last executing test programs: 20m3.706448273s ago: executing program 32 (id=34): openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m12.153875168s ago: executing program 5 (id=117): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000"], 0x80}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000e00)={{0x3, 0x0, 0x4, 0x7f, '\x00', 0x6}, 0x1, 0x2, 0x7fffffff, 0x0, 0x5, 0xfffffffe, 'syz1\x00', &(0x7f0000000a40)=['/dev/cpu/#/msr\x00', '.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', '\x00', '/dev/cpu/#/msr\x00', '![\x00'], 0x3bb}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r3, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x3}, 0x3}}, 0x18) openat(r2, &(0x7f0000000080)='./file0\x00', 0x40000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000005c0)={0x0, 0x2000000, 0x1, 0x8a, 0xff}) r5 = syz_open_pts(r4, 0x8182) dup3(r5, r4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x20840) 19m10.269091088s ago: executing program 5 (id=120): socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x140e, 0x8, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1ff}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) r4 = socket(0xa, 0x4, 0x8) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000312, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000460000006500000085000000071255ce865c114900000000a293d0b882409f441cfb7dfec1320d71937441560d2123fb9ee7"], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000125c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x24040084) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) dup2(r8, r8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000009000000050000000000001102000000ffffffff0700000000000008000000000000302e5f613061009c6de67bf1e5a2a87a0fed5b0250c984a8831a2cd0566da2ddf43e7fb417b5cab26c738e6ebdbfca8add5478615ae71c3424bda02bac918d1f4375"], 0x0, 0x3d, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100a7c1, '\x00', 0x0, r9, 0x0, 0x1}, 0x50) 19m8.008871581s ago: executing program 5 (id=121): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x2, @sliced={0x6, [0xe, 0x1, 0x7, 0x0, 0x1, 0xe, 0x3, 0x7, 0x8, 0x8001, 0x3ff, 0x3, 0xfffd, 0x1, 0x4, 0x1ff, 0x8, 0x9, 0x6, 0xf7c, 0x4, 0x7ff, 0x100, 0xfff8, 0x8000, 0x1, 0x200, 0x20, 0x0, 0x4, 0x9, 0x1db, 0xe0d8, 0x9, 0x9, 0x5, 0x401, 0x1d, 0xe5c9, 0x0, 0x2fdf, 0x8000, 0x5, 0x8, 0x6, 0x6, 0x0, 0x7], 0xe}}) 19m6.935082551s ago: executing program 5 (id=125): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000e00)={{0x3, 0x0, 0x4, 0x7f, '\x00', 0x6}, 0x1, 0x2, 0x7fffffff, r2, 0x5, 0xfffffffe, 'syz1\x00', &(0x7f0000000a40)=['/dev/cpu/#/msr\x00', '.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', '\x00', '/dev/cpu/#/msr\x00', '![\x00'], 0x3bb}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r4, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x3}, 0x3}}, 0x18) openat(r3, &(0x7f0000000080)='./file0\x00', 0x40000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00000005c0)={0x0, 0x2000000, 0x1, 0x8a, 0xff}) r6 = syz_open_pts(r5, 0x8182) dup3(r6, r5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x20840) 19m1.886238135s ago: executing program 5 (id=129): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000"], 0x80}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000e00)={{0x3, 0x0, 0x4, 0x7f, '\x00', 0x6}, 0x1, 0x2, 0x7fffffff, r1, 0x5, 0xfffffffe, 'syz1\x00', &(0x7f0000000a40)=['/dev/cpu/#/msr\x00', '.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', '\x00', '/dev/cpu/#/msr\x00', '![\x00'], 0x3bb}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r3, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x3}, 0x3}}, 0x18) openat(r2, &(0x7f0000000080)='./file0\x00', 0x40000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000005c0)={0x0, 0x2000000, 0x1, 0x8a, 0xff}) r5 = syz_open_pts(r4, 0x8182) dup3(r5, r4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x20840) 18m59.005766006s ago: executing program 5 (id=134): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x80800) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 18m41.978386503s ago: executing program 33 (id=134): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x80800) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 16m5.056079404s ago: executing program 3 (id=363): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x0, r6}, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x24000080}, 0x24044050) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201100300000008ac05a63fa112553271aa0902"], &(0x7f0000000680)={0x0, 0x0, 0x6b, &(0x7f0000000480)=ANY=[@ANYBLOB="050f6b000214100a9d82000000000f06002e000000c0c0ff0052100a"], 0x1, [{0x0, 0x0}]}) 16m1.359998088s ago: executing program 3 (id=367): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04", 0x78}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}], 0x3}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844", 0xb}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15m59.376637099s ago: executing program 3 (id=371): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$xdp(r4, &(0x7f00000003c0), 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 15m58.050270989s ago: executing program 3 (id=373): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x801, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) mlockall(0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15m56.371278259s ago: executing program 3 (id=376): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x100000000, 0x28, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ffa1", 0x2, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) capset(&(0x7f0000a31000)={0x20080522, r1}, &(0x7f0000000080)) r2 = socket(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x400) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000), 0x111, 0x7}}, 0x20) syz_usb_connect$uac2(0x1, 0x95, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) r5 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='id_legacy\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r5}) sendmsg$RDMA_NLDEV_CMD_SET(r3, 0x0, 0x20008000) 15m54.976233029s ago: executing program 3 (id=379): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) unshare(0x6a040080) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec9e2720"], 0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = socket(0x1f, 0xa, 0xfffffffd) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[], 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="77a82000040000000159000008000000184100003535e1afbd7fbada46ebb6fbffffff00e90000000000001818000000060000000000000003000000950000000000000034a8800018000000185700000600"/96, @ANYRESOCT], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0xe5, &(0x7f0000000680)=""/229, 0x41000, 0x8, '\x00', 0x0, 0x19, r4, 0x8, &(0x7f0000000780)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x75d7, 0xffffffffffffffff, 0xc, 0x0, &(0x7f0000000940)=[{0x2, 0x2, 0x9, 0x1}, {0x0, 0x1, 0x8, 0x1}, {0x5, 0x3, 0xb, 0xc}, {0x2, 0x3, 0xa, 0x4}, {0xfffffffa, 0x4001, 0xe, 0xb}, {0x4, 0x1, 0xb, 0x3}, {0x4, 0x5, 0x8, 0xc}, {0x2, 0x1, 0xc, 0x4}, {0x4, 0x3, 0x3ff, 0x8}, {0x1, 0x3, 0x10}, {0x2, 