last executing test programs: 4m56.389569737s ago: executing program 0 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000580)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x0, 0xca}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r5, 0x0, 0x24000040) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {0x0, 0x8}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0x46}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2000}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) epoll_create(0x7) 4m55.345997611s ago: executing program 0 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000180)) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, 0x0, &(0x7f0000000240)='./file0\x00') futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, 0x0, 0x24202, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x70) fchdir(r5) syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs3D2LXFUYB/D/uXfeFiLrBxBcSCMKRrETF2Oha7og2gnaWqxILMRCdgcVwZcPYCtaGIUQawUFCWKsrERYYiFib2GacGTuy0xAsZlFCfx+xZznnHue57mXe9sz4c5Wd5Nakuvd7KO2GybNw33wW/L2NFm+8EQy7xOmQ2JJ8tzlJ5+6sHexzNdrq9Xj4ep802U2jJPsDdGXk3xw+eCdLj5OyVGGMNPPZ5ms9tY+78O/3/TNkrbbw/9s8nXtX8QsP+aLJIelXb38ebLMJ8ndWXT7ziVpa63daz5OdpJ2/VVs4cr+teXjQ7yT4Uub9rOjd0t9aLg2Ta21Njk6O2a2yT2Pnbv0T0W7/GX3eONSrXV6ZsxtNhcOb80mw+yR7345ynKxrp7abEqe7CSvnDzzYHcnpa8x3f7xAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Zfe9ev83zTg53/2Wdfz0p2k2W49z7zreW5xS/yv713bffOtSk9f3X/rp5Td+Pfg9fyRp2xycSebrfS/2w9X3umEyrLZb9z+81cw++/jbnfXCULok35/9+WYdO5wM42uP3pa832zdHwAAAAAAAAAAAAAAAAAAAFau5sLexSbPfnWj5PlsjvvXLJJSxukiqbXWP2tnPPz/w3gOP9dvpKySUsvt1c8nu3cldf7+A93fCvSJtdZJ16L8J4/Iv/grAAD//x/vY/E=") mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x9) openat$null(0xffffffffffffff9c, 0x0, 0x200, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0xc004) 4m53.665984361s ago: executing program 0 (id=400): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x11, 0x148, 0x260, 0x0, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x200, 0x260, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x3, 0x6, 0x6, 0x8, 0x6e69}}, @common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x10, 0x8, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x6, 0x6, 0x5, 0x6], 0x1}, {0xffffffffffffffff, [0x1, 0x6, 0x7, 0xe, 0x4, 0x3], 0x1, 0x6}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}, 0x8}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x50703}}, 0x20}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) 4m43.952070556s ago: executing program 0 (id=417): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback}}}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000), 0x90) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000180)={0x15}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6, 0x4, '\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000080)) ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) 4m42.477767271s ago: executing program 0 (id=418): mknod$loop(0x0, 0xfff, 0x1) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x3a}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x8d8a4000) r3 = userfaultfd(0x80001) ftruncate(0xffffffffffffffff, 0x8008976) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) preadv(r4, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 4m40.658577943s ago: executing program 0 (id=420): mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs\x00', 0x0, 0x44000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x80083) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80005, 0x6, 0x20009c}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f007, 0x2}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002400)={r4, 0x0, &(0x7f00000023c0)=""/24}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000007000000d200000004", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 4m25.176638292s ago: executing program 32 (id=420): mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs\x00', 0x0, 0x44000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x80083) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80005, 0x6, 0x20009c}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f007, 0x2}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002400)={r4, 0x0, &(0x7f00000023c0)=""/24}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000007000000d200000004", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 51.258467941s ago: executing program 4 (id=1366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x8, 0x8000000c, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x2, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000400000005, 0x800040068], 0x54000, 0x2547d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.531763658s ago: executing program 4 (id=1367): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x6f4}}, 0x0) 50.531143928s ago: executing program 4 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x4000, 0x0) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[], 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 50.341636353s ago: executing program 4 (id=1371): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x80}}]}, 0x21, 0x501, &(0x7f0000000840)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 50.0252023s ago: executing program 4 (id=1378): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 47.522028368s ago: executing program 4 (id=1391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x11}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0xfec00001, 0xdddd0000, 0xd, 0x5, 0x3, 0xe8, 0x9, 0xc3, 0x0, 0x4, 0x4, 0xe}, {0x50000, 0x0, 0xc, 0x1, 0x5, 0x30, 0x7, 0x3, 0x4, 0xd, 0x0, 0x80}, {0x209000, 0x7000, 0x4, 0xfd, 0x0, 0x11, 0x4, 0x7, 0x8, 0xe1, 0x9, 0x83}, {0x8000000, 0xeeef0000, 0x0, 0x4, 0x1, 0xb, 0x0, 0x4, 0x0, 0x19, 0x6, 0x40}, {0xdddd0000, 0x40000, 0xd, 0x0, 0x2, 0xd4, 0x2, 0x71, 0x0, 0x41, 0x7, 0x8a}, {0xf000, 0x2000, 0x9, 0x10, 0xff, 0xd5, 0x5, 0xf9, 0x6, 0x73, 0x9, 0x9}, {0x4000, 0xb000, 0xe, 0xc, 0x7, 0x9, 0x3, 0x4, 0x2, 0xeb, 0x3, 0xb}, {0x54000, 0xffff1000, 0xe, 0x7, 0x2, 0x5, 0xf9, 0x7, 0x2, 0x0, 0x84, 0xd}, {0x7000, 0xff}, {0x80a0000, 0xfbf9}, 0x40050002, 0x0, 0x30000, 0x10026a, 0xc, 0xb900, 0x1000, [0x1, 0x8, 0xfffffffffffffffb, 0x6]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@arm64={0x50, 0xa, 0x49, '\x00', 0x7}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0x70000, 0xfffffffffffffffd, 0xc, 0x2}) 47.324676312s ago: executing program 33 (id=1391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000640)={0x11}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0xfec00001, 0xdddd0000, 0xd, 0x5, 0x3, 0xe8, 0x9, 0xc3, 0x0, 0x4, 0x4, 0xe}, {0x50000, 0x0, 0xc, 0x1, 0x5, 0x30, 0x7, 0x3, 0x4, 0xd, 0x0, 0x80}, {0x209000, 0x7000, 0x4, 0xfd, 0x0, 0x11, 0x4, 0x7, 0x8, 0xe1, 0x9, 0x83}, {0x8000000, 0xeeef0000, 0x0, 0x4, 0x1, 0xb, 0x0, 0x4, 0x0, 0x19, 0x6, 0x40}, {0xdddd0000, 0x40000, 0xd, 0x0, 0x2, 0xd4, 0x2, 0x71, 0x0, 0x41, 0x7, 0x8a}, {0xf000, 0x2000, 0x9, 0x10, 0xff, 0xd5, 0x5, 0xf9, 0x6, 0x73, 0x9, 0x9}, {0x4000, 0xb000, 0xe, 0xc, 0x7, 0x9, 0x3, 0x4, 0x2, 0xeb, 0x3, 0xb}, {0x54000, 0xffff1000, 0xe, 0x7, 0x2, 0x5, 0xf9, 0x7, 0x2, 0x0, 0x84, 0xd}, {0x7000, 0xff}, {0x80a0000, 0xfbf9}, 0x40050002, 0x0, 0x30000, 0x10026a, 0xc, 0xb900, 0x1000, [0x1, 0x8, 0xfffffffffffffffb, 0x6]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@arm64={0x50, 0xa, 0x49, '\x00', 0x7}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0x70000, 0xfffffffffffffffd, 0xc, 0x2}) 34.583036358s ago: executing program 2 (id=1452): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009b80)={0x40000012}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/zoneinfo\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 34.429993852s ago: executing program 2 (id=1453): ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x541b, 0x2000000a) close(0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) unlink(&(0x7f0000000640)='./file1\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) 33.212186809s ago: executing program 2 (id=1456): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@loopback, 0x4000, 0x0, 0x200, 0x0, 0x2}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85eb}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r3], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 31.619090067s ago: executing program 5 (id=1465): mknod$loop(0x0, 0xfff, 0x1) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x3a}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x8d8a4000) r1 = userfaultfd(0x80001) ftruncate(0xffffffffffffffff, 0x8008976) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 31.537892299s ago: executing program 5 (id=1467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0xe9, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.61008503s ago: executing program 5 (id=1470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x4000, 0x0) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099e90704702c03cb697a653e336f000000500000000000ff0200"], 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 30.506469172s ago: executing program 2 (id=1472): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000540)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@minixdf}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 30.305638787s ago: executing program 5 (id=1473): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1000608, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 29.638359592s ago: executing program 5 (id=1487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x10000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x29000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x100002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0xc, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3fd, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x2, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0xa, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x5, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x4, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x3ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x7ff, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x9, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x8, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2, 0x745e81639ff0f356}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="dab0", 0x2}], 0x1}, 0x4000880) 29.622974853s ago: executing program 2 (id=1478): socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r2, 0x5309, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[]) socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xb}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 29.150045564s ago: executing program 5 (id=1480): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x15, 0x3, 'wlc\x00', 0x1, 0x2, 0x14}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, {0x2, 0x2000, @private}, 0xd0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x91, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0xe0000000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 28.995088338s ago: executing program 34 (id=1480): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x15, 0x3, 'wlc\x00', 0x1, 0x2, 0x14}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, {0x2, 0x2000, @private}, 0xd0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x91, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0xe0000000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 27.719894887s ago: executing program 2 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x4000, 0x0) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099e90704702c03cb697a653e336f000000500000000000ff0200"], 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 27.60860933s ago: executing program 35 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x4000, 0x0) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099e90704702c03cb697a653e336f000000500000000000ff0200"], 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 18.444038992s ago: executing program 6 (id=1516): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) close(0x4) 18.285791726s ago: executing program 6 (id=1517): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x1ff) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002140)=0x1) 18.10326898s ago: executing program 6 (id=1519): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x200000010000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9}, {0x0, 0x8, 0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 16.874840058s ago: executing program 6 (id=1524): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x21021, 0x0) 16.704184883s ago: executing program 6 (id=1527): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000042, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) 16.316695151s ago: executing program 6 (id=1530): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 6.852133581s ago: executing program 1 (id=1563): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 5.754064606s ago: executing program 8 (id=1568): mount$9p_fd(0x0, 0x0, 0x0, 0x2004890, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xf0b, &(0x7f0000002a00)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a3596c", 0xecd, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @mcast1, {[@srh={0x3b, 0x0, 0x4, 0x0, 0x12, 0x50}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe81, 0x2, [], "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"}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x0, 0x3, 0x1, 0x2, 0x5, 0xa}, 0x1, {0x81}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0x81, 0x3, 0x1, 0x0, 0x2, 0xa}, 0x2, {0x9, 0x9, 0x3, 0x2, 0x1, 0x1}}}}}}}}}, 0x0) 5.683590048s ago: executing program 8 (id=1569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000000008030000000000000000000a0000060400048005000300880000000600024089060000050003003a000000090001"], 0x88}, 0x1, 0x0, 0x0, 0x48090}, 0x200080d0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@errors_remount}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$eJzs3MtvG8UfAPDvrpP8+vwllPLoAwiUR8UjadICPXABgcQBJCQ4lGNI0qo0bVATJFpVEBAqR1SJO+KIxF/AiV4QcELiCgduqFKFemnhZLT2buMY202MnYX685HWmdkda+ab3bFndrIJYGCNZy9JxI6I+DkiRuvZtQXG6z9uXLsw+8e1C7NJVKuv/57Uyl2/dmG2KFq8b3ueOZhGpB8nsa9FvUvnzp+aWViYP5vnJ5dPvzO5dO78UydPz5yYPzF/Zvro0SOHp559ZvrpnsSZxXV97/uL+/e8/OalV2ePXXrr+6+SIv6mOHpkvNPBR6rVHldXrp0N6WSoxIawIZWIyE7XcK3/j0YlVk/eaLz0UamNA/qqmmtzeKUK3MaSKLsFQDmKL/ps/ltsmzf6KN/V5+sToCzuG/lWPzIUaV5muGl+20vjEXFs5c/Psy36cx8CAGCNb7Lxz5Otxn9p3N1Q7v9pfQ1lLCLuiIhdEXFnROyOiLsiamXviYh7N1h/8yLJ38c/6ZWuAlunbPz3XL62tXb8V4z+YqyS53bW4h9Ojp9cmD9UP7aSvWT5qQ51XH7xp0/bHWsc/2VbVn8xFszbcWXof2vfMzezPNNtvM2ufhixd6hV/MnNlYAkIvZExN4u6zj5+Jf72x27dfwd9GCdqfpFxGP1878STfEXks7rk5NbYmH+0GTDVdHkhx8vvtau/n8Ufw9k539by+v/ZvxjSeN67dLG67j4yydt5zTdXv8jyRu19Ei+772Z5eWzUxEjySv1Rjfun159b5EvymfxHzzQuv/vitXfxL6IyC7i+yLi/oh4IG/7gxHxUEQc6BD/dy88/Hb38fdXFv/chs7/amIkmve0TlROffv1mkrHNhJ/dv6P1FIH8z21z7+kc1zraVd3VzMAAAD896QRsSOSdOJmOk0nJup/w787tqULi0vLTxxffPfMXP0ZgbEYTos7XaMN90On8ml9kZ9uyh/O7xt/Vtlay0/MLi7MlR08DLjtbfp/5rdK2a0D+s7zWjC42vb/LZvbDmDz+f6HwaX/w+Bq0f+3ltEOYPO1+v7/ICIuP1pCY4BN1dT/LfvBADH/h8Gl/8PgWkf///X2+nfVQEQsbY1bPyTf30QlyqxdostEpP+KZkj0KVH2JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBv/BUAAP//m5Hs/w==") 4.779503499s ago: executing program 3 (id=1573): mount$overlay(0x0, 0x0, 0x0, 0x3804a2, &(0x7f0000000380)={[{@volatile}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x8, 0xfc, 0xd3, 0x0, 0x5, 0x0, 0x3, 0x3, 0x3, 0x3, 0x5, 0x5b, 0x0, 0x7, 0x100, 0x7f, 0x4, 0x3, 0xd0, '\x00', 0x9, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.626016183s ago: executing program 1 (id=1574): ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x49a, &(0x7f0000001040)="$eJzs3M9vVNUeAPDvvdMC5Vf7eDzeeyhaRSPxR0sLKgsXanTnwkQXbGtbEBnA0JoIaWI1BpfGxL1xaeJf4M4NURfGxK0mLg0J0caEopsx9xedttN2gLYjnc8nKXPOvWfmnO+998ycew/3BtC1BrN/kojdEfFTRPQX2cUFBouX+bmZ8ZtzM+NJNBqv/Zbk5W7MzYxXRav37SozR9KI9MMknk+W1zt16fLZsXp98mKZH54+9/bw1KXLT505N3Z68vTk+dETJ44fG3n2mdGn1yXOLK4bBxu1Ijd+8pM3vv0ya9aBQ8WS5jjWdLNFQC0MZlvt90Zu6bpH267s3rCnKZ30dLAh3JasQ2S7qzfv//1Ri4Wd1x8vf9DRxgEbKvtt2r7y6tkGsIUl0ekWAJ1R/dBn57/V3yYNPf4Rrr8Qsa1Mz8/NjM/fir8n0nJ57wbWPxgRJ2f//Cz7i7avQ6wyYgMAWEM+tnmy1fgvjQP5azHXsbecQxmIiH9FxL6I+HdE7I+I/0TkZf8bEf/LCl+NRn+b9Q8uyS8f/6TXWrZ5nWTjv+eaxn7zTfGXLwO1Mrcnj783OXWmPnm03CZHond7lh9ZpY6vX/rx45XWNY//sr+s/mosWDbgWs+S4d7E2PTYem2E6+9HHOxpFX9yayYgOwL+HxEHb++j91aJM49/cf9KhdaOfxXrMM/U+DzisWL/z8aS+CvJ6vOTwzuiPnl0uDoqlvvuhyuvrlT/XcW/DrL9v3Px8V+sqE5+ov+PpJiv7Y16ffLiVNsf/VeVuPLzRyue09zp8b8teT2fs/7+zWLZu2PT0xdHIrYlr+T56pwuXz668N4qX5XP4j9yuHX/31e+J4v/vojIDuJDEfFARDxYtv2hiHg4Ig6vsiG+efGRt1aJP4kkOrr/J1p+/906/geS5vn6O0jUzl79aqUZ8/b2//GYzb9rC/n33xrabeBdbj4AAAC4J6QRsTuSdKhID+6ONB0aKv4P//7YmdYvTE0/cerCO+cninsEBqI3ra509TddDx1JZstPLPKj5bXiav2x8rrxp7W+PD80fqE+0eHYodvtWtz/o+r/mV9rnW4dsOHcrwXda2n/TzvUDmDztfP771wAtqYW/b+vE+0ANp/zf+herfr/e0vyxv+wNS3v/7+0eGQdsBUZ/0P30v+he+n/0JXavou/dpcPAViUqG4WWLSqr+2b9i9dPrvjdgp3RaJ64sVG1tUXC0si7XjIXZTIesxm1LXwrI+FZ6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcy/4OAAD//4tO4uc=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000000340)=""/30, 0x1e) 4.166788153s ago: executing program 3 (id=1576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x4, 0xfff1}, {0x1, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x4041084) 4.142817054s ago: executing program 1 (id=1577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x4, 0x8, 0x3, 0x7fffffff}, {0x6, 0x0, 0x1, 0xffff, 0x1, 0x3}, 0x800, 0x3, 0x12c8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x8d607941abeaa41e}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc008045}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x2, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 3.729845243s ago: executing program 3 (id=1579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) 3.524174708s ago: executing program 1 (id=1580): socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r2, 0x5309, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[]) socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xb}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.59168112s ago: executing program 1 (id=1581): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1, 0x6, 0x2, {}, {0x0, 0x2710}, {0x3, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x2, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x40490) 2.362286785s ago: executing program 8 (id=1583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) r4 = socket$inet(0x2, 0x4, 0xe056) accept4$inet(r4, 0x0, 0x0, 0x80000) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0xffe, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 1.962435374s ago: executing program 3 (id=1586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f000005a000/0x2000)=nil, 0x2000, 0x66) 1.829955837s ago: executing program 3 (id=1587): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0xfc}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340), 0x8) 1.7219478s ago: executing program 3 (id=1588): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x10, 0x801, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x68801, 0x164) setuid(0xee01) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) 1.71753833s ago: executing program 7 (id=1589): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.515920544s ago: executing program 7 (id=1590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.415821166s ago: executing program 7 (id=1591): socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r2, 0x5309, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[]) socket$can_j1939(0x1d, 0x2, 0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xb}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.27849511s ago: executing program 8 (id=1592): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,dmask=00000000000000000000004,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',errors=continue,fmask=00000000000003000000001,iocharset=cp861,fmask=00000000000000000000005,iocharset=cp852,namecase=1,namecase=1,\x00'], 0x1, 0x1530, &(0x7f0000006800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x55) socket$inet_udp(0x2, 0x2, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1.005472066s ago: executing program 1 (id=1593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000000008030000000000000000000a0000060400048005000300880000000600024089060000050003003a000000090001"], 0x88}, 0x1, 0x0, 0x0, 0x48090}, 0x200080d0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@errors_remount}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") 481.094728ms ago: executing program 8 (id=1594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 286.361063ms ago: executing program 7 (id=1595): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x28, 0x0, 0x0, 0x78, 0xf88, &(0x7f0000000300)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0xb}, @ptr={0x70742a85, 0x80000, &(0x7f0000000640)=""/223, 0xdf, 0x2, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x1c}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0xffffffe0, 0x0, 0x0}) 159.733456ms ago: executing program 7 (id=1596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000640)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x40000}, 0x20040890) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000010c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x30, 0xffffffffffffffff, 0xf363d000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a183ffffffff000000000500000008000300", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x4c044) recvmsg(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x102) 10.06645ms ago: executing program 8 (id=1597): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 7 (id=1598): mknod$loop(0x0, 0xfff, 0x1) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x3a}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x8d8a4000) r3 = userfaultfd(0x80001) ftruncate(0xffffffffffffffff, 0x8008976) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) preadv(r4, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) kernel console output (not intermixed with test programs): syz.5.1077': attribute type 2 has an invalid length. [ 438.147964][ T8637] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 438.211748][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.218099][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.278981][ T8642] loop1: detected capacity change from 0 to 2048 [ 438.313931][ T8648] loop2: detected capacity change from 0 to 1024 [ 438.419734][ T8642] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 438.475408][ T8648] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 438.500522][ T8648] hfsplus: xattr searching failed [ 438.514228][ T8642] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 438.532794][ T8642] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 438.545920][ T8642] EXT4-fs (loop1): This should not happen!! Data will be lost [ 438.545920][ T8642] [ 438.556072][ T8642] EXT4-fs (loop1): Total free blocks count 0 [ 438.562176][ T8642] EXT4-fs (loop1): Free/Dirty block details [ 438.568694][ T8642] EXT4-fs (loop1): free_blocks=2415919504 [ 438.577133][ T8642] EXT4-fs (loop1): dirty_blocks=32 [ 438.582690][ T8642] EXT4-fs (loop1): Block reservation details [ 438.588950][ T8642] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 438.639025][ T8633] loop5: detected capacity change from 0 to 32768 [ 438.656240][ T8658] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 438.669162][ T154] hfsplus: b-tree write err: -5, ino 25 [ 438.674947][ T154] hfsplus: b-tree write err: -5, ino 4 [ 438.681954][ T8658] EXT4-fs (loop1): This should not happen!! Data will be lost [ 438.681954][ T8658] [ 438.693415][ T154] hfsplus: b-tree write err: -5, ino 2 [ 438.721670][ T7704] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1c, error -71 [ 438.731585][ T7704] usb 4-1: Firmware version (0.0) predates our first public release. [ 438.740069][ T7704] usb 4-1: Please update to version 0.2 or newer [ 438.759478][ T7704] usb 4-1: atusb_probe: initialization failed, error = -71 [ 438.779737][ T7704] atusb: probe of 4-1:0.0 failed with error -71 [ 438.820559][ T7704] usb 4-1: USB disconnect, device number 12 [ 438.854558][ T8633] XFS (loop5): Mounting V5 Filesystem [ 438.929689][ T8670] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1083'. [ 438.951013][ T8670] loop4: detected capacity change from 0 to 512 [ 439.031510][ T8670] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 439.085017][ T8670] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 439.100731][ T8670] EXT4-fs (loop4): Remounting filesystem read-only [ 439.108017][ T8670] EXT4-fs (loop4): 1 truncate cleaned up [ 439.113740][ T8670] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 439.138551][ T8633] XFS (loop5): Ending clean mount [ 439.267358][ T6151] XFS (loop5): Unmounting Filesystem [ 439.399065][ T7704] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 439.482683][ T8671] loop1: detected capacity change from 0 to 32768 [ 439.594951][ T8671] XFS (loop1): Mounting V5 Filesystem [ 439.676762][ T8671] XFS (loop1): Ending clean mount [ 439.701114][ T8671] XFS (loop1): Quotacheck needed: Please wait. [ 439.780062][ T8671] XFS (loop1): Quotacheck: Done. [ 439.799023][ T7704] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 439.883373][ T8691] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1087'. [ 439.915162][ T8691] loop5: detected capacity change from 0 to 512 [ 439.934438][ T7704] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 439.990136][ T7704] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 440.033368][ T7704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.113099][ T8677] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 440.220581][ T8691] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 440.422100][ T7364] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 440.435843][ T8691] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 440.458752][ T8691] EXT4-fs (loop5): Remounting filesystem read-only [ 440.465658][ T8691] EXT4-fs (loop5): 1 truncate cleaned up [ 440.471388][ T8691] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 440.479237][ T4196] XFS (loop1): Unmounting Filesystem [ 440.711572][ T7367] usb 3-1: USB disconnect, device number 11 [ 440.918388][ T7364] usb 4-1: unable to get BOS descriptor or descriptor too short [ 440.968686][ T7364] usb 4-1: not running at top speed; connect to a high speed hub [ 441.004496][ T8701] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 441.051431][ T8697] loop5: detected capacity change from 0 to 32768 [ 441.058817][ T7364] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.069480][ T7364] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1288, setting to 64 [ 441.080709][ T7364] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 441.094318][ T8697] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1091 (8697) [ 441.119898][ T8697] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 441.129007][ T8697] BTRFS info (device loop5): using free space tree [ 441.135519][ T8697] BTRFS info (device loop5): has skinny extents [ 441.165298][ T8697] BTRFS info (device loop5): enabling ssd optimizations [ 441.281608][ T7364] usb 4-1: New USB device found, idVendor=c735, idProduct=df20, bcdDevice= 0.0e [ 441.295156][ T7364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.309353][ T7364] usb 4-1: Product: syz [ 441.313536][ T7364] usb 4-1: Manufacturer: syz [ 441.318616][ T7364] usb 4-1: SerialNumber: syz [ 441.398239][ T8679] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 441.450580][ T8724] loop5: detected capacity change from 0 to 512 [ 441.485214][ T8724] EXT4-fs (loop5): Ignoring removed oldalloc option [ 441.501153][ T8724] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 441.539919][ T8724] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1094: invalid indirect mapped block 4294967295 (level 1) [ 441.572195][ T8726] loop2: detected capacity change from 0 to 8192 [ 441.584777][ T8724] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1094: invalid indirect mapped block 4294967295 (level 1) [ 441.605394][ T8726] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 441.613465][ T8724] EXT4-fs (loop5): 2 truncates cleaned up [ 441.614863][ T8726] REISERFS (device loop2): using ordered data mode [ 441.621718][ T8724] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,oldalloc,jqfmt=vfsv0,i_version,,errors=continue. Quota mode: writeback. [ 441.651740][ T4229] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 441.669871][ T8724] EXT4-fs (loop5): shut down requested (2) [ 441.673747][ T8726] reiserfs: using flush barriers [ 441.682456][ T8726] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 441.703335][ T8726] REISERFS (device loop2): checking transaction log (loop2) [ 441.803477][ T8726] REISERFS (device loop2): Using tea hash to sort names [ 441.813653][ T8726] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 441.847920][ T7364] usb 4-1: MIDIStreaming interface descriptor not found [ 441.880815][ T7364] usb 4-1: USB disconnect, device number 13 [ 441.917877][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 442.040587][ T4229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 442.070888][ T7640] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 442.107992][ T4229] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 442.123168][ T4229] usb 2-1: can't read configurations, error -71 [ 442.287780][ T8747] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 442.437534][ T7640] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.448676][ T7640] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 442.458832][ T7640] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 442.461212][ T8749] loop3: detected capacity change from 0 to 32768 [ 442.468178][ T7640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.487496][ T7364] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 442.498026][ T8730] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 442.567782][ T8749] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1104 (8749) [ 442.609173][ T8749] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 442.619842][ T8749] BTRFS info (device loop3): using free space tree [ 442.626369][ T8749] BTRFS info (device loop3): has skinny extents [ 442.652938][ T8749] BTRFS info (device loop3): enabling ssd optimizations [ 442.763361][ T21] usb 6-1: USB disconnect, device number 14 [ 442.934525][ T7364] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.946003][ T7364] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 442.956223][ T7364] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 442.965826][ T7364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.007416][ T8743] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 443.120439][ T8775] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 443.133034][ T8775] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 443.144041][ T8775] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 443.155169][ T8775] UDF-fs: Scanning with blocksize 512 failed [ 443.165167][ T8775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.263643][ T21] usb 3-1: USB disconnect, device number 12 [ 443.532203][ T8787] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 443.823786][ T8789] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 443.830719][ T8789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.967586][ T8791] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 443.974130][ T8791] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 444.026712][ T8793] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(9) [ 444.033254][ T8793] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 444.246324][ T8789] vhci_hcd vhci_hcd.0: Device attached [ 444.254116][ T8791] vhci_hcd vhci_hcd.0: Device attached [ 444.336792][ T8793] vhci_hcd vhci_hcd.0: Device attached [ 444.355171][ T8802] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 444.375650][ T8796] vhci_hcd: connection closed [ 444.379835][ T9] vhci_hcd: stop threads [ 444.392260][ T8794] vhci_hcd: connection closed [ 444.392630][ T8790] vhci_hcd: connection closed [ 444.425119][ T9] vhci_hcd: release socket [ 444.591925][ T21] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 444.646094][ T8811] set_capacity_and_notify: 1 callbacks suppressed [ 444.646108][ T8811] loop5: detected capacity change from 0 to 32768 [ 445.259104][ T8792] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 445.284042][ T9] vhci_hcd: disconnect device [ 445.292796][ T9] vhci_hcd: stop threads [ 445.315862][ T9] vhci_hcd: release socket [ 445.320407][ T9] vhci_hcd: disconnect device [ 445.325451][ T9] vhci_hcd: stop threads [ 445.355812][ T8811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1117 (8811) [ 445.369369][ T9] vhci_hcd: release socket [ 445.388767][ T8811] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 445.396648][ T8815] device syzkaller0 entered promiscuous mode [ 445.397552][ T8811] BTRFS info (device loop5): setting nodatasum [ 445.409919][ T8811] BTRFS info (device loop5): force zlib compression, level 3 [ 445.410948][ T9] vhci_hcd: disconnect device [ 445.417482][ T8811] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 445.431980][ T8811] BTRFS info (device loop5): use lzo compression, level 0 [ 445.439169][ T8811] BTRFS info (device loop5): turning on flush-on-commit [ 445.446149][ T8811] BTRFS info (device loop5): enabling auto defrag [ 445.452590][ T8811] BTRFS info (device loop5): max_inline at 4096 [ 445.458921][ T8811] BTRFS info (device loop5): using free space tree [ 445.465428][ T8811] BTRFS info (device loop5): has skinny extents [ 445.472108][ T8811] workqueue: max_active 2147483647 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 445.503767][ T8811] workqueue: max_active 2147483647 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 445.539949][ T8811] workqueue: max_active 2147483647 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 445.650870][ T7643] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 445.696914][ T8811] workqueue: max_active 2147483647 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 445.719163][ T8811] workqueue: max_active 2147483647 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 445.741263][ T8811] workqueue: max_active 2147483647 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 445.764451][ T8838] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1121'. [ 445.794981][ T8838] loop1: detected capacity change from 0 to 512 [ 446.037878][ T7643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.233416][ T8838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 446.248504][ T8811] workqueue: max_active 2147483647 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 446.267449][ T8811] workqueue: max_active 2147483647 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 446.279260][ T8838] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 446.289141][ T7643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.303574][ T7643] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.306049][ T8838] EXT4-fs (loop1): Remounting filesystem read-only [ 446.316585][ T7643] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.323796][ T8838] EXT4-fs (loop1): 1 truncate cleaned up [ 446.332202][ T7643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.337809][ T8838] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 446.361239][ T7643] usb 3-1: config 0 descriptor?? [ 446.387736][ T8811] workqueue: max_active 2147483647 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 446.430342][ T8811] workqueue: max_active 2147483647 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 446.494842][ T8811] BTRFS info (device loop5): enabling ssd optimizations [ 446.544738][ T25] audit: type=1800 audit(1785273075.675:37): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1117" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 446.669835][ T8829] loop4: detected capacity change from 0 to 32768 [ 446.882598][ T7643] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 446.906982][ T6283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (6283) [ 446.942813][ T8829] XFS (loop4): Mounting V5 Filesystem [ 446.962666][ T7643] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 447.098356][ T8829] XFS (loop4): Ending clean mount [ 447.104340][ T1111] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 447.204241][ T1111] XFS (loop4): Unmount and run xfs_repair [ 447.233532][ T1111] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 447.283129][ T8869] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 447.342686][ T1111] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 447.433142][ T1111] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 447.531359][ T1111] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 447.628894][ T1111] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 447.721168][ T1111] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 447.843330][ T1111] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 447.959534][ T1111] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 448.104726][ T1111] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 448.144640][ T8829] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74 [ 448.157331][ T8829] XFS (loop4): Failed to initialize disk quotas. [ 448.172001][ T4228] usb 3-1: USB disconnect, device number 13 [ 448.201415][ T8857] loop3: detected capacity change from 0 to 32768 [ 448.397344][ T4194] XFS (loop4): Unmounting Filesystem [ 448.713788][ T8857] XFS (loop3): Mounting V5 Filesystem [ 449.133891][ T8857] XFS (loop3): Ending clean mount [ 449.294951][ T8857] XFS (loop3): Quotacheck needed: Please wait. [ 449.455473][ T8857] XFS (loop3): Quotacheck: Done. [ 450.095308][ T4195] XFS (loop3): Unmounting Filesystem [ 450.125672][ T4228] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 450.383907][ T21] vhci_hcd: vhci_device speed not set [ 450.463660][ T4228] usb 3-1: Using ep0 maxpacket: 8 [ 450.813622][ T4228] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 450.841400][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.878253][ T4228] usb 3-1: Product: syz [ 450.898864][ T4228] usb 3-1: Manufacturer: syz [ 451.014259][ T4228] usb 3-1: SerialNumber: syz [ 451.020582][ T4228] usb 3-1: config 0 descriptor?? [ 451.143238][ T4228] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 451.181075][ T4228] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 451.187268][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 451.208976][ T4228] usb 3-1: USB disconnect, device number 14 [ 451.297218][ T8906] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 451.668979][ T8895] loop4: detected capacity change from 0 to 40427 [ 451.694854][ T8895] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 451.702527][ T8895] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 451.702956][ T4229] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 451.732345][ T8921] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 451.869428][ T8895] F2FS-fs (loop4): invalid crc value [ 451.900143][ T8895] F2FS-fs (loop4): Found nat_bits in checkpoint [ 451.909879][ T8931] loop2: detected capacity change from 0 to 2048 [ 451.952750][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 451.960882][ T8895] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 451.990329][ T8895] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 452.082760][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.098076][ T8931] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,max_dir_size_kb=0x0000000000000004,norecovery,,errors=continue. Quota mode: none. [ 452.118352][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.151103][ T4229] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 452.168947][ T8941] loop5: detected capacity change from 0 to 256 [ 452.176380][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.210395][ T25] audit: type=1804 audit(1785273081.338:38): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1147" name="/newroot/242/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 452.215998][ T4194] attempt to access beyond end of device [ 452.215998][ T4194] loop4: rw=2049, want=45112, limit=40427 [ 452.262029][ T8941] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 452.277392][ T4229] usb 2-1: config 0 descriptor?? [ 452.353543][ T4229] hub 2-1:0.0: USB hub found [ 452.365935][ T25] audit: type=1800 audit(1785273081.498:39): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1149" name="file2" dev="loop5" ino=1048640 res=0 errno=0 [ 452.424607][ T25] audit: type=1800 audit(1785273081.538:40): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1149" name="file2" dev="loop5" ino=1048640 res=0 errno=0 [ 452.562469][ T4229] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 452.621530][ T8942] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 452.665447][ T8942] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 452.677855][ T8942] EXT4-fs (loop2): This should not happen!! Data will be lost [ 452.677855][ T8942] [ 452.688127][ T8942] EXT4-fs (loop2): Total free blocks count 0 [ 452.696695][ T8942] EXT4-fs (loop2): Free/Dirty block details [ 452.706196][ T8942] EXT4-fs (loop2): free_blocks=2415919104 [ 452.711987][ T8942] EXT4-fs (loop2): dirty_blocks=16 [ 452.730664][ T8942] EXT4-fs (loop2): Block reservation details [ 452.743895][ T8942] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 453.014532][ T4229] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1 [ 453.042475][ T4229] hid-generic: probe of 0003:046D:C31C.0006 failed with error -22 [ 453.108524][ T8951] loop4: detected capacity change from 0 to 256 [ 453.141832][ T8944] loop5: detected capacity change from 0 to 32768 [ 453.194244][ T8944] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 453.253538][ T8944] BTRFS info (device loop5): setting nodatasum [ 453.258528][ T8951] FAT-fs (loop4): Directory bread(block 64) failed [ 453.272166][ T8944] BTRFS info (device loop5): force zlib compression, level 3 [ 453.286821][ T8951] FAT-fs (loop4): Directory bread(block 65) failed [ 453.295497][ T8944] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 453.324570][ T8951] FAT-fs (loop4): Directory bread(block 66) failed [ 453.332734][ T8944] BTRFS info (device loop5): use lzo compression, level 0 [ 453.360852][ T8944] BTRFS info (device loop5): turning on flush-on-commit [ 453.364090][ T8951] FAT-fs (loop4): Directory bread(block 67) failed [ 453.379368][ T8951] FAT-fs (loop4): Directory bread(block 68) failed [ 453.388136][ T8944] BTRFS info (device loop5): enabling auto defrag [ 453.389025][ T8951] FAT-fs (loop4): Directory bread(block 69) failed [ 453.404834][ T4229] usb 2-1: USB disconnect, device number 12 [ 453.417213][ T8956] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 453.427613][ T8944] BTRFS info (device loop5): max_inline at 4096 [ 453.458230][ T8951] FAT-fs (loop4): Directory bread(block 70) failed [ 453.463315][ T8944] BTRFS info (device loop5): using free space tree [ 453.490866][ T8944] BTRFS info (device loop5): has skinny extents [ 453.497736][ T8951] FAT-fs (loop4): Directory bread(block 71) failed [ 453.510923][ T8951] FAT-fs (loop4): Directory bread(block 72) failed [ 453.529256][ T8951] FAT-fs (loop4): Directory bread(block 73) failed [ 453.801510][ T8944] BTRFS info (device loop5): enabling ssd optimizations [ 453.862801][ T8986] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1159'. [ 453.893145][ T8986] loop3: detected capacity change from 0 to 512 [ 453.901209][ T4228] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 454.342172][ T4228] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 454.400528][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.415197][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.431960][ T4228] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 454.516476][ T8986] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 454.542317][ T4228] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 454.564760][ T4228] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 454.572359][ T8991] loop2: detected capacity change from 0 to 7 [ 454.574413][ T4228] usb 3-1: Manufacturer: syz [ 454.586366][ T4228] usb 3-1: config 0 descriptor?? [ 454.598643][ T8986] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 454.614622][ T8986] EXT4-fs (loop3): Remounting filesystem read-only [ 454.635744][ T8986] EXT4-fs (loop3): 1 truncate cleaned up [ 454.641463][ T8986] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 454.645945][ T8991] Dev loop2: unable to read RDB block 7 [ 454.677890][ T8991] loop2: unable to read partition table [ 454.684895][ T8991] loop2: partition table beyond EOD, truncated [ 454.691143][ T8991] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 454.973337][ T6283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (6283) [ 455.075813][ T4228] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 455.092010][ T4228] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 455.143929][ T4228] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 455.158147][ T8999] device syzkaller1 entered promiscuous mode [ 455.176452][ T8988] loop1: detected capacity change from 0 to 40427 [ 455.346795][ T8988] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 455.356875][ T8988] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 455.382671][ T8988] F2FS-fs (loop1): invalid crc_offset: 1 [ 455.390770][ T8988] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 455.591845][ T4228] usb 3-1: USB disconnect, device number 15 [ 456.221456][ T8988] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 456.230355][ T8988] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 456.340253][ T4196] attempt to access beyond end of device [ 456.340253][ T4196] loop1: rw=2049, want=45104, limit=40427 [ 456.610356][ T5670] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 456.880847][ T5670] usb 6-1: Using ep0 maxpacket: 32 [ 457.110791][ T5670] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 457.119664][ T5670] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.130462][ T5670] usb 6-1: config 0 has no interface number 0 [ 457.136565][ T5670] usb 6-1: config 0 interface 8 altsetting 248 has an invalid endpoint with address 0x0, skipping [ 457.147799][ T5670] usb 6-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 457.168320][ T5670] usb 6-1: config 0 interface 8 has no altsetting 0 [ 457.953740][ T9039] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 458.000010][ T9039] /dev/nullb0: Can't open blockdev [ 458.149753][ T5670] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 458.161278][ T5670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.881322][ T5670] usb 6-1: Product: syz [ 458.885526][ T5670] usb 6-1: Manufacturer: syz [ 458.890183][ T5670] usb 6-1: SerialNumber: syz [ 458.896457][ T5670] usb 6-1: config 0 descriptor?? [ 458.914747][ T9048] loop3: detected capacity change from 0 to 4096 [ 459.076765][ T9058] loop1: detected capacity change from 0 to 64 [ 459.621760][ T25] audit: type=1800 audit(1785273088.762:41): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1182" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 459.647074][ T9048] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 459.751473][ T5670] usb 6-1: USB disconnect, device number 15 [ 459.856580][ T4196] hfs: node 4:3 still has 1 user(s)! [ 460.096108][ T9078] loop5: detected capacity change from 0 to 512 [ 460.658846][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 460.729378][ T9078] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 460.966695][ T9078] EXT4-fs (loop5): 1 truncate cleaned up [ 460.973429][ T9078] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 461.798633][ T9103] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 461.910829][ T9105] kvm [9104]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffff [ 462.041011][ T9105] kvm [9104]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0xffe0000000000001 [ 462.193872][ T9114] device syzkaller0 entered promiscuous mode [ 462.208677][ T9115] loop3: detected capacity change from 0 to 512 [ 462.292079][ T9115] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 462.330420][ T9115] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 462.351193][ T9115] EXT4-fs (loop3): Remounting filesystem read-only [ 462.361812][ T9115] EXT4-fs (loop3): 1 truncate cleaned up [ 462.367618][ T9115] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 463.767939][ T9134] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 463.810433][ T9140] loop1: detected capacity change from 0 to 1024 [ 463.863846][ T9140] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 464.182572][ T9152] device syzkaller0 entered promiscuous mode [ 464.514680][ T9164] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 464.551280][ T9169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.553817][ T9164] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 464.578354][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.593857][ T9169] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 464.843891][ T9181] loop4: detected capacity change from 0 to 1024 [ 464.865017][ T9180] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 465.614325][ T9189] loop3: detected capacity change from 0 to 128 [ 465.659931][ T9189] FAT-fs (loop3): bogus number of reserved sectors [ 465.668813][ T9189] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 465.682399][ T9189] FAT-fs (loop3): Can't find a valid FAT filesystem [ 465.690906][ T9181] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,nouid32,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 465.899316][ T9195] device syzkaller0 entered promiscuous mode [ 466.308681][ T9189] overlayfs: failed to decode file handle (len=6, type=-93982725, flags=0, err=-22) [ 467.498836][ T9233] loop1: detected capacity change from 0 to 512 [ 467.716276][ T9233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 468.133384][ T9233] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 468.150914][ T9233] EXT4-fs (loop1): Remounting filesystem read-only [ 468.157969][ T9233] EXT4-fs (loop1): 1 truncate cleaned up [ 468.163619][ T9233] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 468.294767][ T5670] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 468.410036][ T9247] loop2: detected capacity change from 0 to 256 [ 468.464973][ T9247] exfat: Bad value for 'uid' [ 468.674597][ T5670] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.691177][ T5670] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.860734][ T5670] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 468.870097][ T5670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.880191][ T5670] usb 4-1: config 0 descriptor?? [ 468.990770][ T9261] loop5: detected capacity change from 0 to 512 [ 469.417768][ T9261] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 469.442503][ T9261] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 469.457445][ T9261] EXT4-fs (loop5): Remounting filesystem read-only [ 469.465283][ T9261] EXT4-fs (loop5): 1 truncate cleaned up [ 469.470960][ T9261] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 469.739331][ T9267] ip6_tunnel: non-ECT from fedb:4000:0000:88fc:7073:8daf:7b32:00aa with DS=0xee [ 470.174134][ T5670] usb 4-1: string descriptor 0 read error: -22 [ 470.444927][ T5670] uclogic 0003:256C:006D.0008: interface is invalid, ignoring [ 470.601365][ T9275] loop1: detected capacity change from 0 to 256 [ 470.655422][ T5670] usb 4-1: USB disconnect, device number 14 [ 470.812644][ T9275] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 471.578923][ T25] audit: type=1800 audit(1785273100.718:42): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1247" name="file1" dev="loop1" ino=1048642 res=0 errno=0 [ 471.609181][ T9271] loop5: detected capacity change from 0 to 32768 [ 471.691403][ T9271] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1245 (9271) [ 471.750265][ T9271] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 471.773919][ T9271] BTRFS info (device loop5): using free space tree [ 471.795263][ T9271] BTRFS info (device loop5): has skinny extents [ 472.084357][ T9271] BTRFS info (device loop5): enabling ssd optimizations [ 472.402194][ T9279] loop2: detected capacity change from 0 to 40427 [ 472.547033][ T9279] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 472.557573][ T9279] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 472.626200][ T9279] F2FS-fs (loop2): invalid crc_offset: 1 [ 472.821129][ T9279] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 473.585275][ T9279] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 473.606757][ T9279] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 474.206146][ T9341] loop1: detected capacity change from 0 to 2048 [ 474.396924][ T9341] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 474.709827][ T9373] loop3: detected capacity change from 0 to 2048 [ 474.837801][ T9380] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.082207][ T25] audit: type=1800 audit(1785273104.229:43): pid=9373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1271" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 476.321239][ T9409] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 477.607896][ T9443] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 477.653953][ T9448] syz.4.1293 sent an empty control message without MSG_MORE. [ 478.538058][ T9456] loop5: detected capacity change from 0 to 40427 [ 478.585588][ T9456] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 478.612273][ T9456] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 478.688703][ T9456] F2FS-fs (loop5): invalid crc value [ 478.708358][ T9460] loop1: detected capacity change from 0 to 32768 [ 478.734966][ T9456] F2FS-fs (loop5): Found nat_bits in checkpoint [ 478.847815][ T9456] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 478.870649][ T9460] XFS (loop1): Mounting V5 Filesystem [ 478.873171][ T9456] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 479.048123][ T9460] XFS (loop1): Ending clean mount [ 479.058183][ T9460] XFS (loop1): Quotacheck needed: Please wait. [ 479.275064][ T25] audit: type=1800 audit(1785273108.421:44): pid=9456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1297" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 479.353092][ T9460] XFS (loop1): Quotacheck: Done. [ 479.413953][ T9504] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1304'. [ 479.427656][ T9504] loop3: detected capacity change from 0 to 512 [ 479.475035][ T9504] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 479.512626][ T9504] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 479.533104][ T9504] EXT4-fs (loop3): Remounting filesystem read-only [ 479.541057][ T9504] EXT4-fs (loop3): 1 truncate cleaned up [ 479.546702][ T9504] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 479.837130][ T4196] XFS (loop1): Unmounting Filesystem [ 480.522504][ T9525] loop5: detected capacity change from 0 to 164 [ 480.672944][ T9525] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 480.682117][ T7361] Bluetooth: hci0: command 0x1003 tx timeout [ 480.696073][ T146] Bluetooth: hci0: sending frame failed (-49) [ 481.197249][ T9525] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 481.267828][ T9525] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 481.993464][ T9544] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 482.044707][ T9536] loop5: detected capacity change from 0 to 32768 [ 482.072114][ T9534] loop1: detected capacity change from 0 to 40427 [ 482.160271][ T9534] F2FS-fs (loop1): Found nat_bits in checkpoint [ 482.182445][ T9536] XFS (loop5): Mounting V5 Filesystem [ 482.323370][ T9536] XFS (loop5): Ending clean mount [ 482.332579][ T9536] XFS (loop5): Quotacheck needed: Please wait. [ 482.407295][ T9534] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 482.451348][ T9536] XFS (loop5): Quotacheck: Done. [ 482.802161][ T7361] Bluetooth: hci0: command 0x1001 tx timeout [ 482.864199][ T146] Bluetooth: hci0: sending frame failed (-49) [ 483.117412][ T25] audit: type=1800 audit(1785273112.273:45): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1316" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 483.229534][ T4196] attempt to access beyond end of device [ 483.229534][ T4196] loop1: rw=2049, want=45104, limit=40427 [ 483.244277][ T25] audit: type=1804 audit(1785273112.333:46): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1317" name="/newroot/148/file0/file1" dev="loop5" ino=9286 res=1 errno=0 [ 483.259345][ T6151] XFS (loop5): Unmounting Filesystem [ 483.860898][ T9580] loop1: detected capacity change from 0 to 512 [ 483.994691][ T9580] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 484.181999][ T9580] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 484.199998][ T9580] EXT4-fs (loop1): Remounting filesystem read-only [ 484.208072][ T9580] EXT4-fs (loop1): 1 truncate cleaned up [ 484.213766][ T9580] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 484.359240][ T9587] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 484.419869][ T9587] device bond1 entered promiscuous mode [ 484.426089][ T9587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.477746][ T9593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.497301][ T9593] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 484.515887][ T9593] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 484.539594][ T9593] bond1: (slave ip6gre1): making interface the new active one [ 484.547105][ T9593] device ip6gre1 entered promiscuous mode [ 484.554642][ T9593] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 484.586463][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 484.790112][ T9604] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 484.906238][ T7360] Bluetooth: hci0: command 0x1009 tx timeout [ 485.005158][ T9606] loop1: detected capacity change from 0 to 4096 [ 485.073076][ T9606] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 486.417303][ T9601] loop5: detected capacity change from 0 to 32768 [ 486.516421][ T9601] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1332 (9601) [ 486.774024][ T9601] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 486.892182][ T9601] BTRFS info (device loop5): setting nodatasum [ 486.974457][ T9601] BTRFS info (device loop5): force zlib compression, level 3 [ 487.090726][ T9601] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 487.153594][ T9601] BTRFS info (device loop5): use lzo compression, level 0 [ 487.160810][ T9601] BTRFS info (device loop5): turning on flush-on-commit [ 487.168143][ T9601] BTRFS info (device loop5): enabling auto defrag [ 487.174597][ T9601] BTRFS info (device loop5): max_inline at 4096 [ 487.196954][ T9601] BTRFS info (device loop5): using free space tree [ 487.225317][ T9601] BTRFS info (device loop5): has skinny extents [ 487.471374][ T9642] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 487.540391][ T9601] BTRFS info (device loop5): enabling ssd optimizations [ 488.401031][ T9667] Illegal XDP return value 21073920, expect packet loss! [ 489.050043][ T9673] loop3: detected capacity change from 0 to 2048 [ 489.115040][ T9673] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 489.197686][ T9673] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 489.294618][ T9673] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 489.315258][ T7360] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 489.348362][ T9673] EXT4-fs (loop3): This should not happen!! Data will be lost [ 489.348362][ T9673] [ 489.434136][ T9673] EXT4-fs (loop3): Total free blocks count 0 [ 489.441848][ T9673] EXT4-fs (loop3): Free/Dirty block details [ 489.462536][ T9673] EXT4-fs (loop3): free_blocks=2415919504 [ 489.535873][ T9673] EXT4-fs (loop3): dirty_blocks=32 [ 489.541010][ T9673] EXT4-fs (loop3): Block reservation details [ 489.554233][ T7360] usb 3-1: Using ep0 maxpacket: 32 [ 489.582504][ T9673] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 489.625188][ T9685] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 2 with error 28 [ 489.661227][ T9693] loop1: detected capacity change from 0 to 164 [ 489.674799][ T7360] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 489.691894][ T9685] EXT4-fs (loop3): This should not happen!! Data will be lost [ 489.691894][ T9685] [ 489.698033][ T9693] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 489.721356][ T7360] usb 3-1: config 0 has no interface number 0 [ 489.758262][ T7360] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 489.779943][ T9693] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 489.794450][ T9693] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 489.824654][ T7360] usb 3-1: config 0 interface 89 has no altsetting 0 [ 490.165962][ T7360] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 490.177292][ T7360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.202578][ T7360] usb 3-1: Product: syz [ 490.224966][ T7360] usb 3-1: Manufacturer: syz [ 490.229581][ T7360] usb 3-1: SerialNumber: syz [ 490.250068][ T7360] usb 3-1: config 0 descriptor?? [ 490.295901][ T7360] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 490.323941][ T7360] em28xx 3-1:0.89: Video interface 89 found: [ 490.445485][ T9708] loop3: detected capacity change from 0 to 4096 [ 490.522451][ T9708] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 490.619207][ T9713] loop5: detected capacity change from 0 to 1024 [ 490.637472][ T9713] EXT4-fs (loop5): inline encryption not supported [ 490.652826][ T154] ntfs3: loop3: ntfs3_write_inode r=9 failed, -22. [ 490.659578][ T7706] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 490.671923][ T9713] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 490.695366][ T4195] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 490.717195][ T4195] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 490.988822][ T9720] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 490.997756][ T7360] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 491.123731][ T7706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 491.243412][ T7706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.293691][ T7706] usb 2-1: too many endpoints for config 1 interface 1 altsetting 35: 57, using maximum allowed: 30 [ 491.305227][ T7706] usb 2-1: config 1 interface 1 altsetting 35 has 1 endpoint descriptor, different from the interface descriptor's value: 57 [ 491.319834][ T7706] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.332302][ T7706] usb 2-1: config 1 interface 1 has no altsetting 1 [ 491.915809][ T7706] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 491.965739][ T7706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.974133][ T7706] usb 2-1: Product: syz [ 491.982753][ T7706] usb 2-1: Manufacturer: syz [ 491.987801][ T7706] usb 2-1: SerialNumber: syz [ 491.993398][ T9740] loop4: detected capacity change from 0 to 512 [ 492.102734][ T7360] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 492.118450][ T7360] em28xx 3-1:0.89: board has no eeprom [ 492.125004][ T9740] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000080,,errors=continue. Quota mode: writeback. [ 492.141501][ T9740] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 492.232612][ T7360] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 492.261047][ T7360] em28xx 3-1:0.89: analog set to bulk mode. [ 492.275234][ T7706] usb 2-1: 1:35 : UAC_AS_GENERAL descriptor not found [ 492.277988][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 492.308463][ T7360] usb 3-1: USB disconnect, device number 16 [ 492.321239][ T7360] em28xx 3-1:0.89: Disconnecting em28xx [ 492.328274][ T7364] em28xx 3-1:0.89: Registering V4L2 extension [ 492.407948][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 492.454483][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 492.476638][ T7364] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 492.488805][ T7364] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 492.568045][ T7364] em28xx 3-1:0.89: No AC97 audio processor [ 492.646116][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 492.778578][ T7364] usb 3-1: Decoder not found [ 492.837012][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 492.852552][ T9710] udc-core: couldn't find an available UDC or it's busy [ 492.887790][ T7364] em28xx 3-1:0.89: failed to create media graph [ 492.900810][ T9710] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 493.039824][ T7706] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 493.050374][ T9767] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 493.058775][ T7706] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 493.068401][ T7706] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 493.079429][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 493.079794][ T7364] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 493.098470][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 493.103903][ T7364] em28xx 3-1:0.89: Registering snapshot button... [ 493.163918][ T7364] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input11 [ 493.178593][ T7364] em28xx 3-1:0.89: Remote control support is not available for this card. [ 493.187716][ T7360] em28xx 3-1:0.89: Closing input extension [ 493.194559][ T7360] em28xx 3-1:0.89: Deregistering snapshot button [ 493.226865][ T7360] em28xx 3-1:0.89: Freeing device [ 493.286215][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 493.338542][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 493.352217][ T7706] usb 2-1: invalid uac2 rates [ 493.357281][ T7706] usb 2-1: invalid uac2 rates [ 493.362811][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 493.372627][ T7706] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 493.381036][ T7706] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 493.404831][ T7706] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 493.632027][ T7706] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 494.328987][ T7706] usb 2-1: USB disconnect, device number 13 [ 494.483324][ T9787] bridge0: port 3(vlan0) entered blocking state [ 494.489796][ T9787] bridge0: port 3(vlan0) entered disabled state [ 494.498025][ T9787] device vlan0 entered promiscuous mode [ 494.632675][ T4275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.728723][ T9773] loop3: detected capacity change from 0 to 40427 [ 494.819852][ T9773] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 494.865881][ T9773] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 494.886803][ T4275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.985741][ T9773] F2FS-fs (loop3): invalid crc value [ 495.011552][ T9799] loop2: detected capacity change from 0 to 256 [ 495.037910][ T4275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.152115][ T9773] F2FS-fs (loop3): Found nat_bits in checkpoint [ 495.319359][ T4275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.413569][ T9773] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 495.438415][ T9773] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 496.128813][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1398'. [ 496.360750][ T4275] bond1: (slave ip6gre1): Releasing backup interface [ 496.377676][ T4275] device ip6gre1 left promiscuous mode [ 496.396668][ T4275] bond1: Destroying bond [ 496.413907][ T4275] bond1 (unregistering): Released all slaves [ 496.544385][ T9804] chnl_net:caif_netlink_parms(): no params data found [ 497.189131][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.207965][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.218303][ T9804] device bridge_slave_0 entered promiscuous mode [ 497.243948][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.278001][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.293151][ T9804] device bridge_slave_1 entered promiscuous mode [ 497.300450][ T7364] Bluetooth: hci0: command 0x0409 tx timeout [ 497.350646][ T9870] loop2: detected capacity change from 0 to 256 [ 497.428127][ T4275] bridge0: port 3(erspan0) entered disabled state [ 497.604143][ T4275] device erspan0 left promiscuous mode [ 497.611913][ T4275] bridge0: port 3(erspan0) entered disabled state [ 497.633111][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.650992][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.716397][ T9874] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1407'. [ 497.748480][ T9874] loop1: detected capacity change from 0 to 512 [ 498.305557][ T9874] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 498.334224][ T9881] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 498.815187][ T9804] team0: Port device team_slave_0 added [ 499.000841][ T9804] team0: Port device team_slave_1 added [ 499.169223][ T9874] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 499.184302][ T9874] EXT4-fs (loop1): Remounting filesystem read-only [ 499.191312][ T9874] EXT4-fs (loop1): 1 truncate cleaned up [ 499.196984][ T9874] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 499.379013][ T7364] Bluetooth: hci0: command 0x041b tx timeout [ 