: executing program 2 (id=1697): prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 0s ago: executing program 2 (id=1698): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) pipe(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpriority(0x2, r2) kernel console output (not intermixed with test programs): slave_0 entered promiscuous mode [ 602.758414][ T9762] device hsr_slave_1 entered promiscuous mode [ 602.773711][ T9762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.801822][ T9762] Cannot create hsr debugfs directory [ 602.822084][ T9522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.981184][ T9938] loop2: detected capacity change from 0 to 512 [ 604.080778][ T9938] EXT4-fs: Ignoring removed nobh option [ 604.275348][ T9938] ext4: Unknown parameter 'dont_hash' [ 606.230230][ T9973] loop2: detected capacity change from 0 to 8 [ 606.245193][ T9973] /dev/loop2: Can't open blockdev [ 606.915598][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 606.962430][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 607.359132][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 607.379595][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 608.612219][ T9522] device veth0_vlan entered promiscuous mode [ 608.658048][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 608.692033][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 608.874845][ T9522] device veth1_vlan entered promiscuous mode [ 609.010498][ T9762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 609.453533][ T9762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 609.686027][ T9762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 609.814430][ T9762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 610.148252][ T4411] device hsr_slave_0 left promiscuous mode [ 610.184721][T10012] loop2: detected capacity change from 0 to 512 [ 610.227084][ T4411] device hsr_slave_1 left promiscuous mode [ 610.243735][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.260659][T10012] EXT4-fs: Ignoring removed nobh option [ 610.266034][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.278561][T10012] ext4: Unknown parameter 'dont_hash' [ 610.300306][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.405678][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.437284][ T4411] device bridge_slave_1 left promiscuous mode [ 610.443780][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.552565][ T4411] device bridge_slave_0 left promiscuous mode [ 610.562584][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.723611][ T4411] device veth1_macvtap left promiscuous mode [ 610.735816][ T4411] device veth0_macvtap left promiscuous mode [ 610.742541][ T4411] device veth1_vlan left promiscuous mode [ 610.775062][ T4411] device veth0_vlan left promiscuous mode [ 611.699610][T10024] loop2: detected capacity change from 0 to 2048 [ 611.755983][T10024] /dev/loop2: Can't open blockdev [ 611.859103][ T9452] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 613.114548][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 613.144861][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 613.166432][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 613.189652][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 613.197507][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 613.204865][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.226357][ T4411] team0 (unregistering): Port device team_slave_1 removed [ 615.269715][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 615.414287][ T4411] team0 (unregistering): Port device team_slave_0 removed [ 615.571732][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.700192][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.188669][ T4411] bond0 (unregistering): Released all slaves [ 617.355496][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 617.712100][ T9762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.879028][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.903876][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.957985][ T9762] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.440580][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.486091][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.526455][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.534880][ T4603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.585649][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 618.611703][T10027] chnl_net:caif_netlink_parms(): no params data found [ 618.671725][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.700133][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.715165][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.722905][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.032824][T10027] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.063240][T10027] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.087738][T10027] device bridge_slave_0 entered promiscuous mode [ 619.145514][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 619.166706][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 619.196805][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 619.234082][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 619.258255][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 619.328449][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 619.338281][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 619.347901][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.361766][T10027] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.389643][T10027] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.419651][T10027] device bridge_slave_1 entered promiscuous mode [ 619.427491][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 619.564745][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 619.576536][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 619.607236][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 619.701822][ T9762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.988821][T10027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.552904][T10027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.780762][T10027] team0: Port device team_slave_0 added [ 620.824151][T10027] team0: Port device team_slave_1 added [ 621.007713][T10027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.022768][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.150568][T10027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.219719][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 621.255864][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 621.299537][T10027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.320723][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.384442][T10027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.484970][ T9762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.506371][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 621.786852][T10027] device hsr_slave_0 entered promiscuous mode [ 621.806801][T10027] device hsr_slave_1 entered promiscuous mode [ 621.817081][T10027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.836079][T10027] Cannot create hsr debugfs directory [ 621.909918][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 621.941005][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 622.324406][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1228'. [ 622.770538][T10141] loop8: detected capacity change from 0 to 512 [ 622.808443][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 622.826149][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 622.891092][ T9762] device veth0_vlan entered promiscuous mode [ 622.897499][T10141] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 622.986206][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 623.007774][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 623.018296][ T9452] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 623.130110][T10141] loop8: detected capacity change from 0 to 256 [ 623.270099][ T9762] device veth1_vlan entered promiscuous mode [ 624.388520][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.405324][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.601657][ T9762] device veth0_macvtap entered promiscuous mode [ 624.635994][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 624.670044][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 624.731481][ T9762] device veth1_macvtap entered promiscuous mode [ 624.754930][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 624.772506][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 625.082844][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.117279][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.175355][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.205394][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.245508][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.285364][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.316968][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.381083][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 625.442534][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 625.604113][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.675442][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.732987][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.795430][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.854469][ T9762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.885653][ T9762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.904362][ T9762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.983638][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 626.042194][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 626.599446][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 626.833378][ T9762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.853217][ T9762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.871653][ T9762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.888229][ T9762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.954962][ T4411] device hsr_slave_0 left promiscuous mode [ 627.008914][ T4411] device hsr_slave_1 left promiscuous mode [ 627.051850][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.115690][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.142780][ T4411] device bridge_slave_1 left promiscuous mode [ 627.161667][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.184531][ T4411] device bridge_slave_0 left promiscuous mode [ 627.191854][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.304034][ T4411] device veth1_vlan left promiscuous mode [ 627.324460][ T4411] device veth0_vlan left promiscuous mode [ 627.546625][T10188] kvm [10187]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 628.508484][T10203] xt_limit: Overflow, try lower: 687865856/40 [ 629.848691][T10207] loop8: detected capacity change from 0 to 8 [ 631.463712][ T4411] team0 (unregistering): Port device team_slave_1 removed [ 631.736217][ T4411] team0 (unregistering): Port device team_slave_0 removed [ 631.914222][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.085796][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.400219][T10222] loop8: detected capacity change from 0 to 512 [ 633.483654][T10222] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 633.606605][T10222] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #17: comm syz.8.1251: iget: bad i_size value: -6917529027641081756 [ 633.644712][T10222] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1251: couldn't read orphan inode 17 (err -117) [ 633.660714][T10222] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 633.790144][T10222] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1251: bg 0: block 65: padding at end of block bitmap is not set [ 633.857560][T10222] Quota error (device loop8): write_blk: dquota write failed [ 633.871679][T10222] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 634.213380][T10228] Quota error (device loop8): do_check_range: Getting block 144 out of range 0-5 [ 634.270172][T10222] EXT4-fs error (device loop8): ext4_acquire_dquot:6814: comm syz.8.1251: Failed to acquire dquot type 0 [ 634.552946][ T5421] EXT4-fs (loop8): unmounting filesystem. [ 634.780941][ T4411] bond0 (unregistering): Released all slaves [ 635.044738][T10236] xt_limit: Overflow, try lower: 687865856/40 [ 635.717316][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.744603][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.795443][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.826256][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.957450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 635.975071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 635.986335][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1250'. [ 636.721175][T10250] loop0: detected capacity change from 0 to 512 [ 636.739265][T10250] EXT4-fs: Ignoring removed nobh option [ 637.545481][T10250] ext4: Unknown parameter 'subj_user' [ 637.578069][T10027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 637.661718][T10027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 637.786390][T10027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 637.850749][T10027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 638.889500][T10027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.317431][T10027] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.539467][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 640.666659][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 640.775362][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1266'. [ 640.896925][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 640.944265][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 641.075884][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.083024][ T5616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.170355][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 641.180587][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 641.320002][T10282] loop2: detected capacity change from 0 to 1024 [ 641.367325][T10282] EXT4-fs: Ignoring removed orlov option [ 641.373082][T10282] /dev/loop2: Can't open blockdev [ 641.379613][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 641.408425][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.415608][ T5616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.455646][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 