0x5, 0x3, 0x4}, {0x0, 0x2, 0x5, 0x8}], 0x10, 0x7}, 0x94) accept4(r0, 0x0, 0x0, 0x40800) 15m37.862167236s ago: executing program 34 (id=379): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) unshare(0x6a040080) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec9e2720"], 0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = socket(0x1f, 0xa, 0xfffffffd) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[], 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="77a82000040000000159000008000000184100003535e1afbd7fbada46ebb6fbffffff00e90000000000001818000000060000000000000003000000950000000000000034a8800018000000185700000600"/96, @ANYRESOCT], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0xe5, &(0x7f0000000680)=""/229, 0x41000, 0x8, '\x00', 0x0, 0x19, r4, 0x8, &(0x7f0000000780)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x75d7, 0xffffffffffffffff, 0xc, 0x0, &(0x7f0000000940)=[{0x2, 0x2, 0x9, 0x1}, {0x0, 0x1, 0x8, 0x1}, {0x5, 0x3, 0xb, 0xc}, {0x2, 0x3, 0xa, 0x4}, {0xfffffffa, 0x4001, 0xe, 0xb}, {0x4, 0x1, 0xb, 0x3}, {0x4, 0x5, 0x8, 0xc}, {0x2, 0x1, 0xc, 0x4}, {0x4, 0x3, 0x3ff, 0x8}, {0x1, 0x3, 0x10}, {0x2, 0x5, 0x3, 0x4}, {0x0, 0x2, 0x5, 0x8}], 0x10, 0x7}, 0x94) accept4(r0, 0x0, 0x0, 0x40800) 12m40.743521544s ago: executing program 0 (id=592): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000780)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 12m39.400543725s ago: executing program 0 (id=594): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000380)="46d226b4279cb9236cd4addcf90000c99be868e310907518787fec1a0f5751c9bc4980e0f0ae07df8419518a77e4fed380846248e29c68b68f64c9185126c43120fbbb203e03f60551f9c5ab5595ad30f6433b02e0238a950128302534e04715a4254fc8ed8a72a6650644b830679a18d12cc52a463db505240f98db760f11e2b1b5a34ff23d316e11054bd3fb33472db567ce57b883525cf72cd764ee4ba59738214f94341124534e7837377beac61bba9e830cea162d428696c874ae7ff8049cb685a7935ae6a9fdf1ec320b714d9f11f68cfa030a1ea0e44228447a0628e7a5924b9b0bbabef96ae3d8bf9c4918e2b4c061c5728bf79631b6c261bacabcd45a5027ed0dd1718813c3ceae7a8a74401c933321d3ed71a97b70d5804b", 0x11d) socket$netlink(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10004) 12m35.754964594s ago: executing program 0 (id=597): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000080)) geteuid() r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000300)={0x28, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m34.426090359s ago: executing program 0 (id=601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000080)) geteuid() r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000300)={0x28, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 12m32.924990928s ago: executing program 0 (id=602): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xa, r2, 0x0, r3}) 12m29.022249367s ago: executing program 0 (id=604): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, {0xa, 0x4e20, 0x6, @empty, 0xe}, 0xffffffffffffffff, 0x4}}, 0x48) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000240007812fbd7000fbdbdf25027c00000c0001800800020001000040ddbc2748293e4a6b55102214b01c42c9fd334a"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r6, r5, 0x0, 0x578410eb) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="2100000000000000a15c443657887812cd38c8c08fc0b9179fb10206ab6e249250a494ff67f327d7a9a009b3a2442182e07cb7dc442819b2b6e723b8ffffffff6ad5e7d72297ffecfec8b566d52d5605f4f9d45b5fd921e1be2053cc93809fd60ee58fb1f6b71053e7d1a25efa91ee8f237da71f479e93fbdcb0985318d94c"], 0x8) r8 = dup(r7) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000340)="45791e457f83f51cd3f67c520aa0ae28767fcbca9836d74c4c8054987e1c1dbaa3763d4063dbfb726e193e0e7148d5d01334baf5cd0bd59be04e8a19c8e05e5335257c52686960486b0e508609aa0cd8c0215b", &(0x7f0000000400), &(0x7f0000000440)="5a927a478b52f526d3652b7db3db6ae161376265f0b80f5d0cc6f44eb39361e40066343385d0bb6d8f9f20c6f27d1240b44c9a39a96af2b9f7e5c4ed8fc8593c512be50cdde0a3974af26a48682f6c7fc445e13200b49d7cfea51d91212e943fb56f7844eefc4dc195243de7eb5c02ad003f99e9601639c48683d2e4b9423931793473fa0b345b8b492cae9c511f73d70c7cc5e5c824f6d30c454d5afbc6f8885d806f502eea11935457bd3c1d5d5e1611c4ee4379f3f4b3ed", &(0x7f0000000500)="58fb19af71c3c63c09ffb2f4b713f26daa5f5f52a5d9bc9d4a4ca2dabea6a0087b9cc8b1f203fdad1a3a6ce6bd74e3d8176aa83dcafb9206721f52491d1405fb9b281046ed44c8275ae89ae8a71a3d76315ee9d09655daa5cf8d9bc31ee9b3cf73cba9277c635691b94813f0eb50169be0b512393acd65df1c4e3b5294ba01de7d43a091508bd7ca45c3fa4bc5f754f3601d6f6b45ee982d29b3549c7818e5d8dc904b6dc4acc0011b286a800649be36d3c5a6891f9149b4ed8f5892f8edadb6f9b895ca6d8f00530000c83ccb32f1f67709e6ce30e0289bd1b5", 0x5, r8, 0x4}, 0x38) ftruncate(0xffffffffffffffff, 0x200004) 12m13.517614975s ago: executing program 35 (id=604): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, {0xa, 0x4e20, 0x6, @empty, 0xe}, 0xffffffffffffffff, 0x4}}, 0x48) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000240007812fbd7000fbdbdf25027c00000c0001800800020001000040ddbc2748293e4a6b55102214b01c42c9fd334a"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r6, r5, 0x0, 0x578410eb) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="2100000000000000a15c443657887812cd38c8c08fc0b9179fb10206ab6e249250a494ff67f327d7a9a009b3a2442182e07cb7dc442819b2b6e723b8ffffffff6ad5e7d72297ffecfec8b566d52d5605f4f9d45b5fd921e1be2053cc93809fd60ee58fb1f6b71053e7d1a25efa91ee8f237da71f479e93fbdcb0985318d94c"], 0x8) r8 = dup(r7) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000340)="45791e457f83f51cd3f67c520aa0ae28767fcbca9836d74c4c8054987e1c1dbaa3763d4063dbfb726e193e0e7148d5d01334baf5cd0bd59be04e8a19c8e05e5335257c52686960486b0e508609aa0cd8c0215b", &(0x7f0000000400), &(0x7f0000000440)="5a927a478b52f526d3652b7db3db6ae161376265f0b80f5d0cc6f44eb39361e40066343385d0bb6d8f9f20c6f27d1240b44c9a39a96af2b9f7e5c4ed8fc8593c512be50cdde0a3974af26a48682f6c7fc445e13200b49d7cfea51d91212e943fb56f7844eefc4dc195243de7eb5c02ad003f99e9601639c48683d2e4b9423931793473fa0b345b8b492cae9c511f73d70c7cc5e5c824f6d30c454d5afbc6f8885d806f502eea11935457bd3c1d5d5e1611c4ee4379f3f4b3ed", &(0x7f0000000500)="58fb19af71c3c63c09ffb2f4b713f26daa5f5f52a5d9bc9d4a4ca2dabea6a0087b9cc8b1f203fdad1a3a6ce6bd74e3d8176aa83dcafb9206721f52491d1405fb9b281046ed44c8275ae89ae8a71a3d76315ee9d09655daa5cf8d9bc31ee9b3cf73cba9277c635691b94813f0eb50169be0b512393acd65df1c4e3b5294ba01de7d43a091508bd7ca45c3fa4bc5f754f3601d6f6b45ee982d29b3549c7818e5d8dc904b6dc4acc0011b286a800649be36d3c5a6891f9149b4ed8f5892f8edadb6f9b895ca6d8f00530000c83ccb32f1f67709e6ce30e0289bd1b5", 0x5, r8, 0x4}, 0x38) ftruncate(0xffffffffffffffff, 0x200004) 1m39.355628147s ago: executing program 9 (id=1386): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xff7f000000000000, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10004) 1m38.016420596s ago: executing program 9 (id=1388): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000380)="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", 0x11d) socket$netlink(0x10, 0x3, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10004) 1m37.566065692s ago: executing program 9 (id=1389): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) unshare(0x6a040080) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec9e2720"], 