last executing test programs: 3m31.568223897s ago: executing program 0 (id=467): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7c, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8884}, 0x2000c010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000050}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$netlink(0x10, 0x3, 0x0) 3m30.647066578s ago: executing program 0 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) 3m29.628355323s ago: executing program 0 (id=474): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x0, 0x6}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2, 0x2000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4042898}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r3 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x27}, @in=@private=0xa010102, 0x4e62, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x4, 0x4000, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x400, 0x9, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@loopback, 0x7ff, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x4, 0x1, 0x0, 0x0, 0x2, 0x1}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) 3m27.676828939s ago: executing program 0 (id=476): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 3m27.623912791s ago: executing program 0 (id=478): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3m25.939046969s ago: executing program 0 (id=485): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e21, 0x39b0, @local, 0x81}}, [0x9, 0xdc, 0x6, 0x8, 0xcd, 0x80000001, 0x9, 0x1000000008001, 0x40000000, 0x3, 0xa, 0x3ff, 0x3, 0x4, 0x403]}, &(0x7f0000000100)=0x100) listen(0xffffffffffffffff, 0x7f) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0x2000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 3m24.897484644s ago: executing program 32 (id=485): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e21, 0x39b0, @local, 0x81}}, [0x9, 0xdc, 0x6, 0x8, 0xcd, 0x80000001, 0x9, 0x1000000008001, 0x40000000, 0x3, 0xa, 0x3ff, 0x3, 0x4, 0x403]}, &(0x7f0000000100)=0x100) listen(0xffffffffffffffff, 0x7f) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000080)='.\x00', 0x2000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 2m27.961049183s ago: executing program 1 (id=705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r7}) 2m26.587351219s ago: executing program 1 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) 2m26.428307615s ago: executing program 1 (id=711): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x40}}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m26.190260573s ago: executing program 1 (id=712): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) ioctl$FIBMAP(r2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x6c}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10, 0x110, 0xa}], 0x30}, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x403, &(0x7f0000000240)={&(0x7f0000000180)=""/116, 0x74}) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 2m25.140736808s ago: executing program 1 (id=714): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2m24.529733289s ago: executing program 1 (id=717): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}}}, 0x24}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2m11.009098949s ago: executing program 3 (id=748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="010000000000000000003900000008"], 0x40}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2(&(0x7f0000000580), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m10.292642304s ago: executing program 3 (id=751): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe", 0x1a}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x330, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb1"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m10.11039566s ago: executing program 3 (id=753): socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x20040080) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24040844}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', 0x80) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_targets\x00') pread64(r3, &(0x7f00000000c0)=""/139, 0x8b, 0x20002000000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) 2m9.464579182s ago: executing program 33 (id=717): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}}}, 0x24}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2m8.002364002s ago: executing program 3 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r0) 2m7.102921793s ago: executing program 3 (id=767): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x407}}}, 0x7) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x4b, @vifc_lcl_addr=@private=0xa010100, @broadcast}, 0x10) 2m5.297223724s ago: executing program 3 (id=772): ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r0], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000680)=ANY=[], 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, 0x0) 1m50.183556179s ago: executing program 34 (id=772): ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r0], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000680)=ANY=[], 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, 0x0) 19.788728346s ago: executing program 2 (id=1074): ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.swap.events\x00', 0x275a, 0x0) 19.433314798s ago: executing program 2 (id=1076): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000000)) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x8090) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000010001"], 0x408100) bind$unix(r0, 0x0, 0x0) io_uring_enter(r4, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) 19.051770431s ago: executing program 7 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0x4) 18.20161625s ago: executing program 2 (id=1080): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec777000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_complete(r1, 0x0) 17.003227901s ago: executing program 2 (id=1082): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000180)={[{@data_err_ignore}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xdf, 0x47c, &(0x7f0000000280)="$eJzs281vFOUfAPDvTLfAD/jRioiCIFU0aXxpaUHlYGI0mnjQxEQPeKxtIchCDa2JkEarMXg0JN6NRxP/Ak+ejHoy8YpHE0NClJiIXlwzuzOlXXaXXdh2C/v5JEOfZ+aZ52Vnntlnn4cJoG+NZP8kEdsj4lJEDNWiqxOM1P5cu7o4/ffVxekkKpU3fk+q6f66ujhdyRXnbcvzHE0j0k+SvJAYXJnt/Lnzp6bK5dmzeXx84fS74/Pnzj918vTUidkTs2cmjx49cnji2Wcmn25Q618vdtTIgfzv3g/m9u155a2Lr00fu/j2D19n9d29v3Yoa0dHebZhJGv4H7XPpv7YY90urMf+rVxvZ1LqdW1oV9Y1SnnnvBRDMRDXL95QvPxxTysHrKnsmb25+eGlCnAXS6LXNQB6o/iiz37/Fts6DT02hCsv1H4AZe2+lm+1I6VI8zSDa1j+SEQcW/rni2yLunmISoN5AwCA2/VtNv55stH4L43dK9LtyNeGhiPinojYGRH3RsSuiLgvopr2/oh4oMPyR+riN44/08u31LA2ZeO/5/K1rdXjv2L0F8MDeez/1fYPJsdPlmcP5Z/JaAxuzuITjTIvsnjp58+alb9y/JdtWfnFWDDP5HKpNkG3pdgzM7Uw1a1B6ZWPIvaWGrU/WV4JSCJiT0Ts7SzrHUXg5ONf7WuW6Obtb6EL60yVL4tMFpeirv2FpPX65PiWKM8eGi/uihv9+NOF15uVf1vt74Ls+m9dff/XpRj6M1m5Xju/fOD5dsu48MunTX9Tltq//5dl9/+m5M3qmvWmfN/7UwsLZyciNiWvVuOr9k9eP7eIF+mz9o8ebNz/d+bnZO1/MCKym3h/RDwUEQfya/dwRDwSEQdbtP/7Fx99p9mxjXD9Zxo+/5bv/+HV17/zwMCp775pVn57z78j1dBovqf6/LuJ5tUpHqPZnmPzt/q5AQAAwJ0kjYjtkaRjy+E0HRur/R/+XbE1Lc/NLzxxfO69MzO1dwSGYzAtZrqGVsyHTiRLeY61+GQ+V1wcP5zPG38+8L9qfGx6rjzT47ZDv9vWpP9nfhtodebSOtUQWFPe14L+Vd//0x7VA1h/vv+hf+n/0L9u6P8eCNA3GnX3D+viLdcCgDtUZajjU0wQwl3DcB/6l/4P/Uv/h750O+/1r1Wg1OLtfYEeB7ZGRDUQ6Yaoz4YJHNhAvanUhd7d4wcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl/wXAAD//8Ve9vU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(0x0, 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) fsopen(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) timerfd_create(0x9, 0x80000) ioctl(0xffffffffffffffff, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x49}, [@call={0x85, 0x0, 0x0, 0x2a}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) 14.844607515s ago: executing program 5 (id=1086): ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.swap.events\x00', 0x275a, 0x0) 14.830449195s ago: executing program 2 (id=1087): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) syz_usbip_server_init(0x6) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r7, 0x10c, 0x9, &(0x7f0000000040), 0x4) write(r6, &(0x7f0000005c00), 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)}, 0x58) 14.496622547s ago: executing program 5 (id=1090): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000000)) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x8090) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000010001"], 0x408100) bind$unix(r0, 0x0, 0x0) io_uring_enter(r4, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x1}) 12.977214058s ago: executing program 5 (id=1092): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40844}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() openat$sequencer(0xffffffffffffff9c, 0x0, 0x60300, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) syz_usbip_server_init(0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)}, 0x58) 7.63383701s ago: executing program 5 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x60, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 7.484725485s ago: executing program 5 (id=1099): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)="fa87", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000fc0)="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", 0x222}], 0x1}}], 0x2, 0x0) 7.304386341s ago: executing program 7 (id=1100): ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.swap.events\x00', 0x275a, 0x0) 6.850298887s ago: executing program 7 (id=1101): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4008, 0x0) 6.849724487s ago: executing program 4 (id=1102): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000000)) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x8090) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000010001"], 0x408100) bind$unix(r0, 0x0, 0x0) io_uring_enter(r4, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x1}) 6.440771531s ago: executing program 5 (id=1104): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) 6.386053363s ago: executing program 6 (id=1105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x60}}, 0x0) 6.192716209s ago: executing program 6 (id=1106): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 4.69307459s ago: executing program 7 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x35975000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x14) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) 4.680577891s ago: executing program 4 (id=1108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40844}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() openat$sequencer(0xffffffffffffff9c, 0x0, 0x60300, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) syz_usbip_server_init(0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00), 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)}, 0x58) 4.320285913s ago: executing program 6 (id=1109): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xe) 1.812773079s ago: executing program 7 (id=1110): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x14, 0x0, &(0x7f0000000380)="40f0538ef047ddaf5e1c260155117f8e6eb67f25", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1bfffffe}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51, 0x1, [{0x3, 0x8f2e}]}}) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r5, @ANYBLOB="089805000750050008001300", @ANYRES32=r6, @ANYBLOB="08002c00050000001400030076657468"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 1.627898465s ago: executing program 6 (id=1111): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2(&(0x7f0000000580), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.585049276s ago: executing program 7 (id=1112): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@utf8}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$eJzs3c9qK1UcB/DfpGkSdZEsXInigC5cXW7vE6RIL1zMSslCXah4b0GaILRQ8A/GrgRXblz6BILQnS/hxjfwAQR3dlE4MslMk9Q07UDT+ufz2fT0nPOd8zuTaUsXOfnw5fHB0zz2T778LTqdLBr96MdZFr1oROXrWNL/LgCAf7OzlOKPNFMnl0VEZ3NlAQAbVPvv/+nGSwIANuydd997a3cw2Hs7zzvxePzN8bD4z774Ohvf3Y9PYhTP4mF04zwiXZi1H6eUJs280IvXx5PjYZEcf/BLef3d3yOm+Z3oRm/atZx/MtjbyWcW8pOijufL9ftF/lF048UV6z8Z7D1akY9hK954baH+B9GNXz+OT2MUT6dFzPNf7eT5m+n7P794vyivyGeT42F7Om8ubd3xSwMAAAAAAAAAAAAAAAAAAAAAwH/Yg/LsnHZMz+8pusrzd7bOi2+2I6/0ls/nmeWz6kKXzgeapPihOl/nYZ7nqZw4zzfjpWY072fXAAAAAAAAAAAAAAAAAAAA8M9y9NnnBx+NRs8Ob6VRnQZQva2//nVOp6n+Qs+rsT7Vnq/VKJtrloitak4WsbaeYhO3dFuuazx3Vc0//lT3gp3r52wXa3VucRfVy73QE1VPtvoeti8md6qH5OeqJ6WUWnHD1VtXDaVaj19r5VC39t1ovTBtTNbMieyqwr59Zf5zWQ5ll3fRWrrPS43tsrEQv/Rs1Hqe//67InNaBwAAAAAAAAAAAAAAAAAAbNT8Tb8rBk/WRhupvbGyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBOzT//v0ZjUoZvMLkVh0f3vEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4KAAD//+KpXP8=") ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.swap.events\x00', 0x275a, 0x0) 1.293474016s ago: executing program 4 (id=1113): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, 0x0, 0x0) 1.292285436s ago: executing program 6 (id=1114): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000180)={[{@data_err_ignore}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xdf, 0x47c, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(0x0, 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) fsopen(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) timerfd_create(0x9, 0x80000) ioctl(0xffffffffffffffff, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x49}, [@call={0x85, 0x0, 0x0, 0x2a}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) 1.140756061s ago: executing program 4 (id=1115): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4810) 1.072965014s ago: executing program 4 (id=1116): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, &(0x7f0000000140)=@phonet, 0x0, 0x800) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(0x0, 0x40, 0x100, &(0x7f0000000340)={0x7ff, 0x101, 0x36e, 0xcb4}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d00", @ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 213.013923ms ago: executing program 6 (id=1117): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4008, 0x0) 189.731373ms ago: executing program 4 (id=1118): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000000)) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x8090) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000010001"], 0x408100) bind$unix(r0, 0x0, 0x0) io_uring_enter(r4, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x1}) 0s ago: executing program 2 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x50) kernel console output (not intermixed with test programs): ][ T1334] usb 5-1: SerialNumber: syz [ 97.359937][ T4581] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.368957][ T4581] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.377887][ T4581] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.386672][ T4581] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.420345][ T1334] usb 5-1: config 0 descriptor?? [ 97.475590][ T1334] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 99.066267][ T4600] device syzkaller0 entered promiscuous mode [ 99.122002][ T4600] tipc: Enabled bearer , priority 0 [ 99.130603][ T4598] tipc: Resetting bearer [ 99.192644][ T4598] tipc: Disabling bearer [ 99.219612][ T1334] gspca_stk1135: reg_w 0x200 err -71 [ 99.226041][ T1334] gspca_stk1135: serial bus timeout: status=0x00 [ 99.264093][ T1334] gspca_stk1135: Sensor write failed [ 99.279978][ T1334] gspca_stk1135: serial bus timeout: status=0x00 [ 99.300610][ T1334] gspca_stk1135: Sensor write failed [ 99.306009][ T1334] gspca_stk1135: serial bus timeout: status=0x00 [ 99.373555][ T1334] gspca_stk1135: Sensor read failed [ 99.420136][ T1334] gspca_stk1135: serial bus timeout: status=0x00 [ 99.446211][ T1334] gspca_stk1135: Sensor read failed [ 99.467412][ T1334] gspca_stk1135: Detected sensor type unknown (0x0) [ 99.488027][ T1334] gspca_stk1135: serial bus timeout: status=0x00 [ 99.499786][ T1334] gspca_stk1135: Sensor read failed [ 99.536364][ T1334] gspca_stk1135: serial bus timeout: status=0x00 [ 99.548620][ T1334] gspca_stk1135: Sensor read failed [ 99.556076][ T1334] gspca_stk1135: serial bus timeout: status=0x00 [ 99.562897][ T1334] gspca_stk1135: Sensor write failed [ 99.568497][ T1334] gspca_stk1135: serial bus timeout: status=0x00 [ 99.575452][ T1334] gspca_stk1135: Sensor write failed [ 99.585317][ T1334] stk1135: probe of 5-1:0.0 failed with error -71 [ 99.604098][ T1334] usb 5-1: USB disconnect, device number 7 [ 99.833706][ T4619] device batadv_slave_1 entered promiscuous mode [ 99.870985][ T4619] device batadv_slave_0 entered promiscuous mode [ 99.889456][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 99.916656][ T4619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 99.950004][ T4618] device batadv_slave_0 left promiscuous mode [ 99.956363][ T4618] device batadv_slave_1 left promiscuous mode [ 100.146509][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 100.269629][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.285667][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.329378][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 100.349383][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.359370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.369372][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.379367][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.389369][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.399373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.409369][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.419367][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 100.429373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 100.473593][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 102.129356][ C0] sched: RT throttling activated [ 102.135141][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 103.180284][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.225185][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.247672][ T4635] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.256736][ T4635] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.265554][ T4635] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.274350][ T4635] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.311632][ T13] usb 2-1: Product: syz [ 103.324676][ T13] usb 2-1: Manufacturer: syz [ 103.393826][ T13] usb 2-1: can't set config #1, error -71 [ 103.439803][ T13] usb 2-1: USB disconnect, device number 6 [ 103.581154][ T4642] device syzkaller1 entered promiscuous mode [ 103.829517][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 104.209712][ T13] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 104.264372][ T13] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 104.302254][ T4650] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 104.469787][ T13] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 104.483916][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.504262][ T13] usb 2-1: Product: syz [ 104.525667][ T13] usb 2-1: Manufacturer: syz [ 104.543766][ T13] usb 2-1: SerialNumber: syz [ 104.585986][ T13] usb 2-1: config 0 descriptor?? [ 104.631583][ T13] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 105.420624][ T4265] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.689488][ T13] gspca_sunplus: reg_r err -71 [ 105.697411][ T13] sunplus: probe of 2-1:0.0 failed with error -71 [ 105.699621][ T4265] usb 1-1: Using ep0 maxpacket: 8 [ 105.788111][ T13] usb 2-1: USB disconnect, device number 7 [ 106.039768][ T4265] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 106.074778][ T4265] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 106.098915][ T4265] usb 1-1: Product: syz [ 106.134600][ T4265] usb 1-1: Manufacturer: syz [ 106.165156][ T4265] usb 1-1: SerialNumber: syz [ 106.197968][ T4265] usb 1-1: config 0 descriptor?? [ 106.251840][ T4265] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 106.389581][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.911462][ T4265] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 106.949727][ T13] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 106.995261][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.034868][ T13] usb 3-1: Product: syz [ 107.039199][ T13] usb 3-1: Manufacturer: syz [ 107.199515][ T13] usb 3-1: SerialNumber: syz [ 107.220921][ T13] usb 3-1: config 0 descriptor?? [ 107.270534][ T7] usb 1-1: USB disconnect, device number 6 [ 107.300164][ T13] hub 3-1:0.0: bad descriptor, ignoring hub [ 107.333375][ T13] hub: probe of 3-1:0.0 failed with error -5 [ 107.355858][ T13] f81232 3-1:0.0: f81534a converter detected [ 107.515301][ T13] usb 3-1: f81534a converter now attached to ttyUSB0 [ 107.839443][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.847101][ T4265] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 107.889678][ T13] usb 3-1: USB disconnect, device number 5 [ 107.907812][ T13] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 107.925674][ T13] f81232 3-1:0.0: device disconnected [ 108.039524][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 108.129530][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 108.249971][ T4265] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 226, changing to 4 [ 108.261110][ T1107] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 108.269299][ T1107] usb 4-1: config 0 has no interface number 0 [ 108.275695][ T1107] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.285910][ T4265] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 130, changing to 4 [ 108.410125][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.420587][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.431151][ T23] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.440334][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.451346][ T1107] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 108.460731][ T4265] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 108.471625][ T23] usb 1-1: config 0 descriptor?? [ 108.476684][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.484945][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.493393][ T1107] usb 4-1: Product: syz [ 108.497704][ T4265] usb 2-1: Product: syz [ 108.502046][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 108.512515][ T4265] usb 2-1: Manufacturer: syz [ 108.517169][ T4265] usb 2-1: SerialNumber: syz [ 108.521953][ T1107] usb 4-1: Manufacturer: syz [ 108.526589][ T1107] usb 4-1: SerialNumber: syz [ 108.537459][ T1107] usb 4-1: config 0 descriptor?? [ 108.583437][ T1107] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 108.593537][ T1107] em28xx 4-1:0.132: Video interface 132 found: [ 108.689577][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.716071][ T13] usb 1-1: USB disconnect, device number 7 [ 108.819482][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 108.889696][ T4265] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.909569][ T4265] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 108.939569][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.955136][ T4265] usb 2-1: USB disconnect, device number 8 [ 108.962593][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.975185][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.992864][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 109.003932][ T1107] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 109.011266][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.049666][ T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.058508][ T23] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 109.069092][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.078926][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 109.090231][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 109.129564][ T21] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.138736][ T21] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 109.151017][ T21] usb 5-1: Manufacturer: syz [ 109.158550][ T21] usb 5-1: config 0 descriptor?? [ 109.210793][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.229632][ T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.249042][ T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.267088][ T23] usb 3-1: Product: syz [ 109.271519][ T23] usb 3-1: Manufacturer: syz [ 109.330528][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 109.346008][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 109.363905][ T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 109.394172][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 109.456782][ T4746] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.519621][ T21] rc_core: IR keymap rc-hauppauge not found [ 109.525590][ T21] Registered IR keymap rc-empty [ 109.544153][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.565860][ T7] usb 3-1: USB disconnect, device number 6 [ 109.580175][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.620815][ T21] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 109.636311][ T21] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 109.652259][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.689733][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.719458][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.739432][ T1107] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 109.746229][ T1107] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 109.755673][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.789620][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.819587][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.829688][ T23] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 109.849772][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.881107][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.909659][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.951349][ T21] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.980813][ T21] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 109.990645][ T1107] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 109.998609][ T1107] em28xx 4-1:0.132: analog set to bulk mode. [ 110.004743][ T21] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 110.027449][ T1107] usb 4-1: USB disconnect, device number 5 [ 110.034374][ T1107] em28xx 4-1:0.132: Disconnecting em28xx [ 110.040820][ T21] em28xx 4-1:0.132: Registering V4L2 extension [ 110.128350][ T21] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 110.136864][ T21] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 110.145623][ T21] em28xx 4-1:0.132: No AC97 audio processor [ 110.184618][ T21] usb 4-1: Decoder not found [ 110.190165][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.221179][ T21] em28xx 4-1:0.132: failed to create media graph [ 110.227627][ T21] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 110.276211][ T21] em28xx 4-1:0.132: Remote control support is not available for this card. [ 110.340987][ T1107] em28xx 4-1:0.132: Closing input extension [ 110.379949][ T23] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 110.389090][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.402220][ T1107] em28xx 4-1:0.132: Freeing device [ 110.477010][ T23] usb 2-1: Product: syz [ 110.515786][ T23] usb 2-1: Manufacturer: syz [ 110.550023][ T23] usb 2-1: SerialNumber: syz [ 110.585973][ T23] usb 2-1: config 0 descriptor?? [ 110.900640][ T23] cdc_subset: probe of 2-1:0.0 failed with error -71 [ 110.937873][ T23] usb 2-1: USB disconnect, device number 9 [ 111.029803][ T1107] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.247106][ T4233] usb 5-1: USB disconnect, device number 8 [ 111.279561][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 111.403720][ T1107] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 111.403751][ T1107] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 111.403774][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 111.403797][ T1107] usb 4-1: config 1 has no interface number 0 [ 111.403834][ T1107] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.403865][ T1107] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 111.403905][ T1107] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 111.403929][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.443721][ T1107] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 111.519440][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 111.660536][ T1107] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 111.880955][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.924492][ T23] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 111.945397][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.981308][ T23] usb 1-1: config 0 descriptor?? [ 112.042077][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 112.360887][ T4796] tmpfs: Unknown parameter 'grpquota' [ 112.469493][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 112.509623][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 112.549555][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 112.560951][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.597631][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 112.639728][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 112.689636][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 112.706501][ T1107] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 112.746615][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 112.789490][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 112.839753][ T23] pwc: recv_control_msg error -32 req 04 val 1500 [ 112.879627][ T23] pwc: recv_control_msg error -32 req 02 val 2500 [ 112.919842][ T23] pwc: recv_control_msg error -32 req 02 val 2400 [ 112.959625][ T23] pwc: recv_control_msg error -32 req 02 val 2600 [ 112.974159][ T4818] device syzkaller0 entered promiscuous mode [ 113.169829][ T7] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 113.183085][ T4823] overlayfs: failed to resolve './file2': -2 [ 113.190057][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.198239][ T7] usb 5-1: Product: syz [ 113.203253][ T7] usb 5-1: Manufacturer: syz [ 113.208014][ T7] usb 5-1: SerialNumber: syz [ 113.226934][ T7] usb 5-1: config 0 descriptor?? [ 113.272461][ T7] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 113.442361][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 113.452032][ T4265] usb 4-1: USB disconnect, device number 6 [ 113.464411][ T4265] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 113.473479][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 113.484179][ T23] pwc: Registered as video103. [ 113.489540][ T7] gspca_sunplus: reg_r err -71 [ 113.516303][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 113.526389][ T7] usb 5-1: USB disconnect, device number 9 [ 113.601102][ T23] usb 1-1: USB disconnect, device number 8 [ 113.838782][ T4839] netlink: 'syz.2.189': attribute type 17 has an invalid length. [ 113.849151][ T4841] netlink: 88 bytes leftover after parsing attributes in process `syz.1.188'. [ 113.867509][ T4839] netlink: 'syz.2.189': attribute type 41 has an invalid length. [ 113.885836][ T4841] netlink: 48 bytes leftover after parsing attributes in process `syz.1.188'. [ 114.067120][ T4849] overlayfs: failed to resolve './file2': -2 [ 114.087898][ T4845] device syzkaller0 entered promiscuous mode [ 