last executing test programs: 23m25.42533737s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x30, 0x0, &(0x7f0000000300)) 23m25.364199165s ago: executing program 3 (id=6): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 23m10.171301813s ago: executing program 32 (id=6): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, 0x0) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 11m20.214609025s ago: executing program 1 (id=1648): r0 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 11m20.176819538s ago: executing program 1 (id=1650): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0xfea7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x141e000000000000, 0x0, 0x48) socket(0x11, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ftruncate(0xffffffffffffffff, 0xf88) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000002240)=ANY=[@ANYBLOB="080008000700020000001400000046200fc000680000030690780a010100ac14", @ANYRES32=0x41424344, @ANYBLOB="611000019078000802040b00ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76c3f7d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f8dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599495269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db625078495daaef27647445683d5d019ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a546222df2f22771c7dd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc31749799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65"], 0xfce) 11m15.709728166s ago: executing program 1 (id=1666): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r5, 0x1) syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, 0x0, &(0x7f0000001880)) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 11m12.364367265s ago: executing program 1 (id=1665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xb8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 11m9.485555145s ago: executing program 1 (id=1673): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x1a, 0x3, 0x7) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000240)="dfd9", 0x2, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) r1 = socket(0x2, 0x80805, 0x0) io_setup(0x80, &(0x7f0000000440)=0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r2, 0x0, &(0x7f0000001d00)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) syz_io_uring_setup(0x6ead, &(0x7f0000000100)={0x0, 0x2ea8, 0x1000, 0x2, 0x1a2}, &(0x7f0000000400), &(0x7f00000003c0)) 11m6.625049795s ago: executing program 1 (id=1682): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20040800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 10m51.453576962s ago: executing program 33 (id=1682): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20040800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 1m19.850429106s ago: executing program 5 (id=3058): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4850) unlink(&(0x7f0000000080)='./file0/file0\x00') 1m17.886755294s ago: executing program 5 (id=3062): socket$netlink(0x10, 0x3, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x75ba, &(0x7f0000000680)={0x0, 0x7d89, 0x80, 0x3, 0x288}, 0x0, 0x0) io_uring_enter(r1, 0x567, 0x72, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xe) ioctl$TIOCSTI(r2, 0x5412, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x1000f3) r3 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x1, 0x20041) write$FUSE_INIT(r3, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffff7ffe, 0x20c441, 0x0, 0x7, 0x3, 0x20000f, 0x0, 0x0, 0x2}}, 0x50) 1m17.043855921s ago: executing program 5 (id=3065): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, 0x0, 0x0}, 0x20) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init1(0x0) read(r2, 0x0, 0x0) 1m16.087405128s ago: executing program 5 (id=3066): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1m15.119205675s ago: executing program 5 (id=3067): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)="000087000000000000", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 1m14.846490607s ago: executing program 5 (id=3069): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x1a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) rt_sigaction(0x3d, &(0x7f0000000080)={0x0, 0x0, 0x0, {[0x8]}}, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) chmod(&(0x7f0000001a40)='./file0\x00', 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) 1m8.441541441s ago: executing program 0 (id=3082): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4850) unlink(&(0x7f0000000080)='./file0/file0\x00') 1m7.037584514s ago: executing program 0 (id=3086): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 1m5.269964226s ago: executing program 0 (id=3088): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080), 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 1m4.114206048s ago: executing program 0 (id=3091): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000}, 0x50) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x3, 0x4, {0x0}, {}, 0x10, 0x8}) sendmsg$nl_netfilter(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYBLOB="84c02afa774cffe39f81b100a41959768296d970a85f5ea8099e45e8ba4d685bf26d0daf9335911de01e081b520af05a26314bed00c572c12db2de22be56a5"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20048001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r0, &(0x7f0000000340)=[{}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001380)="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", 0x33b}], 0x1}}], 0x2, 0x4) sendto$inet(r0, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0) 1m1.46857392s ago: executing program 0 (id=3094): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 1m1.206169572s ago: executing program 0 (id=3097): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000}, 0x50) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x3, 0x4, {0x0}, {}, 0x10, 0x8}) sendmsg$nl_netfilter(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYBLOB="84c02afa774cffe39f81b100a41959768296d970a85f5ea8099e45e8ba4d685bf26d0daf9335911de01e081b520af05a26314bed00c572c12db2de22be56a5"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20048001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r0, &(0x7f0000000340)=[{}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001380)="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", 0x33b}], 0x1}}], 0x2, 0x4) sendto$inet(r0, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0) 59.280588766s ago: executing program 34 (id=3069): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x1a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) rt_sigaction(0x3d, &(0x7f0000000080)={0x0, 0x0, 0x0, {[0x8]}}, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) chmod(&(0x7f0000001a40)='./file0\x00', 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) 46.099026613s ago: executing program 35 (id=3097): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000}, 0x50) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x3, 0x4, {0x0}, {}, 0x10, 0x8}) sendmsg$nl_netfilter(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYBLOB="84c02afa774cffe39f81b100a41959768296d970a85f5ea8099e45e8ba4d685bf26d0daf9335911de01e081b520af05a26314bed00c572c12db2de22be56a5"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20048001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r0, &(0x7f0000000340)=[{}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001380)="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", 0x33b}], 0x1}}], 0x2, 0x4) sendto$inet(r0, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0) 15.867282378s ago: executing program 2 (id=3328): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000009674000010008150a3910071ee9dddc4cd01611035000000000000000000000000002ce8a811ebce4c22d6079445f5146a85efa4376b4fb541284d1e9c84cecd33cfc82ca2914caddc24bd017cefa25cb542661bcee69e906e80bc403aff47c3060e56699de9dae9d95e6aa59582b6dbdf1b1617e5523a9d6baa1fc36e20f5ffcecadbfd5bc5a662b1e1304c884062e6be52d4a61e4826f859d76dd1261a621d7e9df9bcfd9b36f5816e36b6e33720d1c3314fe0aac731624e773c38c163df74333995a7b818b91ff1fa73260294943a81099d6efa09fa7e9eea70ea80f18e19beb7b7eb34931396d1e9a8a5a02177bd2a"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ff", 0x7) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r12, 0x1, 0x0, 0xfffffffe, {{0x8}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 15.46246827s ago: executing program 2 (id=3335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000300)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x28, 0x64, 0x0, 0xc2, 0x6, 0x0, @local, @broadcast}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x200, 0x0, 0x4}}}}}}}, 0x42) 15.010612347s ago: executing program 2 (id=3342): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r0, r0, 0x0, 0x800000f1) 14.486654088s ago: executing program 2 (id=3345): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 14.158477455s ago: executing program 2 (id=3348): sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) syz_clone3(&(0x7f0000000480)={0x100000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13.782298565s ago: executing program 2 (id=3354): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0x1001}], 0x2}, 0x4}], 0x1, 0x40010000, 0x0) 13.568996612s ago: executing program 36 (id=3354): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0x1001}], 0x2}, 0x4}], 0x1, 0x40010000, 0x0) 4.066947164s ago: executing program 6 (id=3415): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x1200400, &(0x7f0000000000)=ANY=[], 0x1, 0xa74, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 3.25065369s ago: executing program 6 (id=3419): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000240)=ANY=[@ANYBLOB="9645000008"]) 2.558568455s ago: executing program 6 (id=3422): socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000940), 0x0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.078558014s ago: executing program 7 (id=3426): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x4b, 0x0, &(0x7f00000006c0)) 2.030250787s ago: executing program 6 (id=3428): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001c40), 0x0, 0xfe0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb, 0x800) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x3, 'syz1\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) 1.890763749s ago: executing program 9 (id=3355): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend', 0x149a82, 0x4) r0 = syz_io_uring_setup(0x88f, &(0x7f00000004c0)={0x0, 0xaee2, 0x400, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.834647913s ago: executing program 6 (id=3429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.834510733s ago: executing program 7 (id=3430): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x12ce, 0x3}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 1.722762932s ago: executing program 7 (id=3432): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) sendmsg$alg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002800)='a', 0x1}], 0x1, 0x0, 0x0, 0x20000044}, 0x24040011) 1.658115367s ago: executing program 8 (id=3433): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.657841938s ago: executing program 9 (id=3434): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) pipe2(0x0, 0x80c80) rt_sigprocmask(0x3, 0x0, &(0x7f0000000240), 0xfea4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e21}, 0x10, 0x0}, 0x24000080) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x23) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, &(0x7f0000000180)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r2, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0137013710ff"}) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000000)='./file0\x00', 0xab) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000280)={[{@nolazytime}, {@auto_da_alloc}, {@oldalloc}, {@norecovery}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 1.657613377s ago: executing program 6 (id=3435): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.531994257s ago: executing program 4 (id=3436): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 1.495973291s ago: executing program 8 (id=3437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.242562881s ago: executing program 4 (id=3438): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x111016, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1.24237357s ago: executing program 8 (id=3439): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x0) 1.121632811s ago: executing program 4 (id=3440): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r2, 0x3, "0000e7", "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"}}, 0x110) 977.610162ms ago: executing program 8 (id=3441): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xc81) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x20000000) 911.284868ms ago: executing program 4 (id=3442): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) 678.257276ms ago: executing program 7 (id=3443): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 677.985876ms ago: executing program 4 (id=3444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x74, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000c0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000085200000040000009500000000000000360a02000000000018010000202078250000000000203fd11951f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1}, 0xc) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$eJzs3N1qHFUcAPD/TPNh0+pGrV5owUgRgx/5aEpssKCCl15ZX2BN0hLdNrZZwZZcKIh9APUBxMv6CF6Id4LgTfHaO6VQJMm1rMxmdjNudmO+ltHu7wcHzpnZ4Zz/zOyek3MOCWBgTUTEpxExEhEfREQlP57kKd7cTtnntjbWF7OURKNx+c+keX5zY30xCtdkTuWFyTQi/TyJZ7vUu3br9ofVWm35Zl6erl/7aHrt1u1XV65Vry5fXb4+N7OwMDN3cX5h/thi/T3u/Hbp3tuVL38+9+uP7787n7X3dH6uGMdxmYiJ9j3pNHXclZXskUI+GSqxIRxIGhEnImKo+f2vxInYeXiV+L5SauMAgL5oNN7oKAMAD79Enw8AA6b1d//mxvpiK5UxD1GWB29tL15t5mubW+34h9orIcMd61vHaSIivvv6teeyFH1ahwQAKPohG/9c7Db+S+Ns4XMnI2Is39t1OiIejYjHCvvFDmuio7x7/JPeP2IVe8rGf5cKe9u2CvHnxk/kpSzm8RhOrqzUlmfy+CdjeDQrz+5Rx9nLT//V61xx/JelrP7WWDBvx/2h0X9es1StV48Sc9GDzyKeGeoWf9Ie/ybNuA/v9Rt3n+p17t/j76/GNxEvdn3+Ozv3kr33J04334fp1lux252XXrjRq/6y48+e/9je8Y8nxf2aawev46cLK7/0OnfY938kea+ZH8mPfVKt12/ORowk7+w+fn7n2la59fks/slz3b//Z2LnTjweEU9ExJMRzeM9X+guXql9+/zh4++vLP6lAz3/g2fGvrh7r1f9+3v+F5q5yfzIfn7/9tvAo9w7AAAA+L9Im/O5STrVzqfp1NT2PO+ZGEtrq2v1l6+sfnx9aXvedzyG09ZMV6UwHzqbzxG2yuc7ynP5HMpXoyeb5anF1dpS2cEDwIA61aP/z/wxWnbrAIC+6dfmdgDgv0v/DwCDR/8PAINH/w8Ag0f/DwCDR/8PAAPlKP/XT0ZG5mHNlP3LBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQrr8DAAD//3JA1T8=") creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x110, 0xffffffffffffffff, 0x8000000) 669.305807ms ago: executing program 9 (id=3445): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x3, 0x9004}, 0x4) 488.734782ms ago: executing program 7 (id=3446): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x40000) 314.586865ms ago: executing program 8 (id=3447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x38, r2, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 246.681611ms ago: executing program 9 (id=3448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LABEL={0x14}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x34}}, 0x0) 98.668312ms ago: executing program 4 (id=3449): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000003c0)) 34.620678ms ago: executing program 8 (id=3450): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 17.961749ms ago: executing program 7 (id=3451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000ffffb7bd7000fbfbdf2500000000", @ANYRES32=0x0, @ANYBLOB="26970000231a0500340012800e00010069703665727370616e00fcff1f000280040012000500160001000000080005"], 0x54}}, 0x48800) 0s ago: executing program 9 (id=3452): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000500)={'aio_iiro_16\x00', [0x83eb, 0xe4, 0x4, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0xe, 0x4, 0x6, 0x1, 0x1, 0x1, 0x4000006, 0x101, 0xfffffffd, 0x1a449, 0x5f57, 0x40000003, 0x8a, 0x6, 0x0, 0x4, 0x800, 0xffe00000, 0x3a, 0x8, 0x6, 0xf7ffffff, 0xfffffff8]}) kernel console output (not intermixed with test programs): y [ 1263.665636][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1263.682123][T15427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1263.722524][T15427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.757155][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1263.794836][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1263.811121][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1263.828875][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1263.845443][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1263.860577][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1263.872795][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1264.651674][T15676] Error parsing options; rc = [-22] [ 1264.677542][T15676] loop6: detected capacity change from 0 to 64 [ 1265.498609][T15676] hfs: get root inode failed [ 1265.739754][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1265.758225][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1267.050851][T15427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.125584][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1267.154664][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1267.165099][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1267.173987][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1267.185606][T15427] device veth0_vlan entered promiscuous mode [ 1267.193745][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1267.202307][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1267.219239][T15427] device veth1_vlan entered promiscuous mode [ 1267.247616][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1267.257954][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1267.269432][T15427] device veth0_macvtap entered promiscuous mode [ 1267.348933][T15427] device veth1_macvtap entered promiscuous mode [ 1267.384823][T15427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.269024][T15707] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1268.626696][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1268.634959][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1268.645935][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1268.655346][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1268.748408][T15427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.797047][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1268.948509][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1269.600460][T15427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.630214][T15427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.666454][T15427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.701604][T15427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.159971][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.189297][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.297002][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1270.326859][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.349878][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.538511][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1273.008635][T15771] Error parsing options; rc = [-22] [ 1273.842238][T15774] netlink: 'syz.2.2837': attribute type 10 has an invalid length. [ 1274.063959][T15776] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2841'. [ 1274.257544][T15774] batman_adv: batadv0: Adding interface: team0 [ 1274.302240][T15774] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.656344][T15774] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1274.762032][T15781] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1275.752907][T15796] netlink: 'syz.4.2844': attribute type 10 has an invalid length. [ 1277.691778][T15821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2856'. [ 1279.935587][T15851] bond0 speed is unknown, defaulting to 1000 [ 1280.297084][T15851] chnl_net:caif_netlink_parms(): no params data found [ 1280.359069][T15857] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1281.041028][T15851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.066727][T15851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.090472][T15851] device bridge_slave_0 entered promiscuous mode [ 1281.128138][T15851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.137603][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.156049][T15851] device bridge_slave_1 entered promiscuous mode [ 1281.350132][T15851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.458343][T15851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.709233][T15851] team0: Port device team_slave_0 added [ 1281.792446][T15851] team0: Port device team_slave_1 added [ 1281.991505][ T7818] Bluetooth: hci1: command 0x0409 tx timeout [ 1282.019020][T15851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.060909][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.990152][T15851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.061190][T15851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.081713][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1283.180712][T15851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.702365][T15906] loop6: detected capacity change from 0 to 1024 [ 1283.760182][T15851] device hsr_slave_0 entered promiscuous mode [ 1283.846342][T15851] device hsr_slave_1 entered promiscuous mode [ 1284.013386][T15906] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1284.036652][T15851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1284.084719][ T7818] Bluetooth: hci1: command 0x041b tx timeout [ 1284.184791][T15851] Cannot create hsr debugfs directory [ 1286.180834][ T7818] Bluetooth: hci1: command 0x040f tx timeout [ 1286.603588][T15950] loop2: detected capacity change from 0 to 1024 [ 1286.654455][T15943] netlink: 'syz.5.2880': attribute type 10 has an invalid length. [ 1286.854715][T15950] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1288.432028][T12812] Bluetooth: hci1: command 0x0419 tx timeout [ 1288.575988][ T4386] device hsr_slave_0 left promiscuous mode [ 1288.610464][ T4386] device hsr_slave_1 left promiscuous mode [ 1288.622041][ T4386] batman_adv: batadv0: Removing interface: team0 [ 1288.661092][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.686943][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.760165][ T4386] device bridge_slave_1 left promiscuous mode [ 1288.775533][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.810466][ T4386] device bridge_slave_0 left promiscuous mode [ 1289.856962][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.001271][ T4386] team0 (unregistering): Port device team_slave_1 removed [ 1291.014042][ T4386] team0 (unregistering): Port device team_slave_0 removed [ 1291.029845][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.044488][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.102525][ T4386] bond0 (unregistering): Released all slaves [ 1296.346894][T15851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1297.489377][T15851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1297.534157][T15851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1297.603418][T15851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1298.521067][T15851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.539260][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1299.363276][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1299.383372][T15851] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.909968][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.916329][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.382417][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1300.443777][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1300.452379][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.459442][T15860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.476840][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1300.485910][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1300.495578][T15860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.502838][T15860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.533145][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1300.562193][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1300.604210][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1300.649316][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1300.701383][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1300.747356][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1300.797210][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1300.818471][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1300.847577][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1300.878974][T15851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1300.918103][T15851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1300.966133][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1300.985570][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1301.021311][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1301.486609][T16110] netlink: 'syz.0.2912': attribute type 10 has an invalid length. [ 1302.768064][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1302.775544][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1302.822318][T15851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.669775][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1307.748097][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1308.843377][T15851] device veth0_vlan entered promiscuous mode [ 1308.902012][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1308.927635][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1308.980868][T16195] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2928'. [ 1309.031886][T15851] device veth1_vlan entered promiscuous mode [ 1309.077040][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1309.085132][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1310.852822][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1310.987497][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1311.053162][T15851] device veth0_macvtap entered promiscuous mode [ 1311.092918][T15851] device veth1_macvtap entered promiscuous mode [ 1311.330991][T16230] netlink: 'syz.0.2935': attribute type 10 has an invalid length. [ 1311.357035][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.375163][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.391633][T15851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.399667][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1311.429434][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1311.499752][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1311.509245][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1312.365217][T16227] device syzkaller0 entered promiscuous mode [ 1312.460663][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.486986][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.537198][T15851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.564680][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1312.587833][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1312.749458][T15851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.771291][T15851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.783812][T15851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.809861][T15851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.074925][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.093780][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.141987][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1313.287145][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.315993][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.176525][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1315.212447][T16259] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2943'. [ 1317.479428][T16261] loop6: detected capacity change from 0 to 32768 [ 1317.602171][T16261] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2952 (16261) [ 1317.620663][T16281] bond0 speed is unknown, defaulting to 1000 [ 1317.800209][T16261] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1317.835800][T16261] BTRFS info (device loop6): using free space tree [ 1317.843803][T16261] BTRFS info (device loop6): has skinny extents [ 1318.219287][T16295] device syzkaller0 entered promiscuous mode [ 1318.225399][T16298] loop2: detected capacity change from 0 to 1024 [ 1318.340017][T16298] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1318.365453][T16261] BTRFS error (device loop6): open_ctree failed: -12 [ 1319.210186][T16281] chnl_net:caif_netlink_parms(): no params data found [ 1320.352102][ T7818] Bluetooth: hci2: command 0x0409 tx timeout [ 1320.807727][T16336] netlink: 'syz.6.2950': attribute type 10 has an invalid length. [ 1320.981384][T16281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.931152][T16281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.012067][T16281] device bridge_slave_0 entered promiscuous mode [ 1322.081852][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.099458][T16281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.121487][T16281] device bridge_slave_1 entered promiscuous mode [ 1322.386511][T16318] Bluetooth: hci2: command 0x041b tx timeout [ 1323.004268][T16281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.036036][T16281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.192719][T16281] team0: Port device team_slave_0 added [ 1323.312389][T16281] team0: Port device team_slave_1 added [ 1324.385852][T16281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.397245][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.450903][T16281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.466291][T16281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.466499][ T7818] Bluetooth: hci2: command 0x040f tx timeout [ 1324.473750][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.776211][T16281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.825722][T16362] loop6: detected capacity change from 0 to 1024 [ 1324.845900][T16370] netlink: 'syz.2.2959': attribute type 10 has an invalid length. [ 1324.950641][T16362] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1325.061910][T16281] device hsr_slave_0 entered promiscuous mode [ 1325.128005][T16281] device hsr_slave_1 entered promiscuous mode [ 1325.196234][T16281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1326.117267][T16281] Cannot create hsr debugfs directory [ 1326.602216][T16318] Bluetooth: hci2: command 0x0419 tx timeout [ 