0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000044c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = socket(0x1f, 0xa, 0xfffffffd) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[], 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="77a82000040000000159000008000000184100003535e1afbd7fbada46ebb6fbffffff00e90000000000001818000000060000000000000003000000950000000000000034a8800018000000185700000600"/96, @ANYRESOCT], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0xe5, &(0x7f0000000680)=""/229, 0x41000, 0x8, '\x00', 0x0, 0x19, r4, 0x8, &(0x7f0000000780)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x75d7, r2, 0xc, 0x0, &(0x7f0000000940)=[{0x2, 0x2, 0x9, 0x1}, {0x0, 0x1, 0x8, 0x1}, {0x5, 0x3, 0xb, 0xc}, {0x2, 0x3, 0xa, 0x4}, {0xfffffffa, 0x4001, 0xe, 0xb}, {0x4, 0x1, 0xb, 0x3}, {0x4, 0x5, 0x8, 0xc}, {0x2, 0x1, 0xc, 0x4}, {0x4, 0x3, 0x3ff, 0x8}, {0x1, 0x3, 0x10}, {0x2, 0x5, 0x3, 0x4}, {0x0, 0x2, 0x5, 0x8}], 0x10, 0x7}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x40800) 1m28.180772241s ago: executing program 9 (id=1403): creat(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) r1 = socket(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getpeername$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x20) keyctl$read(0xb, r5, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f00000000c0)=0x40, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, r2, 0x2, 0x0, 'syz0\x00', &(0x7f0000000180)=['\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x11}) openat$nvram(0xffffffffffffff9c, 0x0, 0x400, 0x0) 1m24.739304617s ago: executing program 9 (id=1406): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 1m23.129084302s ago: executing program 9 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x8090) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) 1m7.297856532s ago: executing program 36 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x8090) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) 28.737799257s ago: executing program 2 (id=1532): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}, {0x0}], 0x2, &(0x7f0000000040)=ANY=[], 0x28}, 0x20000000) 28.230005107s ago: executing program 2 (id=1536): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x80000001, 0x7, 0x5, 0x8}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x10) 27.990903994s ago: executing program 2 (id=1538): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001280)='net/softnet_stat\x00') read$eventfd(r0, &(0x7f0000001380), 0x8) 27.690281378s ago: executing program 2 (id=1541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310001000014000380100000f20c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 27.318799089s ago: executing program 2 (id=1543): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) r0 = socket(0x200000000000011, 0x2, 0xd) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xd8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getchain={0x74, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x9, 0xffe0}, {0x3, 0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 26.650113742s ago: executing program 2 (id=1545): socket$inet(0x2, 0x3, 0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x90) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file1\x00', 0xaf7) acct(&(0x7f0000000100)='./file1\x00') r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_RMID(0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 10.817100365s ago: executing program 37 (id=1545): socket$inet(0x2, 0x3, 0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x90) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file1\x00', 0xaf7) acct(&(0x7f0000000100)='./file1\x00') r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_RMID(0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 6.486477178s ago: executing program 4 (id=1648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f440012801000cbdff6970100636f756e74657200200001800a00010071756f7461000000100002800c0001400000000000000800100001800800010064757000040002800800034000000106"], 0xd0}}, 0x20050800) 6.072809605s ago: executing program 4 (id=1652): unshare(0x26020480) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 5.949729747s ago: executing program 7 (id=1655): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) 5.690260751s ago: executing program 4 (id=1656): socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$eJzs3c1rHGUYAPBnNps0bapJoRT1IIUerNRuvvyoILQeRYsFvdcl2YaQTbdkN6WJBduDvXgrgogF8Sp491j8B/wrClooUoIeRIjMZjZN0t3NR5Numv39YJL33ZnZd56ded59Z2aXDaBrnUz/5CJejehPi4Nr5uUjm3lyZbmlxzcn0imJ5eXP/koiyR5rLJ9k/weyyisR8dvXEWdyT7dbXVicKZbLpbmsPlybvTZcXVg8Oz1bnCpNla6OjY+fe2d87P333t21WN+89M/3n97/6Nw3p5a+++XhsbtJXIij2by1cTyDW2srJ4v/ZaXeuLBhwdFdaGw/STq9AexIT5bnvZH2AYPRk2U9cPB9FRHLQJdK5D90qcY4oHFuv0vnwS+MRx+unADVY+9bG39+5dpI9NfPjY4sJevOjNLz3aFdaD9t49c/791Np2h/HeLwJnWAbbl1OyJG8vmn+/8k6/92bqR+8bi9jW102/sPdNL9dPzzVrPxX251/BNNxj8DTXJ3JzbP/9zDXWimpXT890HT8e9q1zXUk9Veqo/5epMrA+XSSES8HBGnI+LKdLk02r9yDb2Zc0sPllu1v3b8l05p+42xYLYdD/OH1q8zWawVI6LvWWNPPbod8Vq+WfzJ6v5Pmuz/9PW4tMU2TpTuvd5q3ubx763lnyLeaLr/n9zRStrfnxxO9//Iyt+mbfx958TvrdrvdPzp/j/SPv6hZO392ur22/ix/99Sq3kt41892Jof/33J5/VyIwluFGu1udGIvuSTpx8fe7Juo95YPo3/9Kn2/V+z4z89+fpii/HfOX6n5aL7Yf9Pbmv/byykr0SLWVnhwcdf/tCq/a31f2/XS6ezR7L+r7nsWGmzOesKz/r6AQAAAAAAwH6Si4ijkeQKq+VcrlBY+XzH8TiSK1eqtTNXKvNXJ6P+Xdmh6M017nQPNj4PMV0ujWafh23UxzbUxyPiWER823O4Xi9MVMqTnQ4eAAAAAAAAAAAAAAAAAAAA9omBFt//T/3R0+mtA/Zc/YcNDnV6K4BO2PQn/3fjl56AfWnT/AcOrHX5n3RuO4Dnz/s/dC/5D91L/kP3kv/QveQ/dK+t5P+F57AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEBcungxnZaXHt+cSOuT1xfmZyrXz06WqjOF2fmJwkRl7lphqlKZKpcKE5XZiBhs93zlSuXa6FjM3xiulaq14erC4uXZyvzV2uXp2eJU6XKp97lFBgAAAAAAAAAAAAAAAAAAAC+O6sLiTLFcLs0diMLP+b145vPR6bj2uHA+4lZ6MOxo9fx+iUKhReF2luvbW6uz/RIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPV/AAAA///HtTBf") open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 4.848316969s ago: executing program 4 (id=1660): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 4.302405523s ago: executing program 8 (id=1662): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/69, 0x45}, {&(0x7f0000001540)=""/202, 0xca}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/130, 0x82}, {&(0x7f0000002700)=""/98, 0x62}, {&(0x7f0000002780)=""/201, 0xc9}], 0xa, &(0x7f0000002940)=""/48, 0x30}, 0x6}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1}, 0x6}], 0x2, 0x45833af92e4b39ff, 0x0) 4.300826055s ago: executing program 6 (id=1663): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) fchown(0xffffffffffffffff, 0xee01, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000002b00)={0xf, 0x1dc}, &(0x7f0000002b40), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x2400000) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) close_range(r4, r3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x4) 4.203231489s ago: executing program 4 (id=1664): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x43, 0x9, 0x1, {0xffffa66e, 0x4, 0x80000000, 0x8, 0xf1, 0xd, 0x1, 0x8, 0x7}}, 0x43) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 