641.749821][T10027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.209918][T10027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.252126][T10289] loop8: detected capacity change from 0 to 512 [ 642.259906][T10289] EXT4-fs: Ignoring removed nobh option [ 642.265757][T10289] ext4: Unknown parameter 'subj_user' [ 642.676625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 642.689440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 642.702117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 642.723143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 642.734317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 642.751092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 642.770114][ T9473] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 643.007405][T10294] loop9: detected capacity change from 0 to 2048 [ 643.129637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 643.289462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 643.409654][T10294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 643.418371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.990348][T10299] loop2: detected capacity change from 0 to 8 [ 643.997299][T10299] /dev/loop2: Can't open blockdev [ 644.361801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 644.731182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.582222][T10313] loop2: detected capacity change from 0 to 1764 [ 646.678380][T10313] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 646.980216][T10318] loop9: detected capacity change from 0 to 512 [ 647.067772][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'. [ 647.417935][T10318] EXT4-fs (loop9): 1 truncate cleaned up [ 647.435958][T10318] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 647.776731][ T6530] EXT4-fs (loop9): unmounting filesystem. [ 647.823315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 648.539075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.677749][T10027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.636632][T10352] loop8: detected capacity change from 0 to 2048 [ 650.717177][T10352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 652.199252][T10375] loop9: detected capacity change from 0 to 8 [ 652.267748][T10374] loop0: detected capacity change from 0 to 764 [ 652.527152][T10374] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 652.579202][T10376] loop8: detected capacity change from 0 to 512 [ 653.131024][T10383] loop8: detected capacity change from 0 to 16 [ 653.197020][T10383] erofs: (device loop8): mounted with root inode @ nid 36. [ 653.216781][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 653.244466][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 653.319672][T10027] device veth0_vlan entered promiscuous mode [ 653.493067][T10027] device veth1_vlan entered promiscuous mode [ 653.667251][ T26] audit: type=1800 audit(2000000198.280:253): pid=10390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1290" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 654.465631][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 654.485385][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 654.601771][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 654.662365][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 654.704418][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 654.770176][T10404] loop2: detected capacity change from 0 to 16 [ 654.886982][T10403] loop0: detected capacity change from 0 to 256 [ 654.923912][T10404] /dev/loop2: Can't open blockdev [ 654.959080][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 655.137954][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 655.310416][ T9473] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 657.008085][T10027] device veth0_macvtap entered promiscuous mode [ 657.081997][T10415] loop2: detected capacity change from 0 to 1024 [ 657.089272][T10027] device veth1_macvtap entered promiscuous mode [ 657.116965][ T9473] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 657.370203][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 657.407525][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 657.461390][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.560048][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.603506][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.622206][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.632815][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.654551][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.680486][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.700695][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.713554][T10027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.726230][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 657.750963][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 657.847691][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.899228][T10424] loop8: detected capacity change from 0 to 8 [ 658.031371][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.154134][T10420] loop9: detected capacity change from 0 to 512 [ 658.216249][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.349450][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.389491][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.403894][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.419439][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.430349][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.443221][T10027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.454606][T10027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.463837][T10027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.472925][T10027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.492111][T10027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.548870][ T9452] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 658.621027][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 658.681485][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 658.817117][T10436] loop9: detected capacity change from 0 to 16 [ 658.829043][ T9452] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 658.896204][T10436] erofs: (device loop9): mounted with root inode @ nid 36. [ 659.805451][ T26] audit: type=1800 audit(2000000204.360:254): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1303" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 660.099372][T10446] loop8: detected capacity change from 0 to 1024 [ 660.203753][ T4505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.242662][ T4505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.302878][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 660.434559][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.495855][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.580899][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 663.008626][T10478] loop9: detected capacity change from 0 to 16 [ 663.040114][T10479] loop8: detected capacity change from 0 to 256 [ 663.062488][T10478] erofs: (device loop9): mounted with root inode @ nid 36. [ 663.370449][ T26] audit: type=1800 audit(2000000207.990:255): pid=10483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1310" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 664.045767][T10499] xt_limit: Overflow, try lower: 687865856/40 [ 664.679923][T10497] loop9: detected capacity change from 0 to 1024 [ 664.814931][T10497] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 665.021109][T10506] loop8: detected capacity change from 0 to 164 [ 665.063650][T10506] Unable to read rock-ridge attributes [ 665.104786][T10506] Unable to read rock-ridge attributes [ 665.153089][T10512] loop2: detected capacity change from 0 to 1024 [ 665.235317][ T9451] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 666.634718][T10528] loop2: detected capacity change from 0 to 16 [ 666.718275][T10528] /dev/loop2: Can't open blockdev [ 666.891529][T10528] loop2: detected capacity change from 0 to 1024 [ 667.062126][T10536] loop0: detected capacity change from 0 to 512 [ 667.191608][T10536] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 667.273190][T10536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 667.290948][T10536] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.661054][T10544] loop8: detected capacity change from 0 to 128 [ 668.234693][T10554] xt_limit: Overflow, try lower: 687865856/40 [ 669.425550][ T9762] EXT4-fs (loop0): unmounting filesystem. [ 671.614284][T10581] loop2: detected capacity change from 0 to 1024 [ 671.628552][T10582] futex_wake_op: syz.8.1333 tries to shift op by 144; fix this program [ 672.045963][T10583] loop8: detected capacity change from 0 to 512 [ 672.715374][T10583] EXT4-fs (loop8): unsupported inode size: 0 [ 672.723146][T10583] EXT4-fs (loop8): blocksize: 1024 [ 672.743721][ T9452] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 673.184075][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1337'. [ 673.800557][T10599] xt_limit: Overflow, try lower: 687865856/40 [ 674.458239][T10597] loop9: detected capacity change from 0 to 512 [ 674.547363][T10597] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 674.637022][T10597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 674.718451][T10597] System zones: 1-12 [ 674.753415][T10602] loop2: detected capacity change from 0 to 512 [ 674.764681][T10602] EXT4-fs: Ignoring removed nobh option [ 674.771343][T10602] ext4: Unknown parameter 'dont_hash' [ 674.799091][T10597] EXT4-fs (loop9): 1 truncate cleaned up [ 674.818602][T10597] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 674.851063][ T9473] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 675.409161][ T6530] EXT4-fs (loop9): unmounting filesystem. [ 675.487196][T10611] loop4: detected capacity change from 0 to 8 [ 675.526342][T10611] syz.4.1335: attempt to access beyond end of device [ 675.526342][T10611] loop4: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 675.543495][T10611] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 675.552171][T10611] unable to read xattr id index table [ 676.202723][T10616] loop9: detected capacity change from 0 to 1024 [ 676.246843][T10616] EXT4-fs: Ignoring removed orlov option [ 676.259293][T10620] loop4: detected capacity change from 0 to 512 [ 676.347155][T10620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 676.393529][T10616] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 676.525916][T10620] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1343: bad orphan inode 131083 [ 676.571587][T10620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 676.776619][ T6530] EXT4-fs (loop9): unmounting filesystem. [ 676.927010][T10629] loop8: detected capacity change from 0 to 16 [ 676.987890][T10629] erofs: (device loop8): mounted with root inode @ nid 36. [ 677.002038][T10027] EXT4-fs (loop4): unmounting filesystem. [ 677.362431][ T26] audit: type=1800 audit(2000000221.980:256): pid=10639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1338" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 678.368113][T10647] capability: warning: `syz.4.1348' uses deprecated v2 capabilities in a way that may be insecure [ 678.407695][T10651] loop8: detected capacity change from 0 to 1024 [ 678.449670][T10651] EXT4-fs: Ignoring removed orlov option [ 678.589886][T10651] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 678.689743][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1350'. [ 680.894757][T10663] loop4: detected capacity change from 0 to 764 [ 680.937117][ T5421] EXT4-fs (loop8): unmounting filesystem. [ 680.949986][T10663] Symlink component flag not implemented [ 680.957699][T10663] Symlink component flag not implemented (116) [ 681.170839][T10672] loop0: detected capacity change from 0 to 512 [ 681.216357][T10672] EXT4-fs: Ignoring removed nobh option [ 681.265125][T10672] ext4: Unknown parameter 'dont_hash' [ 682.031103][T10682] loop8: detected capacity change from 0 to 512 [ 682.086595][T10682] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 682.206748][T10682] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 682.225567][T10682] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.231256][T10690] loop2: detected capacity change from 0 to 16 [ 682.261278][T10690] /dev/loop2: Can't open blockdev [ 683.172821][ T5421] EXT4-fs (loop8): unmounting filesystem. [ 685.828066][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.838272][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.017144][T10718] futex_wake_op: syz.4.1368 tries to shift op by 144; fix this program [ 687.772564][T10726] loop4: detected capacity change from 0 to 512 [ 687.815119][T10726] EXT4-fs (loop4): unsupported inode size: 0 [ 687.825158][T10726] EXT4-fs (loop4): blocksize: 1024 [ 691.185731][T10737] loop4: detected capacity change from 0 to 512 [ 691.226472][T10737] EXT4-fs: Ignoring removed nobh option [ 691.378974][T10737] ext4: Unknown parameter 'dont_hash' [ 691.730709][ T9452] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 692.043474][T10755] loop8: detected capacity change from 0 to 16 [ 692.205646][T10755] erofs: (device loop8): mounted with root inode @ nid 36. [ 692.461436][T10758] loop2: detected capacity change from 0 to 2048 [ 693.194740][ T9451] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 693.257707][ T26] audit: type=1800 audit(2000000237.880:257): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1370" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 697.077566][T10792] futex_wake_op: syz.0.1383 tries to shift op by 144; fix this program [ 697.679588][T10793] loop0: detected capacity change from 0 to 512 [ 698.186613][T10793] EXT4-fs (loop0): unsupported inode size: 0 [ 698.193611][T10793] EXT4-fs (loop0): blocksize: 1024 [ 698.440896][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1384'. [ 699.131636][T10806] loop9: detected capacity change from 0 to 8 [ 699.399462][T10808] loop8: detected capacity change from 0 to 1024 [ 699.534456][T10808] EXT4-fs: Ignoring removed orlov option [ 699.828713][T10808] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 699.846253][T10817] loop2: detected capacity change from 0 to 16 [ 700.008668][T10817] /dev/loop2: Can't open blockdev [ 700.714492][T10817] loop2: detected capacity change from 0 to 1024 [ 701.470261][T10829] loop9: detected capacity change from 0 to 2048 [ 701.523351][T10829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.587285][ T5421] EXT4-fs (loop8): unmounting filesystem. [ 703.211017][T10844] loop2: detected capacity change from 0 to 512 [ 703.931141][T10844] EXT4-fs: Ignoring removed nobh option [ 704.075387][T10844] ext4: Unknown parameter 'dont_hash' [ 706.018829][T10862] xt_limit: Overflow, try lower: 687865856/40 [ 706.299775][T10863] loop4: detected capacity change from 0 to 1024 [ 706.681679][T10872] loop0: detected capacity change from 0 to 8 [ 707.105403][T10872] syz.0.1399: attempt to access beyond end of device [ 707.105403][T10872] loop0: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 707.123953][T10872] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 707.132162][T10872] unable to read xattr id index table [ 707.871553][T10869] loop2: detected capacity change from 0 to 512 [ 708.120029][ T9451] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 708.525961][T10890] loop4: detected capacity change from 0 to 16 [ 709.299710][T10890] erofs: (device loop4): mounted with root inode @ nid 36. [ 714.206912][T10917] loop8: detected capacity change from 0 to 512 [ 714.278281][T10917] EXT4-fs: Ignoring removed nobh option [ 714.325498][T10917] ext4: Unknown parameter 'dont_hash' [ 714.943403][T10924] loop8: detected capacity change from 0 to 1024 [ 715.308482][T10931] loop4: detected capacity change from 0 to 8 [ 715.336041][T10931] syz.4.1411: attempt to access beyond end of device [ 715.336041][T10931] loop4: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 715.353271][T10931] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 715.362294][T10931] unable to read xattr id index table [ 715.981546][ T9473] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 717.282399][T10944] loop8: detected capacity change from 0 to 16 [ 717.336219][T10944] erofs: (device loop8): mounted with root inode @ nid 36. [ 717.765920][ T26] audit: type=1800 audit(2000000262.280:258): pid=10948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1417" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 723.972732][T10975] loop8: detected capacity change from 0 to 128 [ 724.083675][T10975] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 724.095823][T10975] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 724.152054][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'. [ 724.412688][ T5421] EXT4-fs (loop8): unmounting filesystem. [ 724.497660][T10988] loop0: detected capacity change from 0 to 16 [ 724.516029][T10988] erofs: (device loop0): mounted with root inode @ nid 36. [ 724.905841][ T4269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 724.935543][ T26] audit: type=1800 audit(2000000269.520:259): pid=10996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1429" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 725.007336][ T4269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 725.022482][ T4269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 725.051498][ T4269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 725.075518][ T4269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 725.093838][ T4269] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 725.209346][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 725.224561][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 725.238529][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 725.271645][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 725.295013][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 725.314475][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 725.352744][T10990] loop8: detected capacity change from 0 to 2048 [ 725.511025][T10990] loop8: p1 < > p3 [ 725.537125][T10990] loop8: p3 size 134217728 extends beyond EOD, truncated [ 725.821631][T11004] hub 9-0:1.0: USB hub found [ 725.827971][T11004] hub 9-0:1.0: 1 port detected [ 726.651415][T11012] loop4: detected capacity change from 0 to 512 [ 726.842138][T11012] EXT4-fs: Ignoring removed nobh option [ 726.851571][T11012] ext4: Unknown parameter 'dont_hash' [ 727.335542][ T5584] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.348225][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 728.665105][T10976] udevd[10976]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 728.697951][T11023] loop0: detected capacity change from 0 to 128 [ 728.702474][T11006] udevd[11006]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 728.731930][T11023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 728.872882][T11023] loop0: detected capacity change from 128 to 64 [ 728.909871][T11028] syz.0.1434: attempt to access beyond end of device [ 728.909871][T11028] loop0: rw=2049, sector=117, nr_sectors = 3 limit=64 [ 728.920278][T10976] udevd[10976]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 728.938162][T11006] udevd[11006]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 728.969101][ T5584] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.170207][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1437'. [ 730.377786][ T4280] Bluetooth: hci5: command 0x041b tx timeout [ 730.448745][T10976] udevd[10976]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 730.463859][T10967] udevd[10967]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 730.476563][ T9762] syz-executor: attempt to access beyond end of device [ 730.476563][ T9762] loop0: rw=2049, sector=83, nr_sectors = 1 limit=64 [ 730.486342][T11042] loop2: detected capacity change from 0 to 16 [ 730.510247][ T5584] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.544565][T11042] /dev/loop2: Can't open blockdev [ 730.550239][ T9762] Buffer I/O error on dev loop0, logical block 83, lost sync page write [ 731.555675][T11049] xt_limit: Overflow, try lower: 687865856/40 [ 731.728072][T11051] binder: 11050:11051 ioctl 400c620e 0 returned -14 [ 731.744692][ T5584] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.886600][ T4280] Bluetooth: hci5: command 0x040f tx timeout [ 733.154060][T10992] chnl_net:caif_netlink_parms(): no params data found [ 733.424157][T11066] loop2: detected capacity change from 0 to 8 [ 733.431344][T11066] /dev/loop2: Can't open blockdev [ 733.472105][T10976] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 733.693273][T10992] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.755600][T10992] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.796345][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.813747][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.824553][ T4271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.844980][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.854265][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 733.862613][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 733.924963][T10992] device bridge_slave_0 entered promiscuous mode [ 734.016243][T10992] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.040278][T10992] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.091772][T10992] device bridge_slave_1 entered promiscuous mode [ 735.975619][ T4269] Bluetooth: hci5: command 0x0419 tx timeout [ 735.975844][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 736.019955][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.099115][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.232420][T10992] team0: Port device team_slave_0 added [ 736.274545][T10992] team0: Port device team_slave_1 added [ 736.428082][T10992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.495680][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.529871][T11092] loop2: detected capacity change from 0 to 512 [ 736.577706][T11092] /dev/loop2: Can't open blockdev [ 736.595516][T10992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.629594][T10992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.675288][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.807624][T11097] loop2: detected capacity change from 0 to 16 [ 736.827121][T10992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.859837][T11097] /dev/loop2: Can't open blockdev [ 737.912525][T11104] xt_limit: Overflow, try lower: 687865856/40 [ 738.065589][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 738.233749][T10992] device hsr_slave_0 entered promiscuous mode [ 738.278832][T10992] device hsr_slave_1 entered promiscuous mode [ 738.316285][T10992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.324523][T10992] Cannot create hsr debugfs directory [ 738.630206][T11112] loop2: detected capacity change from 0 to 8 [ 738.639391][T11112] /dev/loop2: Can't open blockdev [ 738.942328][T10976] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 740.167372][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 742.342076][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 742.614081][T11070] chnl_net:caif_netlink_parms(): no params data found [ 746.861325][T11070] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.880006][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.909555][T11070] device bridge_slave_0 entered promiscuous mode [ 746.967087][T11159] xt_limit: Overflow, try lower: 687865856/40 [ 747.296556][T11161] loop2: detected capacity change from 0 to 16 [ 747.307384][T11161] /dev/loop2: Can't open blockdev [ 747.911506][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.918878][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.944112][T10976] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 748.224408][T11168] loop4: detected capacity change from 0 to 8 [ 748.387013][T11070] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.455344][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.526008][T11070] device bridge_slave_1 entered promiscuous mode [ 750.011292][T11070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.109148][ T5584] device hsr_slave_0 left promiscuous mode [ 750.145772][ T5584] device hsr_slave_1 left promiscuous mode [ 750.184023][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.203640][T11190] futex_wake_op: syz.4.1469 tries to shift op by 144; fix this program [ 750.211315][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.221860][T11192] loop2: detected capacity change from 0 to 1024 [ 750.247219][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.807324][T11194] loop4: detected capacity change from 0 to 512 [ 751.313530][T11192] EXT4-fs: Ignoring removed orlov option [ 751.332483][T11194] EXT4-fs (loop4): unsupported inode size: 0 [ 751.338713][T11194] EXT4-fs (loop4): blocksize: 1024 [ 751.365549][T11192] /dev/loop2: Can't open blockdev [ 751.371287][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.392127][ T5584] device bridge_slave_1 left promiscuous mode [ 751.483978][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.663762][ T5584] device bridge_slave_0 left promiscuous mode [ 751.685906][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.796039][ T5584] device veth1_macvtap left promiscuous mode [ 751.802240][ T5584] device veth0_macvtap left promiscuous mode [ 751.839023][ T5584] device veth1_vlan left promiscuous mode [ 751.853981][ T5584] device veth0_vlan left promiscuous mode [ 752.014017][T11205] loop8: detected capacity change from 0 to 1024 [ 752.079549][T11205] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 752.229831][ T5421] EXT4-fs (loop8): unmounting filesystem. [ 753.369383][T11217] xt_limit: Overflow, try lower: 687865856/40 [ 756.746461][T11248] Invalid ELF header magic: != ELF [ 758.332749][ T5584] team0 (unregistering): Port device team_slave_1 removed [ 758.397056][ T5584] team0 (unregistering): Port device team_slave_0 removed [ 758.459984][ T5584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.522421][ T5584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.075607][T11278] loop2: detected capacity change from 0 to 1024 [ 760.083374][T11278] EXT4-fs: Ignoring removed orlov option [ 760.110320][T11278] /dev/loop2: Can't open blockdev [ 761.085032][T11282] loop8: detected capacity change from 0 to 512 [ 761.172929][T11282] EXT4-fs: Ignoring removed nobh option [ 761.185459][T11282] ext4: Unknown parameter 'subj_user' [ 762.871919][ T5584] bond0 (unregistering): Released all slaves [ 763.346007][T11296] loop4: detected capacity change from 0 to 16 [ 763.629494][T11296] erofs: (device loop4): mounted with root inode @ nid 36. [ 763.656838][T11295] syz.4.1489: attempt to access beyond end of device [ 763.656838][T11295] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 763.814317][T11070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.989491][T11070] team0: Port device team_slave_0 added [ 764.000718][T11070] team0: Port device team_slave_1 added [ 764.181445][T11070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.208627][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.540133][T11310] loop2: detected capacity change from 0 to 512 [ 764.768894][T11070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.844267][T11070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.891581][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.025310][T11070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.121335][T10992] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 765.389884][T10992] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 765.489434][T11070] device hsr_slave_0 entered promiscuous mode [ 765.606033][T11070] device hsr_slave_1 entered promiscuous mode [ 765.662366][T11070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.710659][T11070] Cannot create hsr debugfs directory [ 765.757577][T10992] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 765.925981][T10992] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 767.410871][T10992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.473069][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 767.501761][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 767.523641][T10992] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.087520][ T5584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.119436][T11351] futex_wake_op: syz.2.1499 tries to shift op by 144; fix this program [ 769.203043][T11356] loop2: detected capacity change from 0 to 512 [ 769.209855][T11356] /dev/loop2: Can't open blockdev [ 769.249286][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 769.266365][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 769.330576][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.338873][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.406262][T10976] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 769.452425][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 769.463546][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 769.617724][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.625084][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.765555][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 