1327.402651][T16281] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1327.428557][T16281] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1327.456088][T16281] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1327.504194][T16281] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1327.787105][T16281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.980779][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1328.107215][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1328.130125][T16281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.148288][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1328.168422][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1328.189461][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.196633][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.257787][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1328.277274][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1328.295845][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1328.310839][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.318011][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.329049][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1328.338437][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1328.357780][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1328.370169][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1328.379495][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1328.391003][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1328.420729][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1328.431691][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1328.451091][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1328.465083][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1328.483458][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1328.496742][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1330.698086][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1330.705631][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1330.742080][T16281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.218271][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1331.248565][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1331.290084][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1331.315985][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1331.345969][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1331.355279][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1331.389275][T16281] device veth0_vlan entered promiscuous mode [ 1331.438621][T16281] device veth1_vlan entered promiscuous mode [ 1331.500163][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1331.518973][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1331.549050][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1331.565050][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1331.571419][T16426] loop4: detected capacity change from 0 to 1024 [ 1331.584329][T16281] device veth0_macvtap entered promiscuous mode [ 1331.615573][T16281] device veth1_macvtap entered promiscuous mode [ 1331.659302][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.670611][T16426] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1331.670990][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.703824][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1331.714364][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.728026][T16281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.738751][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.750152][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.761039][T16281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.772331][T16281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.784612][T16281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.792273][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1331.829974][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1331.882763][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1332.134512][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1332.239913][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1332.289897][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1332.517255][T16281] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.540686][T16281] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.551627][T16281] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.565399][T16281] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.765702][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.791570][T16174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.803868][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.828389][T16174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.854699][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1332.907471][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1333.008404][T16440] netlink: 'syz.4.2975': attribute type 72 has an invalid length. [ 1333.016272][T16440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'. [ 1333.146627][T16443] netlink: 'syz.5.2945': attribute type 72 has an invalid length. [ 1333.173054][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2945'. [ 1337.985955][T16467] loop6: detected capacity change from 0 to 1024 [ 1339.069626][T16467] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1342.072602][T16496] bond0 speed is unknown, defaulting to 1000 [ 1342.932183][T16496] chnl_net:caif_netlink_parms(): no params data found [ 1342.977144][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'. [ 1343.282398][T16496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.477183][T16496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.485528][T16496] device bridge_slave_0 entered promiscuous mode [ 1343.674488][T16496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.681995][T16496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.704343][T16496] device bridge_slave_1 entered promiscuous mode [ 1343.998566][T16316] Bluetooth: hci5: command 0x0409 tx timeout [ 1344.605593][T16496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.711881][T16496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.217732][ T7818] Bluetooth: hci5: command 0x041b tx timeout [ 1346.224608][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2997'. [ 1346.408638][T16496] team0: Port device team_slave_0 added [ 1346.445940][T16496] team0: Port device team_slave_1 added [ 1346.570298][T16496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.615741][T16496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.773272][T16496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.786723][T16496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.793684][T16496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.820302][T16496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.065287][T16496] device hsr_slave_0 entered promiscuous mode [ 1347.084807][T16496] device hsr_slave_1 entered promiscuous mode [ 1347.101706][T16496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1347.113755][T16496] Cannot create hsr debugfs directory [ 1348.280561][ T7818] Bluetooth: hci5: command 0x040f tx timeout [ 1348.306285][T16496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1349.289936][T16496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1349.951532][T16496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.016969][T16496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.197661][T16496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1350.255473][T16496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1350.306645][ T7818] Bluetooth: hci5: command 0x0419 tx timeout [ 1350.314337][T16496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1350.359028][T16496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1352.057309][T16496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.076039][T16496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.165389][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1352.217593][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1353.080842][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1353.095564][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1353.126057][T15860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.133249][T15860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.183481][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1353.200947][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1353.520021][T15860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.527215][T15860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.606896][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1353.615448][T16589] loop4: detected capacity change from 0 to 1024 [ 1353.696491][T16589] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1354.030572][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1354.040003][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1354.049604][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1354.102765][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1354.324810][T16496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1354.342276][T16496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1354.403614][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1354.413026][T16609] loop5: detected capacity change from 0 to 1024 [ 1354.419981][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1354.489280][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1354.527239][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1354.545128][T16609] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1354.651541][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1354.681469][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1354.727195][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1355.061596][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1355.570734][T16627] netlink: 'syz.6.3016': attribute type 10 has an invalid length. [ 1355.678922][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1355.689987][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1355.750617][T16496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.570421][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1356.654522][T16634] loop4: detected capacity change from 0 to 1024 [ 1356.687206][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1356.767929][T16634] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1356.901418][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1356.910775][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1356.922840][T16496] device veth0_vlan entered promiscuous mode [ 1356.930671][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1356.939401][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1356.954208][T16496] device veth1_vlan entered promiscuous mode [ 1357.060893][T16496] device veth0_macvtap entered promiscuous mode [ 1357.094175][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1357.179308][T16647] overlayfs: failed to resolve './file0': -2 [ 1357.467251][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1357.512501][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1357.532056][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1357.545629][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1359.299815][T16658] loop6: detected capacity change from 0 to 32768 [ 1359.363616][T16658] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.3023 (16658) [ 1359.502098][T16658] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1359.566856][T16658] BTRFS info (device loop6): using free space tree [ 1359.573413][T16658] BTRFS info (device loop6): has skinny extents [ 1359.944835][T16496] device veth1_macvtap entered promiscuous mode [ 1359.967646][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1359.986597][T16658] BTRFS info (device loop6): enabling ssd optimizations [ 1360.116568][T16496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.117038][T16496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.127154][T16496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.137713][T16496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.156406][T16496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.166932][T16496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.183580][T16496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1361.192449][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1361.232207][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1361.318599][T16496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.406846][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.413607][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.676572][T16496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.713637][ T4278] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 1362.716216][T16496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.733912][T16496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.751982][T16496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.763160][T16496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.801635][T16705] loop4: detected capacity change from 0 to 2048 [ 1362.812382][T16496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.834376][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1362.851835][T16705] NILFS (loop4): invalid segment: Magic number mismatch [ 1362.859293][T16705] NILFS (loop4): trying rollback from an earlier position [ 1362.867963][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1362.965319][T16705] NILFS (loop4): recovery complete [ 1363.012899][T16707] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1363.014141][T16496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.116811][T16496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.125749][T16496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.141616][T16496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.960194][T16713] loop4: detected capacity change from 0 to 2048 [ 1364.169112][T16713] NILFS (loop4): invalid segment: Magic number mismatch [ 1364.176147][T16713] NILFS (loop4): trying rollback from an earlier position [ 1364.216332][T16713] NILFS (loop4): recovery complete [ 1364.270356][T16716] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1364.568015][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.576247][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.082168][T16734] overlayfs: failed to resolve './file0': -2 [ 1365.115946][T16319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.135036][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1365.173735][T16319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.252822][T15860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1369.495774][T12812] Bluetooth: hci4: command 0x0406 tx timeout [ 1369.650340][T16750] loop5: detected capacity change from 0 to 256 [ 1370.089514][T16760] loop2: detected capacity change from 0 to 2048 [ 1370.143914][T16760] NILFS (loop2): invalid segment: Magic number mismatch [ 1370.151165][T16760] NILFS (loop2): trying rollback from an earlier position [ 1370.174329][T16760] NILFS (loop2): recovery complete [ 1370.288311][T16761] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1372.450238][T16758] netlink: 'syz.0.3039': attribute type 10 has an invalid length. [ 1373.049436][T16758] batman_adv: batadv0: Adding interface: team0 [ 1373.057808][T16758] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.210412][T16779] loop4: detected capacity change from 0 to 2048 [ 1373.291446][T16779] NILFS (loop4): invalid segment: Magic number mismatch [ 1373.298768][T16779] NILFS (loop4): trying rollback from an earlier position [ 1373.313522][T16779] NILFS (loop4): recovery complete [ 