3.971873072s ago: executing program 8 (id=1665): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.809984299s ago: executing program 4 (id=1666): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) fstat(0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x54, 0x1) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001a80)={0x53, 0xfffffffffffffffd, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x80000001, 0x1, 0x1, 0x0}) 3.779970283s ago: executing program 6 (id=1667): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$sock(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001400)="7ba45f6a", 0x4}], 0x1}, 0x40) 3.638119836s ago: executing program 8 (id=1668): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.399091179s ago: executing program 6 (id=1670): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x2, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0x73e9}) 2.946769679s ago: executing program 8 (id=1671): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x2000c16, &(0x7f0000000300), 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffff86f037ee434917940000"]) 2.826039696s ago: executing program 1 (id=1672): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c090) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000004c0)=""/249, 0xf9, 0x20120, 0x0, 0x40) 2.74368851s ago: executing program 6 (id=1673): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.449563688s ago: executing program 1 (id=1674): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 2.235024577s ago: executing program 6 (id=1675): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@quiet}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_winnt}, {@fat=@errors_remount}, {@shortname_lower}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x80000000) 2.223381782s ago: executing program 7 (id=1676): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010202001400020077673200000000000000000000000000090001"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 2.135000385s ago: executing program 8 (id=1677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000040)='./file0\x00', 0x21488b, &(0x7f0000000100)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYRESDEC, @ANYRES64], 0x1, 0x65c, &(0x7f0000002280)="$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") open(0x0, 0x0, 0x24) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080), 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 1.98662508s ago: executing program 1 (id=1678): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x2b, 0x0, @local, @local, {[@dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0x8}]}], {{0x0, 0xfffd, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.838512849s ago: executing program 7 (id=1679): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x54, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x6}, @in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, @in6={0xa, 0x4e24, 0x200, @remote, 0x4}]}, 0x0) listen(r0, 0x5) unshare(0x2a020480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.611934822s ago: executing program 1 (id=1680): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xcb, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) 1.302176063s ago: executing program 7 (id=1681): syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty}}}}}}, 0x0) 1.163262796s ago: executing program 1 (id=1682): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r1, 0xffff}, &(0x7f00000002c0)=0x8) 1.016833835s ago: executing program 7 (id=1683): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzDb59U9+JhURWxQDHipIt9lYrHpqezGHggU9iHhoaDY1ZNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7NJTHaTELJOmvl8YHbfn03e++7wMu/t7CMBlNZw9pBGnImIG0nE4Ka6Y5FXDrdet/rH3ZvZkcTa2lu/J5HkZe3XJ/nzqTxzPCK+uxrxZGV7uwtLy9PjjUZ9Ps9fWJyZu7CwtHx+amb8Vv1W/XZt9NWLl0Zeq12sHVisD7767Jexa28++/GH778y+X3jfBKXYyCv2xzHQRmO4fX3ZLPsfb100I0VpJLH0ylODr/2+euLiKdjMCr5qM8MxtSDQjsH9NRaJWINKKnE+IeSas8D2mv7XqyDD7NHV1oLoO3xH2t9NhLHm2ujk6vJppVRa707dADtZ238fffsF9kRPfocYif37kfEM53iT5p9G2p+ipPFn/4r/jQiRvL+Z+Wj+2x/eEv+cYr/cv6clV/dZ/tFxw9AOa1caV3It1//0vX5T3SY/wx0uHbtR9HXv+7zv434K13mf9f32MbPH4192q1u8/wvO7L223PB/8Kj+xFnO8afrMefdIg/m/fc2GMbb/zw21i3uqLjX3sYca7j+mfjjlay8/3JC5NTjfpI67FjG998+96X3dovOv7s/J/sEv9O5z8rm9tjG19ffzjTrW73+NNf+5O3m6n+vOSD8cXF+VpEf3Jte/kuC5H2a9q/I4v/xRd2Hv+d4j+RrR32GP/cO9Or+4+/t7L4J/Z5/j/ZYxt/vXvnuW51RccPAAAAAAAAR0na/C5HklbX02larbb28D4VJ9PG7MLiS5Ozd25PtL7zMRR9aftO92Arn2T5Wv592HZ+dEv+5Yg4HRGfV04089Wbs42JooMHAAAAAAAAAAAAAAAAAACAQ+LUlv3/f1Za+/+BkjhWdAeAwhj/UF7GP5SX8Q/lZfxDeRn/UF7GP5SX8Q/lZfxDeRn/UF7GPwAAAAAcSaefX/kpiYh7r59oHpn+vK6v0J4BvZYW3QGgMJWiOwAUxq1/KC9rfCDZpf54t4qV3X4SAAAAAAAAAAAAADgo587Y/w9lZf8/lJf9/1Be9v9DeVnjA/b/AwAAAAAAAAAAAMDhN9A8krSa7wUeiDStViP+HxFD0ZdMTjXqIxHxRET8WOn7X5avFd1pAAAAAAAAAAAAAAAAAAAAOGIWlpanxxuN+ryEhITEeqLov0wAAAAAAAAAAAAAAAAAAFA+G5t+i+4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRn4///9y5RdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPpnwAAAP//bKsggw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x4000) 346.531263ms ago: executing program 8 (id=1684): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800744, &(0x7f0000000300)={[{@data_err_ignore}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nobh}, {@quota}, {@nodiscard}, {@grpid}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 294.57555ms ago: executing program 7 (id=1685): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c090) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000004c0)=""/249, 0xf9, 0x20120, 0x0, 0x40) 9.569807ms ago: executing program 6 (id=1686): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1687): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e20, @multicast2}], 0x10) kernel console output (not intermixed with test programs): ing ep0 maxpacket: 32 [ 1044.296650][ T5767] usb 2-1: can't set config #253, error -71 [ 1044.319220][ T5746] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.343553][ T5767] usb 2-1: USB disconnect, device number 24 [ 1044.464988][ T5746] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.497781][ T5746] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.510007][ T5746] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1044.603346][ T5746] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1044.687014][ T5746] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1044.762690][ T5746] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.812707][ T5746] usb 10-1: config 0 descriptor?? [ 1044.928383][T13188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.950561][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.979767][T13188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.995997][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.005892][T13222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.019212][T13222] bridge_slave_0: entered allmulticast mode [ 1045.034181][T13222] bridge_slave_0: entered promiscuous mode [ 1045.135598][ T1166] bridge_slave_1: left allmulticast mode [ 1045.151300][ T1166] bridge_slave_1: left promiscuous mode [ 1045.158704][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.181448][ T1166] bridge_slave_0: left allmulticast mode [ 1045.189228][ T1166] bridge_slave_0: left promiscuous mode [ 1045.197475][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.281893][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 1045.297698][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 1045.311480][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 1045.331090][ T5746] usbhid 10-1:0.0: can't add hid device: -32 [ 1045.357058][ T5746] usbhid 10-1:0.0: probe with driver usbhid failed with error -32 [ 1045.432387][ T5746] usb 10-1: USB disconnect, device number 5 [ 1046.965070][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.045382][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.101102][ T1166] bond0 (unregistering): Released all slaves [ 1047.141760][T13188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.153559][T13188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.220719][T13188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.292029][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.305616][T13222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.316661][T13222] bridge_slave_1: entered allmulticast mode [ 1047.348522][T13222] bridge_slave_1: entered promiscuous mode [ 1047.542059][ T5746] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1047.775522][ T5746] usb 10-1: Using ep0 maxpacket: 16 [ 1047.814863][ T5746] usb 10-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 1047.826375][ T5746] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1047.848007][ T5746] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1047.862286][ T5746] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1047.873001][ T5746] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.899814][ T5746] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1047.912068][ T5746] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1047.930571][ T5746] usb 10-1: Manufacturer: syz [ 1047.960327][ T1166] hsr_slave_0: left promiscuous mode [ 1047.980034][ T1166] hsr_slave_1: left promiscuous mode [ 1047.980077][ T5746] usb 10-1: config 0 descriptor?? [ 1047.991503][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.066595][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.014675][ T5746] rc_core: IR keymap rc-hauppauge not found [ 1049.021515][ T5746] Registered IR keymap rc-empty [ 1049.030760][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1049.052352][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1049.086079][ T5746] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1049.166355][T13466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1049.886439][ T5746] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input36 [ 1049.930208][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1049.982624][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1050.002396][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1050.077872][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1050.118896][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1050.155374][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1050.186769][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1050.243069][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1050.285758][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1050.322142][ T5746] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1050.347404][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 1050.417423][ T5746] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1050.438111][ T5746] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1050.447857][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 1050.740174][ T5746] usb 10-1: USB disconnect, device number 6 [ 1051.105800][T13471] xt_CT: No such helper "pptp" [ 1051.198110][T13479] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1051.606897][T13222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.620058][ T5628] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1052.459501][T13222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.551459][T13188] hsr_slave_0: entered promiscuous mode [ 1052.571340][T13188] hsr_slave_1: entered promiscuous mode [ 1052.579439][T13188] debugfs: 'hsr0' already exists in 'hsr' [ 1052.592224][T13188] Cannot create hsr debugfs directory [ 1053.166604][T13222] team0: Port device team_slave_0 added [ 1053.263272][T13222] team0: Port device team_slave_1 added [ 1053.474982][T13222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.499598][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.582012][T13222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.674036][T13222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.699434][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.773311][T13222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.986436][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.994831][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.243084][T10322] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1054.344760][T13222] hsr_slave_0: entered promiscuous mode [ 1054.389993][T13222] hsr_slave_1: entered promiscuous mode [ 1054.416890][T13222] debugfs: 'hsr0' already exists in 'hsr' [ 1054.423031][T10322] usb 7-1: Using ep0 maxpacket: 16 [ 1054.459342][T13222] Cannot create hsr debugfs directory [ 1054.469082][T10322] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.526693][T10322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1054.615891][T10322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1054.656290][T10322] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1054.700522][T10322] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1054.753155][T10322] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1054.789697][T13509] blktrace: Concurrent blktraces are not allowed on loop4 [ 1054.816348][T10322] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1054.859360][T10322] usb 7-1: Manufacturer: syz [ 1054.893866][T10322] usb 7-1: config 0 descriptor?? [ 1055.932285][T10322] rc_core: IR keymap rc-hauppauge not found [ 1055.954430][T10322] Registered IR keymap rc-empty [ 1055.984213][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1056.022960][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1056.073561][T10322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1056.338289][T10322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input37 [ 1056.428926][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1056.712393][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1057.404812][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1057.453649][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1057.482538][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1057.503242][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1057.525526][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1057.562493][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1057.612732][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1057.672983][T10322] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1057.745487][T10322] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1057.769901][T10322] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1057.871064][T10322] usb 