769.786041][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 770.119655][ T5584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.162100][T10992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 770.368468][T10992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 771.047218][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 771.057743][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 771.104502][T11366] loop8: detected capacity change from 0 to 1024 [ 771.168533][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 771.178192][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 771.187440][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 771.197148][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 771.205787][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 771.217842][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 771.226626][T11366] EXT4-fs: Ignoring removed orlov option [ 771.259323][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 771.459593][T11366] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 772.248065][ T5584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.473467][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 772.503498][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 772.834670][ T5584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.141165][T11070] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 773.198221][T11070] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 773.252950][T11070] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 773.276694][T11070] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 775.203706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 775.214558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 775.239050][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.193808][ T5421] EXT4-fs (loop8): unmounting filesystem. [ 776.632816][T11070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.655438][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 776.677004][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 776.748274][T11070] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.861116][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 776.910486][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 776.994170][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.001541][ T6865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.023943][T11433] loop4: detected capacity change from 0 to 512 [ 777.048332][T11433] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 777.137872][T11433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 777.235448][T11433] System zones: 1-12 [ 777.255456][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 777.263794][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 777.444234][T11433] EXT4-fs (loop4): 1 truncate cleaned up [ 777.456632][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 777.788854][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.796034][ T6865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.825340][T11433] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 777.976882][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 777.996661][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 778.042274][T11445] loop2: detected capacity change from 0 to 1024 [ 778.864325][T11433] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 779.009588][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 779.197681][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 779.348088][T11457] loop8: detected capacity change from 0 to 8 [ 779.552619][T10027] EXT4-fs (loop4): unmounting filesystem. [ 779.615943][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 779.675959][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 779.705983][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 779.733355][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 779.797400][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 779.831749][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 779.916039][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 779.966417][T11070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 780.094801][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 780.200011][T11464] loop4: detected capacity change from 0 to 2048 [ 780.352332][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 780.388181][T11464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 780.405553][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 781.226218][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 781.264638][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 781.294064][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 781.349064][ T6865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 781.440433][T10992] device veth0_vlan entered promiscuous mode [ 781.608051][ T5584] device hsr_slave_0 left promiscuous mode [ 781.622118][ T5584] device hsr_slave_1 left promiscuous mode [ 781.649367][T11471] loop2: detected capacity change from 0 to 512 [ 781.663874][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.681789][T11006] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 781.701772][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.735962][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.753715][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.776395][ T5584] device bridge_slave_1 left promiscuous mode [ 781.782669][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.826768][ T5584] device bridge_slave_0 left promiscuous mode [ 782.540921][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.661370][ T5584] device veth1_macvtap left promiscuous mode [ 782.675504][ T5584] device veth0_macvtap left promiscuous mode [ 782.697167][ T5584] device veth1_vlan left promiscuous mode [ 782.703043][ T5584] device veth0_vlan left promiscuous mode [ 783.403111][T11498] loop8: detected capacity change from 0 to 256 [ 783.461335][T11498] FAT-fs (loop8): Directory bread(block 64) failed [ 783.562540][T11498] FAT-fs (loop8): Directory bread(block 65) failed [ 783.611434][T11498] FAT-fs (loop8): Directory bread(block 66) failed [ 783.634006][T11498] FAT-fs (loop8): Directory bread(block 67) failed [ 783.641157][T11498] FAT-fs (loop8): Directory bread(block 68) failed [ 783.648388][T11498] FAT-fs (loop8): Directory bread(block 69) failed [ 783.656933][T11498] FAT-fs (loop8): Directory bread(block 70) failed [ 783.663704][T11498] FAT-fs (loop8): Directory bread(block 71) failed [ 783.666624][T11503] loop2: detected capacity change from 0 to 512 [ 783.674486][T11498] FAT-fs (loop8): Directory bread(block 72) failed [ 783.709791][T11498] FAT-fs (loop8): Directory bread(block 73) failed [ 783.719235][T11503] /dev/loop2: Can't open blockdev [ 786.106585][ T4271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 786.121735][ T4271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 786.133038][ T4271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 786.149440][ T4271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 786.159632][ T4271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 786.170123][ T4271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 786.191919][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 786.203598][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 786.211868][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 786.223567][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 786.237449][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 786.265845][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 786.735939][T11534] loop4: detected capacity change from 0 to 8192 [ 786.760188][T11534] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 787.106064][T11538] loop2: detected capacity change from 0 to 8 [ 787.124861][T11538] syz.2.1528: attempt to access beyond end of device [ 787.124861][T11538] loop2: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 787.140078][T11538] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 787.148093][T11538] unable to read xattr id index table [ 787.717222][ T5584] team0 (unregistering): Port device team_slave_1 removed [ 787.807427][T11542] UHID_CREATE from different security context by process 1072 (syz.8.1526), this is not allowed. [ 787.848440][T11544] loop2: detected capacity change from 0 to 512 [ 787.848918][T11006] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 787.871080][T11544] /dev/loop2: Can't open blockdev [ 787.879344][ T5584] team0 (unregistering): Port device team_slave_0 removed [ 787.911928][T11544] loop2: detected capacity change from 0 to 256 [ 788.306311][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 788.413827][ T5584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.461425][T11554] loop2: detected capacity change from 0 to 1024 [ 788.591777][ T5584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.009806][T11565] futex_wake_op: syz.8.1536 tries to shift op by 144; fix this program [ 789.823530][T11569] loop4: detected capacity change from 0 to 8 [ 789.968687][T11571] loop2: detected capacity change from 0 to 16 [ 789.997814][T11566] loop8: detected capacity change from 0 to 512 [ 790.039834][T11571] /dev/loop2: Can't open blockdev [ 790.069994][T11566] EXT4-fs (loop8): unsupported inode size: 0 [ 790.385354][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 790.392210][T11566] EXT4-fs (loop8): blocksize: 1024 [ 790.526875][T11573] loop2: detected capacity change from 0 to 256 [ 790.586132][T11573] /dev/loop2: Can't open blockdev [ 792.465296][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 793.957423][ T5584] bond0 (unregistering): Released all slaves [ 794.415298][T11577] device bridge4 entered promiscuous mode [ 794.545324][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 795.646542][ T4280] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 795.665609][ T4280] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 795.679997][ T4280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 795.692778][ T4280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 795.704371][ T4280] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 795.714602][ T4280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 796.009563][T11601] loop8: detected capacity change from 0 to 8 [ 796.220467][T11530] chnl_net:caif_netlink_parms(): no params data found [ 798.437611][ T4280] Bluetooth: hci6: command 0x0409 tx timeout [ 798.487584][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.588890][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.646748][T11530] device bridge_slave_0 entered promiscuous mode [ 798.674323][T11590] chnl_net:caif_netlink_parms(): no params data found [ 798.706544][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.715545][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.756577][T11530] device bridge_slave_1 entered promiscuous mode [ 799.428394][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.586683][T11590] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.627416][T11590] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.670471][T11590] device bridge_slave_0 entered promiscuous mode [ 799.731789][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.885512][T11590] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.907472][T11590] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.996475][T11590] device bridge_slave_1 entered promiscuous mode [ 800.465442][ T4280] Bluetooth: hci6: command 0x041b tx timeout [ 801.642955][T11530] team0: Port device team_slave_0 added [ 801.720170][T11590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.785616][T11530] team0: Port device team_slave_1 added [ 801.794719][T11590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.936908][T11654] loop8: detected capacity change from 0 to 2048 [ 801.959164][T11654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 802.290411][T11661] loop8: detected capacity change from 0 to 1024 [ 802.414584][T11661] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 802.511538][T11661] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.545774][ T4280] Bluetooth: hci6: command 0x040f tx timeout [ 802.660967][T11661] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: block 3: comm syz.8.1554: lblock 3 mapped to illegal pblock 3 (length 13) [ 803.937036][T11661] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 804.020771][T11661] EXT4-fs (loop8): This should not happen!! Data will be lost [ 804.020771][T11661] [ 804.258594][T11590] team0: Port device team_slave_0 added [ 804.281109][ T5421] EXT4-fs (loop8): unmounting filesystem. [ 804.289652][T11530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.326175][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.415410][T11530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.477306][T11530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.505494][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.625444][ T4280] Bluetooth: hci6: command 0x0419 tx timeout [ 804.677856][T11530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.270082][T11590] team0: Port device team_slave_1 added [ 805.381171][T11590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.417416][T11590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.498531][T11590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.617334][T11590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.655017][T11705] loop4: detected capacity change from 0 to 2048 [ 805.670429][T11705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 805.720812][T11590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.001421][T11590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.041042][T11707] futex_wake_op: syz.8.1564 tries to shift op by 144; fix this program [ 806.189061][T11530] device hsr_slave_0 entered promiscuous mode [ 807.358735][T11707] loop8: detected capacity change from 0 to 512 [ 807.389936][T11707] EXT4-fs (loop8): unsupported inode size: 0 [ 807.397302][T11707] EXT4-fs (loop8): blocksize: 1024 [ 807.518712][T11530] device hsr_slave_1 entered promiscuous mode [ 807.595362][T11530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.647938][T11530] Cannot create hsr debugfs directory [ 808.957647][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.967531][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.156122][T11590] device hsr_slave_0 entered promiscuous mode [ 809.395869][T11724] loop2: detected