1373.475902][T16780] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1373.552457][T16758] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1374.740178][T16788] loop6: detected capacity change from 0 to 1024 [ 1375.220444][T16794] loop0: detected capacity change from 0 to 32768 [ 1375.366092][T16794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3048 (16794) [ 1375.418380][T16794] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1375.427717][T16794] BTRFS info (device loop0): enabling auto defrag [ 1375.434249][T16794] BTRFS info (device loop0): max_inline at 0 [ 1375.440281][T16794] BTRFS info (device loop0): force clearing of disk cache [ 1375.447778][T16794] BTRFS info (device loop0): turning on sync discard [ 1375.454557][T16794] BTRFS info (device loop0): using free space tree [ 1375.461150][T16794] BTRFS info (device loop0): has skinny extents [ 1376.291193][T16788] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1376.541173][T16794] BTRFS info (device loop0): enabling ssd optimizations [ 1376.552664][T16794] BTRFS info (device loop0): clearing free space tree [ 1376.559937][T16794] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1376.569833][T16794] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1376.604199][T16794] BTRFS info (device loop0): creating free space tree [ 1376.613244][T16794] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1376.622894][T16794] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1379.324176][T16831] loop4: detected capacity change from 0 to 2048 [ 1379.420753][T16831] NILFS (loop4): invalid segment: Magic number mismatch [ 1379.427961][T16831] NILFS (loop4): trying rollback from an earlier position [ 1379.584604][T16831] NILFS (loop4): recovery complete [ 1379.610346][T16839] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1381.898941][T16849] loop5: detected capacity change from 0 to 1024 [ 1382.027981][T16859] loop0: detected capacity change from 0 to 2048 [ 1382.064781][T16857] loop4: detected capacity change from 0 to 2048 [ 1382.100782][T16859] NILFS (loop0): invalid segment: Magic number mismatch [ 1382.108060][T16859] NILFS (loop0): trying rollback from an earlier position [ 1382.122296][T16859] NILFS (loop0): recovery complete [ 1382.158908][T16857] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1382.163924][T16863] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1382.181499][T16849] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1382.358443][T16857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1383.220513][T16857] UDF-fs: error (device loop4): udf_read_inode: (ino 1376) failed !bh [ 1383.276726][T16857] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 1384.224420][T16876] netlink: 'syz.0.3061': attribute type 10 has an invalid length. [ 1387.231373][T16906] loop5: detected capacity change from 0 to 512 [ 1387.353066][T16906] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1387.467691][T16906] EXT4-fs (loop5): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback. [ 1387.496584][T16906] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.523817][T16909] loop4: detected capacity change from 0 to 2048 [ 1387.693253][T16909] NILFS (loop4): invalid segment: Magic number mismatch [ 1387.700473][T16909] NILFS (loop4): trying rollback from an earlier position [ 1387.740470][T16909] NILFS (loop4): recovery complete [ 1387.751510][T16916] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1388.745298][T16924] loop6: detected capacity change from 0 to 1024 [ 1389.698502][T16924] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1392.383891][T16955] loop6: detected capacity change from 0 to 1024 [ 1392.431889][T16957] loop0: detected capacity change from 0 to 2048 [ 1392.445478][T16955] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 1392.465842][T16955] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 1392.498823][T16955] 9pnet: Insufficient options for proto=fd [ 1392.602894][T16957] NILFS (loop0): invalid segment: Magic number mismatch [ 1392.616612][T16957] NILFS (loop0): trying rollback from an earlier position [ 1392.678210][T16957] NILFS (loop0): recovery complete [ 1392.724709][T16962] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1392.757289][T16961] loop6: detected capacity change from 0 to 2048 [ 1392.812200][T16961] NILFS (loop6): invalid segment: Magic number mismatch [ 1392.835453][T16961] NILFS (loop6): trying rollback from an earlier position [ 1392.986673][T16961] NILFS (loop6): recovery complete [ 1393.026863][T16968] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1393.085424][T16965] loop0: detected capacity change from 0 to 1024 [ 1393.254414][T16965] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1394.254223][T16978] autofs4:pid:16978:autofs_fill_super: called with bogus options [ 1397.277820][T16996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3090'. [ 1397.547675][T17001] loop4: detected capacity change from 0 to 1024 [ 1397.638754][T17001] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1397.721095][T17001] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,errors=remount-ro,bsddf,auto_da_alloc,. Quota mode: writeback. [ 1397.965302][T17001] 9pnet: Insufficient options for proto=fd [ 1402.009195][T17023] loop4: detected capacity change from 0 to 2048 [ 1402.094144][T17023] NILFS (loop4): invalid segment: Magic number mismatch [ 1402.101205][T17023] NILFS (loop4): trying rollback from an earlier position [ 1402.136259][T17023] NILFS (loop4): recovery complete [ 1402.154610][T17028] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1405.491860][ T8824] Bluetooth: hci1: command 0x0406 tx timeout [ 1408.913986][T17067] bond0 speed is unknown, defaulting to 1000 [ 1408.949146][T17079] loop4: detected capacity change from 0 to 2048 [ 1408.981165][T17079] NILFS (loop4): invalid segment: Magic number mismatch [ 1408.988437][T17079] NILFS (loop4): trying rollback from an earlier position [ 1409.000376][T17079] NILFS (loop4): recovery complete [ 1409.007685][T17081] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1409.776228][T16726] Bluetooth: hci0: command 0x0409 tx timeout [ 1409.820563][ T4278] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.906104][T17089] loop4: detected capacity change from 0 to 2048 [ 1409.957082][T17089] NILFS (loop4): invalid segment: Magic number mismatch [ 1409.964029][T17089] NILFS (loop4): trying rollback from an earlier position [ 1409.979593][T17089] NILFS (loop4): recovery complete [ 1410.009617][T17090] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1410.148842][ T4278] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.034468][ T4278] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.570401][T16726] Bluetooth: hci0: command 0x041b tx timeout [ 1413.513243][ T4278] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.597890][T17067] chnl_net:caif_netlink_parms(): no params data found [ 1413.921911][T17067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.961904][T17067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.001478][T17067] device bridge_slave_0 entered promiscuous mode [ 1414.075055][T17067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.160941][T17067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.176890][T17067] device bridge_slave_1 entered promiscuous mode [ 1415.229077][T16725] Bluetooth: hci0: command 0x040f tx timeout [ 1415.304106][T17129] loop4: detected capacity change from 0 to 2048 [ 1415.342299][T17129] NILFS (loop4): invalid segment: Magic number mismatch [ 1415.349313][T17129] NILFS (loop4): trying rollback from an earlier position [ 1415.404625][T17129] NILFS (loop4): recovery complete [ 1415.466816][T17131] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1415.501596][T17067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.588328][T17067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.301195][T17141] loop4: detected capacity change from 0 to 2048 [ 1416.344294][T17067] team0: Port device team_slave_0 added [ 1416.358767][T17141] NILFS (loop4): invalid segment: Magic number mismatch [ 1416.365735][T17141] NILFS (loop4): trying rollback from an earlier position [ 1416.377315][T17141] NILFS (loop4): recovery complete [ 1416.428015][T17142] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1416.541113][T17067] team0: Port device team_slave_1 added [ 1416.772473][T17134] bond0 speed is unknown, defaulting to 1000 [ 1417.304707][T12812] Bluetooth: hci0: command 0x0419 tx timeout [ 1417.361432][T17067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.368464][T17067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.129200][T12812] Bluetooth: hci2: command 0x0409 tx timeout [ 1418.168955][T17067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.244746][T17067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.256497][T17067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.286739][T17067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.432784][T17067] device hsr_slave_0 entered promiscuous mode [ 1418.465288][T17067] device hsr_slave_1 entered promiscuous mode [ 1418.501025][T17067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1418.508902][T17067] Cannot create hsr debugfs directory [ 1418.936906][ T4278] device hsr_slave_0 left promiscuous mode [ 1418.948657][ T4278] device hsr_slave_1 left promiscuous mode [ 1418.984302][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1419.011868][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.028438][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1419.053393][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.090964][ T4278] device bridge_slave_1 left promiscuous mode [ 1419.107853][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.134363][ T4278] device bridge_slave_0 left promiscuous mode [ 1419.156866][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.201472][T17161] loop4: detected capacity change from 0 to 32768 [ 1420.226729][T16722] Bluetooth: hci2: command 0x041b tx timeout [ 1420.262380][T17161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3128 (17161) [ 1420.310249][T17161] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1420.347569][T17161] BTRFS info (device loop4): using free space tree [ 1420.387304][T17161] BTRFS info (device loop4): has skinny extents [ 1420.668980][T17161] BTRFS info (device loop4): enabling ssd optimizations [ 1420.817386][ T4278] device veth1_macvtap left promiscuous mode [ 1420.823520][ T4278] device veth0_macvtap left promiscuous mode [ 1420.857432][ T4278] device veth1_vlan left promiscuous mode [ 1420.863661][ T4278] device veth0_vlan left promiscuous mode [ 1420.971459][ T4324] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 1421.598286][T17214] loop4: detected capacity change from 0 to 2048 [ 1421.653592][T17214] NILFS (loop4): invalid segment: Magic number mismatch [ 1421.660832][T17214] NILFS (loop4): trying rollback from an earlier position [ 1421.684009][T17214] NILFS (loop4): recovery complete [ 1421.722592][T17215] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1421.858055][ T4278] team0 (unregistering): Port device team_slave_1 removed [ 1421.886249][ T4278] team0 (unregistering): Port device team_slave_0 removed [ 1422.602212][ T4278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.698656][T16722] Bluetooth: hci2: command 0x040f tx timeout [ 1422.731499][ T4278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.758276][T17225] loop4: detected capacity change from 0 to 2048 [ 1422.790036][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.796402][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.850559][ T4278] bond0 (unregistering): Released all slaves [ 1422.874213][T17225] NILFS (loop4): invalid segment: Magic number mismatch [ 1422.881781][T17225] NILFS (loop4): trying rollback from an earlier position [ 1422.953256][T17225] NILFS (loop4): recovery complete [ 1422.979071][T17229] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1423.202109][T17134] chnl_net:caif_netlink_parms(): no params data found [ 1423.306324][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 1423.752328][T17134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.806486][T17134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.851796][T17134] device bridge_slave_0 entered promiscuous mode [ 1423.889849][T17263] netlink: 'syz.4.3146': attribute type 21 has an invalid length. [ 1423.913952][T17263] netlink: 14565 bytes leftover after parsing attributes in process `syz.4.3146'. [ 1423.946736][T17134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.953841][T17134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.996682][T17134] device bridge_slave_1 entered promiscuous mode [ 1424.108533][T17067] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1424.189055][T17134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.209607][T17285] netlink: 'syz.4.3153': attribute type 3 has an invalid length. [ 1424.227526][T17067] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1424.257137][T17285] netlink: 'syz.4.3153': attribute type 7 has an invalid length. [ 1424.272151][T17134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.289710][T17285] netlink: 198236 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1424.300948][T17067] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1424.349707][T17067] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1424.465930][T17134] team0: Port device team_slave_0 added [ 1424.538718][T17134] team0: Port device team_slave_1 added [ 1424.706581][T16097] Bluetooth: hci2: command 0x0419 tx timeout [ 1424.756882][T17134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.763909][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.876636][T17134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.974517][T17134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.016528][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1425.121459][T17134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.153760][T17319] netlink: 'syz.2.3162': attribute type 21 has an invalid length. [ 1425.216664][T17319] netlink: 'syz.2.3162': attribute type 1 has an invalid length. [ 1425.430515][T17134] device hsr_slave_0 entered promiscuous mode [ 1425.464827][T17134] device hsr_slave_1 entered promiscuous mode [ 1425.485334][T17134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1425.507982][T17134] Cannot create hsr debugfs directory [ 1425.853808][T17067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.913527][T17344] bond0 speed is unknown, defaulting to 1000 [ 1425.984838][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1425.999238][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1426.134151][T17067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.190861][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1426.208160][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1426.247447][T16174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.254556][T16174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.337016][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1426.361903][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1426.386655][T17365] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3180'. [ 1426.387912][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1426.466694][T16174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.473816][T16174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.510998][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1426.544377][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1426.584125][T17365] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3180'. [ 