7-1: USB disconnect, device number 2 [ 1059.705350][T13550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.155107][T10322] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1060.641343][T13555] PKCS8: Unsupported PKCS#8 version [ 1060.672554][T10322] usb 7-1: Using ep0 maxpacket: 16 [ 1060.684414][T10322] usb 7-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 1060.701120][T10322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1060.722408][T10322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1060.780638][T10322] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1060.849219][T10322] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1061.250741][T10322] usb 7-1: string descriptor 0 read error: -71 [ 1061.272113][T10322] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1061.368432][T10322] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1061.615485][T13560] xt_CT: No such helper "pptp" [ 1061.643844][T10322] usb 7-1: config 0 descriptor?? [ 1061.670450][T10322] usb 7-1: can't set config #0, error -71 [ 1061.726987][T10322] usb 7-1: USB disconnect, device number 3 [ 1062.622582][T10322] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1063.644861][T10322] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1063.644955][T13222] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1063.713663][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.717611][T10322] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1063.745028][T13222] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1063.780672][T10322] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1063.821078][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.828786][T10322] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1063.828836][T10322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1063.828873][T10322] usb 7-1: SerialNumber: syz [ 1064.128371][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.137457][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.384025][T13222] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1064.448016][ T5867] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1064.476714][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1064.489602][T13222] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1064.566743][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1064.662432][ T5867] usb 10-1: Using ep0 maxpacket: 16 [ 1064.680446][ T5867] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.736605][ T5867] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1064.782138][ T5867] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1064.835288][ T5867] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1064.874790][ T5867] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1064.927813][ T5867] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1064.957158][ T5867] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1065.004076][ T5867] usb 10-1: Manufacturer: syz [ 1065.165903][ T5867] usb 10-1: config 0 descriptor?? [ 1065.228073][T10322] rndis_host 7-1:253.0: RNDIS init failed, -71 [ 1065.632032][T10322] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -71 [ 1065.946725][T10322] usb 7-1: USB disconnect, device number 4 [ 1066.137265][T13606] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1066.144736][T13606] overlayfs: failed to set xattr on upper [ 1066.150565][T13606] overlayfs: ...falling back to redirect_dir=nofollow. [ 1066.157797][T13606] overlayfs: ...falling back to index=off. [ 1066.163796][T13606] overlayfs: ...falling back to uuid=null. [ 1066.170122][T13606] overlayfs: conflicting lowerdir path [ 1068.029804][ T5867] rc_core: IR keymap rc-hauppauge not found [ 1068.037753][ T30] audit: type=1800 audit(1778410603.273:5): pid=13612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1165" name="file0" dev="overlay" ino=311 res=0 errno=0 [ 1068.037831][T13188] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1068.065243][ T5867] Registered IR keymap rc-empty [ 1068.082335][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1068.122720][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1068.173294][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1068.233186][T13188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1068.282929][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input38 [ 1068.308870][T13188] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1068.387260][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1068.399172][T13188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1068.447778][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1068.461783][T13188] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1068.503228][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1068.538506][T13188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1068.573476][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1068.802340][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1068.840116][T13188] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1068.854836][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1068.903733][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1068.925197][T13188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1068.953204][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1069.013532][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1069.087783][ T5867] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1069.188395][ T5867] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1069.256687][ T5867] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1069.345674][ T5867] usb 10-1: USB disconnect, device number 7 [ 1069.556043][T13222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.705732][T13222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.795973][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.803216][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.868092][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.875275][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.958448][T13188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.419193][T13188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.772550][ T5754] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1072.313186][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.320450][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.405685][ T5754] usb 10-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1072.458624][ T5754] usb 10-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1072.504115][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.511330][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.524170][ T5754] usb 10-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1072.603095][ T5754] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1072.640759][ T5754] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1072.668713][ T5754] usb 10-1: SerialNumber: syz [ 