114.379853][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 114.622301][ T4876] overlayfs: failed to resolve './file2': -2 [ 114.675233][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 114.855725][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.890569][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 114.920146][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.950243][ T7] usb 4-1: config 0 descriptor?? [ 114.984798][ T4895] netlink: 'syz.2.213': attribute type 17 has an invalid length. [ 115.017929][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.031712][ T7] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 115.056419][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.113282][ T4895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.136818][ T4900] netlink: 'syz.1.216': attribute type 4 has an invalid length. [ 115.145403][ T4900] netlink: 'syz.1.216': attribute type 17 has an invalid length. [ 115.175165][ T4900] netlink: 'syz.1.216': attribute type 27 has an invalid length. [ 115.239772][ T7] gspca_vc032x: reg_r err -71 [ 115.252730][ T7] vc032x: probe of 4-1:0.0 failed with error -71 [ 115.304644][ T7] usb 4-1: USB disconnect, device number 7 [ 116.431951][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 116.626815][ T4943] device batadv_slave_1 entered promiscuous mode [ 116.705875][ T4947] device batadv_slave_0 entered promiscuous mode [ 116.764118][ T4941] device batadv_slave_0 left promiscuous mode [ 116.809725][ T4941] device batadv_slave_1 left promiscuous mode [ 117.158498][ T4967] netlink: 'syz.3.240': attribute type 29 has an invalid length. [ 117.185214][ T4967] netlink: 'syz.3.240': attribute type 29 has an invalid length. [ 117.231226][ T4972] netlink: 'syz.3.240': attribute type 29 has an invalid length. [ 117.503877][ T4987] device batadv_slave_1 entered promiscuous mode [ 117.537528][ T4987] device batadv_slave_0 entered promiscuous mode [ 117.552239][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 117.620789][ T4986] device batadv_slave_0 left promiscuous mode [ 117.669703][ T4986] device batadv_slave_1 left promiscuous mode [ 118.369664][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.399438][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.413882][ T5006] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 118.538605][ T5019] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 118.559666][ T23] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 118.559725][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.559749][ T23] usb 5-1: Product: syz [ 118.559766][ T23] usb 5-1: Manufacturer: syz [ 118.559782][ T23] usb 5-1: SerialNumber: syz [ 118.561842][ T23] usb 5-1: config 0 descriptor?? [ 118.601038][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.613263][ T23] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 118.619818][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.681322][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.721020][ T5019] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.728500][ T5019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.737346][ T5019] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.740576][ T23] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 118.744596][ T5019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.789812][ T23] usb 5-1: media controller created [ 118.832182][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.962313][ T5019] team0: Port device bridge0 added [ 119.038425][ T23] DVB: Unable to find symbol tda10046_attach() [ 119.049414][ T23] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 119.088453][ T23] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 119.245809][ T5033] device batadv_slave_1 entered promiscuous mode [ 119.277388][ T5033] device batadv_slave_0 entered promiscuous mode [ 119.322804][ T5032] device batadv_slave_0 left promiscuous mode [ 119.329082][ T5032] device batadv_slave_1 left promiscuous mode [ 119.369636][ T23] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 119.404109][ T23] usb 5-1: USB disconnect, device number 10 [ 119.789530][ T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 120.409583][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.439546][ T21] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.469865][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.510407][ T21] usb 2-1: config 0 descriptor?? [ 120.551614][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 120.684514][ T5066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.277'. [ 120.791031][ T5070] device batadv_slave_1 entered promiscuous mode [ 120.828697][ T5070] device batadv_slave_0 entered promiscuous mode [ 120.860490][ T5069] device batadv_slave_0 left promiscuous mode [ 120.866878][ T5069] device batadv_slave_1 left promiscuous mode [ 121.009550][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 121.049533][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 121.089481][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 121.132373][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 121.190815][ T21] pwc: recv_control_msg error -32 req 04 val 1300 [ 121.239662][ T21] pwc: recv_control_msg error -32 req 04 val 1400 [ 121.293096][ T21] pwc: recv_control_msg error -32 req 02 val 2000 [ 121.339479][ T21] pwc: recv_control_msg error -32 req 02 val 2100 [ 121.389456][ T21] pwc: recv_control_msg error -32 req 04 val 1500 [ 121.429510][ T21] pwc: recv_control_msg error -32 req 02 val 2500 [ 121.469483][ T21] pwc: recv_control_msg error -32 req 02 val 2400 [ 121.519509][ T21] pwc: recv_control_msg error -32 req 02 val 2600 [ 121.793765][ T5103] device batadv_slave_1 entered promiscuous mode [ 121.824062][ T5103] device batadv_slave_0 entered promiscuous mode [ 121.854300][ T5098] device batadv_slave_0 left promiscuous mode [ 121.864076][ T5098] device batadv_slave_1 left promiscuous mode [ 121.999598][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 122.019481][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 122.045429][ T21] pwc: Registered as video103. [ 122.054240][ T5111] ======================================================= [ 122.054240][ T5111] WARNING: The mand mount option has been deprecated and [ 122.054240][ T5111] and is ignored by this kernel. Remove the mand [ 122.054240][ T5111] option from the mount to silence this warning. [ 122.054240][ T5111] ======================================================= [ 122.064011][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 122.237927][ T21] usb 2-1: USB disconnect, device number 10 [ 122.645107][ T5135] device batadv_slave_1 entered promiscuous mode [ 122.725060][ T5135] device batadv_slave_0 entered promiscuous mode [ 122.757985][ T5134] device batadv_slave_0 left promiscuous mode [ 122.797425][ T5134] device batadv_slave_1 left promiscuous mode [ 122.823498][ T5140] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 122.839047][ T5140] syzkaller1: linktype set to 776 [ 123.333763][ T5164] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 123.388963][ T5164] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.314'. [ 123.659697][ T5175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.317'. [ 123.710229][ T5175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.317'. [ 123.795761][ T5182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.317'. [ 123.838085][ T5179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.317'. [ 124.401871][ T5230] netlink: 'syz.1.323': attribute type 29 has an invalid length. [ 124.470542][ T5230] netlink: 'syz.1.323': attribute type 29 has an invalid length. [ 124.500312][ T5237] netlink: 'syz.1.323': attribute type 29 has an invalid length. [ 125.428968][ T5270] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 125.794486][ T5279] netlink: 'syz.3.342': attribute type 21 has an invalid length. [ 125.835841][ T5279] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.342'. [ 126.132947][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 126.454111][ T5304] loop4: detected capacity change from 0 to 256 [ 126.942097][ T5317] loop3: detected capacity change from 0 to 128 [ 127.035859][ T5317] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.249791][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 128.574405][ T5339] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 129.530360][ T5344] loop3: detected capacity change from 0 to 512 [ 129.596551][ T5344] EXT4-fs (loop3): Ignoring removed nobh option [ 129.607553][ T5346] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 129.614127][ T5344] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.839448][ T5344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.678686][ T5344] EXT4-fs (loop3): 1 truncate cleaned up [ 130.704205][ T5344] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,nobh,nodiscard,,errors=continue. Quota mode: none. [ 131.659766][ T5344] overlayfs: conflicting lowerdir path [ 132.007505][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.377'. [ 132.874438][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881500][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.904362][ T5373] device syzkaller0 entered promiscuous mode [ 133.245207][ T5395] loop3: detected capacity change from 0 to 256 [ 133.543662][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.380'. [ 134.127522][ T5408] loop1: detected capacity change from 0 to 512 [ 134.311846][ T5402] device macvlan2 entered promiscuous mode [ 134.396574][ T5402] device bond1 entered promiscuous mode [ 134.423083][ T5408] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 134.435595][ T5402] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.445263][ T5408] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 134.520974][ T5408] System zones: 0-1, 15-15, 18-18, 34-34 [ 134.528053][ T5408] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.583117][ T5408] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 134.651513][ T5408] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 134.666440][ T5408] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 134.704451][ T5408] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.383: bad orphan inode 16 [ 134.747255][ T5408] ext4_test_bit(bit=15, block=18) = 1 [ 134.889548][ T5408] is_bad_inode(inode)=0 [ 134.986443][ T5402] device bond1 left promiscuous mode [ 135.004509][ T5408] NEXT_ORPHAN(inode)=0 [ 135.078021][ T5408] max_ino=32 [ 135.197719][ T5408] i_nlink=2 [ 135.313115][ T5408] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 136.573852][ T5433] overlayfs: failed to clone lowerpath [ 137.843825][ T5449] device batadv_slave_1 entered promiscuous mode [ 137.857797][ T5449] device batadv_slave_0 entered promiscuous mode [ 137.867542][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 138.082935][ T5453] sctp: [Deprecated]: syz.3.397 (pid 5453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.082935][ T5453] Use struct sctp_sack_info instead [ 138.210259][ T5448] device batadv_slave_0 left promiscuous mode [ 138.260364][ T5448] device batadv_slave_1 left promiscuous mode [ 138.597861][ T5459] loop2: detected capacity change from 0 to 512 [ 138.880188][ T5459] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 138.888730][ T5459] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 139.287646][ T5459] EXT4-fs (loop2): 1 truncate cleaned up [ 139.293573][ T5459] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 139.493583][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'. [ 139.831565][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 139.841557][ T5486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.405'. [ 140.646644][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 141.398978][ T5500] mmap: syz.2.407 (5500) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 141.452197][ T5500] loop2: detected capacity change from 0 to 512 [ 141.647523][ T5500] EXT4-fs (loop2): inline encryption not supported [ 142.000884][ T5506] device syzkaller0 entered promiscuous mode [ 142.124950][ T5500] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 143.375264][ T5513] loop4: detected capacity change from 0 to 128 [ 143.532057][ T5513] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.542941][ T5513] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.565746][ T5520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 143.651649][ T5523] loop2: detected capacity change from 0 to 4096 [ 143.858714][ T5523] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.690757][ T5534] loop3: detected capacity change from 0 to 128 [ 145.081966][ T5534] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.093269][ T5534] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.700975][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 146.710244][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 148.084251][ T5548] tipc: Enabled bearer , priority 10 [ 148.133131][ T5553] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 148.146003][ T5553] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 149.145550][ T4265] tipc: Node number set to 3325187351 [ 150.159785][ T5569] loop1: detected capacity change from 0 to 256 [ 150.731302][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 151.610404][ T5588] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 151.944341][ T5598] loop0: detected capacity change from 0 to 512 [ 152.051986][ T5598] EXT4-fs (loop0): inline encryption not supported [ 152.529110][ T5588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.766320][ T5592] bond1: (slave veth0_to_bond): making interface the new active one [ 152.807871][ T5592] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 152.977513][ T5592] syz.3.434 (5592) used greatest stack depth: 20728 bytes left [ 153.438485][ T5598] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 155.680879][ T5596] device bond1 entered promiscuous mode [ 155.686487][ T5596] device veth0_to_bond entered promiscuous mode [ 155.822580][ T5606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 155.831694][ T5606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 155.976121][ T5606] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.984960][ T5606] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.993851][ T5606] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.002687][ T5606] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.303516][ T5620] loop0: detected capacity change from 0 to 8192 [ 156.337404][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 156.445054][ T5620] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.786938][ T4233] Bluetooth: hci4: command 0x0405 tx timeout [ 159.157987][ T5664] loop1: detected capacity change from 0 to 4096 [ 159.381720][ T5664] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 159.391794][ T5664] EXT4-fs (loop1): Test dummy encryption mode enabled [ 160.271200][ T5664] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 160.272529][ T5678] loop3: detected capacity change from 0 to 128 [ 160.529011][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 160.560988][ T5678] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.582949][ T5664] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 160.652212][ T5681] overlayfs: failed to resolve './bus': -2 [ 160.992426][ T5698] autofs4:pid:5698:autofs_fill_super: called with bogus options [ 161.748675][ T5708] loop1: detected capacity change from 0 to 512 [ 162.504194][ T5722] loop4: detected capacity change from 0 to 512 [ 162.618186][ T5722] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.789514][ T5722] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 163.768038][ T5708] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.816316][ T5722] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 163.974153][ T5708] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.051431][ T5722] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 164.223715][ T5722] System zones: 0-2, 18-18, 34-35 [ 164.566977][ T5722] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.010671][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 165.112689][ T5730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 165.155086][ T5730] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.163947][ T5730] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.172730][ T5730] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.181581][ T5730] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.031855][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 167.243716][ T5789] netlink: 140 bytes leftover after parsing attributes in process `syz.3.484'. [ 167.273798][ T5792] loop4: detected capacity change from 0 to 512 [ 167.431863][ T5792] EXT4-fs (loop4): Ignoring removed oldalloc option [ 167.525949][ T5792] EXT4-fs (loop4): 1 truncate cleaned up [ 167.574353][ T5789] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 167.582144][ T5789] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 167.629610][ T5792] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 169.056235][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 169.065672][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 169.378288][ T5805] loop3: detected capacity change from 0 to 4096 [ 169.448791][ T5817] loop2: detected capacity change from 0 to 256 [ 169.490183][ T5805] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.538834][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 170.546864][ T5826] overlayfs: missing 'lowerdir' [ 172.057310][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 172.130678][ T5843] device gretap0 entered promiscuous mode [ 172.158619][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.202863][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.225691][ T5814] device bridge_slave_0 entered promiscuous mode [ 172.247771][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.295040][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.375920][ T5814] device bridge_slave_1 entered promiscuous mode [ 172.427914][ T5852] loop4: detected capacity change from 0 to 2048 [ 172.642806][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.739252][ T5852] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000800,acl,resgid=0x0000000000000000,journal_dev=0x0000000000000800,quota,noblock_validity,,errors=continue. Quota mode: writeback. [ 172.819829][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.851290][ T5852] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.098672][ T5852] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.499: bg 0: block 345: padding at end of block bitmap is not set [ 173.137704][ T5852] EXT4-fs error (device loop4): ext4_xattr_block_set:2195: inode #12: comm syz.4.499: bad block 0 [ 173.726773][ T5814] team0: Port device team_slave_0 added [ 173.776899][ T5814] team0: Port device team_slave_1 added [ 173.846460][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.855547][ T5873] overlayfs: missing 'lowerdir' [ 173.882265][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.911851][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.938457][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.948618][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.098841][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.152064][ T5883] overlayfs: failed to resolve './file2': -2 [ 174.174132][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.194211][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.245693][ T5880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.055628][ T5814] device hsr_slave_0 entered promiscuous mode [ 175.109836][ T5814] device hsr_slave_1 entered promiscuous mode [ 175.179977][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.190534][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 175.232798][ T5814] Cannot create hsr debugfs directory [ 176.971815][ T5911] overlayfs: missing 'lowerdir' [ 177.023614][ T5917] overlayfs: failed to resolve './file2': -2 [ 177.212873][ T5814] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.273604][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 177.312204][ T5814] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.356655][ T5814] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.390516][ T5814] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.590051][ T4267] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.869729][ T4267] usb 4-1: Using ep0 maxpacket: 8 [ 178.010122][ T4267] usb 4-1: config 0 has no interfaces? [ 178.209677][ T4267] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 178.229651][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.259239][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.276803][ T4267] usb 4-1: Product: syz [ 178.299399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.306903][ T4267] usb 4-1: Manufacturer: syz [ 178.317852][ T4267] usb 4-1: SerialNumber: syz [ 178.324763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.495257][ T4267] usb 4-1: config 0 descriptor?? [ 178.506563][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.007041][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.075070][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.083737][ T5210] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.090876][ T5210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.098808][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.144002][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.173905][ T4233] usb 4-1: USB disconnect, device number 8 [ 179.189139][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.227371][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.234570][ T5218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.349825][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 179.372202][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.398146][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.432600][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.504606][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.566957][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.617494][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.667307][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.721844][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.786175][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.856861][ T5814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.954306][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.014483][ T5955] overlayfs: failed to resolve './file2': -2 [ 180.048448][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.057730][ T5954] overlayfs: missing 'lowerdir' [ 180.070159][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.312258][ T5962] loop2: detected capacity change from 0 to 1024 [ 180.359207][ T5962] EXT4-fs (loop2): Ignoring removed orlov option [ 180.560550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.571340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.603836][ T5962] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 181.595911][ T4234] Bluetooth: hci2: command 0x0407 tx timeout [ 181.614151][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.647336][ T5962] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.531: bit already cleared for inode 15 [ 182.596350][ T5993] overlayfs: missing 'lowerdir' [ 182.605141][ T5988] loop4: detected capacity change from 0 to 2048 [ 182.830443][ T5988] Alternate GPT is invalid, using primary GPT. [ 182.837018][ T5988] loop4: p1 p2 p3 [ 184.654147][ T6016] loop2: detected capacity change from 0 to 2048 [ 184.809431][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.818271][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.829177][ T6016] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.839926][ T6016] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.946618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.957446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.968749][ T5814] device veth0_vlan entered promiscuous mode [ 184.984526][ T5814] device veth1_vlan entered promiscuous mode [ 185.016645][ T5814] device veth0_macvtap entered promiscuous mode [ 185.027507][ T5814] device veth1_macvtap entered promiscuous mode [ 185.126272][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.195134][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.206072][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.222977][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.261359][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.281789][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.594634][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.619235][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 185.680976][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.711505][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 185.726091][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 185.783856][ T6036] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 185.806934][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.869130][ T6036] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 185.898871][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.942735][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.953700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.977379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.998345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.011068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.026930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.046771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.058504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.068285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.078536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.092698][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.131430][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.183894][ T6045] loop2: detected capacity change from 0 to 128 [ 186.190070][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.211822][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.225176][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.237207][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.247322][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.258042][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.269831][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.280995][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.296588][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.304417][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 186.317355][ T6045] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.335833][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 186.348517][ T6045] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.372573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.411816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.507148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.568475][ T5814] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.627239][ T5814] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.683911][ T5814] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.731271][ T5814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.780022][ T144] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 188.005761][ T6060] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 188.190143][ T1220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.198084][ T1220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.214812][ T6067] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 188.232901][ T6067] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 188.273416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.371865][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.388123][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.415862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.968370][ T6080] loop5: detected capacity change from 0 to 1024 [ 189.249415][ T6080] EXT4-fs (loop5): Ignoring removed orlov option [ 189.286531][ T6080] EXT4-fs (loop5): Ignoring removed bh option [ 189.330810][ T6077] loop2: detected capacity change from 0 to 2048 [ 189.410374][ T6080] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,orlov,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 189.465200][ T6093] 9pnet: Insufficient options for proto=fd [ 189.722936][ T6077] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 189.994608][ T6104] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.431344][ T6110] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 190.500856][ T6110] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 190.609203][ T6113] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 190.646271][ T5210] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 190.661505][ T6113] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.890214][ T5210] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 190.913288][ T5210] EXT4-fs (loop2): This should not happen!! Data will be lost [ 190.913288][ T5210] [ 190.976968][ T5210] EXT4-fs (loop2): Total free blocks count 0 [ 191.135592][ T6125] binder: 6114:6125 ioctl c0306201 0 returned -14 [ 191.393997][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 191.420028][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 191.429445][ T5210] EXT4-fs (loop2): Free/Dirty block details [ 191.435450][ T5210] EXT4-fs (loop2): free_blocks=2415919104 [ 191.482735][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 191.510234][ T6130] loop4: detected capacity change from 0 to 1024 [ 191.518063][ T5210] EXT4-fs (loop2): dirty_blocks=48 [ 191.538236][ T5210] EXT4-fs (loop2): Block reservation details [ 191.619397][ T5210] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 191.760291][ T6130] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 191.832304][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 191.851174][ T6130] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.937339][ T6142] loop3: detected capacity change from 0 to 2048 [ 191.974167][ T6130] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.579: lblock 3 mapped to illegal pblock 3 (length 3) [ 192.024273][ T6130] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 192.090366][ T6130] EXT4-fs (loop4): This should not happen!! Data will be lost [ 192.090366][ T6130] [ 192.119822][ T6145] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.579: lblock 3 mapped to illegal pblock 3 (length 1) [ 192.248181][ T6128] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.579: lblock 3 mapped to illegal pblock 3 (length 1) [ 192.322410][ T6145] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.579: lblock 3 mapped to illegal pblock 3 (length 1) [ 192.339635][ T6145] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.579: lblock 3 mapped to illegal pblock 3 (length 1) [ 192.487222][ T6145] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.579: lblock 3 mapped to illegal pblock 3 (length 1) [ 192.925062][ T6128] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.579: lblock 3 mapped to illegal pblock 3 (length 1) [ 193.027690][ T6145] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.579: lblock 3 mapped to illegal pblock 3 (length 1) [ 193.083455][ T6128] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.579: lblock 3 