capacity change from 0 to 128 [ 809.509363][T11590] device hsr_slave_1 entered promiscuous mode [ 809.551227][T10976] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 810.005599][T11590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 810.039410][T11590] Cannot create hsr debugfs directory [ 812.833031][T11750] loop8: detected capacity change from 0 to 2048 [ 812.848874][T11750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 813.623566][T11759] loop4: detected capacity change from 0 to 8 [ 813.732135][T11759] syz.4.1568: attempt to access beyond end of device [ 813.732135][T11759] loop4: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 813.746955][T11759] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 813.754588][T11759] unable to read xattr id index table [ 814.234006][T11006] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 814.656762][T11764] futex_wake_op: syz.2.1575 tries to shift op by 144; fix this program [ 815.555624][T11763] loop2: detected capacity change from 0 to 512 [ 815.564195][T11763] /dev/loop2: Can't open blockdev [ 815.619097][T11006] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 816.014668][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1576'. [ 817.576188][T11790] loop2: detected capacity change from 0 to 1024 [ 819.255444][T11590] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 819.284962][T11590] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 819.298858][T11590] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 819.314861][T11590] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 819.618152][T11820] loop4: detected capacity change from 0 to 2048 [ 819.638865][T11820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 820.501464][T11530] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 820.586684][T11844] futex_wake_op: syz.4.1587 tries to shift op by 144; fix this program [ 820.664072][T11530] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 820.799897][T11530] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 820.846688][ T5584] device hsr_slave_0 left promiscuous mode [ 820.866426][ T5584] device hsr_slave_1 left promiscuous mode [ 820.883119][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.106213][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.188395][T11851] loop8: detected capacity change from 0 to 8 [ 821.872785][ T5584] device bridge_slave_1 left promiscuous mode [ 821.884031][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.013791][ T5584] device bridge_slave_0 left promiscuous mode [ 822.035388][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.783542][ T5584] device hsr_slave_0 left promiscuous mode [ 823.243468][T11847] loop4: detected capacity change from 0 to 512 [ 823.269491][T11847] EXT4-fs (loop4): unsupported inode size: 0 [ 823.275641][T11847] EXT4-fs (loop4): blocksize: 1024 [ 823.378624][ T5584] device hsr_slave_1 left promiscuous mode [ 823.387638][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.492646][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.569310][ T5584] device bridge_slave_1 left promiscuous mode [ 823.587116][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.653228][ T5584] device bridge_slave_0 left promiscuous mode [ 823.675539][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.926881][ T5584] device veth0_vlan left promiscuous mode [ 826.724813][T11884] loop8: detected capacity change from 0 to 512 [ 826.750477][T11886] loop2: detected capacity change from 0 to 1024 [ 827.201685][T11884] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 827.285887][T11884] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 827.445506][T11884] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.1594: iget: bad i_size value: 2533274857506816 [ 827.993440][T11892] input: syz1 as /devices/virtual/input/input10 [ 828.428419][T11898] loop4: detected capacity change from 0 to 2048 [ 828.538744][T11898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 829.496176][ T5584] team0 (unregistering): Port device team_slave_1 removed [ 829.603482][ T5421] EXT4-fs (loop8): unmounting filesystem. [ 829.720246][ T5584] team0 (unregistering): Port device team_slave_0 removed [ 829.873620][ T5584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.591872][ T5584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.124366][T11929] loop8: detected capacity change from 0 to 2048 [ 834.199753][T11929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 835.040538][ T5584] bond0 (unregistering): Released all slaves [ 837.737740][ T5584] team0 (unregistering): Port device team_slave_1 removed [ 837.899348][T11947] loop4: detected capacity change from 0 to 512 [ 837.960178][T11947] EXT4-fs: Ignoring removed nobh option [ 837.985970][T11947] ext4: Unknown parameter 'subj_user' [ 837.995091][ T5584] team0 (unregistering): Port device team_slave_0 removed [ 838.845983][ T6373] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 839.150357][ T5584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.905279][ T6373] usb 3-1: Using ep0 maxpacket: 32 [ 839.946453][ T6373] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.972069][ T6373] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 840.005223][ T6373] usb 3-1: config 0 interface 0 has no altsetting 0 [ 840.012538][ T6373] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 840.035255][ T6373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.051819][ T6373] usb 3-1: config 0 descriptor?? [ 840.063450][ T5584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.418100][T11959] loop8: detected capacity change from 0 to 8 [ 840.482137][ T6373] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 840.501883][ T6373] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 840.520960][ T6373] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 840.544384][ T6373] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 840.574181][ T6373] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 840.604663][ T6373] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 840.629553][ T6373] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 840.707647][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.767428][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.836871][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.876847][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.886410][ C1] hid-thrustmaster 0003:044F:B65D.000B: URB to get model id failed with error -71 [ 840.894601][ T4372] usb 3-1: USB disconnect, device number 8 [ 841.021104][T11960] fido_id[11960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 842.151272][ T5584] bond0 (unregistering): Released all slaves [ 842.290739][T11972] xt_limit: Overflow, try lower: 687865856/40 [ 843.486170][T11977] loop8: detected capacity change from 0 to 1024 [ 843.506002][T11530] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 843.519022][T11977] EXT4-fs: Ignoring removed orlov option [ 843.568341][T11590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.636333][T11977] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 844.528414][T11530] kthread_run failed with err -4 [ 844.539290][ T5421] EXT4-fs (loop8): unmounting filesystem. [ 844.584088][T11590] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.700623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 844.987497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 845.048357][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 845.077168][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 845.108555][T11990] loop4: detected capacity change from 0 to 512 [ 845.126244][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.133990][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.195484][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 845.241625][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 845.270635][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.277803][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.282217][ T4377] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 845.335764][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 845.375676][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 845.423709][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 845.467830][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 845.515309][ T4377] usb 9-1: Using ep0 maxpacket: 16 [ 845.522718][ T4377] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 845.570065][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 845.578412][ T4377] usb 9-1: config 0 has no interface number 0 [ 845.584636][ T4377] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 845.617874][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 845.636170][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 845.647464][ T4377] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 845.672583][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 845.690699][ T4377] usb 9-1: config 0 interface 41 has no altsetting 0 [ 845.713703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 845.724435][ T4377] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 845.744638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 845.774899][ T4377] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.795567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 845.804333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 845.825768][ T4377] usb 9-1: Product: syz [ 845.829995][ T4377] usb 9-1: Manufacturer: syz [ 845.836134][ T4271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 845.846752][ T4271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 845.856818][ T4271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 845.864667][ T4271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 845.872285][ T4377] usb 9-1: SerialNumber: syz [ 845.877685][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 845.888947][ T4377] usb 9-1: config 0 descriptor?? [ 845.894280][ T4271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 845.902356][T11997] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 845.911034][T11997] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 845.920396][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 845.928529][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 846.056327][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 846.064247][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 846.072437][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 846.080116][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 846.134722][T11997] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 846.178700][T11590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 846.235430][T11997] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 846.979673][ T4377] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 847.353960][T12007] chnl_net:caif_netlink_parms(): no params data found [ 847.447408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 847.469309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 847.497227][T11590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.803015][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.839288][T12007] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.864867][T12007] device bridge_slave_0 entered promiscuous mode [ 848.145403][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 848.435220][ T4377] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 848.452135][ T4377] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 849.058009][ T4377] CoreChips: probe of 9-1:0.41 failed with error -71 [ 849.066802][T12007] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.070109][ T4377] usb 9-1: USB disconnect, device number 6 [ 849.143058][T12007] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.199665][T12007] device bridge_slave_1 entered promiscuous mode [ 849.349214][T12007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.398113][T12007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.595896][T12007] team0: Port device team_slave_0 added [ 849.800038][T12007] team0: Port device team_slave_1 added [ 850.029614][T12007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.057067][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.126829][T12007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.225515][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 850.286298][T12007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.326837][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.560115][T12007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.557496][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 851.626070][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 851.697589][T12072] xt_limit: Overflow, try lower: 687865856/40 [ 851.801063][T12007] device hsr_slave_0 entered promiscuous mode [ 851.868169][T12007] device hsr_slave_1 entered promiscuous mode [ 851.884593][T12007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 851.907707][T12007] Cannot create hsr debugfs directory [ 852.001199][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.027270][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.068253][T11590] device veth0_vlan entered promiscuous mode [ 852.139187][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.161802][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.222025][T11590] device veth1_vlan entered promiscuous mode [ 852.269949][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 852.305325][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 852.364474][T11590] device veth0_macvtap entered promiscuous mode [ 852.497009][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.518194][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.580850][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 852.631897][T11590] device veth1_macvtap entered promiscuous mode [ 852.771002][T11590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.804249][T11590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.825229][T11590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.865462][T11590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.905261][T11590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.935490][T11590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.976552][T11590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.052928][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.070307][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.115997][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.181751][T11590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.235113][T11590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.289580][T11590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.342126][T11590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.373028][T11590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.413811][T11590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.444300][T11590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.493129][T10880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 