1426.617834][T17374] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1426.676197][T17368] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3180'. [ 1426.709639][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1426.746593][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1426.780963][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1426.819762][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1426.841225][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1426.885212][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1426.899613][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1426.940148][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1426.977705][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1426.995436][T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'. [ 1427.041603][T17134] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1427.103614][T17134] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1427.143430][T17134] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1427.177769][T17067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1427.183556][T17397] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3191'. [ 1427.207981][T17134] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1427.471181][T17415] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3195'. [ 1427.642904][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1427.651803][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1427.694136][T17067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.724512][T17134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.833022][T17134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.889681][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1427.919834][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1427.969681][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1428.000763][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1428.047857][T16174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.054992][T16174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.084373][T16174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1428.107806][T17438] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 1428.157203][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1428.177177][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1428.221245][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.228458][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1428.259136][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1428.297429][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1428.338549][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1428.376283][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1428.420852][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1428.447856][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1428.461357][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1428.514466][T17134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1428.578323][T17134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1428.619558][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1428.641418][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1428.671177][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1428.703981][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1428.745052][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1428.784491][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1428.867410][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1428.941789][T17067] device veth0_vlan entered promiscuous mode [ 1428.978183][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1428.997558][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1429.050091][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1429.087570][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1429.135712][T17067] device veth1_vlan entered promiscuous mode [ 1429.253891][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1429.283362][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1429.331290][T17067] device veth0_macvtap entered promiscuous mode [ 1429.373465][T17067] device veth1_macvtap entered promiscuous mode [ 1429.452835][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1429.493916][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1429.539834][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1429.559788][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1429.647788][T17134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.657196][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.685252][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.722365][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.764506][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.810044][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.860394][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.924936][T17067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.978556][ T4278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.049530][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1430.097423][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1430.139407][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1430.183991][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.213933][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1430.255820][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.274200][T17526] __nla_validate_parse: 2 callbacks suppressed [ 1430.274218][T17526] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.3222'. [ 1430.325347][T17067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1430.346539][T17067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.376819][T17067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.408708][ T4278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.479069][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1430.526874][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1430.585546][T17067] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.616409][T17067] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.625159][T17067] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.679812][T17543] netlink: 'syz.6.3229': attribute type 29 has an invalid length. [ 1430.700771][T17067] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.745786][ T4278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.811240][T17543] netlink: 'syz.6.3229': attribute type 29 has an invalid length. [ 1430.857840][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1430.888647][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1430.935083][ T4278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.994187][T17546] netlink: 'syz.6.3229': attribute type 29 has an invalid length. [ 1431.070569][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1431.117012][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1431.152445][T17134] device veth0_vlan entered promiscuous mode [ 1431.183384][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1431.199142][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1431.254112][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.293913][T17134] device veth1_vlan entered promiscuous mode [ 1431.304788][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.389357][T17566] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.3239'. [ 1431.423633][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1431.467953][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.527441][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.552058][T17134] device veth0_macvtap entered promiscuous mode [ 1431.599486][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1431.627291][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1431.636035][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1431.722770][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1431.754047][T17134] device veth1_macvtap entered promiscuous mode [ 1431.851879][T17587] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1431.872201][T17134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1431.907953][T17134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.950038][T17134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1431.996531][T17134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.032740][T17134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.050936][T17134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.071321][T17134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.093158][T17134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.109664][T17134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.136145][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1432.187368][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1432.235710][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1432.411416][T17134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.422118][T17134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.432257][T17134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.443010][T17134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.453178][T17134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.465333][T17134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.503355][T17134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.819449][T17134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.204423][T17134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1433.286709][T17134] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.322464][T17134] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.341569][T17134] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.351797][T17134] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.365213][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1433.401176][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1433.559976][T17635] loop7: detected capacity change from 0 to 512 [ 1433.574139][T17627] netlink: 'syz.4.3253': attribute type 39 has an invalid length. [ 1433.648431][T17635] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 1433.684612][T17635] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1433.764702][T17635] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2228: inode #15: comm syz.7.3254: corrupted in-inode xattr [ 1433.777151][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1433.822834][T17635] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3254: couldn't read orphan inode 15 (err -117) [ 1433.845340][T17635] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 1434.056538][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 1434.126671][ T4398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.136304][ T4398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.170251][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1434.186834][ T21] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1434.206446][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.241146][ T21] usb 3-1: config 0 descriptor?? [ 1434.308845][ T21] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1434.336778][T16174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.361616][T16174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.496079][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1434.667513][T17662] loop4: detected capacity change from 0 to 22 [ 1434.701922][T17662] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1434.826774][T17662] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1436.125265][T17677] loop4: detected capacity change from 0 to 128 [ 1436.217869][T16097] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1436.277631][T17677] attempt to access beyond end of device [ 1436.277631][T17677] loop4: rw=2049, want=240, limit=128 [ 1436.419620][T17677] attempt to access beyond end of device [ 1436.419620][T17677] loop4: rw=2049, want=585, limit=128 [ 1436.433076][T17686] loop7: detected capacity change from 0 to 512 [ 1436.476970][T16097] usb 7-1: Using ep0 maxpacket: 16 [ 1436.485079][T17677] attempt to access beyond end of device [ 1436.485079][T17677] loop4: rw=0, want=242, limit=128 [ 1436.513880][T17686] EXT4-fs (loop7): Ignoring removed nobh option [ 1436.531591][T17677] attempt to access beyond end of device [ 1436.531591][T17677] loop4: rw=0, want=242, limit=128 [ 1436.539118][T17686] EXT4-fs error (device loop7): __ext4_iget:4894: inode #11: block 1: comm syz.7.3266: invalid block [ 1436.559271][T17686] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3266: couldn't read orphan inode 11 (err -117) [ 1436.587730][T17677] Buffer I/O error on dev loop4, logical block 241, async page read [ 1436.592084][T17686] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x0000000000000008,nodiscard,sysvgroups,jqfmt=vfsold,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback. [ 1436.600482][T17677] attempt to access beyond end of device [ 1436.600482][T17677] loop4: rw=0, want=243, limit=128 [ 1436.621075][T16097] usb 7-1: config 0 has no interfaces? [ 1436.631221][T17677] Buffer I/O error on dev loop4, logical block 242, async page read [ 1436.631455][T17677] attempt to access beyond end of device [ 1436.631455][T17677] loop4: rw=0, want=244, limit=128 [ 1436.656018][T17677] Buffer I/O error on dev loop4, logical block 243, async page read [ 1436.664191][T17677] attempt to access beyond end of device [ 1436.664191][T17677] loop4: rw=0, want=245, limit=128 [ 1436.677421][T17677] Buffer I/O error on dev loop4, logical block 244, async page read [ 1436.720938][T17677] attempt to access beyond end of device [ 1436.720938][T17677] loop4: rw=0, want=246, limit=128 [ 1436.748823][T17677] Buffer I/O error on dev loop4, logical block 245, async page read [ 1436.760724][ T4278] device hsr_slave_0 left promiscuous mode [ 1436.786894][T16097] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1436.799644][ T4278] device hsr_slave_1 left promiscuous mode [ 1436.800681][T16097] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1436.814732][ T4278] batman_adv: batadv0: Removing interface: team0 [ 1436.842759][T16097] usb 7-1: Manufacturer: syz [ 1436.845759][T17677] attempt to access beyond end of device [ 1436.845759][T17677] loop4: rw=0, want=247, limit=128 [ 1436.857703][T16097] usb 7-1: SerialNumber: syz [ 1436.886310][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1436.888990][T16097] usb 7-1: config 0 descriptor?? [ 1436.901131][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.923560][T17677] Buffer I/O error on dev loop4, logical block 246, async page read [ 1436.932769][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1436.945394][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1436.966645][ T21] gspca_vc032x: reg_r err -71 [ 1436.976654][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1436.984733][ T4278] device bridge_slave_1 left promiscuous mode [ 1436.996641][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.004031][T17677] attempt to access beyond end of device [ 1437.004031][T17677] loop4: rw=0, want=248, limit=128 [ 1437.021152][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.027880][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.040639][T17677] Buffer I/O error on dev loop4, logical block 247, async page read [ 1437.049971][ T4278] device bridge_slave_0 left promiscuous mode [ 