mapped to illegal pblock 3 (length 1) [ 193.109390][ T4233] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 193.143279][ T6145] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.579: lblock 3 mapped to illegal pblock 3 (length 1) [ 193.230634][ T6161] overlayfs: missing 'lowerdir' [ 193.486251][ T1220] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 193.509349][ T1220] EXT4-fs (loop4): This should not happen!! Data will be lost [ 193.509349][ T1220] [ 193.629792][ T4233] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 193.652739][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.689467][ T4233] usb 4-1: Product: syz [ 193.702971][ T4233] usb 4-1: Manufacturer: syz [ 193.707772][ T4233] usb 4-1: SerialNumber: syz [ 193.729028][ T4233] usb 4-1: config 0 descriptor?? [ 195.322979][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.329417][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.526518][ T4233] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 195.592013][ T6187] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.850651][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.595'. [ 196.112592][ T6196] loop2: detected capacity change from 0 to 256 [ 196.574673][ T6205] device batadv_slave_1 entered promiscuous mode [ 196.852802][ T6205] device batadv_slave_0 entered promiscuous mode [ 196.917602][ T6206] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 197.162267][ T6199] device batadv_slave_0 left promiscuous mode [ 197.178720][ T6199] device batadv_slave_1 left promiscuous mode [ 197.598627][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 197.767233][ T6220] loop5: detected capacity change from 0 to 128 [ 198.770062][ T4233] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 198.872516][ T6220] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.899570][ T6220] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.690136][ T4233] usb 4-1: USB disconnect, device number 9 [ 200.089464][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 201.232221][ T6258] loop4: detected capacity change from 0 to 256 [ 201.586660][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 201.849373][ T4553] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 203.126357][ T6276] device batadv_slave_1 entered promiscuous mode [ 203.177510][ T6276] device batadv_slave_0 entered promiscuous mode [ 203.357672][ T6275] device batadv_slave_0 left promiscuous mode [ 203.390933][ T6275] device batadv_slave_1 left promiscuous mode [ 203.436860][ T6289] loop5: detected capacity change from 0 to 1024 [ 204.269650][ T4553] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 204.278792][ T4553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.291356][ T4553] usb 3-1: Product: syz [ 204.295654][ T4553] usb 3-1: Manufacturer: syz [ 204.325159][ T4553] usb 3-1: SerialNumber: syz [ 204.528428][ T4553] usb 3-1: config 0 descriptor?? [ 204.559644][ T4553] usb 3-1: can't set config #0, error -71 [ 204.833559][ T4553] usb 3-1: USB disconnect, device number 7 [ 206.041578][ T6318] loop5: detected capacity change from 0 to 256 [ 207.233553][ T6328] overlayfs: missing 'lowerdir' [ 208.247594][ T6337] device batadv_slave_1 entered promiscuous mode [ 208.295154][ T6337] device batadv_slave_0 entered promiscuous mode [ 208.311712][ T6335] device batadv_slave_0 left promiscuous mode [ 208.338404][ T6335] device batadv_slave_1 left promiscuous mode [ 209.440187][ T4233] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 210.039581][ T4233] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 210.048804][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.069025][ T4233] usb 5-1: Product: syz [ 210.079154][ T4233] usb 5-1: Manufacturer: syz [ 210.087565][ T4233] usb 5-1: SerialNumber: syz [ 210.102617][ T4233] usb 5-1: config 0 descriptor?? [ 210.329236][ T6363] loop3: detected capacity change from 0 to 256 [ 210.480585][ T4233] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 211.947932][ T6374] device batadv_slave_1 entered promiscuous mode [ 212.016407][ T6374] device batadv_slave_0 entered promiscuous mode [ 212.038952][ T6371] device batadv_slave_0 left promiscuous mode [ 212.088282][ T6371] device batadv_slave_1 left promiscuous mode [ 212.251477][ T6383] loop2: detected capacity change from 0 to 1024 [ 212.275471][ T6385] loop1: detected capacity change from 0 to 512 [ 212.362799][ T6383] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 212.383213][ T6385] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 212.453131][ T6385] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.471657][ T6383] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.539170][ T6383] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.652: lblock 0 mapped to illegal pblock 0 (length 6) [ 212.678240][ T6383] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 212.699197][ T6383] EXT4-fs (loop2): This should not happen!! Data will be lost [ 212.699197][ T6383] [ 212.720950][ T6393] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.652: lblock 0 mapped to illegal pblock 0 (length 4) [ 212.735378][ T6393] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.652: lblock 0 mapped to illegal pblock 0 (length 4) [ 212.754038][ T6394] loop3: detected capacity change from 0 to 512 [ 212.803438][ T6394] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.820797][ T6395] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 212.972763][ T6394] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 212.988469][ T6394] EXT4-fs (loop3): 1 truncate cleaned up [ 212.996728][ T6394] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 213.701330][ T6390] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 214.189602][ T4233] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 214.217541][ T4233] usb 5-1: USB disconnect, device number 11 [ 214.531383][ T6419] device batadv_slave_1 entered promiscuous mode [ 214.573053][ T6419] device batadv_slave_0 entered promiscuous mode [ 214.590224][ T6416] device batadv_slave_0 left promiscuous mode [ 214.601793][ T6416] device batadv_slave_1 left promiscuous mode [ 214.747815][ T5205] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 214.775934][ T5205] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 214.802590][ T5205] EXT4-fs (loop2): This should not happen!! Data will be lost [ 214.802590][ T5205] [ 217.087977][ T6437] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 217.097381][ T6437] overlayfs: failed to set xattr on upper [ 217.103992][ T6437] overlayfs: ...falling back to index=off,metacopy=off. [ 217.213103][ T4178] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 217.799858][ T4178] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 218.123898][ T4178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.134691][ T6452] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 218.156762][ T4178] usb 3-1: Product: syz [ 218.161695][ T4178] usb 3-1: Manufacturer: syz [ 218.166572][ T6453] device batadv_slave_1 entered promiscuous mode [ 218.166832][ T4178] usb 3-1: SerialNumber: syz [ 218.201292][ T4178] usb 3-1: config 0 descriptor?? [ 218.269443][ T6454] device batadv_slave_0 entered promiscuous mode [ 218.316909][ T6451] device batadv_slave_0 left promiscuous mode [ 218.365030][ T6451] device batadv_slave_1 left promiscuous mode [ 218.615437][ T4178] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.699993][ T4178] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 221.370682][ T6491] loop1: detected capacity change from 0 to 512 [ 221.378115][ T21] usb 3-1: USB disconnect, device number 8 [ 221.448501][ T4569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.536234][ T6491] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.554088][ T6491] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.581497][ T4569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.680055][ T1346] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 221.701545][ T6491] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.687: corrupted inode contents [ 221.734720][ T6502] device batadv_slave_1 entered promiscuous mode [ 221.756217][ T6491] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.687: mark_inode_dirty error [ 221.783491][ T6491] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.687: corrupted inode contents [ 221.788337][ T6506] device batadv_slave_0 entered promiscuous mode [ 221.815862][ T6491] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.687: mark_inode_dirty error [ 221.870554][ T4569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.969608][ T6501] device batadv_slave_0 left promiscuous mode [ 221.983244][ T6501] device batadv_slave_1 left promiscuous mode [ 222.046191][ T4569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.119509][ T1346] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.150862][ T1346] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 222.202692][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.313959][ T1346] usb 5-1: config 0 descriptor?? [ 222.438814][ T1346] pwc: Askey VC010 type 2 USB webcam detected. [ 222.983441][ T1346] pwc: recv_control_msg error -32 req 02 val 2b00 [ 223.049557][ T1346] pwc: recv_control_msg error -32 req 02 val 2700 [ 223.204172][ T1346] pwc: recv_control_msg error -32 req 02 val 2c00 [ 223.259693][ T1346] pwc: recv_control_msg error -32 req 04 val 1000 [ 224.049616][ T1346] pwc: recv_control_msg error -32 req 04 val 1300 [ 224.109164][ T1346] pwc: recv_control_msg error -32 req 04 val 1400 [ 224.163399][ T4569] tipc: Disabling bearer [ 224.169876][ T1346] pwc: recv_control_msg error -32 req 02 val 2000 [ 224.188294][ T4569] tipc: Left network mode [ 224.229795][ T1346] pwc: recv_control_msg error -32 req 02 val 2100 [ 224.309537][ T1346] pwc: recv_control_msg error -32 req 04 val 1500 [ 224.502038][ T1346] pwc: recv_control_msg error -32 req 02 val 2500 [ 224.702118][ T1346] pwc: recv_control_msg error -32 req 02 val 2400 [ 224.769736][ T1346] pwc: recv_control_msg error -32 req 02 val 2600 [ 225.120940][ T6547] device batadv_slave_1 entered promiscuous mode [ 225.143360][ T6547] device batadv_slave_0 entered promiscuous mode [ 225.160057][ T6546] device batadv_slave_0 left promiscuous mode [ 225.167826][ T6546] device batadv_slave_1 left promiscuous mode [ 225.249541][ T4178] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 225.339617][ T1346] pwc: recv_control_msg error -71 req 04 val 1100 [ 225.455699][ T1346] pwc: recv_control_msg error -71 req 04 val 1200 [ 226.204750][ T1346] pwc: Registered as video103. [ 226.239757][ T1346] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 226.310428][ T1346] usb 5-1: USB disconnect, device number 12 [ 226.556013][ T4178] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 226.575469][ T4178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.584140][ T4178] usb 3-1: Product: syz [ 226.588346][ T4178] usb 3-1: Manufacturer: syz [ 226.593436][ T4178] usb 3-1: SerialNumber: syz [ 226.628611][ T4178] usb 3-1: config 0 descriptor?? [ 226.909492][ T4178] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 228.106881][ T6584] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 228.132520][ T6596] loop1: detected capacity change from 0 to 128 [ 228.181009][ T6596] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.236307][ T6596] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.382495][ T6601] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 228.399808][ T5222] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.450223][ T6596] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.699418][ T4265] Bluetooth: hci5: command 0x1003 tx timeout [ 228.705970][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 229.522385][ T4569] device hsr_slave_0 left promiscuous mode [ 229.561327][ T4569] device hsr_slave_1 left promiscuous mode [ 229.570089][ T4569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.584297][ T4569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.649507][ T4178] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 229.746219][ T4569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.754397][ T4569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.780818][ T4569] device bridge_slave_1 left promiscuous mode [ 229.789631][ T4178] usb 3-1: USB disconnect, device number 9 [ 229.807365][ T4569] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.781470][ T4234] Bluetooth: hci5: command 0x1001 tx timeout [ 230.790547][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 230.809484][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.720'. [ 231.460774][ T4569] device bridge_slave_0 left promiscuous mode [ 231.570783][ T4569] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.693677][ T4569] device veth1_macvtap left promiscuous mode [ 231.709964][ T4569] device veth0_macvtap left promiscuous mode [ 231.738597][ T4569] device veth1_vlan left promiscuous mode [ 231.912006][ T4569] device veth0_vlan left promiscuous mode [ 232.859451][ T4234] Bluetooth: hci5: command 0x1009 tx timeout [ 233.082809][ T4569] team0 (unregistering): Port device team_slave_1 removed [ 233.108224][ T4569] team0 (unregistering): Port device team_slave_0 removed [ 233.149586][ T4569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.256203][ T4569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.367781][ T4569] bond0 (unregistering): Released all slaves [ 233.499724][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 234.145425][ T6613] team0: Port device team_slave_0 removed [ 236.159926][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.167655][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.636534][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.261353][ T6685] ODEBUG: Out of memory. ODEBUG disabled [ 238.528015][ T6685] Set syz1 is full, maxelem 65536 reached [ 238.718560][ T4234] Bluetooth: hci0: command 0x0406 tx timeout [ 238.798107][ T6711] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 238.807921][ T6711] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 238.840809][ T6713] loop3: detected capacity change from 0 to 256 [ 238.872047][ T6713] FAT-fs (loop3): Directory bread(block 64) failed [ 238.885209][ T6713] FAT-fs (loop3): Directory bread(block 65) failed [ 238.894756][ T6713] FAT-fs (loop3): Directory bread(block 66) failed [ 238.929590][ T6713] FAT-fs (loop3): Directory bread(block 67) failed [ 238.943697][ T6713] FAT-fs (loop3): Directory bread(block 68) failed [ 238.957090][ T6713] FAT-fs (loop3): Directory bread(block 69) failed [ 238.982818][ T6713] FAT-fs (loop3): Directory bread(block 70) failed [ 239.004265][ T6713] FAT-fs (loop3): Directory bread(block 71) failed [ 239.029758][ T6713] FAT-fs (loop3): Directory bread(block 72) failed [ 239.065909][ T6713] FAT-fs (loop3): Directory bread(block 73) failed [ 240.153850][ T6726] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 241.395506][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.505014][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.636046][ T6734] loop3: detected capacity change from 0 to 8 [ 243.099670][ T6754] overlayfs: missing 'lowerdir' [ 243.313116][ T6662] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.327315][ T6662] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.342809][ T6662] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.359540][ T6662] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.505235][ T6764] loop4: detected capacity change from 0 to 1024 [ 244.342821][ T6771] loop5: detected capacity change from 0 to 256 [ 244.832855][ T6662] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.841878][ T6662] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.850885][ T6662] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.860501][ T6662] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.747911][ T6785] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14 [ 245.866317][ T6790] overlayfs: missing 'lowerdir' [ 245.895571][ T6793] loop4: detected capacity change from 0 to 512 [ 246.147848][ T6793] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.765: inode has both inline data and extents flags [ 246.242712][ T6793] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.765: couldn't read orphan inode 15 (err -117) [ 246.279067][ T6793] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.788699][ T6813] loop2: detected capacity change from 0 to 1024 [ 246.853867][ T6775] chnl_net:caif_netlink_parms(): no params data found [ 246.994320][ T4265] Bluetooth: hci5: command 0x0409 tx timeout [ 247.317351][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.325181][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.350102][ T6775] device bridge_slave_0 entered promiscuous mode [ 247.376206][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.386898][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.629112][ T6775] device bridge_slave_1 entered promiscuous mode [ 247.835441][ T6775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.898413][ T6775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.136636][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.772'. [ 248.349420][ T6775] team0: Port device team_slave_0 added [ 248.386749][ T6775] team0: Port device team_slave_1 added [ 248.563869][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.608916][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.709093][ T6775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.943620][ T6802] Set syz1 is full, maxelem 65536 reached [ 249.029475][ T4233] Bluetooth: hci5: command 0x041b tx timeout [ 249.069201][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.130395][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.229642][ T6775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.409976][ T6775] device hsr_slave_0 entered promiscuous mode [ 249.434091][ T6775] device hsr_slave_1 entered promiscuous mode [ 249.780953][ T6775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.912174][ T6775] Cannot create hsr debugfs directory [ 250.284588][ T6860] overlayfs: missing 'lowerdir' [ 251.231760][ T6871] loop2: detected capacity change from 0 to 2048 [ 251.262590][ T4234] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 251.429090][ T4234] Bluetooth: hci4: Injecting HCI hardware error event [ 251.679795][ T4197] Bluetooth: hci4: hardware error 0x00 [ 251.776640][ T1346] Bluetooth: hci5: command 0x040f tx timeout [ 251.812229][ T4181] loop2: p1 < > p3 p4 [ 251.812229][ T4181] p4: [ 251.835256][ T4181] loop2: p3 start 458752 is beyond EOD, truncated [ 251.859403][ T4181] loop2: p4 size 722688 extends beyond EOD, truncated [ 251.891199][ T4181] loop2: p5 start 262464109 is beyond EOD, truncated [ 251.938756][ T4181] loop2: p6 size 2304 extends beyond EOD, truncated [ 251.987286][ T6871] loop2: p1 < > p3 p4 [ 251.987286][ T6871] p4: [ 251.999175][ T6871] loop2: p3 start 458752 is beyond EOD, truncated [ 252.005793][ T6871] loop2: p4 size 722688 extends beyond EOD, truncated [ 252.014641][ T6871] loop2: p5 start 262464109 is beyond EOD, truncated [ 252.021543][ T6871] loop2: p6 size 2304 extends beyond EOD, truncated [ 252.111255][ T6879] loop5: detected capacity change from 0 to 8 [ 252.120186][ T6775] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 252.158090][ T6881] netlink: 'syz.2.781': attribute type 29 has an invalid length. [ 252.220118][ T6881] netlink: 'syz.2.781': attribute type 29 has an invalid length. [ 252.249766][ T6882] netlink: 'syz.2.781': attribute type 29 has an invalid length. [ 252.328275][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 252.346044][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 252.382881][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 252.431579][ T6775] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 252.511763][ T6775] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 252.952001][ T26] audit: type=1800 audit(1778639217.733:2): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.780" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 252.987257][ T6775] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.308016][ T6891] loop2: detected capacity change from 0 to 1024 [ 253.675579][ T6895] loop5: detected capacity change from 0 to 512 [ 253.819700][ T4267] Bluetooth: hci5: command 0x0419 tx timeout [ 253.843750][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 253.861593][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 253.875921][ T4290] udevd[4290]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 253.906614][ T6895] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 254.053326][ T6895] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 254.237389][ T6895] EXT4-fs (loop5): 1 truncate cleaned up [ 254.307605][ T6895] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 254.362704][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 254.501799][ T6775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.586719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.635840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.687474][ T6775] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.723683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.742329][ T6911] overlayfs: missing 'workdir' [ 254.753800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.815129][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.822300][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.909087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.932569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.980733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.037351][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.044517][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.143082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.152019][ T6919] block device autoloading is deprecated and will be removed. [ 255.196622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.230455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.278193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.307384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.338996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.378801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.439094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.510083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.531025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.585718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.626583][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.749749][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.756098][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.100407][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.107975][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.133224][ T6775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.486038][ T6974] loop5: detected capacity change from 0 to 1024 [ 258.508038][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.531890][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.683977][ T6775] device veth0_vlan entered promiscuous mode [ 258.753344][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.769174][ T6979] overlayfs: missing 'workdir' [ 258.967749][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.308506][ T6775] device veth1_vlan entered promiscuous mode [ 259.379068][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.403630][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.468956][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.608831][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.627110][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.833221][ T6775] device veth0_macvtap entered promiscuous mode [ 259.859483][ T6775] device veth1_macvtap entered promiscuous mode [ 260.162374][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.495254][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.579758][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.651290][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.709984][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.809286][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.041819][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.778875][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.010602][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.149645][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.161075][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.187958][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.218201][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.320408][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.379317][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.389185][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.462312][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.576074][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.645454][ T7019] loop5: detected capacity change from 0 to 1024 [ 262.652530][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.662705][ T6775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.673410][ T6775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.694118][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.708461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.723550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.755052][ T6775] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.777649][ T6775] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.797216][ T6775] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.816260][ T6775] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.267328][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.359119][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.430276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 264.551433][ T1220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.569304][ T1220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.576892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.780076][ T7065] netlink: 44 bytes leftover after parsing attributes in process `syz.6.759'. [ 266.058595][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.6.759'. [ 266.067743][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.759'. [ 266.100245][ T7065] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.109074][ T7065] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.117914][ T7065] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.126725][ T7065] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.539599][ T4234] Bluetooth: hci0: command 0x0409 tx timeout [ 266.567213][ T7032] chnl_net:caif_netlink_parms(): no params data found [ 268.130721][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.175310][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.214781][ T7032] device bridge_slave_0 entered promiscuous mode [ 268.270912][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.286941][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.401417][ T7032] device bridge_slave_1 entered promiscuous mode [ 268.619389][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 268.930673][ T7104] device syzkaller1 entered promiscuous mode [ 269.079585][ T4200] syz-executor (4200) used greatest stack depth: 20496 bytes left [ 269.132367][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.326999][ T7122] netlink: 44 bytes leftover after parsing attributes in process `syz.4.828'. [ 269.618494][ T7118] loop5: detected capacity change from 0 to 512 [ 269.972923][ T7118] EXT4-fs (loop5): 1 truncate cleaned up [ 270.080170][ T7118] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 270.119888][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.391705][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 270.414348][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.828'. [ 271.747192][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 271.792847][ T7032] team0: Port device team_slave_0 added [ 272.844169][ T7032] team0: Port device team_slave_1 added [ 273.455088][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.472773][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.830330][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 273.887810][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.195249][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.197387][ T1346] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 274.289281][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.445293][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.544296][ T5228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.570821][ T5228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.634246][ T1346] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.665037][ T1346] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.710024][ T1346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.776890][ T1346] usb 6-1: config 0 descriptor?? [ 274.863665][ T1346] pwc: Askey VC010 type 2 USB webcam detected. [ 274.980004][ T5228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.029322][ T5228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.142591][ T7032] device hsr_slave_0 entered promiscuous mode [ 275.260325][ T7032] device hsr_slave_1 entered promiscuous mode [ 275.448306][ T1346] pwc: recv_control_msg error -32 req 02 val 2b00 [ 275.476264][ T7032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.490368][ T7032] Cannot create hsr debugfs directory [ 275.499878][ T1346] pwc: recv_control_msg error -32 req 02 val 2700 [ 275.709710][ T1346] pwc: recv_control_msg error -32 req 02 val 2c00 [ 275.799408][ T1346] pwc: recv_control_msg error -32 req 04 val 1000 [ 275.849411][ T1346] pwc: recv_control_msg error -32 req 04 val 1300 [ 275.909891][ T1346] pwc: recv_control_msg error -32 req 04 val 1400 [ 275.969459][ T1346] pwc: recv_control_msg error -32 req 02 val 2000 [ 276.009429][ T1346] pwc: recv_control_msg error -32 req 02 val 2100 [ 276.204474][ T1346] pwc: recv_control_msg error -32 req 04 val 1500 [ 276.248780][ T5228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.259562][ T1346] pwc: recv_control_msg error -32 req 02 val 2500 [ 276.431403][ T7181] loop4: detected capacity change from 0 to 512 [ 277.136124][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.6.842'. [ 277.166483][ T5228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.406272][ T1346] pwc: recv_control_msg error -32 req 02 val 2400 [ 277.437373][ T7181] EXT4-fs (loop4): can't read group descriptor 0 [ 277.499738][ T1346] pwc: recv_control_msg error -71 req 02 val 2600 [ 277.529369][ T1346] pwc: recv_control_msg error -71 req 02 val 2900 [ 277.559490][ T1346] pwc: recv_control_msg error -71 req 02 val 2800 [ 277.579478][ T1346] pwc: recv_control_msg error -71 req 04 val 1100 [ 277.639466][ T1346] pwc: recv_control_msg error -71 req 04 val 1200 [ 277.649029][ T1346] pwc: Registered as video103. [ 277.656296][ T1346] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 277.700219][ T1346] usb 6-1: USB disconnect, device number 2 [ 277.729993][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'. [ 277.745695][ T7186] process 'syz.5.843' launched './file1' with NULL argv: empty string added [ 277.751900][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.6.842'. [ 277.802240][ T5228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.026143][ T5228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.309507][ T7199] x_tables: duplicate underflow at hook 1 [ 281.848354][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.5.854'. [ 281.865010][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.854'. [ 281.874565][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.854'. [ 281.885106][ T4178] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 281.906760][ T7238] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.915637][ T7238] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.924530][ T7238] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.933381][ T7238] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.428535][ T7247] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 283.831942][ T7248] loop5: detected capacity change from 0 to 2048 [ 284.033425][ T5228] tipc: Left network mode [ 284.507375][ T7032] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 285.678031][ T146] Bluetooth: Frame is too long (len 20, expected len 4) [ 285.701289][ T7248] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 285.757565][ T7032] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 285.836987][ T4178] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 285.855013][ T4178] usb 3-1: can't read configurations, error -71 [ 286.519721][ T7032] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.570809][ T7032] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 288.763929][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.772128][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.506483][ T7298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.629678][ T7298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.770079][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 290.487624][ T7298] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.502542][ T7298] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.517466][ T7298] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.530038][ T7298] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.753670][ T7298] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.762992][ T7298] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.772013][ T7298] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.780939][ T7298] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.808298][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.876364][ T7314] netlink: 'syz.6.868': attribute type 10 has an invalid length. [ 290.926976][ T7314] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 290.946179][ T7316] netlink: 'syz.6.868': attribute type 10 has an invalid length. [ 290.983405][ T7316] bond0: (slave netdevsim0): Releasing backup interface [ 291.004397][ T7316] team0: Port device netdevsim0 added [ 291.012445][ T7333] loop4: detected capacity change from 0 to 128 [ 291.112416][ T7320] device syzkaller0 entered promiscuous mode [ 291.164958][ T7333] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.207025][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.218941][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.240105][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.243294][ T7333] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.303574][ T7339] loop6: detected capacity change from 0 to 256 [ 291.709349][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.718453][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.727539][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.734748][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.758451][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.770014][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.778666][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.785856][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.809171][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.846503][ T4568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.931799][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.973265][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.049926][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.242900][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.284127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.345813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.025456][ T7032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.061745][ T7032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.075204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.128740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.153338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.173210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.211026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.625388][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.882'. [ 293.663649][ T7390] x_tables: duplicate underflow at hook 1 [ 293.701285][ T5228] device hsr_slave_0 left promiscuous mode [ 293.710339][ T5228] device hsr_slave_1 left promiscuous mode [ 293.768445][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.804574][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.842797][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.879407][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.917634][ T5228] device bridge_slave_1 left promiscuous mode [ 293.941231][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.988056][ T5228] device bridge_slave_0 left promiscuous mode [ 294.052096][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.185800][ T5228] device veth1_macvtap left promiscuous mode [ 294.227648][ T5228] device veth0_macvtap left promiscuous mode [ 294.276380][ T5228] device veth1_vlan left promiscuous mode [ 294.332254][ T5228] device veth0_vlan left promiscuous mode [ 295.011937][ T7423] netlink: 220 bytes leftover after parsing attributes in process `syz.6.889'. [ 295.047334][ T5228] team0 (unregistering): Port device team_slave_1 removed [ 295.116197][ T5228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.134903][ T7426] loop6: detected capacity change from 0 to 256 [ 295.179159][ T5228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.230704][ T7426] FAT-fs (loop6): Directory bread(block 64) failed [ 295.252007][ T7426] FAT-fs (loop6): Directory bread(block 65) failed [ 295.269082][ T7426] FAT-fs (loop6): Directory bread(block 66) failed [ 295.289566][ T7426] FAT-fs (loop6): Directory bread(block 67) failed [ 295.296225][ T7426] FAT-fs (loop6): Directory bread(block 68) failed [ 295.323760][ T7426] FAT-fs (loop6): Directory bread(block 69) failed [ 295.339079][ T7426] FAT-fs (loop6): Directory bread(block 70) failed [ 295.360458][ T7426] FAT-fs (loop6): Directory bread(block 71) failed [ 295.382332][ T7426] FAT-fs (loop6): Directory bread(block 72) failed [ 295.398518][ T7426] FAT-fs (loop6): Directory bread(block 73) failed [ 295.510979][ T5228] bond0 (unregistering): Released all slaves [ 295.521161][ T7426] attempt to access beyond end of device [ 295.521161][ T7426] loop6: rw=524288, want=1196, limit=256 [ 295.533782][ T7426] attempt to access beyond end of device [ 295.533782][ T7426] loop6: rw=0, want=1196, limit=256 [ 295.545512][ T26] audit: type=1800 audit(1778639260.513:3): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.890" name="file1" dev="loop6" ino=1048610 res=0 errno=0 [ 295.756806][ T7032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.794514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.006259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.099907][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 299.119281][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.242676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.332091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.366047][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.901'. [ 299.400583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.443266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.486683][ T7032] device veth0_vlan entered promiscuous mode [ 299.532851][ T7499] loop2: detected capacity change from 0 to 128 [ 299.553420][ T7032] device veth1_vlan entered promiscuous mode [ 299.610376][ T7032] device veth0_macvtap entered promiscuous mode [ 299.621280][ T7032] device veth1_macvtap entered promiscuous mode [ 299.642314][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 299.651177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 299.661479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.677915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.698231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.295704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.469813][ T7499] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.578541][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.808343][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.918090][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.963697][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.007904][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.098106][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.162562][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.295588][ T7521] device batadv_slave_1 entered promiscuous mode [ 301.304209][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.314148][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.324462][ T7523] device batadv_slave_0 entered promiscuous mode [ 301.342127][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.401999][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.439331][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.479289][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.506638][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.527829][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.586098][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.636833][ T7032] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.645836][ T7032] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.655089][ T7032] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.673648][ T7032] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.694718][ T7531] device batadv_slave_0 left promiscuous mode [ 301.708675][ T7531] device batadv_slave_1 left promiscuous mode [ 301.810898][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.918551][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.617319][ T5210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.659831][ T5210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.691073][ T5216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.849063][ T5216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.876617][ T5216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.925670][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.250683][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.306370][ T7558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.365577][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.810'. [ 303.450695][ T7563] loop2: detected capacity change from 0 to 512 [ 303.583142][ T7563] EXT4-fs (loop2): Test dummy encryption mode enabled [ 303.759935][ T7563] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000001,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000. Quota mode: writeback. [ 304.346155][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 304.496239][ T7593] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 305.341652][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.926'. [ 305.896368][ T7623] netlink: 'syz.6.929': attribute type 1 has an invalid length. [ 305.955668][ T7623] netlink: 'syz.6.929': attribute type 2 has an invalid length. [ 305.964277][ T7626] netlink: 'syz.6.929': attribute type 1 has an invalid length. [ 305.972800][ T7626] netlink: 'syz.6.929': attribute type 2 has an invalid length. [ 306.118924][ T7630] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 307.213916][ T7637] device syzkaller0 entered promiscuous mode [ 307.483412][ T7653] x_tables: duplicate underflow at hook 1 [ 308.849031][ T7664] device syzkaller0 entered promiscuous mode [ 308.949501][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.939'. [ 308.963140][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.939'. [ 309.270347][ T7670] device vlan2 entered promiscuous mode [ 309.428570][ T7670] device bridge0 entered promiscuous mode [ 311.320018][ T7693] netlink: 16 bytes leftover after parsing attributes in process `syz.6.945'. [ 311.331698][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.945'. [ 311.340859][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.945'. [ 313.348325][ T7711] x_tables: duplicate underflow at hook 1 [ 316.532047][ T7746] netlink: 'syz.4.962': attribute type 1 has an invalid length. [ 316.962410][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 317.028107][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.5.961'. [ 317.182089][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.188672][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.032501][ T7755] tipc: Started in network mode [ 318.037500][ T7755] tipc: Node identity 9eec1bf1d1fb, cluster identity 4711 [ 318.167190][ T7755] tipc: Enabled bearer , priority 0 [ 318.267159][ T7770] x_tables: duplicate underflow at hook 1 [ 319.121441][ T7753] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 319.176483][ T7753] bond1: (slave vxcan1): Error -22 calling dev_set_mtu [ 319.793781][ T7758] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 320.655626][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.961'. [ 320.730039][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.961'. [ 320.763030][ T4267] tipc: Node number set to 1326914545 [ 320.783891][ T7752] tipc: Disabling bearer [ 320.887545][ T7791] x_tables: duplicate underflow at hook 1 [ 321.671866][ T5228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.876282][ T5228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.688944][ T5228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.809368][ T5228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.769984][ T5228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.805308][ T5228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.708970][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.978'. [ 327.081324][ T7834] x_tables: duplicate underflow at hook 1 [ 327.960366][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 328.106814][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 328.123565][ T5228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.174105][ T5228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.408368][ T7850] x_tables: duplicate underflow at hook 1 [ 330.134619][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.142324][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.522325][ T7879] loop7: detected capacity change from 0 to 256 [ 330.977579][ T7831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.030299][ T7831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.166838][ T7831] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.176095][ T7831] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.194531][ T7831] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.206245][ T7831] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.310675][ T7831] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.319724][ T7831] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.328907][ T7831] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.338001][ T7831] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.375570][ T7856] device bridge2 entered promiscuous mode [ 331.452353][ T7856] team0: Port device bridge2 