499.424446][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.441281][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.535648][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.569002][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.576185][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.621086][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.624738][ T9904] loop5: detected capacity change from 0 to 16 [ 499.627409][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.670657][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.774265][ T9904] erofs: (device loop5): mounted with root inode @ nid 36. [ 499.789424][ T9804] device hsr_slave_0 entered promiscuous mode [ 499.834264][ T9904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 499.910960][ T9804] device hsr_slave_1 entered promiscuous mode [ 501.604449][ T4275] device hsr_slave_0 left promiscuous mode [ 501.617148][ T1111] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 501.626077][ T7363] Bluetooth: hci0: command 0x040f tx timeout [ 501.657317][ T9930] loop5: detected capacity change from 0 to 512 [ 501.669262][ T4275] device hsr_slave_1 left promiscuous mode [ 501.679391][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.686877][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.715891][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.723839][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.732810][ T9930] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1419: inode has both inline data and extents flags [ 501.752777][ T4275] device bridge_slave_1 left promiscuous mode [ 501.759322][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.783394][ T9930] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1419: couldn't read orphan inode 15 (err -117) [ 501.795651][ T4275] device veth1_macvtap left promiscuous mode [ 501.803677][ T4275] device veth0_macvtap left promiscuous mode [ 501.810062][ T4275] device veth1_vlan left promiscuous mode [ 501.810780][ T9930] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 501.815830][ T4275] device veth0_vlan left promiscuous mode [ 501.977785][ T1111] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 501.996179][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.017048][ T9930] syz.5.1419 (9930) used greatest stack depth: 16832 bytes left [ 502.024980][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.041214][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 502.066310][ T4275] team0 (unregistering): Port device team_slave_1 removed [ 502.085368][ T4275] team0 (unregistering): Port device team_slave_0 removed [ 502.100473][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.117105][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.132010][ T1111] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 502.143595][ T1111] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 502.157259][ T1111] usb 2-1: Manufacturer: syz [ 502.195884][ T1111] usb 2-1: config 0 descriptor?? [ 502.227764][ T4275] bond0 (unregistering): Released all slaves [ 502.235382][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1421'. [ 502.594626][ T9953] loop5: detected capacity change from 0 to 256 [ 502.688800][ T1111] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 502.713886][ T1111] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 502.800523][ T1111] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 503.011009][ T1111] usb 2-1: USB disconnect, device number 14 [ 503.044059][ T9804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 503.273979][ T9804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 503.481081][ T9804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 503.620876][ T9804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 503.741124][ T7367] Bluetooth: hci0: command 0x0419 tx timeout [ 503.811674][ T9968] device syzkaller1 entered promiscuous mode [ 504.709025][ T9984] loop1: detected capacity change from 0 to 256 [ 504.808909][ T9984] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 504.816261][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.861751][ T9963] loop3: detected capacity change from 0 to 32768 [ 504.869565][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 504.887567][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 504.923848][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.933163][ T25] audit: type=1800 audit(1785273134.094:47): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1431" name="file2" dev="loop1" ino=1048658 res=0 errno=0 [ 504.967428][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.996608][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 505.002594][ T9963] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1427 (9963) [ 505.013098][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.023783][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.040785][ T25] audit: type=1800 audit(1785273134.094:48): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1431" name="file2" dev="loop1" ino=1048658 res=0 errno=0 [ 505.128171][ T9963] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 505.148012][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 505.159798][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 505.176172][ T9963] BTRFS info (device loop3): setting nodatasum [ 505.179266][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 505.199674][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.202770][ T9963] BTRFS info (device loop3): force zlib compression, level 3 [ 505.217712][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.224790][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.250962][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 505.276156][ T9963] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 505.276965][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 505.308089][ T9963] BTRFS info (device loop3): use lzo compression, level 0 [ 505.315217][ T9963] BTRFS info (device loop3): turning on flush-on-commit [ 505.350283][ T9963] BTRFS info (device loop3): enabling auto defrag [ 505.365636][ T9804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.375552][ T9963] BTRFS info (device loop3): max_inline at 4096 [ 505.418505][ T9963] BTRFS info (device loop3): using free space tree [ 505.446445][ T9963] BTRFS info (device loop3): has skinny extents [ 505.631827][ T9804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.721700][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 505.747971][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 505.757063][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 505.776419][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 505.795241][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 505.865554][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 505.905310][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 505.912518][ T9989] loop5: detected capacity change from 0 to 32768 [ 505.953875][ T9989] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1442 (9989) [ 505.958997][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 505.980953][ T9963] BTRFS info (device loop3): enabling ssd optimizations [ 506.056185][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 506.081439][ T9989] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 506.117070][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 506.131732][T10021] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 506.148460][ T9989] BTRFS info (device loop5): using free space tree [ 506.171072][ T9989] BTRFS info (device loop5): has skinny extents [ 506.249205][T10021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.344125][T10026] bond1: (slave gretap2): making interface the new active one [ 506.371554][T10026] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 506.423583][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 506.582643][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 506.601105][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 506.648203][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.663781][ T9989] BTRFS info (device loop5): enabling ssd optimizations [ 506.800705][T10058] loop3: detected capacity change from 0 to 2048 [ 506.847043][T10058] hpfs: bad mount options. [ 507.250021][T10086] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 507.318882][ T9804] device veth0_vlan entered promiscuous mode [ 507.370071][ T9804] device veth1_vlan entered promiscuous mode [ 507.382459][T10086] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 507.527947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 507.542864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 507.552727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 507.572751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 507.629894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 507.713034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 507.748460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 507.785463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 507.804913][ T7361] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 507.822852][ T9804] device veth0_macvtap entered promiscuous mode [ 507.871168][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 507.897803][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 507.929138][ T9804] device veth1_macvtap entered promiscuous mode [ 507.948425][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 507.970697][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 508.023106][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.044940][ T7361] usb 4-1: Using ep0 maxpacket: 16 [ 508.064383][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.099871][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.119900][ T7363] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 508.137765][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.158742][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.183205][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.214284][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.234479][ T9804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.254923][ T9804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.276642][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.294477][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 508.303445][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 508.322332][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 508.332131][ T7361] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 508.352089][ T7361] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 508.361303][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 508.381448][ T9804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.390804][ T7361] usb 4-1: Product: syz [ 508.399294][ T7361] usb 4-1: Manufacturer: syz [ 508.403958][ T9804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.413458][ T7361] usb 4-1: SerialNumber: syz [ 508.418937][ T9804] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.435123][ T7361] usb 4-1: config 0 descriptor?? [ 508.442153][ T9804] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.504917][ T7363] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 508.524936][ T7363] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.527935][T10126] loop2: detected capacity change from 0 to 40427 [ 508.540997][ T7363] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.553407][ T7363] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 508.562110][T10126] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 508.627283][T10126] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 508.644488][ T7363] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 508.661426][T10126] F2FS-fs (loop2): invalid crc value [ 508.663727][ T7363] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 508.677443][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.700296][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.711158][ T7363] usb 6-1: Manufacturer: syz [ 508.721627][ T7363] usb 6-1: config 0 descriptor?? [ 508.728312][T10126] F2FS-fs (loop2): Found nat_bits in checkpoint [ 508.737760][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 508.768154][ T7644] usb 4-1: USB disconnect, device number 15 [ 508.802390][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.812817][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.823360][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 508.908774][T10126] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 508.933775][T10126] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 509.205888][ T7363] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 509.220863][ T7363] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 509.233335][ T7363] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 509.550638][T10173] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 510.060755][ T4230] usb 6-1: USB disconnect, device number 16 [ 510.447882][T10179] bridge0: port 1(syz_tun) entered blocking state [ 510.584542][T10179] bridge0: port 1(syz_tun) entered disabled state [ 510.592040][T10179] device syz_tun entered promiscuous mode [ 510.888493][T10199] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 511.116801][T10197] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 512.035799][T10217] loop2: detected capacity change from 0 to 1024 [ 512.058775][T10218] loop5: detected capacity change from 0 to 512 [ 512.092166][T10217] EXT4-fs (loop2): Ignoring removed bh option [ 512.219783][T10217] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,minixdf,. Quota mode: none. [ 512.233079][T10227] loop1: detected capacity change from 0 to 256 [ 512.256971][T10218] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1473: corrupted in-inode xattr [ 512.309830][T10218] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1473: couldn't read orphan inode 15 (err -117) [ 512.313750][T10227] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 512.325390][T10217] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.1472: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 512.359847][T10217] EXT4-fs (loop2): Remounting filesystem read-only [ 512.372267][T10235] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.1472: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 512.385498][T10233] device syzkaller0 entered promiscuous mode [ 512.397628][T10227] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 512.399876][T10235] EXT4-fs (loop2): Remounting filesystem read-only [ 512.425258][T10218] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 512.527261][ T6151] EXT4-fs error (device loop5): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 512.550170][ T6151] EXT4-fs error (device loop5): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 512.643590][T10227] overlayfs: failed to resolve './file0': -2 [ 512.732830][ T4190] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /304/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 512.760670][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 512.769301][ T4190] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /304/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 512.795870][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 512.822446][ T4190] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 512.855438][T10245] loop1: detected capacity change from 0 to 128 [ 512.866872][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 512.876207][ T4190] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 512.905154][T10245] EXT4-fs (loop1): Ignoring removed orlov option [ 512.932501][ T4190] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /304/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 512.977649][T10245] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none. [ 512.979180][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 513.000137][ T7366] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 513.012376][ T4190] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /304/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 513.015286][T10245] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.071824][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.130714][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 513.150140][ T4190] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 513.196267][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 513.208856][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.212058][ T4190] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.258668][ T4190] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /304/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 513.301202][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.319008][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 513.325908][ T4190] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /304/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 513.389008][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 513.392286][ T7366] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 513.396113][T10262] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 513.412777][T10262] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 513.422354][ T7366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.431250][ T4190] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.442156][ T7366] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.455692][ T4190] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.476013][T10262] vhci_hcd vhci_hcd.0: Device attached [ 513.484925][ T4190] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.487612][ T7366] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 513.530823][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.546466][ T4190] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.566567][ T4190] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.591962][ T7366] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 513.599366][ T4190] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.611806][ T7366] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 513.624215][ T7366] usb 4-1: Manufacturer: syz [ 513.630938][ T7366] usb 4-1: config 0 descriptor?? [ 513.659847][ T4190] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.713092][ T4190] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 513.721871][ T7361] vhci_hcd: vhci_device speed not set [ 513.808122][ T7363] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 513.815880][ T7361] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 513.894141][T10268] chnl_net:caif_netlink_parms(): no params data found [ 513.956469][T10268] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.964677][T10268] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.973060][T10268] device bridge_slave_0 entered promiscuous mode [ 513.994851][T10268] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.005683][T10268] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.018002][T10268] device bridge_slave_1 entered promiscuous mode [ 514.067044][T10268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.082625][T10268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.123445][ T7366] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 514.130975][T10268] team0: Port device team_slave_0 added [ 514.140883][T10268] team0: Port device team_slave_1 added [ 514.142338][ T7366] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 514.181800][ T7363] usb 2-1: config 0 has no interfaces? [ 514.188490][ T7363] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 514.202300][ T7366] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 514.214386][T10268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.221328][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.254662][ T7363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.275672][ T7363] usb 2-1: config 0 descriptor?? [ 514.308825][T10268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.374314][T10268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.385462][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.418266][T10268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.453420][ T7363] usb 4-1: USB disconnect, device number 16 [ 514.484083][T10268] device hsr_slave_0 entered promiscuous mode [ 514.490764][T10268] device hsr_slave_1 entered promiscuous mode [ 514.497615][T10268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.505472][T10268] Cannot create hsr debugfs directory [ 514.526930][T10263] vhci_hcd: unknown pdu 2 [ 514.535063][ T7642] usb 2-1: USB disconnect, device number 15 [ 514.545549][ T4276] vhci_hcd: stop threads [ 514.550033][ T4276] vhci_hcd: release socket [ 514.556378][ T4276] vhci_hcd: disconnect device [ 514.601437][ T7361] vhci_hcd: vhci_device speed not set [ 514.745700][T10268] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 514.824035][T10268] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 514.856154][T10268] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 514.868477][T10268] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 514.978930][ T9] device hsr_slave_0 left promiscuous mode [ 514.988526][ T9] device hsr_slave_1 left promiscuous mode [ 514.999501][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.022823][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.047958][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.058324][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.076683][T10304] loop3: detected capacity change from 0 to 2048 [ 515.083757][ T9] device vlan0 left promiscuous mode [ 515.107654][ T9] bridge0: port 3(vlan0) entered disabled state [ 515.189617][ T9] device bridge_slave_1 left promiscuous mode [ 515.228304][T10304] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,max_dir_size_kb=0x0000000000000004,norecovery,,errors=continue. Quota mode: none. [ 515.286492][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.309643][ T25] audit: type=1804 audit(1785273144.470:49): pid=10304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1486" name="/newroot/281/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 515.337140][ T9] device bridge_slave_0 left promiscuous mode [ 515.361605][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.406522][ T9] device veth1_macvtap left promiscuous mode [ 515.415969][ T9] device veth0_macvtap left promiscuous mode [ 515.433808][ T9] device veth1_vlan left promiscuous mode [ 515.439630][ T9] device veth0_vlan left promiscuous mode [ 515.500373][T10304] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 515.539806][T10304] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 515.569645][T10304] EXT4-fs (loop3): This should not happen!! Data will be lost [ 515.569645][T10304] [ 515.690816][T10304] EXT4-fs (loop3): Total free blocks count 0 [ 515.697384][ T7361] Bluetooth: hci2: command 0x0409 tx timeout [ 515.705044][T10304] EXT4-fs (loop3): Free/Dirty block details [ 515.731796][T10304] EXT4-fs (loop3): free_blocks=2415919104 [ 515.816025][T10304] EXT4-fs (loop3): dirty_blocks=16 [ 515.823278][T10304] EXT4-fs (loop3): Block reservation details [ 515.839382][T10304] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 516.424288][ T9] team0 (unregistering): Port device team_slave_1 removed [ 516.558234][ T9] team0 (unregistering): Port device team_slave_0 removed [ 516.604599][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.680976][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.819327][ T9] bond0 (unregistering): Released all slaves [ 516.890835][ T7644] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 517.110601][T10268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.160668][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 517.172820][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 517.227528][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 517.250203][T10268] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.280540][ T7644] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.298389][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 517.315631][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 517.316607][ T7644] usb 4-1: config 0 has no interfaces? [ 517.333793][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.339013][ T7644] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 517.340886][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.368745][ T7644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.385392][ T7644] usb 4-1: config 0 descriptor?? [ 517.401391][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 517.459190][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 517.487364][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 517.524911][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.532035][ T5760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.565531][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 517.622933][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 517.658743][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 517.685244][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 517.714849][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.717191][ T4230] usb 4-1: USB disconnect, device number 17 [ 517.750795][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.769832][ T7366] Bluetooth: hci2: command 0x041b tx timeout [ 517.789846][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.810191][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.828756][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 517.848364][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 517.870319][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 517.895837][T10268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 517.913555][T10305] chnl_net:caif_netlink_parms(): no params data found [ 518.210710][T10305] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.218040][T10305] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.226579][T10305] device bridge_slave_0 entered promiscuous mode [ 518.234981][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.242659][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.267771][T10305] device bridge_slave_1 entered promiscuous mode [ 518.331487][T10305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.361704][T10305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.405972][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 518.425694][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.455243][T10305] team0: Port device team_slave_0 added [ 518.466781][T10268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.481625][T10305] team0: Port device team_slave_1 added [ 518.539461][T10305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.546410][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.672163][T10305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.692574][T10404] loop6: detected capacity change from 0 to 128 [ 518.717931][T10305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.741800][T10305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.757744][T10404] EXT4-fs (loop6): inline encryption not supported [ 518.831440][T10305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.848428][T10404] EXT4-fs (loop6): Test dummy encryption mode enabled [ 518.900382][T10404] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,inlinecrypt,jqfmt=vfsv0,min_batch_time=0x0000000000000009,grpjquota=,test_dummy_encryption,,errors=continue. Quota mode: none. [ 518.938467][T10305] device hsr_slave_0 entered promiscuous mode [ 518.949445][T10404] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.968161][T10305] device hsr_slave_1 entered promiscuous mode [ 518.999217][T10305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.067550][T10305] Cannot create hsr debugfs directory [ 519.148355][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 519.174457][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 519.258740][T10268] device veth0_vlan entered promiscuous mode [ 519.299886][ T4397] Bluetooth: hci1: command 0x041b tx timeout [ 519.306337][T10268] device veth1_vlan entered promiscuous mode [ 519.335996][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 519.349710][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.365248][T10429] loop1: detected capacity change from 0 to 16 [ 519.376110][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 519.435169][T10429] erofs: (device loop1): mounted with root inode @ nid 36. [ 519.447192][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.486665][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 519.518758][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 519.547217][T10429] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 519.689435][T10268] device veth0_macvtap entered promiscuous mode [ 519.749817][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 519.780732][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.788812][ T4397] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 519.819930][T10268] device veth1_macvtap entered promiscuous mode [ 519.826860][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 519.844860][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 519.848834][T10106] Bluetooth: hci2: command 0x040f tx timeout [ 519.969268][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.001159][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.038906][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.058218][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.074443][ T4397] usb 7-1: Using ep0 maxpacket: 16 [ 520.097567][T10268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.116479][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 520.154621][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 520.181372][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.282145][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.331012][ T4397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.333815][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.342682][ T4397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.362968][ T4397] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 520.376007][ T4397] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 520.385544][ T4397] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.395420][ T4397] usb 7-1: config 0 descriptor?? [ 520.403939][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.123240][T10268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.153692][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 521.178793][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 521.226800][T10268] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.258301][T10268] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.267002][T10268] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.303021][T10268] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.368722][ T7361] Bluetooth: hci1: command 0x040f tx timeout [ 521.424483][T10305] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 521.445454][T10305] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 521.493595][T10305] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 521.515540][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.525922][T10305] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 521.538300][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.559887][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 521.575670][ T4397] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000C/input/input12 [ 521.631188][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.641986][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.686625][ T4397] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 521.701901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 521.823172][T10305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.886706][T10305] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.916662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 521.925643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 521.933275][ T7361] Bluetooth: hci2: command 0x0419 tx timeout [ 521.941110][ T7642] usb 7-1: USB disconnect, device number 2 [ 521.964118][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 522.001878][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.072468][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.079590][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.174059][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 522.182754][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.196494][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.203578][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.211663][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 522.233956][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.267192][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 522.301635][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 522.313310][T10484] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1481'. [ 522.327130][T10484] loop7: detected capacity change from 0 to 512 [ 522.334773][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 522.351584][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 522.362898][T10484] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 522.385608][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 522.410894][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 522.441923][T10484] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 522.458995][T10484] EXT4-fs (loop7): Remounting filesystem read-only [ 522.467076][T10484] EXT4-fs (loop7): 1 truncate cleaned up [ 522.472869][T10484] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 522.573873][T10305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 522.595832][T10305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.612870][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 522.645360][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.693395][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 522.766645][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.834731][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.111375][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.135405][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.182201][T10305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.341324][T10517] loop3: detected capacity change from 0 to 1024 [ 523.433906][T10517] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 523.447157][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 523.522902][T10517] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,delalloc,,errors=continue. Quota