1437.050571][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.056201][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.069759][T17677] Buffer I/O error on dev loop4, logical block 248, async page read [ 1437.080108][T17677] Buffer I/O error on dev loop4, logical block 241, async page read [ 1437.084859][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.096614][T17677] Buffer I/O error on dev loop4, logical block 242, async page read [ 1437.097638][ T4278] device veth1_macvtap left promiscuous mode [ 1437.113207][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.122457][ T4278] device veth0_macvtap left promiscuous mode [ 1437.132438][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.138671][ T4278] device veth1_vlan left promiscuous mode [ 1437.145730][ T4278] device veth0_vlan left promiscuous mode [ 1437.149487][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.161387][T16097] usb 7-1: USB disconnect, device number 2 [ 1437.173654][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.188027][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.201290][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.215136][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.225972][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.238203][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.243761][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.262199][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.272014][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 1437.285465][ T21] gspca_vc032x: Unknown sensor... [ 1437.294391][ T21] vc032x: probe of 3-1:0.0 failed with error -22 [ 1437.319821][ T21] usb 3-1: USB disconnect, device number 8 [ 1437.353135][T17712] overlayfs: failed to verify origin (/syz8, ino=371, err=-116) [ 1437.411028][T17712] overlayfs: failed to verify upper root origin [ 1437.608635][T17720] loop8: detected capacity change from 0 to 128 [ 1437.751521][T17720] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1437.785503][T17720] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1437.851155][ T4278] team0 (unregistering): Port device team_slave_1 removed [ 1437.870458][ T4278] team0 (unregistering): Port device team_slave_0 removed [ 1437.887558][ T4278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.902830][ T4278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.966549][ T21] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1437.982047][ T4278] bond0 (unregistering): Released all slaves [ 1438.128299][T16722] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1438.159380][T17728] loop4: detected capacity change from 0 to 8 [ 1438.409298][T16722] usb 9-1: Using ep0 maxpacket: 8 [ 1438.417130][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1438.435230][ T21] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1438.445231][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.473889][ T21] usb 3-1: config 0 descriptor?? [ 1438.506605][T16843] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1438.506768][T17719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1438.619427][T16722] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1438.797192][T16843] usb 8-1: Using ep0 maxpacket: 16 [ 1438.816545][T16722] usb 9-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.40 [ 1438.839293][T16722] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.887079][T16722] usb 9-1: Product: syz [ 1438.898286][T16722] usb 9-1: Manufacturer: syz [ 1438.914499][T16722] usb 9-1: SerialNumber: syz [ 1438.946859][T16843] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.957212][T16843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1438.980471][T16843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1439.012424][T16843] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1439.046423][T16843] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1439.118731][ T21] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1439.131541][T17752] netlink: 'syz.6.3280': attribute type 12 has an invalid length. [ 1439.140617][T17752] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3280'. [ 1439.186707][T16843] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1439.195791][T16843] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1439.246391][T16843] usb 8-1: Manufacturer: syz [ 1439.272832][T16843] usb 8-1: config 0 descriptor?? [ 1439.319362][T17757] netlink: 'syz.6.3281': attribute type 1 has an invalid length. [ 1439.336579][ T8821] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1439.348433][T17757] netlink: 'syz.6.3281': attribute type 1 has an invalid length. [ 1439.386814][ T21] usb 3-1: USB disconnect, device number 9 [ 1439.406567][T16722] usbhid 9-1:1.0: can't add hid device: -71 [ 1439.414254][T16722] usbhid: probe of 9-1:1.0 failed with error -71 [ 1439.479062][T16722] usb 9-1: USB disconnect, device number 2 [ 1439.696639][T16843] rc_core: IR keymap rc-hauppauge not found [ 1439.704419][T16843] Registered IR keymap rc-empty [ 1439.719832][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1439.746821][ T8821] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1439.758142][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1439.782100][ T8821] usb 5-1: config 0 has no interface number 0 [ 1439.806473][ T8821] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1439.828674][T16843] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1439.868545][T16843] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input5 [ 1439.986656][ T8821] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1439.995837][ T8821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.016918][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.058083][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.062654][T17785] loop8: detected capacity change from 0 to 64 [ 1440.065825][ T8821] usb 5-1: Product: syz [ 1440.096522][ T8821] usb 5-1: Manufacturer: syz [ 1440.101264][ T8821] usb 5-1: SerialNumber: syz [ 1440.130157][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.165829][ T8821] usb 5-1: config 0 descriptor?? [ 1440.187222][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.246880][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.268239][ T26] audit: type=1800 audit(1755908807.170:32): pid=17785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3285" name="file1" dev="loop8" ino=6 res=0 errno=0 [ 1440.296928][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.337027][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.377043][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.416762][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.456645][T16843] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1440.538081][T16843] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1440.548305][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1440.560369][T16843] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1440.756583][T17212] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1440.785204][T17801] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3291'. [ 1440.836668][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 1440.846185][T17803] loop6: detected capacity change from 0 to 128 [ 1440.883754][T17803] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1440.919031][ T8821] CoreChips: probe of 5-1:0.41 failed with error -71 [ 1440.928239][T17803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1440.951295][ T8821] usb 5-1: USB disconnect, device number 8 [ 1440.957533][ T21] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1440.984669][T17803] overlayfs: missing 'lowerdir' [ 1440.989739][ T21] usb 3-1: config 0 has no interface number 0 [ 1440.996022][ T21] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1441.006589][T17212] usb 9-1: Using ep0 maxpacket: 32 [ 1441.029989][ T21] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1441.126642][T17212] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.150182][T17212] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1441.226528][ T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1441.244099][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.253666][T16726] usb 8-1: USB disconnect, device number 2 [ 1441.284828][ T21] usb 3-1: Product: syz [ 1441.324211][T17811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1441.350789][ T21] usb 3-1: Manufacturer: syz [ 1441.355528][ T21] usb 3-1: SerialNumber: syz [ 1441.356637][T17212] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1441.386989][ T21] usb 3-1: config 0 descriptor?? [ 1441.416610][T17212] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1441.451403][T17212] usb 9-1: Product: syz [ 1441.455621][T17212] usb 9-1: Manufacturer: syz [ 1441.470522][T17212] usb 9-1: SerialNumber: syz [ 1441.502260][T17819] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3294'. [ 1441.583885][T17819] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1441.592653][T17212] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input7 [ 1441.710714][T17825] loop6: detected capacity change from 0 to 1024 [ 1441.798689][T16722] usb 9-1: USB disconnect, device number 3 [ 1441.841743][T16722] appletouch 9-1:1.0: input: appletouch disconnected [ 1441.863011][T17825] EXT4-fs (loop6): Ignoring removed nobh option [ 1441.886922][T17825] EXT4-fs (loop6): Ignoring removed bh option [ 1441.921565][T17825] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1442.016953][T17831] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1442.023526][T17831] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1442.043682][T17825] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nojournal_checksum,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1442.071133][T17831] vhci_hcd vhci_hcd.0: Device attached [ 1442.098836][T17832] vhci_hcd: connection closed [ 1442.099097][ T21] appletouch 3-1:0.85: Geyser mode initialized. [ 1442.125852][ T26] audit: type=1800 audit(1755908809.020:33): pid=17825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3297" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1442.140088][ T21] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6 [ 1442.155629][ T4386] vhci_hcd: stop threads [ 1442.160587][ T4386] vhci_hcd: release socket [ 1442.175430][ T4386] vhci_hcd: disconnect device [ 1442.391598][T16722] usb 3-1: USB disconnect, device number 10 [ 1442.406408][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1442.456220][T17847] loop7: detected capacity change from 0 to 512 [ 1442.482007][T16722] appletouch 3-1:0.85: input: appletouch disconnected [ 1442.560385][T17847] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.3301: casefold flag without casefold feature [ 1442.595967][T17857] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1442.629858][T17847] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.3301: couldn't read orphan inode 15 (err -117) [ 1442.685950][T17847] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1443.049729][T17873] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1443.100417][T17876] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1443.106983][T17876] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1443.209343][T17876] vhci_hcd vhci_hcd.0: Device attached [ 1443.276906][T17882] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1443.426797][T17212] vhci_hcd: vhci_device speed not set [ 1443.496593][T17212] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1443.565669][T17883] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1443.650372][T17892] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1443.851295][T17876] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1443.867218][T17876] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1443.914085][T17876] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(15) [ 1443.920720][T17876] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1443.938523][ T4278] device hsr_slave_0 left promiscuous mode [ 1443.948250][T17876] vhci_hcd vhci_hcd.0: Device attached [ 1443.979617][ T4278] device hsr_slave_1 left promiscuous mode [ 1443.990300][T17882] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(18) [ 1443.996917][T17882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1444.016497][T17882] vhci_hcd vhci_hcd.0: Device attached [ 1444.029969][ T4278] batman_adv: batadv0: Removing interface: team0 [ 1444.041032][T17896] loop4: detected capacity change from 0 to 2048 [ 1444.043984][T17897] vhci_hcd: connection closed [ 1444.048535][ T4324] vhci_hcd: stop threads [ 1444.060078][T17879] vhci_hcd: connection reset by peer [ 1444.066267][T17894] vhci_hcd: connection closed [ 1444.075986][ T4324] vhci_hcd: release socket [ 1444.091203][ T4324] vhci_hcd: disconnect device [ 1444.110460][ T4324] vhci_hcd: stop threads [ 1444.133258][T17896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1444.150583][ T4324] vhci_hcd: release socket [ 1444.164331][ T4324] vhci_hcd: disconnect device [ 1444.195915][ T4324] vhci_hcd: stop threads [ 1444.211330][ T4324] vhci_hcd: release socket [ 1444.239728][ T4324] vhci_hcd: disconnect device [ 1444.379089][T17904] loop6: detected capacity change from 0 to 4096 [ 1444.400684][T17907] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3320'. [ 1444.462308][T17904] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 1444.675437][T17909] raw_sendmsg: syz.4.3321 forgot to set AF_INET. Fix it! [ 1444.744718][T17912] loop7: detected capacity change from 0 to 512 [ 1444.907253][T17902] syz.2.3318 (17902): drop_caches: 2 [ 1444.999932][T17912] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1445.005868][ T4278] bond0 (unregistering): Released all slaves [ 1445.018913][T17912] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1445.049095][T17912] EXT4-fs error (device loop7): ext4_acquire_dquot:6207: comm syz.7.3322: Failed to acquire dquot type 1 [ 1445.107128][T17912] EXT4-fs (loop7): 1 truncate cleaned up [ 1445.122898][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3320'. [ 1445.131441][T17912] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 1445.275814][T17912] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1445.936259][T17954] syz.2.3335 uses obsolete (PF_INET,SOCK_PACKET) [ 1445.986654][ T4233] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1446.199688][T17968] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3338'. [ 1446.383827][T17976] loop2: detected capacity change from 0 to 1024 [ 1446.506871][ T4233] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1446.520922][T17976] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1446.546460][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.607198][T17976] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1446.650273][ T4233] usb 7-1: Product: syz [ 1446.678913][ T4233] usb 7-1: Manufacturer: syz [ 1446.705160][ T4233] usb 7-1: SerialNumber: syz [ 1446.710270][ T26] audit: type=1800 audit(1755908813.600:34): pid=17976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3342" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1446.765675][ T4233] usb 7-1: config 0 descriptor?? [ 1447.046801][ T4233] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1447.367076][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3349'. [ 1447.866663][T16722] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1447.986814][ T4233] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1448.002634][ T4233] usb 7-1: USB disconnect, device number 3 [ 1448.208793][T18037] bond0 speed is unknown, defaulting to 1000 [ 