853.539312][T10880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 854.172401][T12007] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 854.416784][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 854.443267][T12007] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 854.559484][T12007] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 854.606679][ T5584] device hsr_slave_0 left promiscuous mode [ 854.640225][ T5584] device hsr_slave_1 left promiscuous mode [ 854.692986][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 854.705474][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 854.716147][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 854.723675][T12095] loop8: detected capacity change from 0 to 1024 [ 854.725120][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 854.759344][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 854.769685][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 854.862186][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.940996][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.074377][ T5584] device bridge_slave_1 left promiscuous mode [ 855.095711][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.125637][ T5584] device bridge_slave_0 left promiscuous mode [ 855.139644][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.305262][ T4373] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 855.505442][ T4373] usb 5-1: Using ep0 maxpacket: 16 [ 855.514675][ T4373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.549538][ T4373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.586081][ T4373] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 855.616533][ T4373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.676016][ T4373] usb 5-1: config 0 descriptor?? [ 855.871059][ T5584] team0 (unregistering): Port device team_slave_1 removed [ 856.034822][ T5584] team0 (unregistering): Port device team_slave_0 removed [ 856.112616][ T4373] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0 [ 856.125993][ T4373] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0 [ 856.134115][ T4373] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0 [ 856.142894][ T4373] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0 [ 856.152449][ T4373] konepure 0003:1E7D:2DB4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 856.262673][ T5584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.459564][ T4342] usb 5-1: USB disconnect, device number 4 [ 856.877587][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 856.964491][T12114] fido_id[12114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 857.184159][ T5584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.616409][T12130] loop4: detected capacity change from 0 to 8 [ 857.880661][T12130] syz.4.1635: attempt to access beyond end of device [ 857.880661][T12130] loop4: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 857.895562][T12130] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 857.903221][T12130] unable to read xattr id index table [ 858.364262][ T5584] bond0 (unregistering): Released all slaves [ 858.482029][T12007] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 858.637193][ T4342] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 858.826912][ T4342] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 858.891256][ T4342] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 858.945368][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 858.978968][ T4342] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 859.020045][T12007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.050855][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 859.084575][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 859.110365][ T4342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.138415][T12007] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.155947][ T4342] usb 5-1: config 0 descriptor?? [ 859.179453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 859.204358][ T4342] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 859.219615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 859.295840][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.303514][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.355561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 859.392180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 859.406153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 859.434655][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.434905][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.450718][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.505639][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.567368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 859.602285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 859.643196][T12094] chnl_net:caif_netlink_parms(): no params data found [ 859.685660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 859.706080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 859.722043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 859.760897][ T6373] usb 5-1: USB disconnect, device number 5 [ 859.781216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 859.814194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 859.842006][T12007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 859.845397][ T4342] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 859.904066][T12007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 859.966273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 860.002838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 860.024288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 860.053516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 860.075278][ T4342] usb 3-1: Using ep0 maxpacket: 32 [ 860.082272][ T4342] usb 3-1: config index 0 descriptor too short (expected 6683, got 27) [ 860.101616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 860.128932][ T4342] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 860.147399][ T4342] usb 3-1: config 0 has no interface number 0 [ 860.182124][ T4342] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 860.224416][ T4342] usb 3-1: config 0 interface 85 has no altsetting 0 [ 860.267342][ T4342] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 860.277330][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.285751][ T4342] usb 3-1: Product: syz [ 860.290424][ T4342] usb 3-1: Manufacturer: syz [ 860.295038][ T4342] usb 3-1: SerialNumber: syz [ 860.310496][ T4342] usb 3-1: config 0 descriptor?? [ 860.610003][T12175] loop4: detected capacity change from 0 to 8 [ 861.189606][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 861.210578][T12094] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.237850][T12094] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.291138][T12094] device bridge_slave_0 entered promiscuous mode [ 861.357013][T12094] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.375467][T12094] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.392616][T12094] device bridge_slave_1 entered promiscuous mode [ 861.451794][ T4342] appletouch 3-1:0.85: Geyser mode initialized. [ 861.513838][ T4342] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input11 [ 861.565275][ T6373] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 861.687076][ T4342] usb 3-1: USB disconnect, device number 9 [ 861.692984][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 861.802638][ T6373] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.823702][ T6373] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.894537][ T4342] appletouch 3-1:0.85: input: appletouch disconnected [ 861.904478][ T6373] usb 9-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 861.937114][ T6373] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.967276][T12094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.001328][ T6373] usb 9-1: config 0 descriptor?? [ 862.187563][T12094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.413335][T12094] team0: Port device team_slave_0 added [ 862.432600][ T6373] hid-retrode 0003:0403:97C1.000D: report_id 55601 is invalid [ 862.468751][ T6373] hid-retrode 0003:0403:97C1.000D: item 0 2 1 8 parsing failed [ 862.479503][T12007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.487407][ T6373] hid-retrode: probe of 0003:0403:97C1.000D failed with error -22 [ 862.509840][T12094] team0: Port device team_slave_1 added [ 862.549259][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 862.591756][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 862.649111][T12094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.662463][ T22] usb 9-1: USB disconnect, device number 7 [ 862.685542][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 862.740661][T12094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.902687][T12094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.946694][T12094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.975269][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 862.987728][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 863.005550][T12094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.044697][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 863.085064][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 863.154136][T12094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.178661][ T27] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 863.265313][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 863.285108][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.331654][ T27] usb 5-1: Product: syz [ 863.359663][ T27] usb 5-1: Manufacturer: syz [ 863.385743][ T27] usb 5-1: SerialNumber: syz [ 863.427050][ T27] usb 5-1: config 0 descriptor?? [ 863.622333][T12094] device hsr_slave_0 entered promiscuous mode [ 863.647204][ T4372] usb 5-1: USB disconnect, device number 6 [ 863.703096][T12094] device hsr_slave_1 entered promiscuous mode [ 863.741454][T12094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.765915][T12094] Cannot create hsr debugfs directory [ 863.965518][ T9118] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 864.086790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 864.105069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 864.196919][ T9118] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 864.237089][ T9118] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.265447][ T9118] usb 9-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 864.300206][ T9118] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.353214][ T9118] usb 9-1: config 0 descriptor?? [ 864.408616][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 865.177822][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 865.326269][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 865.404112][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 865.414301][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.442998][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.451384][T12007] device veth0_vlan entered promiscuous mode [ 865.471760][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.495601][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.502948][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.575851][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.617233][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.624621][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.663156][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.683566][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.705278][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.712905][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.769896][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.773244][T12007] device veth1_vlan entered promiscuous mode [ 865.836462][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.884552][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.904849][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.954319][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.971958][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 865.981217][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.009861][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.055320][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.073035][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.103323][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.135295][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.142932][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.185322][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.288266][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.306315][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.313542][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 866.335257][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 867.196418][T12243] loop8: detected capacity change from 0 to 16 [ 867.212888][T12243] erofs: (device loop8): mounted with root inode @ nid 36. [ 867.275217][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 867.295043][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 867.325716][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 867.332911][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 867.455967][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 867.486710][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 867.494555][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 867.527015][ T26] audit: type=1800 audit(2000000412.150:260): pid=12247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1651" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 867.575703][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 