mode: none. [ 523.743352][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 523.799092][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 523.841606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 523.854897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.896326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.933882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.968286][T10305] device veth0_vlan entered promiscuous mode [ 524.022358][T10305] device veth1_vlan entered promiscuous mode [ 524.108000][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 524.137251][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 524.152721][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 524.169718][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.223908][T10305] device veth0_macvtap entered promiscuous mode [ 524.381730][T10305] device veth1_macvtap entered promiscuous mode [ 524.412852][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 524.421052][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 524.445966][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 524.463383][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 524.513149][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.554171][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.571922][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.588561][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.610399][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.627626][T10562] loop7: detected capacity change from 0 to 128 [ 524.647182][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.688820][T10305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.697779][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 524.725071][T10562] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue. Quota mode: none. [ 524.884034][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.048511][T10562] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 525.360709][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.452279][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.478142][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.489147][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.499642][T10305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.511262][T10305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.541694][T10305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.590686][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 525.603529][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.619264][T10305] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.667037][T10572] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 525.693868][T10305] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.711464][T10305] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.740778][T10305] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.900595][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1526'. [ 526.050013][ T5760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.075825][ T5760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.085036][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 526.113773][T10597] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1529'. [ 526.128517][T10597] loop3: detected capacity change from 0 to 512 [ 526.150804][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.191197][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.220425][T10597] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 526.256370][T10597] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 526.273761][T10597] EXT4-fs (loop3): Remounting filesystem read-only [ 526.280688][T10597] EXT4-fs (loop3): 1 truncate cleaned up [ 526.286445][T10597] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 526.340807][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 526.437765][ T9] device hsr_slave_0 left promiscuous mode [ 526.454563][ T9] device hsr_slave_1 left promiscuous mode [ 526.476480][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.510661][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.531783][ T9] device bridge_slave_1 left promiscuous mode [ 526.563997][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.584682][ T9] device bridge_slave_0 left promiscuous mode [ 526.611361][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.694653][ T9] bond1 (unregistering): Released all slaves [ 526.935760][ T9] team0 (unregistering): Port device team_slave_1 removed [ 526.966653][ T9] team0 (unregistering): Port device team_slave_0 removed [ 527.001665][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.044649][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.857905][ T9] bond0 (unregistering): Released all slaves [ 528.016437][T10622] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 528.821392][ T5949] Bluetooth: hci0: command 0x0409 tx timeout [ 529.443940][ T4230] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 529.520575][T10606] chnl_net:caif_netlink_parms(): no params data found [ 529.675877][T10606] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.687661][T10606] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.711467][T10606] device bridge_slave_0 entered promiscuous mode [ 529.731982][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 529.739438][T10606] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.746737][T10606] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.755206][T10606] device bridge_slave_1 entered promiscuous mode [ 529.863005][T10606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.879751][T10699] loop8: detected capacity change from 0 to 4096 [ 529.883851][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.904210][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.917838][T10606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.998249][T10606] team0: Port device team_slave_0 added [ 530.029007][T10606] team0: Port device team_slave_1 added [ 530.069133][T10699] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 530.084058][ T4230] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 530.093111][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.128207][T10699] ntfs3: loop8: Failed to load $Extend. [ 530.160035][ T4230] usb 2-1: Product: syz [ 530.165195][T10606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.175182][ T4230] usb 2-1: Manufacturer: syz [ 530.200046][ T4230] usb 2-1: SerialNumber: syz [ 530.204850][T10606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.330552][T10606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.427149][T10606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.443431][T10606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.527825][T10721] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 530.635754][T10606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.886072][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 531.214469][ T4230] usb 2-1: 0:2 : does not exist [ 531.368493][ T4230] usb 2-1: USB disconnect, device number 16 [ 531.386669][T10606] device hsr_slave_0 entered promiscuous mode [ 531.436347][T10706] loop7: detected capacity change from 0 to 32768 [ 531.444045][T10606] device hsr_slave_1 entered promiscuous mode [ 531.468982][T10606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.491245][T10606] Cannot create hsr debugfs directory [ 531.640513][T10706] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1543 (10706) [ 531.731729][T10706] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 531.767611][T10706] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 531.800920][T10742] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1546'. [ 531.814959][T10742] loop8: detected capacity change from 0 to 512 [ 531.837908][T10706] BTRFS info (device loop7): use zstd compression, level 3 [ 531.873274][T10742] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 531.889879][T10706] BTRFS info (device loop7): using free space tree [ 531.925435][T10742] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 531.940883][T10742] EXT4-fs (loop8): Remounting filesystem read-only [ 531.947817][T10742] EXT4-fs (loop8): 1 truncate cleaned up [ 531.953543][T10742] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 532.002232][T10706] BTRFS info (device loop7): has skinny extents [ 532.065642][T10606] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.175926][T10606] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.362855][T10706] BTRFS info (device loop7): enabling ssd optimizations [ 532.375463][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 532.390796][ T25] audit: type=1800 audit(1785273161.558:50): pid=10706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1543" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 532.705893][ T5273] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop7 scanned by udevd (5273) [ 532.822575][ T5949] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 532.962205][ T7366] Bluetooth: hci0: command 0x040f tx timeout [ 533.192228][ T5949] usb 4-1: config 0 has no interfaces? [ 533.197750][ T5949] usb 4-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 533.216998][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.238780][ T5949] usb 4-1: config 0 descriptor?? [ 533.378944][T10772] bridge0: port 3(team0) entered disabled state [ 533.385460][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.392656][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.702194][T10772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.711453][T10796] loop7: detected capacity change from 0 to 512 [ 533.738498][T10772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.775545][T10796] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 533.786931][T10796] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 533.817850][T10796] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 533.835141][T10796] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 534.254556][T10805] loop7: detected capacity change from 0 to 256 [ 534.330156][T10805] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 534.360236][T10772] batman_adv: batadv0: Interface deactivated: gretap1 [ 534.420323][T10772] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.434786][T10772] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.451481][T10772] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.460545][T10772] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.563974][T10606] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.946947][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.954312][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.977409][T10816] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1562'. [ 534.991481][T10816] loop7: detected capacity change from 0 to 512 [ 535.026487][T10816] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 535.041144][ T7366] Bluetooth: hci0: command 0x0419 tx timeout [ 535.063391][T10816] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 535.085350][T10816] EXT4-fs (loop7): Remounting filesystem read-only [ 535.093302][T10816] EXT4-fs (loop7): 1 truncate cleaned up [ 535.098949][T10816] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 535.481554][T10792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.509010][T10792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.585689][T10821] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 536.079298][T10792] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.090661][T10792] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.099624][T10792] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.115535][T10792] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.258899][T10606] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.286548][ T4230] usb 4-1: USB disconnect, device number 18 [ 536.637702][T10606] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 536.752823][T10606] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 536.768247][T10846] loop7: detected capacity change from 0 to 128 [ 536.785948][T10606] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 536.839780][T10606] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 536.881115][T10846] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 536.933917][T10846] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 537.215338][T10606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.282596][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 537.291551][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.298902][T10846] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 537.354608][T10606] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.356227][T10854] fscrypt: loop7: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 537.391835][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 537.406791][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.437846][T10676] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.444956][T10676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.498567][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 537.530698][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 537.564018][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.586069][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.593156][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.668500][T10870] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1569'. [ 537.705208][T10870] loop8: detected capacity change from 0 to 512 [ 537.727089][T10872] loop1: detected capacity change from 0 to 512 [ 537.770355][T10870] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 537.794434][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 537.825534][T10868] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 537.864489][T10872] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1574: inode has both inline data and extents flags [ 537.878905][T10870] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 537.894791][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 537.918367][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 537.929768][T10868] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 537.938572][T10872] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1574: couldn't read orphan inode 15 (err -117) [ 537.951832][T10870] EXT4-fs (loop8): Remounting filesystem read-only [ 537.965828][T10872] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 537.979991][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 537.986987][T10870] EXT4-fs (loop8): 1 truncate cleaned up [ 538.022194][T10870] EXT4-fs (loop8): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 538.042466][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 538.068114][T10606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.109573][T10606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.176459][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 538.199126][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 538.243770][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 538.283469][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.338306][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 538.363599][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 538.401089][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 538.794504][T10909] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 538.939971][T10923] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 539.358582][ T9] device hsr_slave_0 left promiscuous mode [ 539.461105][ T9] device hsr_slave_1 left promiscuous mode [ 539.561832][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.652859][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.702739][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.791878][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.842874][ T9] device bridge_slave_1 left promiscuous mode [ 539.885385][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.920167][ T9] device bridge_slave_0 left promiscuous mode [ 539.966712][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.023789][ T9] device veth1_macvtap left promiscuous mode [ 540.040454][ T9] device veth0_macvtap left promiscuous mode [ 540.057753][ T9] device veth1_vlan left promiscuous mode [ 540.063629][ T9] device veth0_vlan left promiscuous mode [ 540.207319][T10943] loop7: detected capacity change from 0 to 1024 [ 540.267702][T10943] EXT4-fs (loop7): Ignoring removed bh option [ 540.290845][T10943] EXT4-fs (loop7): Ignoring removed bh option [ 540.358930][T10943] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 540.526139][T10943] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 540.584629][T10268] EXT4-fs error (device loop7): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /25/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 540.611343][ T9] team0 (unregistering): Port device team_slave_1 removed [ 540.623404][T10268] EXT4-fs error (device loop7): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /25/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 540.653286][ T9] team0 (unregistering): Port device team_slave_0 removed [ 540.668160][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.683780][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.796790][ T9] bond0 (unregistering): Released all slaves [ 540.883615][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 540.919146][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.967760][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.984031][T10968] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 541.130281][T10606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.054858][T10991] binder: 10990:10991 ioctl c0306201 200000000180 returned -14 [ 542.175630][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1596'. [ 542.240168][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 542.258087][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 542.321048][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 542.335339][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 542.360447][T10606] device veth0_vlan entered promiscuous mode [ 542.369494][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 542.387314][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 542.415620][T10606] device veth1_vlan entered promiscuous mode [ 542.483160][T11006] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1593'. [ 542.487913][ T27] INFO: task udevd:5325 blocked for more than 143 seconds. [ 542.520017][ T27] Not tainted syzkaller #0 [ 542.524978][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.544193][T11006] loop1: detected capacity change from 0 to 512 [ 542.547576][ T27] task:udevd state:D stack:23344 pid: 5325 ppid: 3559 flags:0x00004002 [ 542.574858][ T27] Call Trace: [ 542.579951][ T27] [ 542.582952][ T27] __schedule+0x11c3/0x4350 [ 542.605665][ T27] ? rcu_lock_acquire+0x30/0x30 [ 542.611072][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 542.616515][ T27] ? release_firmware_map_entry+0x190/0x190 [ 542.627856][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 542.633014][ T27] ? __mutex_trylock_common+0x86/0x260 [ 542.638950][ T27] ? rcu_lock_release+0x20/0x20 [ 542.643944][ T27] schedule+0x11b/0x1e0 [ 542.648287][ T27] schedule_preempt_disabled+0xf/0x20 [ 542.653881][ T27] __mutex_lock_common+0xdf5/0x2400 [ 542.659277][ T27] ? uevent_show+0x16c/0x320 [ 542.664148][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 542.669657][ T27] mutex_lock_nested+0x17/0x20 [ 542.674622][ T27] uevent_show+0x16c/0x320 [ 542.681930][ T27] dev_attr_show+0x50/0xb0 [ 542.686543][ T27] ? device_get_ownership+0xa0/0xa0 [ 542.692136][ T27] sysfs_kf_seq_show+0x316/0x4c0 [ 542.697506][ T27] seq_read_iter+0x460/0xc50 [ 542.702366][ T27] vfs_read+0x75e/0xd50 [ 542.706679][ T27] ? kernel_read+0x1e0/0x1e0 [ 542.712232][ T27] ? __fdget_pos+0x2c6/0x370 [ 542.716938][ T27] ksys_read+0x153/0x260 [ 542.721614][ T27] ? vfs_write+0xd70/0xd70 [ 542.726232][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 542.731859][ T27] do_syscall_64+0x4c/0xa0 [ 542.736462][ T27] ? clear_bhb_loop+0x30/0x80 [ 542.741510][ T27] ? clear_bhb_loop+0x30/0x80 [ 542.746284][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 542.752667][ T27] RIP: 0033:0x7fd26f1da407 [ 542.757395][ T27] RSP: 002b:00007ffe9b14c910 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 542.766003][ T27] RAX: ffffffffffffffda RBX: 00007fd26f0ec880 RCX: 00007fd26f1da407 [ 542.774341][ T27] RDX: 0000000000001000 RSI: 00005591d8710a00 RDI: 0000000000000008 [ 542.782806][ T27] RBP: 00007fd26f322ff0 R08: 0000000000000000 R09: 0000000000000000 [ 542.783768][ T4230] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 542.792961][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 542.812753][ T27] R13: 00007fd26f322ea0 R14: 0000000000000000 R15: 00005591d87239c0 [ 542.820850][ T27] [ 542.830805][T10606] device veth0_macvtap entered promiscuous mode [ 542.837876][ T27] [ 542.837876][ T27] Showing all locks held in the system: [ 542.845594][ T27] 3 locks held by kworker/u4:0/9: [ 542.857439][T11006] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 542.884407][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 542.900773][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 542.905259][T11006] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 542.921796][ T27] 1 lock held by khungtaskd/27: [ 542.937451][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 542.957768][ T27] #0: ffffffff8c31ef20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 542.968105][T11006] EXT4-fs (loop1): Remounting filesystem read-only [ 542.984567][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 542.996209][ T27] 1 lock held by dhcpcd/3852: [ 543.001361][T11006] EXT4-fs (loop1): 1 truncate cleaned up [ 543.014134][T10606] device veth1_macvtap entered promiscuous mode [ 543.021974][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 543.041529][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 543.051440][T11006] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,abort,debug_want_extra_isize=0x000000000000002e,nombcache,errors=remount-ro,quota,. Quota mode: writeback. [ 543.077953][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 543.085420][ T27] 2 locks held by getty/3953: [ 543.096077][ T27] #0: ffff88802c229098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 543.125488][T10606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.154385][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 543.205214][T10606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.216435][ T27] 3 locks held by kworker/0:7/4230: [ 543.222889][ T27] #0: ffff8881411d8d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 543.235077][T10606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.242842][ T27] #1: ffffc9000315fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 543.255118][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 543.265173][ T27] #2: ffff88814865e220 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5260 [ 543.277859][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 543.284064][ T27] 5 locks held by kworker/1:6/4263: [ 543.295709][ T27] #0: ffff8881411d8d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 543.312941][T10606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.333506][T10606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.354906][ T27] #1: ffffc9000330fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 543.370773][T10606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.384086][ T27] #2: ffff888023f36220 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5260 [ 543.397590][T10606] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.413746][ T27] #3: ffff88801e648220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 543.426625][T10606] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.435283][ T27] #4: ffff8880603eb1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 543.435711][ T4230] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 543.460923][ T27] 4 locks held by udevd/5325: [ 543.473960][T10606] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.475823][ T27] #0: [ 543.494178][ T4230] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.496013][ T27] ffff888054f598b8 [ 543.504263][ T4230] usb 9-1: Product: syz [ 543.512830][T10606] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.526438][ T27] (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50 [ 543.531874][ T4230] usb 9-1: Manufacturer: syz [ 543.543853][ T27] #1: ffff88805f24a088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x55/0x3c0 [ 543.549974][ T4230] usb 9-1: SerialNumber: syz [ 543.558117][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 543.572247][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 543.575486][ T27] #2: ffff888023834e88 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 543.599182][ T4230] usb 9-1: config 0 descriptor?? [ 543.622957][ T27] #3: ffff888023f36220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 543.648057][ T27] 2 locks held by kworker/1:14/5951: [ 543.660241][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 543.687641][ T27] #1: ffffc9000341fd00 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 543.722977][ T27] 2 locks held by kworker/1:16/7361: [ 543.735144][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 543.763830][ T27] #1: ffffc9000353fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 543.791982][ T27] 3 locks held by kworker/1:17/7363: [ 543.804141][ T27] #0: ffff88802addf538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 543.831712][ T27] #1: ffffc90003cefd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 543.865380][ T27] #2: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1530 [ 543.876806][ T4230] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 543.892016][ T27] 3 locks held by kworker/1:19/7366: [ 543.905394][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 543.935601][ T27] #1: ffffc9000457fd00 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 543.965758][ T27] #2: ffffffff8c3238b0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4c0 [ 543.986403][ T27] 3 locks held by kworker/0:14/7704: [ 543.996497][ T27] #0: ffff88802addf538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 544.023234][ T27] #1: ffffc90004c07d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 544.036194][ T27] #2: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1530 [ 544.051110][ T27] 3 locks held by syz-executor/10606: [ 544.056493][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 544.066072][ T27] #1: ffff88807c8ad3e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x223/0x420 [ 544.081554][ T27] #2: ffffffff8c3239a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 544.092885][ T27] 2 locks held by dhcpcd/11011: [ 544.103023][ T27] #0: ffff8880616c0120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xd60 [ 544.114581][ T27] #1: ffffffff8c3239a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 544.131659][ T27] [ 544.151809][ T27] ============================================= [ 544.151809][ T27] [ 544.199152][T10606] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 544.212165][ T27] NMI backtrace for cpu 1 [ 544.216500][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 544.223695][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 544.233744][ T27] Call Trace: [ 544.237022][ T27] [ 544.239953][ T27] dump_stack_lvl+0x188/0x250 [ 544.244670][ T27] ? show_regs_print_info+0x20/0x20 [ 544.249874][ T27] ? load_image+0x410/0x410 [ 544.254394][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 544.259771][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 544.264971][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 544.269916][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 544.271691][T10606] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 544.276064][ T27] ? _printk+0xda/0x130 [ 544.276086][ T27] ? load_image+0x410/0x410 [ 544.292406][ T27] ? load_image+0x410/0x410 [ 544.296910][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 544.302981][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 544.308962][ T27] watchdog+0xe1b/0xe60 [ 544.313132][ T27] kthread+0x42e/0x520 [ 544.317266][ T27] ? hungtask_pm_notify+0x40/0x40 [ 544.322291][ T27] ? kthread_blkcg+0xd0/0xd0 [ 544.326901][ T27] ret_from_fork+0x1f/0x30 [ 544.331360][ T27] [ 544.334732][ T27] Sending NMI from CPU 1 to CPUs 0: [ 544.340091][ C0] NMI backtrace for cpu 0 [ 544.340100][ C0] CPU: 0 PID: 10606 Comm: syz-executor Not tainted syzkaller #0 [ 544.340115][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 544.340123][ C0] RIP: 0010:lock_release+0x2b6/0x8a0 [ 544.340144][ C0] Code: 00 41 89 3e 45 85 ff 4c 8b 7c 24 20 0f 85 9f 02 00 00 48 8b 44 24 40 42 0f b6 04 28 84 c0 0f 85 73 04 00 00 48 8b 04 24 89 10 <4c> 89 e0 48 c1 e8 03 42 80 3c 28 00 74 0e 4c 89 e7 48 89 d3 e8 b1 [ 544.340215][ C0] RSP: 0018:ffffc90002ecf200 EFLAGS: 00000046 [ 544.340228][ C0] RAX: ffff8880202d4668 RBX: 1ffff1100405a8d7 RCX: 0000000000000001 [ 544.340238][ C0] RDX: 0000000000000001 RSI: ffffffff8c31ef20 RDI: ffff8880202d4698 [ 544.340247][ C0] RBP: ffffc90002ecf310 R08: ffffffff8d8aeaef R09: 1ffffffff1b15d5d [ 544.340258][ C0] R10: dffffc0000000000 R11: fffffbfff1b15d5e R12: ffff8880202d4698 [ 544.340268][ C0] R13: dffffc0000000000 R14: ffff8880202d46b8 R15: 0000000000000246 [ 544.340278][ C0] FS: 0000555583637500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 544.340290][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.340300][ C0] CR2: 00007f0bfa2edee0 CR3: 0000000066cae000 CR4: 00000000003506f0 [ 544.340312][ C0] DR0: 0000000000000002 DR1: ffffffffff7fff00 DR2: 0000000080000001 [ 544.340321][ C0] DR3: fffffffffffffff6 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 544.340330][ C0] Call Trace: [ 544.340334][ C0] [ 544.340340][ C0] ? rcu_lock_release+0x5/0x20 [ 544.340419][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 544.340435][ C0] ? unwind_next_frame+0x11ec/0x1cf0 [ 544.340486][ C0] ? 0xffffffffa002c000 [ 544.340496][ C0] is_bpf_text_address+0x254/0x270 [ 544.340510][ C0] __kernel_text_address+0x9a/0x100 [ 544.340527][ C0] unwind_get_return_address+0x49/0x80 [ 544.340541][ C0] ? stack_trace_save+0xf0/0xf0 [ 544.340554][ C0] arch_stack_walk+0xf2/0x140 [ 544.340578][ C0] stack_trace_save+0xa6/0xf0 [ 544.340590][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 544.340611][ C0] ? memset+0x1e/0x40 [ 544.340671][ C0] __kasan_slab_alloc+0x92/0xc0 [ 544.340686][ C0] ? __kasan_slab_alloc+0x92/0xc0 [ 544.340698][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 544.340717][ C0] ? kmem_cache_alloc+0x15d/0x280 [ 544.340728][ C0] ? skb_clone+0x1bd/0x350 [ 544.340748][ C0] ? __netlink_deliver_tap+0x3cb/0x7c0 [ 544.340823][ C0] ? netlink_deliver_tap+0x16c/0x180 [ 544.340837][ C0] ? netlink_sendskb+0x64/0x130 [ 544.340850][ C0] ? netlink_ack+0x856/0xb10 [ 544.340865][ C0] ? netlink_rcv_skb+0x267/0x430 [ 544.340878][ C0] ? netlink_unicast+0x78f/0x940 [ 544.340891][ C0] ? netlink_sendmsg+0x8ba/0xbe0 [ 544.340905][ C0] ? __sys_sendto+0x46d/0x620 [ 544.340939][ C0] ? __x64_sys_sendto+0xda/0xf0 [ 544.340952][ C0] ? do_syscall_64+0x4c/0xa0 [ 544.340963][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 544.340989][ C0] slab_post_alloc_hook+0x4c/0x380 [ 544.341001][ C0] ? skb_clone+0x1bd/0x350 [ 544.341015][ C0] ? skb_clone+0x1bd/0x350 [ 544.341027][ C0] kmem_cache_alloc+0x15d/0x280 [ 544.341041][ C0] skb_clone+0x1bd/0x350 [ 544.341055][ C0] __netlink_deliver_tap+0x3cb/0x7c0 [ 544.341073][ C0] netlink_deliver_tap+0x16c/0x180 [ 544.341088][ C0] netlink_sendskb+0x64/0x130 [ 544.341102][ C0] netlink_ack+0x856/0xb10 [ 544.341118][ C0] ? netlink_dump+0xcd0/0xcd0 [ 544.341131][ C0] ? __copy_skb_header+0x3ba/0x4f0 [ 544.341147][ C0] netlink_rcv_skb+0x267/0x430 [ 544.341161][ C0] ? rtnetlink_bind+0x80/0x80 [ 544.341176][ C0] ? netlink_ack+0xb10/0xb10 [ 544.341195][ C0] netlink_unicast+0x78f/0x940 [ 544.341211][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 544.341228][ C0] ? netlink_getsockopt+0x570/0x570 [ 544.341243][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 544.341292][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 544.341329][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 544.341389][ C0] __sys_sendto+0x46d/0x620 [ 544.341402][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 544.341423][ C0] ? lock_chain_count+0x20/0x20 [ 544.341440][ C0] __x64_sys_sendto+0xda/0xf0 [ 544.341453][ C0] do_syscall_64+0x4c/0xa0 [ 544.341465][ C0] ? clear_bhb_loop+0x30/0x80 [ 544.341477][ C0] ? clear_bhb_loop+0x30/0x80 [ 544.341490][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 544.341503][ C0] RIP: 0033:0x7f0014a1768e [ 544.341514][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 544.341525][ C0] RSP: 002b:00007ffffed91fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 544.341539][ C0] RAX: ffffffffffffffda RBX: 0000555583637500 RCX: 00007f0014a1768e [ 544.341549][ C0] RDX: 0000000000000020 RSI: 00007f001580d670 RDI: 0000000000000005 [ 544.341558][ C0] RBP: 0000000000000001 R08: 00007ffffed92064 R09: 000000000000000c [ 544.341566][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 544.341574][ C0] R13: 00007ffffed920cc R14: 00007f001580d670 R15: 0000000000000000 [ 544.341588][ C0] [ 544.369348][T10679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.384543][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.399691][T10679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.422638][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.664363][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 544.870323][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 544.877524][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 544.887577][ T27] Call Trace: [ 544.890853][ T27] [ 544.893783][ T27] dump_stack_lvl+0x188/0x250 [ 544.898471][ T27] ? show_regs_print_info+0x20/0x20 [ 544.903677][ T27] ? load_image+0x410/0x410 [ 544.908196][ T27] panic+0x2f8/0x850 [ 544.912091][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 544.917726][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 544.922236][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 544.928409][ T27] watchdog+0xe5a/0xe60 [ 544.932580][ T27] kthread+0x42e/0x520 [ 544.936650][ T27] ? hungtask_pm_notify+0x40/0x40 [ 544.941672][ T27] ? kthread_blkcg+0xd0/0xd0 [ 544.946266][ T27] ret_from_fork+0x1f/0x30 [ 544.950693][ T27] [ 544.953804][ T27] Kernel Offset: disabled [ 544.958120][ T27] Rebooting in 86400 seconds..