1448.246669][T16722] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 1448.266816][T16722] usb 8-1: config 0 has no interface number 0 [ 1448.429171][T16722] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1448.458849][T16722] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.478147][T16722] usb 8-1: Product: syz [ 1448.482528][T16722] usb 8-1: Manufacturer: syz [ 1448.501665][T18046] loop8: detected capacity change from 0 to 1024 [ 1448.534957][T16722] usb 8-1: SerialNumber: syz [ 1448.561077][T16722] usb 8-1: config 0 descriptor?? [ 1448.580374][T18046] EXT4-fs (loop8): inline encryption not supported [ 1448.602494][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3360'. [ 1448.626605][T17212] vhci_hcd: vhci_device speed not set [ 1448.662289][T18046] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1448.748213][T18037] chnl_net:caif_netlink_parms(): no params data found [ 1448.827165][T18046] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 1448.942750][T18063] loop6: detected capacity change from 0 to 512 [ 1449.030626][T18063] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.3363: casefold flag without casefold feature [ 1449.046873][T18063] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.3363: couldn't read orphan inode 15 (err -117) [ 1449.073180][T18037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.106645][T16722] usb 8-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -61 [ 1449.106777][T16722] usb 8-1: Firmware version (0.0) predates our first public release. [ 1449.106796][T16722] usb 8-1: Please update to version 0.2 or newer [ 1449.119147][T18070] loop4: detected capacity change from 0 to 2048 [ 1449.134021][T18063] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 1449.201717][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.211495][T18037] device bridge_slave_0 entered promiscuous mode [ 1449.224943][T18037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.232409][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.278327][T18037] device bridge_slave_1 entered promiscuous mode [ 1449.316819][T16722] usb 8-1: atusb_probe: initialization failed, error = -61 [ 1449.331110][T16722] atusb: probe of 8-1:0.128 failed with error -61 [ 1449.359135][T18078] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1449.374471][T16722] usb 8-1: USB disconnect, device number 3 [ 1449.483986][T18037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.525788][T18037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.596633][T16313] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1449.700802][T18037] team0: Port device team_slave_0 added [ 1449.751731][T18087] loop4: detected capacity change from 0 to 4096 [ 1449.759392][T18037] team0: Port device team_slave_1 added [ 1449.850771][T18092] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1449.887107][T18037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.894571][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.935387][T18087] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 1449.973454][T18037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.997197][T18037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1450.020487][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1450.048013][T18037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.128039][T16313] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1450.151226][T16313] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.175827][T16313] usb 9-1: Product: syz [ 1450.186015][T16313] usb 9-1: Manufacturer: syz [ 1450.198880][T16313] usb 9-1: SerialNumber: syz [ 1450.222163][T16720] Bluetooth: hci4: command 0x0409 tx timeout [ 1450.227209][T18037] device hsr_slave_0 entered promiscuous mode [ 1450.267533][T18037] device hsr_slave_1 entered promiscuous mode [ 1450.279047][T18037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1450.293810][T18037] Cannot create hsr debugfs directory [ 1450.366379][ T4278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.406474][T17212] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1450.504542][ T4278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.572930][T18112] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1450.579497][T18112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1450.589362][T18112] vhci_hcd vhci_hcd.0: Device attached [ 1450.609432][ T4278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.633621][T18112] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 1450.640174][T18112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1450.659136][T18112] vhci_hcd vhci_hcd.0: Device attached [ 1450.669005][T17212] usb 8-1: Using ep0 maxpacket: 8 [ 1450.669105][ T4278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.693903][T18112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1450.730474][T18112] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 1450.737038][T18112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1450.765141][T18112] vhci_hcd vhci_hcd.0: Device attached [ 1450.796732][T16748] vhci_hcd: vhci_device speed not set [ 1450.807054][T18125] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 1450.813691][T18125] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1450.831119][T18125] vhci_hcd vhci_hcd.0: Device attached [ 1450.867207][T16748] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1450.872756][T18112] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(14) [ 1450.881306][T18112] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1450.896815][T18112] vhci_hcd vhci_hcd.0: Device attached [ 1450.908109][T18122] vhci_hcd: connection closed [ 1450.908658][T17107] vhci_hcd: stop threads [ 1450.926630][T16313] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1450.927318][T18126] vhci_hcd: connection closed [ 1450.948969][T18116] vhci_hcd: connection closed [ 1450.953844][T16313] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1450.953965][T18113] vhci_hcd: connection reset by peer [ 1450.973017][T16313] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1450.979413][T18129] vhci_hcd: connection closed [ 1450.982624][T17212] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1450.986899][T17107] vhci_hcd: release socket [ 1450.987810][T17212] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.006449][T17107] vhci_hcd: disconnect device [ 1451.025652][T17107] vhci_hcd: stop threads [ 1451.037304][T16313] lan78xx: probe of 9-1:1.0 failed with error -32 [ 1451.044165][T17107] vhci_hcd: release socket [ 1451.062836][T18037] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1451.066254][T17212] usb 8-1: Product: syz [ 1451.077616][T17212] usb 8-1: Manufacturer: syz [ 1451.080005][T17107] vhci_hcd: disconnect device [ 1451.082239][T17212] usb 8-1: SerialNumber: syz [ 1451.102999][T17212] usb 8-1: config 0 descriptor?? [ 1451.115399][T17107] vhci_hcd: stop threads [ 1451.142288][T17107] vhci_hcd: release socket [ 1451.148055][T18037] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1451.163689][T17107] vhci_hcd: disconnect device [ 1451.184077][T17107] vhci_hcd: stop threads [ 1451.188546][T17107] vhci_hcd: release socket [ 1451.205320][T17107] vhci_hcd: disconnect device [ 1451.227555][T18037] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1451.240849][T17107] vhci_hcd: stop threads [ 1451.247131][T17107] vhci_hcd: release socket [ 1451.251641][T17107] vhci_hcd: disconnect device [ 1451.263490][T18037] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1451.356502][T17212] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1451.491713][T18037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.567883][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1451.586231][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1451.610719][T18037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.665754][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1451.677330][T17212] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 1451.696027][T17212] usb 8-1: USB disconnect, device number 4 [ 1451.728489][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1451.782903][T17107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.790107][T17107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.815175][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1451.850770][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1451.862096][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1451.871724][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.878880][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.898059][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3383'. [ 1451.961321][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1451.999429][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1452.033095][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1452.090163][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1452.123562][ T26] audit: type=1326 audit(1755908819.000:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18177 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1452.158121][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1452.170082][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1452.199706][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1452.208204][ T26] audit: type=1326 audit(1755908819.030:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18177 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1452.235065][T18184] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1452.255839][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1452.268154][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1452.297511][ T26] audit: type=1326 audit(1755908819.030:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18177 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1452.306725][T17212] Bluetooth: hci4: command 0x041b tx timeout [ 1452.325716][ T8829] usb 9-1: USB disconnect, device number 4 [ 1452.375174][T18037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1452.388607][T18188] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 1452.412930][T18190] loop8: detected capacity change from 0 to 512 [ 1452.419185][T18037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1452.435199][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1452.471042][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1452.478936][ T26] audit: type=1326 audit(1755908819.030:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18177 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1452.542724][T18190] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1452.584427][ T26] audit: type=1326 audit(1755908819.030:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18177 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1452.607014][T18190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e09c, mo2=0002] [ 1452.616047][T18190] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1452.673588][ T26] audit: type=1326 audit(1755908819.030:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18177 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1452.696514][T18190] EXT4-fs error (device loop8): ext4_orphan_get:1427: comm syz.8.3390: bad orphan inode 267 [ 1452.726714][ T26] audit: type=1326 audit(1755908819.030:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18177 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1452.770853][T18190] EXT4-fs (loop8): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,minixdf,inode_readahead_blks=0x0000000001000000,errors=continue. Quota mode: none. [ 1452.871092][T18190] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.3390: dx entry: limit 0 != root limit 125 [ 1452.976711][T18190] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3390: Corrupt directory, running e2fsck is recommended [ 1453.009379][ T4278] device hsr_slave_0 left promiscuous mode [ 1453.054995][ T4278] device hsr_slave_1 left promiscuous mode [ 1453.070395][T18215] loop4: detected capacity change from 0 to 2048 [ 1453.077153][ T4278] batman_adv: batadv0: Removing interface: team0 [ 1453.117363][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1453.124854][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.153766][T18215] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 1453.175087][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.197860][T18215] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1453.216556][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.239624][ T8827] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1453.283055][ T4278] device bridge_slave_1 left promiscuous mode [ 1453.348045][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.355844][T18215] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3394: bg 0: block 345: padding at end of block bitmap is not set [ 1453.385536][T18215] EXT4-fs error (device loop4): ext4_xattr_block_set:2206: inode #15: comm syz.4.3394: bad block 128 [ 1453.423692][ T4278] device bridge_slave_0 left promiscuous mode [ 1453.456600][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.526420][ T8827] usb 8-1: Using ep0 maxpacket: 32 [ 1453.672480][ T8827] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1453.716397][ T8827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.740794][ T8827] usb 8-1: config 0 descriptor?? [ 1453.789647][ T8827] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1453.889404][T15878] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1454.223034][ T4278] device veth1_macvtap left promiscuous mode [ 1454.239707][ T4278] device veth0_macvtap left promiscuous mode [ 1454.245808][ T4278] device veth1_vlan left promiscuous mode [ 1454.262353][ T4278] device veth0_vlan left promiscuous mode [ 1454.370840][T15878] usb 5-1: config 0 has no interfaces? [ 1454.376572][T15878] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 1454.385634][T15878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.390207][T17212] Bluetooth: hci4: command 0x040f tx timeout [ 1454.454454][T15878] usb 5-1: config 0 descriptor?? [ 1454.731163][ T8821] usb 5-1: USB disconnect, device number 9 [ 1454.812749][ T4278] team0 (unregistering): Port device team_slave_1 removed [ 1454.846075][ T4278] team0 (unregistering): Port device team_slave_0 removed [ 1454.873315][ T4278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.913625][ T4278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.988716][T15878] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1455.048946][ T4278] bond0 (unregistering): Released all slaves [ 1455.416931][T15878] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1455.425191][T15878] usb 7-1: config 0 has no interface number 0 [ 1455.456990][T15878] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1455.458426][T18257] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1455.561876][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1455.566585][ T8827] gspca_vc032x: reg_w err -71 [ 1455.570547][T17107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1455.581646][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.598623][T18037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.626691][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.636804][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.656646][T15878] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1455.668834][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.676992][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.682401][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.689756][T15878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.726418][T15878] usb 