867.611531][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.015496][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.023186][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.095074][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.106760][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.122959][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.143297][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.162565][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.194716][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.220099][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.235292][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.255322][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.275277][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.290330][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.313647][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.335235][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.344052][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.365222][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.395315][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.403345][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.441645][ T9118] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 868.449586][ T9118] redragon 0003:0C45:760B.000E: unexpected long global item [ 868.466054][ T9118] redragon: probe of 0003:0C45:760B.000E failed with error -22 [ 868.495504][ T9118] usb 9-1: USB disconnect, device number 8 [ 868.813213][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 869.024582][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 869.191751][T12007] device veth0_macvtap entered promiscuous mode [ 869.368582][T12007] device veth1_macvtap entered promiscuous mode [ 869.494714][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.532033][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.552313][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.583287][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.605232][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.655570][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.680608][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.715287][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 869.723009][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.774072][T12007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.878329][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 869.905563][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 869.916495][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 869.929148][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 870.026081][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 870.060582][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 870.070618][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 870.079584][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.106087][ T27] usb 3-1: Product: syz [ 870.122708][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.147737][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.154644][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.175422][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.192441][ T27] usb 3-1: Manufacturer: syz [ 870.205261][ T27] usb 3-1: SerialNumber: syz [ 870.214058][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.294801][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.325304][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.424718][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.445266][T12007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.495430][T12007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.535957][T12007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.600779][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 870.648676][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 870.674631][ T27] usb 3-1: cannot find UAC_HEADER [ 870.720981][T12007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.769152][T12007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.781812][ T27] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 870.823482][T10976] udevd[10976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.824336][T12007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.850918][ T27] usb 3-1: USB disconnect, device number 10 [ 870.954868][T12007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.040570][T10880] device hsr_slave_0 left promiscuous mode [ 871.095822][T10880] device hsr_slave_1 left promiscuous mode [ 871.111278][T10880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.146158][T10880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.179965][T10880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.191888][T10880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.210582][T10880] device bridge_slave_1 left promiscuous mode [ 871.225891][T10880] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.274229][T10880] device bridge_slave_0 left promiscuous mode [ 871.317900][T10880] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.470551][T10880] device veth1_macvtap left promiscuous mode [ 871.501155][T10880] device veth0_macvtap left promiscuous mode [ 871.528684][T10880] device veth1_vlan left promiscuous mode [ 871.556894][T10880] device veth0_vlan left promiscuous mode [ 872.105290][ T4377] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 872.325380][ T4377] usb 3-1: Using ep0 maxpacket: 32 [ 872.334143][ T4377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.395427][ T4377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.441643][ T4377] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.505242][ T4377] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 872.535061][ T4377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.601492][ T4377] usb 3-1: config 0 descriptor?? [ 872.885748][ T4342] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 873.076567][T12303] loop8: detected capacity change from 0 to 16 [ 873.086420][ T4377] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.000F/input/input12 [ 873.105346][ T4342] usb 5-1: Using ep0 maxpacket: 16 [ 873.112221][ T4342] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 873.122631][T12303] erofs: (device loop8): mounted with root inode @ nid 36. [ 873.130437][ T4342] usb 5-1: config 0 has no interface number 0 [ 873.137217][ T4342] usb 5-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 873.284317][T12297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.297042][ T4342] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 873.310619][ T4342] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 873.319066][ T4342] usb 5-1: Product: syz [ 873.321571][ T4377] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.000F/input/input13 [ 873.349756][T12297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.455298][ T26] audit: type=1800 audit(2000000418.010:261): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1661" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 873.740835][ T4377] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.000F/input/input14 [ 873.922046][ T4377] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.000F/input/input15 [ 873.945504][ T4342] usb 5-1: Manufacturer: syz [ 873.950575][ T4377] hid-udraw 0003:20D6:CB17.000F: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 873.974924][ T4377] usb 3-1: USB disconnect, device number 11 [ 873.982883][ T4342] usb 5-1: SerialNumber: syz [ 874.029092][ T4342] usb 5-1: config 0 descriptor?? [ 874.036104][T12301] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 874.273746][ T4342] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 874.285719][ T4342] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 874.296958][ T4342] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 874.325503][ T4342] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 874.336061][ T4342] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 874.378381][ T4342] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 874.406941][ T4342] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 874.435991][ T4342] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 874.456713][ T4342] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 874.491132][ T4342] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 874.545095][ T4342] usb 5-1: USB disconnect, device number 7 [ 874.633422][ T4342] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 874.642959][T12309] fido_id[12309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 874.676845][ T4342] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 874.714618][ T4342] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 874.757854][ T4342] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 874.775473][ T4342] keyspan 5-1:0.107: device disconnected [ 874.895323][ T4307] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 875.140106][ T4307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.176778][ T4307] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 875.236460][ T4307] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.256164][ T4307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.264169][ T4307] usb 3-1: Product: syz [ 875.295404][ T4307] usb 3-1: Manufacturer: syz [ 875.300042][ T4307] usb 3-1: SerialNumber: syz [ 875.397427][T10880] team0 (unregistering): Port device team_slave_1 removed [ 875.516114][T12312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.555601][T12312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.581462][ T4307] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 875.804908][ T4307] usb 3-1: USB disconnect, device number 12 [ 876.763054][T10880] team0 (unregistering): Port device team_slave_0 removed [ 877.048853][ T4307] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 877.138864][T10880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.255349][ T4307] usb 3-1: Using ep0 maxpacket: 8 [ 877.263958][ T4307] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 877.310118][ T4307] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 877.347117][ T4307] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 877.357996][T10880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.370435][ T4307] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 877.391795][ T4307] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 877.414408][ T4307] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.444844][ T4307] usb 3-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 877.469566][ T4307] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 877.489007][ T4307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.786749][ T4307] usb 3-1: can't set config #16, error -71 [ 877.834750][ T4307] usb 3-1: USB disconnect, device number 13 [ 878.620000][ T4377] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 879.586852][ T4377] usb 5-1: Using ep0 maxpacket: 8 [ 880.602823][ T4377] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 880.621867][ T4377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.644411][ T4377] usb 5-1: Product: syz [ 880.652234][ T4377] usb 5-1: Manufacturer: syz [ 881.703238][ T4377] usb 5-1: SerialNumber: syz [ 881.719306][ T4377] usb 5-1: config 0 descriptor?? [ 881.869153][ T4377] usb 5-1: can't set config #0, error -71 [ 881.911649][ T4377] usb 5-1: USB disconnect, device number 8 [ 882.697291][T12358] loop2: detected capacity change from 0 to 512 [ 882.790785][T12358] /dev/loop2: Can't open blockdev [ 883.023531][T12358] input: syz1 as /devices/virtual/input/input16 [ 884.146878][T12369] loop2: detected capacity change from 0 to 8 [ 884.250884][T11006] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 884.376200][T10880] bond0 (unregistering): Released all slaves [ 884.823870][T12094] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 884.890863][T12094] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 884.939073][ T4505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.971980][T12094] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 884.988723][ T4505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.094232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 885.113677][T12094] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 885.151616][ T4505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.214855][ T4505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.249435][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 885.446753][T12094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.578985][T12389] loop6: detected capacity change from 0 to 16 [ 885.621378][T12389] erofs: (device loop6): mounted with root inode @ nid 36. [ 886.081614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 886.415830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 886.591470][T12094] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.909039][ T26] audit: type=1800 audit(2000000431.470:262): pid=12399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1421" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 888.022808][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 888.535941][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 889.252189][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.259469][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.405647][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 889.463432][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 889.482573][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.491343][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.540849][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 889.585470][ T952] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 889.638708][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 889.696553][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 889.741457][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 889.763382][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 889.803932][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 889.811571][ T952] usb 7-1: Using ep0 maxpacket: 8 [ 889.821678][ T952] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=39.e6 [ 889.873189][ T952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.874789][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 889.935302][ T952] usb 7-1: Product: syz [ 889.939868][ T952] usb 7-1: Manufacturer: syz [ 889.944652][ T952] usb 7-1: SerialNumber: syz [ 889.956724][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 889.996682][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 890.058511][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 890.115988][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 890.128401][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 