added [ 331.460574][ T7859] bridge0: port 3(team0) entered blocking state [ 331.467149][ T7859] bridge0: port 3(team0) entered disabled state [ 331.543752][ T7898] x_tables: duplicate underflow at hook 1 [ 331.577970][ T7859] device team0 entered promiscuous mode [ 331.612763][ T7859] device team_slave_0 entered promiscuous mode [ 331.666615][ T7859] device team_slave_1 entered promiscuous mode [ 332.717407][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.995'. [ 333.809593][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 333.865004][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'. [ 333.882149][ T7926] netlink: 'syz.4.1000': attribute type 29 has an invalid length. [ 333.965074][ T7926] netlink: 'syz.4.1000': attribute type 29 has an invalid length. [ 334.000583][ T7928] netlink: 'syz.4.1000': attribute type 29 has an invalid length. [ 334.082411][ T7936] loop7: detected capacity change from 0 to 256 [ 334.179392][ T5228] tipc: Left network mode [ 334.260849][ T7949] x_tables: duplicate underflow at hook 1 [ 334.308843][ T7947] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1007'. [ 335.561853][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1014'. [ 335.571601][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 335.580684][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1014'. [ 336.257918][ T7994] x_tables: duplicate underflow at hook 1 [ 337.166622][ T7996] device vlan2 entered promiscuous mode [ 337.189356][ T7996] device bridge0 entered promiscuous mode [ 337.856350][ T5228] device hsr_slave_0 left promiscuous mode [ 337.863258][ T5228] device hsr_slave_1 left promiscuous mode [ 337.882246][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.897521][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.921522][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.951092][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.985692][ T5228] device bridge_slave_1 left promiscuous mode [ 338.004824][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.032053][ T5228] device bridge_slave_0 left promiscuous mode [ 338.039917][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.119966][ T5228] device veth1_macvtap left promiscuous mode [ 338.126414][ T5228] device veth0_macvtap left promiscuous mode [ 338.136633][ T5228] device veth1_vlan left promiscuous mode [ 338.151259][ T5228] device veth0_vlan left promiscuous mode [ 338.334127][ T7965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.585210][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1025'. [ 338.640300][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1027'. [ 340.219913][ T5228] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 340.238894][ T5228] device veth0_to_bond left promiscuous mode [ 340.247341][ T5228] bond1 (unregistering): Released all slaves [ 340.919560][ T5228] team0 (unregistering): Port device team_slave_1 removed [ 340.948019][ T5228] team0 (unregistering): Port device team_slave_0 removed [ 340.974559][ T5228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.998397][ T5228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.321367][ T5228] team0 (unregistering): Port device bridge0 removed [ 341.366862][ T5228] bond0 (unregistering): Released all slaves [ 341.434170][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1025'. [ 341.477156][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1025'. [ 341.521431][ T8019] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.530266][ T8019] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.539038][ T8019] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.548055][ T8019] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.104251][ T8095] loop6: detected capacity change from 0 to 256 [ 343.172305][ T8097] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 347.183274][ T8143] loop6: detected capacity change from 0 to 256 [ 347.320235][ T8143] FAT-fs (loop6): Directory bread(block 64) failed [ 347.326849][ T8143] FAT-fs (loop6): Directory bread(block 65) failed [ 347.366583][ T8143] FAT-fs (loop6): Directory bread(block 66) failed [ 347.397764][ T8143] FAT-fs (loop6): Directory bread(block 67) failed [ 347.418897][ T8143] FAT-fs (loop6): Directory bread(block 68) failed [ 347.439389][ T8143] FAT-fs (loop6): Directory bread(block 69) failed [ 347.446062][ T8143] FAT-fs (loop6): Directory bread(block 70) failed [ 347.487335][ T8154] x_tables: duplicate underflow at hook 1 [ 348.267881][ T7891] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 348.329640][ T8143] FAT-fs (loop6): Directory bread(block 71) failed [ 348.339629][ T8143] FAT-fs (loop6): Directory bread(block 72) failed [ 348.346545][ T8143] FAT-fs (loop6): Directory bread(block 73) failed [ 348.499352][ T7891] usb 3-1: device descriptor read/64, error -71 [ 349.699363][ T7891] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 351.055414][ T8178] hsr0 speed is unknown, defaulting to 1000 [ 351.087462][ T8178] hsr0 speed is unknown, defaulting to 1000 [ 351.105690][ T8181] netlink: 16215 bytes leftover after parsing attributes in process `syz.7.1067'. [ 351.176988][ T8178] hsr0 speed is unknown, defaulting to 1000 [ 351.258181][ T8178] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 351.364691][ T8178] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 351.542834][ T8178] hsr0 speed is unknown, defaulting to 1000 [ 351.625335][ T8178] hsr0 speed is unknown, defaulting to 1000 [ 351.677105][ T8178] hsr0 speed is unknown, defaulting to 1000 [ 351.779006][ T8178] hsr0 speed is unknown, defaulting to 1000 [ 351.851879][ T8178] hsr0 speed is unknown, defaulting to 1000 [ 353.159425][ T8205] device syzkaller0 entered promiscuous mode [ 356.540459][ T8245] loop2: detected capacity change from 0 to 512 [ 357.404982][ T8249] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 357.471760][ T8249] device syzkaller0 entered promiscuous mode [ 357.510849][ T8245] EXT4-fs (loop2): Test dummy encryption mode enabled [ 357.560004][ T8245] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000001,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000. Quota mode: writeback. [ 359.225049][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 360.346105][ T8283] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 360.696136][ T8298] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 365.295355][ T8314] loop6: detected capacity change from 0 to 512 [ 365.697019][ T8314] EXT4-fs (loop6): Test dummy encryption mode enabled [ 365.744762][ T8314] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000001,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000. Quota mode: writeback. [ 368.378802][ T8344] xt_hashlimit: size too large, truncated to 1048576 [ 371.482979][ T8366] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 371.704535][ T8371] loop7: detected capacity change from 0 to 256 [ 372.013374][ T8379] loop6: detected capacity change from 0 to 512 [ 372.095730][ T8379] EXT4-fs (loop6): Test dummy encryption mode enabled [ 372.140241][ T8379] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000001,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000000. Quota mode: writeback. [ 372.977084][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 372.986124][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 373.246108][ T8399] ------------[ cut here ]------------ [ 373.375891][ T8399] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 373.400622][ T8399] WARNING: CPU: 1 PID: 8399 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 373.416157][ T8399] Modules linked in: [ 373.424170][ T8399] CPU: 1 PID: 8399 Comm: syz.2.1119 Not tainted syzkaller #0 [ 373.463060][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.527058][ T8399] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 373.570981][ T8399] Code: 13 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 31 39 8b 4c 89 e6 89 ea e8 d5 99 71 00 <0f> 0b e9 07 fd ff ff e8 f9 f4 38 f8 0f 0b e9 b1 fe ff ff e8 ed f4 [ 374.278882][ T8399] RSP: 0018:ffffc900055a73a0 EFLAGS: 00010246 [ 374.331033][ T8399] RAX: 94a982647f75cb00 RBX: 0000000002000000 RCX: 0000000000080000 [ 374.339527][ T8399] RDX: ffffc90005189000 RSI: 0000000000005c59 RDI: 0000000000005c5a [ 374.347555][ T8399] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 374.355725][ T8399] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88805f1a8000 [ 374.379350][ T8399] R13: ffff88805f1a9290 R14: ffff8880258b0e00 R15: ffff88805f1aa268 [ 374.393088][ T8399] FS: 00007fcd1f5ce6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 374.412440][ T8399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.431595][ T8399] CR2: 00007f22d3bcbfe8 CR3: 000000004cfa1000 CR4: 00000000003506f0 [ 374.459122][ T8399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 374.485713][ T8399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 374.504067][ T8399] Call Trace: [ 374.510894][ T8399] [ 374.517392][ T8399] ieee80211_set_mcast_rate+0x3b/0x50 [ 374.529476][ T8399] ? ieee80211_leave_ibss+0x20/0x20 [ 374.544734][ T8399] nl80211_set_mcast_rate+0x346/0x530 [ 374.562731][ T8399] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 374.579840][ T8399] genl_rcv_msg+0xcea/0xf90 [ 374.595895][ T8399] ? genl_bind+0x380/0x380 [ 374.621243][ T8399] ? verify_lock_unused+0x140/0x140 [ 374.639982][ T8399] ? verify_lock_unused+0x140/0x140 [ 374.662206][ T8399] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 374.682860][ T8399] netlink_rcv_skb+0x1f5/0x440 [ 374.696706][ T8399] ? genl_bind+0x380/0x380 [ 374.710550][ T8399] ? netlink_ack+0xb50/0xb50 [ 374.732484][ T8399] ? __lock_acquire+0x7d10/0x7d10 [ 374.754500][ T8399] ? down_read+0x1aa/0x2e0 [ 374.769160][ T8399] genl_rcv+0x24/0x40 [ 374.790007][ T8399] netlink_unicast+0x774/0x920 [ 374.805213][ T8399] netlink_sendmsg+0x8ba/0xbe0 [ 374.813604][ T8399] ? netlink_getsockopt+0x570/0x570 [ 374.818981][ T8399] ? aa_sock_msg_perm+0x94/0x150 [ 374.843639][ T8399] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 374.881673][ T8399] ? security_socket_sendmsg+0x7c/0xa0 [ 374.887235][ T8399] ? netlink_getsockopt+0x570/0x570 [ 374.903807][ T8399] ____sys_sendmsg+0x5b7/0x8f0 [ 374.908671][ T8399] ? __sys_sendmsg_sock+0x30/0x30 [ 374.913830][ T8399] ? import_iovec+0x6f/0xa0 [ 374.918555][ T8399] ___sys_sendmsg+0x236/0x2e0 [ 374.923419][ T8399] ? __sys_sendmsg+0x2a0/0x2a0 [ 374.928392][ T8399] __se_sys_sendmsg+0x1af/0x290 [ 374.935062][ T8399] ? __x64_sys_sendmsg+0x80/0x80 [ 374.940245][ T8399] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 374.946833][ T8399] ? lockdep_hardirqs_on+0x94/0x140 [ 374.952960][ T8399] do_syscall_64+0x4c/0xa0 [ 374.957441][ T8399] ? clear_bhb_loop+0x30/0x80 [ 374.966816][ T8399] ? clear_bhb_loop+0x30/0x80 [ 374.971634][ T8399] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.977701][ T8399] RIP: 0033:0x7fcd21374e59 [ 374.988888][ T8399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.022979][ T8399] RSP: 002b:00007fcd1f5ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.037090][ T8399] RAX: ffffffffffffffda RBX: 00007fcd215edfa0 RCX: 00007fcd21374e59 [ 375.046495][ T8399] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 375.072824][ T8399] RBP: 00007fcd2140ad6f R08: 0000000000000000 R09: 0000000000000000 [ 375.092637][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.125112][ T8399] R13: 00007fcd215ee038 R14: 00007fcd215edfa0 R15: 00007ffc3aa2f1c8 [ 375.144787][ T8399] [ 375.147895][ T8399] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 375.155210][ T8399] CPU: 1 PID: 8399 Comm: syz.2.1119 Not tainted syzkaller #0 [ 375.162631][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.172724][ T8399] Call Trace: [ 375.176040][ T8399] [ 375.179011][ T8399] dump_stack_lvl+0x188/0x250 [ 375.183727][ T8399] ? show_regs_print_info+0x20/0x20 [ 375.189043][ T8399] ? load_image+0x400/0x400 [ 375.193680][ T8399] panic+0x2e5/0x810 [ 375.197627][ T8399] ? bpf_jit_dump+0xd0/0xd0 [ 375.202400][ T8399] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 375.208889][ T8399] __warn+0x248/0x2b0 [ 375.212920][ T8399] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 375.219479][ T8399] report_bug+0x1b7/0x2e0 [ 375.223861][ T8399] handle_bug+0x3a/0x70 [ 375.228059][ T8399] exc_invalid_op+0x16/0x40 [ 375.232772][ T8399] asm_exc_invalid_op+0x16/0x20 [ 375.237658][ T8399] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 375.244806][ T8399] Code: 13 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 31 39 8b 4c 89 e6 89 ea e8 d5 99 71 00 <0f> 0b e9 07 fd ff ff e8 f9 f4 38 f8 0f 0b e9 b1 fe ff ff e8 ed f4 [ 375.264640][ T8399] RSP: 0018:ffffc900055a73a0 EFLAGS: 00010246 [ 375.270844][ T8399] RAX: 94a982647f75cb00 RBX: 0000000002000000 RCX: 0000000000080000 [ 375.278853][ T8399] RDX: ffffc90005189000 RSI: 0000000000005c59 RDI: 0000000000005c5a [ 375.287208][ T8399] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 375.295213][ T8399] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88805f1a8000 [ 375.303219][ T8399] R13: ffff88805f1a9290 R14: ffff8880258b0e00 R15: ffff88805f1aa268 [ 375.311246][ T8399] ieee80211_set_mcast_rate+0x3b/0x50 [ 375.316658][ T8399] ? ieee80211_leave_ibss+0x20/0x20 [ 375.321903][ T8399] nl80211_set_mcast_rate+0x346/0x530 [ 375.327314][ T8399] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 375.333170][ T8399] genl_rcv_msg+0xcea/0xf90 [ 375.337715][ T8399] ? genl_bind+0x380/0x380 [ 375.342174][ T8399] ? verify_lock_unused+0x140/0x140 [ 375.347415][ T8399] ? verify_lock_unused+0x140/0x140 [ 375.352756][ T8399] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 375.358612][ T8399] netlink_rcv_skb+0x1f5/0x440 [ 375.363496][ T8399] ? genl_bind+0x380/0x380 [ 375.367948][ T8399] ? netlink_ack+0xb50/0xb50 [ 375.372574][ T8399] ? __lock_acquire+0x7d10/0x7d10 [ 375.377641][ T8399] ? down_read+0x1aa/0x2e0 [ 375.382107][ T8399] genl_rcv+0x24/0x40 [ 375.386129][ T8399] netlink_unicast+0x774/0x920 [ 375.390939][ T8399] netlink_sendmsg+0x8ba/0xbe0 [ 375.395741][ T8399] ? netlink_getsockopt+0x570/0x570 [ 375.400979][ T8399] ? aa_sock_msg_perm+0x94/0x150 [ 375.405961][ T8399] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 375.411284][ T8399] ? security_socket_sendmsg+0x7c/0xa0 [ 375.416870][ T8399] ? netlink_getsockopt+0x570/0x570 [ 375.422546][ T8399] ____sys_sendmsg+0x5b7/0x8f0 [ 375.427368][ T8399] ? __sys_sendmsg_sock+0x30/0x30 [ 375.432455][ T8399] ? import_iovec+0x6f/0xa0 [ 375.436999][ T8399] ___sys_sendmsg+0x236/0x2e0 [ 375.441717][ T8399] ? __sys_sendmsg+0x2a0/0x2a0 [ 375.446554][ T8399] __se_sys_sendmsg+0x1af/0x290 [ 375.451487][ T8399] ? __x64_sys_sendmsg+0x80/0x80 [ 375.456470][ T8399] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 375.462512][ T8399] ? lockdep_hardirqs_on+0x94/0x140 [ 375.467753][ T8399] do_syscall_64+0x4c/0xa0 [ 375.472206][ T8399] ? clear_bhb_loop+0x30/0x80 [ 375.476921][ T8399] ? clear_bhb_loop+0x30/0x80 [ 375.481631][ T8399] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.487574][ T8399] RIP: 0033:0x7fcd21374e59 [ 375.492027][ T8399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.511694][ T8399] RSP: 002b:00007fcd1f5ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.520232][ T8399] RAX: ffffffffffffffda RBX: 00007fcd215edfa0 RCX: 00007fcd21374e59 [ 375.528241][ T8399] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 375.536239][ T8399] RBP: 00007fcd2140ad6f R08: 0000000000000000 R09: 0000000000000000 [ 375.544241][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.552243][ T8399] R13: 00007fcd215ee038 R14: 00007fcd215edfa0 R15: 00007ffc3aa2f1c8 [ 375.560273][ T8399] [ 375.563599][ T8399] Kernel Offset: disabled [ 375.568321][ T8399] Rebooting in 86400 seconds..