7-1: Product: syz [ 1455.730987][T15878] usb 7-1: Manufacturer: syz [ 1455.735607][T15878] usb 7-1: SerialNumber: syz [ 1455.741924][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.758837][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.771778][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.792632][T15878] usb 7-1: config 0 descriptor?? [ 1455.798017][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.803324][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.836374][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.849104][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.871211][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.886373][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.891802][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.936295][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.942042][ T8827] gspca_vc032x: I2c Bus Busy Wait 00 [ 1455.970499][ T8827] gspca_vc032x: Unknown sensor... [ 1455.975615][ T8827] vc032x: probe of 8-1:0.0 failed with error -22 [ 1456.013654][ T8827] usb 8-1: USB disconnect, device number 5 [ 1456.073825][T16748] vhci_hcd: vhci_device speed not set [ 1456.482491][T16720] Bluetooth: hci4: command 0x0419 tx timeout [ 1456.513994][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1456.537191][T15878] usbtouchscreen: probe of 7-1:0.214 failed with error -71 [ 1456.545479][T16319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1456.565903][T15878] usb 7-1: USB disconnect, device number 4 [ 1456.642597][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1456.657722][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1456.677528][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1456.717308][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1456.766985][T18037] device veth0_vlan entered promiscuous mode [ 1456.822046][T18037] device veth1_vlan entered promiscuous mode [ 1456.951941][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1456.967347][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1457.004646][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1457.018008][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1457.049535][T18037] device veth0_macvtap entered promiscuous mode [ 1457.069695][T18037] device veth1_macvtap entered promiscuous mode [ 1457.188491][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.226016][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.288221][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.360201][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.422977][T18312] loop6: detected capacity change from 0 to 2048 [ 1457.453896][T18316] loop7: detected capacity change from 0 to 128 [ 1457.456389][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1457.506759][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.522182][T18314] loop4: detected capacity change from 0 to 4096 [ 1457.527444][T18037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.566602][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1457.567278][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1457.640153][ T26] audit: type=1800 audit(1755908824.530:42): pid=18316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3417" name="file2" dev="loop7" ino=1048661 res=0 errno=0 [ 1457.643111][T18316] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1457.685470][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1457.697580][T18320] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1457.741430][ T26] audit: type=1800 audit(1755908824.640:43): pid=18312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3415" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1457.743073][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1457.770760][T18314] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1457.780023][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 1457.822479][T18314] ntfs3: loop4: Failed to load $LogFile. [ 1457.851498][T18316] FAT-fs (loop7): Filesystem has been set read-only [ 1457.892060][T18316] handle_bad_sector: 11 callbacks suppressed [ 1457.892079][T18316] attempt to access beyond end of device [ 1457.892079][T18316] loop7: rw=524288, want=2073, limit=128 [ 1457.932663][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.983199][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.031948][T18316] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1458.056564][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.074202][T18316] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1458.098905][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.102114][T18321] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1458.116831][T18037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.128322][T18321] attempt to access beyond end of device [ 1458.128322][T18321] loop7: rw=524288, want=2073, limit=128 [ 1458.153402][T18037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.169050][T18321] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1458.186970][T18037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.196257][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1458.205244][T18321] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1458.242604][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1458.305761][T18037] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.336170][T18316] attempt to access beyond end of device [ 1458.336170][T18316] loop7: rw=0, want=2073, limit=128 [ 1458.351698][T18330] Invalid ELF header type: 2 != 1 [ 1458.373057][T18037] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.421908][T18037] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.464565][T18316] attempt to access beyond end of device [ 1458.464565][T18316] loop7: rw=0, want=2073, limit=128 [ 1458.486456][T18037] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.772951][T15860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.803187][T15860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.856550][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.874959][T18341] netlink: 'syz.6.3422': attribute type 1 has an invalid length. [ 1458.920630][T18345] loop7: detected capacity change from 0 to 64 [ 1458.929386][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.966943][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1458.975438][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1458.995254][T18347] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1459.029570][T18228] Set syz1 is full, maxelem 65536 reached [ 1459.045507][T18341] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1459.094614][T18341] bond1 (unregistering): Released all slaves [ 1459.418315][T18359] loop4: detected capacity change from 0 to 512 [ 1459.655432][T18359] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1459.668322][T18359] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1459.688089][T18359] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.3427: Failed to acquire dquot type 1 [ 1459.732152][T18359] EXT4-fs (loop4): 1 truncate cleaned up [ 1459.740851][T18359] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 1459.759580][T18359] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1459.944829][T18393] loop9: detected capacity change from 0 to 1024 [ 1459.994850][T18393] EXT4-fs (loop9): Ignoring removed oldalloc option [ 1459.994871][T18393] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 1460.046560][T16748] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1460.093149][T18393] EXT4-fs (loop9): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,oldalloc,norecovery,jqfmt=vfsv0,nomblk_io_submit,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 1460.135521][T18401] loop8: detected capacity change from 0 to 512 [ 1460.213853][T18401] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.3439: Invalid inode bitmap blk 4 in block_group 0 [ 1460.271136][T18401] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 1460.293963][T18401] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.3439: Invalid inode bitmap blk 4 in block_group 0 [ 1460.318367][T18401] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem [ 1460.322770][T16748] usb 7-1: Using ep0 maxpacket: 16 [ 1460.449500][T16748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.478338][T16748] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1460.556759][T16748] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 1460.655480][T16748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.715241][T16748] usb 7-1: config 0 descriptor?? [ 1460.737109][ T26] audit: type=1326 audit(1755908827.640:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18419 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1460.758390][T18423] loop4: detected capacity change from 0 to 512 [ 1460.886545][ T26] audit: type=1326 audit(1755908827.640:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18419 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1460.908827][ C1] vkms_vblank_simulate: vblank timer overrun [ 1460.957741][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3446'. [ 1460.993240][T18423] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1461.043468][ T26] audit: type=1326 audit(1755908827.640:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18419 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1461.066845][ T26] audit: type=1326 audit(1755908827.640:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18419 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1461.096034][ T26] audit: type=1326 audit(1755908827.640:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18419 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1461.126430][ T26] audit: type=1326 audit(1755908827.640:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18419 comm="syz.4.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1100cadbe9 code=0x7ffc0000 [ 1461.260881][T16748] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 1461.307510][T16748] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 1461.364002][T16748] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 1461.389168][T18445] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3451'. [ 1461.395760][T16748] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 1461.428730][T18446] ================================================================================ [ 1461.468938][T16748] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 1461.482402][T18441] loop4: detected capacity change from 0 to 4096 [ 1461.494059][T18446] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/aio_iiro_16.c:181:9 [ 1461.544996][T16748] hid-generic 0003:0955:7214.0002: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 1461.565927][T18446] shift exponent 228 is too large for 32-bit type 'int' [ 1461.604974][T18446] CPU: 1 PID: 18446 Comm: syz.9.3452 Not tainted 5.15.189-syzkaller #0 [ 1461.613270][T18446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1461.623352][T18446] Call Trace: [ 1461.625661][T18441] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 1461.626652][T18446] [ 1461.626700][T18446] dump_stack_lvl+0x168/0x230 [ 1461.626733][T18446] ? show_regs_print_info+0x20/0x20 [ 1461.651427][T18446] ? load_image+0x3b0/0x3b0 [ 1461.655970][T18446] ? __lock_acquire+0x7c60/0x7c60 [ 1461.661022][T18446] ? do_raw_write_lock+0x119/0x250 [ 1461.666169][T18446] ubsan_epilogue+0xa/0x30 [ 1461.670717][T18446] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 1461.677176][T18446] ? __request_region+0xbe/0xd0 [ 1461.682063][T18446] ? comedi_request_region+0x77/0x170 [ 1461.687468][T18446] aio_iiro_16_attach+0x5db/0x790 [ 1461.692530][T18446] comedi_device_attach+0x515/0x650 [ 1461.697776][T18446] comedi_unlocked_ioctl+0x5ec/0xe90 [ 1461.703106][T18446] ? comedi_poll+0x8b0/0x8b0 [ 1461.707813][T18446] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1461.712779][T18446] ? security_file_ioctl+0x7c/0xa0 [ 1461.717910][T18446] ? comedi_poll+0x8b0/0x8b0 [ 1461.722525][T18446] __se_sys_ioctl+0xfa/0x170 [ 1461.727146][T18446] do_syscall_64+0x4c/0xa0 [ 1461.731600][T18446] ? clear_bhb_loop+0x30/0x80 [ 1461.736293][T18446] ? clear_bhb_loop+0x30/0x80 [ 1461.740993][T18446] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1461.746943][T18446] RIP: 0033:0x7f588ae97be9 [ 1461.751381][T18446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1461.771012][T18446] RSP: 002b:00007f58890ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1461.779462][T18446] RAX: ffffffffffffffda RBX: 00007f588b0befa0 RCX: 00007f588ae97be9 [ 1461.787561][T18446] RDX: 0000200000000500 RSI: 0000000040946400 RDI: 0000000000000003 [ 1461.795563][T18446] RBP: 00007f588af1ae19 R08: 0000000000000000 R09: 0000000000000000 [ 1461.803562][T18446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1461.811561][T18446] R13: 00007f588b0bf038 R14: 00007f588b0befa0 R15: 00007ffd7d4183f8 [ 1461.819673][T18446] [ 1461.822783][ C1] vkms_vblank_simulate: vblank timer overrun [ 1461.854653][T16748] usb 7-1: USB disconnect, device number 5 [ 1462.174737][T18446] ================================================================================ [ 1462.191868][T18455] fido_id[18455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1462.216540][T18446] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1462.223775][T18446] CPU: 0 PID: 18446 Comm: syz.9.3452 Not tainted 5.15.189-syzkaller #0 [ 1462.232042][T18446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1462.242119][T18446] Call Trace: [ 1462.245421][T18446] [ 1462.248384][T18446] dump_stack_lvl+0x168/0x230 [ 1462.253267][T18446] ? show_regs_print_info+0x20/0x20 [ 1462.258495][T18446] ? load_image+0x3b0/0x3b0 [ 1462.263040][T18446] panic+0x2c9/0x7f0 [ 1462.266969][T18446] ? bpf_jit_dump+0xd0/0xd0 [ 1462.271517][T18446] check_panic_on_warn+0x80/0xa0 [ 1462.276485][T18446] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 1462.282941][T18446] ? __request_region+0xbe/0xd0 [ 1462.287835][T18446] ? comedi_request_region+0x77/0x170 [ 1462.293231][T18446] aio_iiro_16_attach+0x5db/0x790 [ 1462.298283][T18446] comedi_device_attach+0x515/0x650 [ 1462.303599][T18446] comedi_unlocked_ioctl+0x5ec/0xe90 [ 1462.308917][T18446] ? comedi_poll+0x8b0/0x8b0 [ 1462.313679][T18446] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1462.318638][T18446] ? security_file_ioctl+0x7c/0xa0 [ 1462.323778][T18446] ? comedi_poll+0x8b0/0x8b0 [ 1462.328527][T18446] __se_sys_ioctl+0xfa/0x170 [ 1462.333143][T18446] do_syscall_64+0x4c/0xa0 [ 1462.337580][T18446] ? clear_bhb_loop+0x30/0x80 [ 1462.342275][T18446] ? clear_bhb_loop+0x30/0x80 [ 1462.346973][T18446] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1462.352892][T18446] RIP: 0033:0x7f588ae97be9 [ 1462.357332][T18446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.376968][T18446] RSP: 002b:00007f58890ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1462.385414][T18446] RAX: ffffffffffffffda RBX: 00007f588b0befa0 RCX: 00007f588ae97be9 [ 1462.393416][T18446] RDX: 0000200000000500 RSI: 0000000040946400 RDI: 0000000000000003 [ 1462.401414][T18446] RBP: 00007f588af1ae19 R08: 0000000000000000 R09: 0000000000000000 [ 1462.409401][T18446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.417371][T18446] R13: 00007f588b0bf038 R14: 00007f588b0befa0 R15: 00007ffd7d4183f8 [ 1462.425357][T18446] [ 1462.428623][T18446] Kernel Offset: disabled [ 1462.435016][T18446] Rebooting in 86400 seconds..