890.167923][T12094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 890.876488][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.915713][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.972302][ T952] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 890.997792][ T952] dvb-usb: bulk message failed: -22 (4/0) [ 891.015007][ T952] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 891.057385][ T952] dvb-usb: bulk message failed: -22 (5/0) [ 891.063245][ T952] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 891.159841][ T952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 891.195783][ T952] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 891.227291][ T952] usb 7-1: media controller created [ 892.365199][ T9118] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 892.447270][ T952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 892.585207][ T9118] usb 9-1: Using ep0 maxpacket: 16 [ 892.592341][ T9118] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 892.606509][ T952] usb 7-1: selecting invalid altsetting 3 [ 892.626292][ T952] ttusb2: set interface to alts=3 failed [ 892.700073][ T9118] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 892.739472][ T9118] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 892.769852][ T9118] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 892.793874][ T9118] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 893.535340][ T9118] usb 9-1: config 0 has no interface number 0 [ 893.550015][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 893.575277][ T9118] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 893.585837][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 893.608327][ T952] DVB: Unable to find symbol tda10086_attach() [ 893.623966][ T952] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 893.632669][ T9118] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 893.648116][T12094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.750975][T12443] loop2: detected capacity change from 0 to 1024 [ 893.783210][ T952] dvb-usb: bulk message failed: -22 (4/0) [ 894.760896][ T9118] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 894.771748][ T952] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 894.809460][ T9118] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 894.835378][ T952] dvb-usb: bulk message failed: -22 (5/0) [ 894.841434][ T952] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 894.899898][ T9118] usb 9-1: config 0 interface 125 has no altsetting 0 [ 894.985323][ T952] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 894.996876][ T9118] usb 9-1: config 0 interface 125 has no altsetting 2 [ 895.034804][ T9118] usb 9-1: string descriptor 0 read error: -71 [ 895.078231][ T952] usb 7-1: USB disconnect, device number 4 [ 895.118684][ T9118] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 895.357987][ T9118] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.538332][T12468] loop2: detected capacity change from 0 to 8 [ 896.573880][T12468] /dev/loop2: Can't open blockdev [ 896.699166][ T9118] usb 9-1: config 0 descriptor?? [ 896.731301][ T9118] usb 9-1: can't set config #0, error -71 [ 896.764396][ T952] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 896.977577][ T9118] usb 9-1: USB disconnect, device number 9 [ 897.016337][T11006] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 897.335326][ T9118] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 897.536786][ T9118] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 897.569331][ T9118] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.617561][ T9118] usb 9-1: config 0 descriptor?? [ 898.504760][ T9118] ------------[ cut here ]------------ [ 898.510632][ T9118] WARNING: CPU: 0 PID: 9118 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x494/0x5d0 [ 898.523051][ T9118] Modules linked in: [ 898.527253][ T9118] CPU: 0 PID: 9118 Comm: kworker/0:4 Not tainted 6.1.143-syzkaller #0 [ 898.535836][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 898.546054][ T9118] Workqueue: usb_hub_wq hub_event [ 898.551113][ T9118] RIP: 0010:ath6kl_bmi_get_target_info+0x494/0x5d0 [ 898.557708][ T9118] Code: 04 20 84 c0 0f 85 36 01 00 00 48 8b 44 24 10 8b 30 48 c7 c7 40 be 21 8b 44 89 ea e8 56 66 53 04 e9 e1 fd ff ff e8 4c 24 c2 fb <0f> 0b 41 bd ea ff ff ff e9 cf fd ff ff e8 3a 24 c2 fb 45 31 ed e9 [ 898.577455][ T9118] RSP: 0018:ffffc90003f86c40 EFLAGS: 00010283 [ 898.583782][ T9118] RAX: ffffffff85beb334 RBX: 1ffff920007f0d90 RCX: 0000000000100000 [ 898.592343][ T9118] RDX: ffffc9001bc65000 RSI: 000000000001a6be RDI: 000000000001a6bf [ 898.600867][ T9118] RBP: ffffc90003f86d10 R08: dffffc0000000000 R09: fffffbfff215c256 [ 898.609225][ T9118] R10: fffffbfff215c256 R11: 1ffffffff215c255 R12: dffffc0000000000 [ 898.617568][ T9118] R13: 0000000000000000 R14: ffff888076cc0e80 R15: 1ffff1100ed981d6 [ 898.625559][ T9118] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 898.634571][ T9118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 898.641178][ T9118] CR2: 00007f7b1bcaee9c CR3: 0000000057c2d000 CR4: 00000000003506f0 [ 898.649268][ T9118] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 898.657268][ T9118] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 898.665271][ T9118] Call Trace: [ 898.668543][ T9118] [ 898.671457][ T9118] ? ath6kl_usb_post_recv_transfers+0x497/0x6f0 [ 898.677725][ T9118] ? ath6kl_bmi_done+0x190/0x190 [ 898.682672][ T9118] ? ath6kl_bmi_init+0x67/0xe0 [ 898.687463][ T9118] ? __kmalloc+0xe1/0x240 [ 898.691781][ T9118] ath6kl_core_init+0x1fe/0x10c0 [ 898.696736][ T9118] ? lockdep_softirqs_off+0x420/0x420 [ 898.702123][ T9118] ? ath6kl_core_rx_complete+0x70/0x70 [ 898.707617][ T9118] ? ath6kl_core_create+0x7d6/0x980 [ 898.712919][ T9118] ath6kl_usb_probe+0x144a/0x1540 [ 898.717993][ T9118] ? _raw_spin_unlock+0x40/0x40 [ 898.722856][ T9118] usb_probe_interface+0x5a0/0xaf0 [ 898.728010][ T9118] ? usb_register_driver+0x3d0/0x3d0 [ 898.733293][ T9118] really_probe+0x2aa/0xc70 [ 898.737822][ T9118] ? pm_runtime_barrier+0x147/0x1c0 [ 898.743026][ T9118] __driver_probe_device+0x18c/0x330 [ 898.748331][ T9118] driver_probe_device+0x4f/0x420 [ 898.753342][ T9118] __device_attach_driver+0x2c6/0x510 [ 898.758812][ T9118] ? coredump_store+0x90/0x90 [ 898.763478][ T9118] bus_for_each_drv+0x175/0x200 [ 898.768349][ T9118] ? _raw_spin_unlock+0x40/0x40 [ 898.773384][ T9118] ? subsys_find_device_by_id+0x350/0x350 [ 898.779332][ T9118] __device_attach+0x29b/0x460 [ 898.784134][ T9118] ? device_attach+0x20/0x20 [ 898.788752][ T9118] ? kobject_uevent_env+0x35f/0x8a0 [ 898.793952][ T9118] bus_probe_device+0xbc/0x1e0 [ 898.798741][ T9118] ? device_add+0x97c/0xfb0 [ 898.803244][ T9118] device_add+0xa00/0xfb0 [ 898.807603][ T9118] usb_set_configuration+0x1991/0x1fd0 [ 898.814647][ T9118] usb_generic_driver_probe+0x89/0x150 [ 898.820855][ T9118] usb_probe_device+0x139/0x270 [ 898.826462][ T9118] ? usb_register_device_driver+0x230/0x230 [ 898.832485][ T9118] really_probe+0x2aa/0xc70 [ 898.837024][ T9118] ? pm_runtime_barrier+0x147/0x1c0 [ 898.843194][ T9118] __driver_probe_device+0x18c/0x330 [ 898.849158][ T9118] driver_probe_device+0x4f/0x420 [ 898.854362][ T9118] __device_attach_driver+0x2c6/0x510 [ 898.859876][ T9118] ? coredump_store+0x90/0x90 [ 898.864571][ T9118] bus_for_each_drv+0x175/0x200 [ 898.869729][ T9118] ? _raw_spin_unlock+0x40/0x40 [ 898.874572][ T9118] ? subsys_find_device_by_id+0x350/0x350 [ 898.880324][ T9118] __device_attach+0x29b/0x460 [ 898.885076][ T9118] ? device_attach+0x20/0x20 [ 898.890035][ T9118] ? __kmem_cache_free+0xb6/0x1f0 [ 898.895268][ T9118] ? kobject_uevent_env+0x35f/0x8a0 [ 898.900553][ T9118] bus_probe_device+0xbc/0x1e0 [ 898.905343][ T9118] ? device_add+0x97c/0xfb0 [ 898.909842][ T9118] device_add+0xa00/0xfb0 [ 898.914165][ T9118] usb_new_device+0xd4d/0x1620 [ 898.918955][ T9118] ? lock_chain_count+0x20/0x20 [ 898.923885][ T9118] ? usb_disconnect+0x8a0/0x8a0 [ 898.928759][ T9118] ? _raw_spin_unlock_irq+0x1f/0x40 [ 898.933945][ T9118] ? lockdep_hardirqs_on+0x94/0x140 [ 898.939251][ T9118] hub_event+0x2b02/0x5210 [ 898.943944][ T9118] ? led_work+0x6e0/0x6e0 [ 898.948376][ T9118] ? read_lock_is_recursive+0x10/0x10 [ 898.953918][ T9118] ? preempt_schedule_thunk+0x16/0x18 [ 898.959338][ T9118] ? process_one_work+0x7a1/0x1160 [ 898.964444][ T9118] process_one_work+0x898/0x1160 [ 898.969417][ T9118] ? worker_detach_from_pool+0x240/0x240 [ 898.975048][ T9118] ? _raw_spin_lock_irq+0xab/0xe0 [ 898.980089][ T9118] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 898.985746][ T9118] ? kthread_data+0x4b/0xc0 [ 898.990430][ T9118] worker_thread+0xd62/0x1250 [ 898.995296][ T9118] ? __kthread_parkme+0x162/0x1c0 [ 899.001474][ T9118] kthread+0x29d/0x330 [ 899.005898][ T9118] ? worker_clr_flags+0x1a0/0x1a0 [ 899.011367][ T9118] ? kthread_blkcg+0xd0/0xd0 [ 899.016030][ T9118] ret_from_fork+0x1f/0x30 [ 899.020805][ T9118] [ 899.023828][ T9118] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 899.031095][ T9118] CPU: 0 PID: 9118 Comm: kworker/0:4 Not tainted 6.1.143-syzkaller #0 [ 899.039234][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 899.049985][ T9118] Workqueue: usb_hub_wq hub_event [ 899.055005][ T9118] Call Trace: [ 899.059271][ T9118] [ 899.064504][ T9118] dump_stack_lvl+0x168/0x22e [ 899.071420][ T9118] ? memcpy+0x3c/0x60 [ 899.076085][ T9118] ? show_regs_print_info+0x12/0x12 [ 899.081276][ T9118] ? load_image+0x3b0/0x3b0 [ 899.085772][ T9118] panic+0x2c9/0x710 [ 899.089749][ T9118] ? bpf_jit_dump+0xd0/0xd0 [ 899.094244][ T9118] ? ret_from_fork+0x1f/0x30 [ 899.098823][ T9118] __warn+0x2f8/0x4f0 [ 899.102793][ T9118] ? ath6kl_bmi_get_target_info+0x494/0x5d0 [ 899.108675][ T9118] ? ath6kl_bmi_get_target_info+0x494/0x5d0 [ 899.114571][ T9118] report_bug+0x2ba/0x4f0 [ 899.118891][ T9118] ? ath6kl_bmi_get_target_info+0x494/0x5d0 [ 899.124771][ T9118] handle_bug+0x3a/0x70 [ 899.129004][ T9118] exc_invalid_op+0x16/0x40 [ 899.133498][ T9118] asm_exc_invalid_op+0x16/0x20 [ 899.138455][ T9118] RIP: 0010:ath6kl_bmi_get_target_info+0x494/0x5d0 [ 899.144948][ T9118] Code: 04 20 84 c0 0f 85 36 01 00 00 48 8b 44 24 10 8b 30 48 c7 c7 40 be 21 8b 44 89 ea e8 56 66 53 04 e9 e1 fd ff ff e8 4c 24 c2 fb <0f> 0b 41 bd ea ff ff ff e9 cf fd ff ff e8 3a 24 c2 fb 45 31 ed e9 [ 899.164807][ T9118] RSP: 0018:ffffc90003f86c40 EFLAGS: 00010283 [ 899.170950][ T9118] RAX: ffffffff85beb334 RBX: 1ffff920007f0d90 RCX: 0000000000100000 [ 899.178910][ T9118] RDX: ffffc9001bc65000 RSI: 000000000001a6be RDI: 000000000001a6bf [ 899.186870][ T9118] RBP: ffffc90003f86d10 R08: dffffc0000000000 R09: fffffbfff215c256 [ 899.194825][ T9118] R10: fffffbfff215c256 R11: 1ffffffff215c255 R12: dffffc0000000000 [ 899.202778][ T9118] R13: 0000000000000000 R14: ffff888076cc0e80 R15: 1ffff1100ed981d6 [ 899.210765][ T9118] ? ath6kl_bmi_get_target_info+0x494/0x5d0 [ 899.216661][ T9118] ? ath6kl_usb_post_recv_transfers+0x497/0x6f0 [ 899.223201][ T9118] ? ath6kl_bmi_done+0x190/0x190 [ 899.228506][ T9118] ? ath6kl_bmi_init+0x67/0xe0 [ 899.233454][ T9118] ? __kmalloc+0xe1/0x240 [ 899.238475][ T9118] ath6kl_core_init+0x1fe/0x10c0 [ 899.243915][ T9118] ? lockdep_softirqs_off+0x420/0x420 [ 899.249499][ T9118] ? ath6kl_core_rx_complete+0x70/0x70 [ 899.255053][ T9118] ? ath6kl_core_create+0x7d6/0x980 [ 899.260257][ T9118] ath6kl_usb_probe+0x144a/0x1540 [ 899.266464][ T9118] ? _raw_spin_unlock+0x40/0x40 [ 899.275418][ T9118] usb_probe_interface+0x5a0/0xaf0 [ 899.282111][ T9118] ? usb_register_driver+0x3d0/0x3d0 [ 899.288282][ T9118] really_probe+0x2aa/0xc70 [ 899.292794][ T9118] ? pm_runtime_barrier+0x147/0x1c0 [ 899.297992][ T9118] __driver_probe_device+0x18c/0x330 [ 899.303267][ T9118] driver_probe_device+0x4f/0x420 [ 899.308285][ T9118] __device_attach_driver+0x2c6/0x510 [ 899.313646][ T9118] ? coredump_store+0x90/0x90 [ 899.318312][ T9118] bus_for_each_drv+0x175/0x200 [ 899.323514][ T9118] ? _raw_spin_unlock+0x40/0x40 [ 899.328355][ T9118] ? subsys_find_device_by_id+0x350/0x350 [ 899.334335][ T9118] __device_attach+0x29b/0x460 [ 899.339118][ T9118] ? device_attach+0x20/0x20 [ 899.343700][ T9118] ? kobject_uevent_env+0x35f/0x8a0 [ 899.349243][ T9118] bus_probe_device+0xbc/0x1e0 [ 899.353998][ T9118] ? device_add+0x97c/0xfb0 [ 899.358494][ T9118] device_add+0xa00/0xfb0 [ 899.362824][ T9118] usb_set_configuration+0x1991/0x1fd0 [ 899.368506][ T9118] usb_generic_driver_probe+0x89/0x150 [ 899.374343][ T9118] usb_probe_device+0x139/0x270 [ 899.379291][ T9118] ? usb_register_device_driver+0x230/0x230 [ 899.385180][ T9118] really_probe+0x2aa/0xc70 [ 899.389678][ T9118] ? pm_runtime_barrier+0x147/0x1c0 [ 899.394888][ T9118] __driver_probe_device+0x18c/0x330 [ 899.400287][ T9118] driver_probe_device+0x4f/0x420 [ 899.405315][ T9118] __device_attach_driver+0x2c6/0x510 [ 899.410672][ T9118] ? coredump_store+0x90/0x90 [ 899.415340][ T9118] bus_for_each_drv+0x175/0x200 [ 899.420276][ T9118] ? _raw_spin_unlock+0x40/0x40 [ 899.425125][ T9118] ? subsys_find_device_by_id+0x350/0x350 [ 899.430848][ T9118] __device_attach+0x29b/0x460 [ 899.435602][ T9118] ? device_attach+0x20/0x20 [ 899.440174][ T9118] ? __kmem_cache_free+0xb6/0x1f0 [ 899.445188][ T9118] ? kobject_uevent_env+0x35f/0x8a0 [ 899.450697][ T9118] bus_probe_device+0xbc/0x1e0 [ 899.455487][ T9118] ? device_add+0x97c/0xfb0 [ 899.460095][ T9118] device_add+0xa00/0xfb0 [ 899.464445][ T9118] usb_new_device+0xd4d/0x1620 [ 899.469227][ T9118] ? lock_chain_count+0x20/0x20 [ 899.474082][ T9118] ? usb_disconnect+0x8a0/0x8a0 [ 899.478933][ T9118] ? _raw_spin_unlock_irq+0x1f/0x40 [ 899.484123][ T9118] ? lockdep_hardirqs_on+0x94/0x140 [ 899.489314][ T9118] hub_event+0x2b02/0x5210 [ 899.493750][ T9118] ? led_work+0x6e0/0x6e0 [ 899.498068][ T9118] ? read_lock_is_recursive+0x10/0x10 [ 899.503433][ T9118] ? preempt_schedule_thunk+0x16/0x18 [ 899.508813][ T9118] ? process_one_work+0x7a1/0x1160 [ 899.514021][ T9118] process_one_work+0x898/0x1160 [ 899.519401][ T9118] ? worker_detach_from_pool+0x240/0x240 [ 899.525459][ T9118] ? _raw_spin_lock_irq+0xab/0xe0 [ 899.530469][ T9118] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 899.535916][ T9118] ? kthread_data+0x4b/0xc0 [ 899.540438][ T9118] worker_thread+0xd62/0x1250 [ 899.545272][ T9118] ? __kthread_parkme+0x162/0x1c0 [ 899.550323][ T9118] kthread+0x29d/0x330 [ 899.554403][ T9118] ? worker_clr_flags+0x1a0/0x1a0 [ 899.559421][ T9118] ? kthread_blkcg+0xd0/0xd0 [ 899.564017][ T9118] ret_from_fork+0x1f/0x30 [ 899.568435][ T9118] [ 899.571795][ T9118] Kernel Offset: disabled [ 899.576170][ T9118] Rebooting in 86400 seconds..