1072.955694][T13646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.964900][T13646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.735989][T13668] blktrace: Concurrent blktraces are not allowed on loop4 [ 1074.591741][ T5754] rndis_host 10-1:253.0: RNDIS init failed, -71 [ 1074.604716][ T5754] rndis_host 10-1:253.0: probe with driver rndis_host failed with error -71 [ 1074.689023][ T5754] usb 10-1: USB disconnect, device number 8 [ 1075.750287][T13682] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1075.758875][T13682] overlayfs: failed to set xattr on upper [ 1075.765479][T13682] overlayfs: ...falling back to redirect_dir=nofollow. [ 1075.772970][T13682] overlayfs: ...falling back to index=off. [ 1075.778881][T13682] overlayfs: ...falling back to uuid=null. [ 1075.785849][T13682] overlayfs: conflicting lowerdir path [ 1076.732273][ T5754] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1076.902628][ T5754] usb 2-1: Using ep0 maxpacket: 16 [ 1076.931471][ T5754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.969393][ T5754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1077.011659][ T5754] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1077.055133][ T5754] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1077.091228][ T5754] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1077.145432][ T5754] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1077.171596][ T5754] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1077.205046][ T5754] usb 2-1: Manufacturer: syz [ 1077.250425][ T5754] usb 2-1: config 0 descriptor?? [ 1077.672322][ T5754] rc_core: IR keymap rc-hauppauge not found [ 1077.707308][ T5754] Registered IR keymap rc-empty [ 1077.724580][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.765347][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.844054][ T5754] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1077.907535][ T5754] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 1077.989315][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1078.062430][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1078.144486][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1078.213102][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1078.780496][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1079.162987][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1079.222411][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1079.302325][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1079.323771][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1079.379914][ T5754] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1079.406211][T10876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1079.417417][T10876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1079.426915][T10876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1079.447729][T10876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1079.456475][T10876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1079.495510][ T5754] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1079.518632][ T5754] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1079.532249][ T5754] usb 2-1: USB disconnect, device number 25 [ 1079.580751][T13222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.542895][T10876] Bluetooth: hci3: command tx timeout [ 1081.665526][ T1112] bridge_slave_1: left allmulticast mode [ 1081.672507][ T1112] bridge_slave_1: left promiscuous mode [ 1081.678366][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.708114][ T1112] bridge_slave_0: left allmulticast mode [ 1081.717076][ T1112] bridge_slave_0: left promiscuous mode [ 1081.732552][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.677262][T10876] Bluetooth: hci3: command tx timeout [ 1083.890719][T13752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1083.985634][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1084.007689][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1084.019566][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1084.031102][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1084.041514][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1085.263996][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.297654][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.309897][ T1112] bond0 (unregistering): Released all slaves [ 1085.556940][ T1112] hsr_slave_0: left promiscuous mode [ 1085.712479][T10876] Bluetooth: hci3: command tx timeout [ 1085.727218][ T1112] hsr_slave_1: left promiscuous mode [ 1085.744404][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.786668][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.102329][T10876] Bluetooth: hci4: command tx timeout [ 1088.454009][T10876] Bluetooth: hci3: command tx timeout [ 1088.460512][T10876] Bluetooth: hci4: command tx timeout [ 1090.311089][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 1090.502375][ T5628] Bluetooth: hci4: command tx timeout [ 1090.546662][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 1092.582297][ T5628] Bluetooth: hci4: command tx timeout [ 1095.971364][T13841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1097.890666][T13853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1099.192364][ T5753] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1099.288119][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1099.340768][T13716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.349357][ T5753] usb 10-1: Using ep0 maxpacket: 32 [ 1099.357579][T13716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.374327][T13716] bridge_slave_0: entered allmulticast mode [ 1099.381241][ T5753] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.395623][T13716] bridge_slave_0: entered promiscuous mode [ 1099.403611][ T5753] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.417752][T13716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.425774][ T5746] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1099.433587][T13716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.440786][ T5753] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.451286][T13716] bridge_slave_1: entered allmulticast mode [ 1099.458327][ T5753] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1099.473395][T13716] bridge_slave_1: entered promiscuous mode [ 1099.635714][ T5753] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1099.645461][ T5753] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1099.655221][ T5753] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.667858][ T5753] usb 10-1: config 0 descriptor?? [ 1099.741283][ T5746] usb 3-1: config 17 has an invalid interface number: 255 but max is 0 [ 1099.765620][ T5746] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.777548][ T5746] usb 3-1: config 17 has no interface number 0 [ 1099.784725][ T5746] usb 3-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1099.797606][ T5746] usb 3-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1099.821563][ T5746] usb 3-1: config 17 interface 255 has no altsetting 0 [ 1099.829952][ T5746] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1099.839349][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.031358][ T30] audit: type=1800 audit(1778410636.103:6): pid=13875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1207" name="file0" dev="overlay" ino=2114 res=0 errno=0 [ 1101.040002][ T5746] aiptek 3-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 1101.163003][T13716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.225597][T13716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.294564][ T5753] usbhid 10-1:0.0: can't add hid device: -71 [ 1101.301612][ T5753] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1101.340954][ T5753] usb 10-1: USB disconnect, device number 9 [ 1104.049896][ T5754] usb 3-1: USB disconnect, device number 16 [ 1106.152801][T13716] team0: Port device team_slave_0 added [ 1106.267899][T13716] team0: Port device team_slave_1 added [ 1106.957995][ T1112] bridge_slave_1: left allmulticast mode [ 1106.972373][ T1112] bridge_slave_1: left promiscuous mode [ 1107.002472][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.041761][ T1112] bridge_slave_0: left allmulticast mode [ 1107.062288][ T1112] bridge_slave_0: left promiscuous mode [ 1107.078551][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.308971][T13903] xt_CT: No such helper "pptp" [ 1109.514152][ T30] audit: type=1800 audit(1778410644.773:7): pid=13925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="file0" dev="overlay" ino=2139 res=0 errno=0 [ 1111.056090][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.102131][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.114823][T10322] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1111.126967][ T1112] bond0 (unregistering): Released all slaves [ 1111.354662][T10322] usb 10-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1111.466369][T10322] usb 10-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1111.578037][T10322] usb 10-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1111.753772][T10322] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.864860][T10322] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1111.940545][T10322] usb 10-1: SerialNumber: syz [ 1112.383745][T13716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.463755][T13933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.472772][T13933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.582297][T13716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.837869][T10322] rndis_host 10-1:253.0: RNDIS init failed, -71 [ 1113.931896][T10322] rndis_host 10-1:253.0: probe with driver rndis_host failed with error -71 [ 1115.556930][T10322] usb 10-1: USB disconnect, device number 10 [ 1115.565657][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.575128][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.401515][T13716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.491213][ T5284] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1116.515197][T13716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.562286][T13716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.599336][T13716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.941262][ T1112] hsr_slave_0: left promiscuous mode [ 1117.979526][ T1112] hsr_slave_1: left promiscuous mode [ 1117.996165][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.015959][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.424118][T13984] xt_CT: No such helper "pptp" [ 1123.484631][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 1124.426217][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 1125.727997][T13716] hsr_slave_0: entered promiscuous mode [ 1125.758487][T13716] hsr_slave_1: entered promiscuous mode [ 1125.779064][T13716] debugfs: 'hsr0' already exists in 'hsr' [ 1125.804388][T13716] Cannot create hsr debugfs directory [ 1125.833538][T13754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.845903][T13754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.869065][T13754] bridge_slave_0: entered allmulticast mode [ 1125.908919][T13754] bridge_slave_0: entered promiscuous mode [ 1126.167040][T13754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.200481][T13754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.246036][T13754] bridge_slave_1: entered allmulticast mode [ 1126.288802][T13754] bridge_slave_1: entered promiscuous mode [ 1129.837680][ T30] audit: type=1800 audit(1778410665.083:8): pid=14017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1237" name="file0" dev="overlay" ino=2328 res=0 errno=0 [ 1129.864308][T13754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.200545][T13754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.004004][ T30] audit: type=1800 audit(1778410666.253:9): pid=14021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1238" name="file0" dev="overlay" ino=357 res=0 errno=0 [ 1131.276638][T13754] team0: Port device team_slave_0 added [ 1132.219329][T13754] team0: Port device team_slave_1 added [ 1132.497284][T13754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.536264][T13754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.680446][T13754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.732040][T13754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.749188][T13754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.886469][T13754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.761855][T13754] hsr_slave_0: entered promiscuous mode [ 1133.977941][T13754] hsr_slave_1: entered promiscuous mode [ 1133.985073][T13754] debugfs: 'hsr0' already exists in 'hsr' [ 1133.990822][T13754] Cannot create hsr debugfs directory [ 1134.802133][T14056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1136.582352][ T5791] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1136.762774][ T5791] usb 7-1: Using ep0 maxpacket: 16 [ 1136.820201][ T5791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.912123][ T5791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.965812][ T5791] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1137.871594][ T5791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.953064][ T5791] usb 7-1: config 0 descriptor?? [ 1137.993368][ T5791] xbox_remote_probe: endpoint_in message size==0? [ 1138.227412][ T5791] usbhid 7-1:0.0: can't add hid device: -71 [ 1138.253593][ T5791] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1138.316683][ T5791] usb 7-1: USB disconnect, device number 5 [ 1138.582364][ T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1138.752768][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1138.773996][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.842328][ T10] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.865940][ T10] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.901760][ T10] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.952953][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1138.982140][ T10] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1139.016964][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.078118][ T10] usb 10-1: config 0 descriptor?? [ 1139.869685][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 1139.879013][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1141.057810][ T10] usb 10-1: USB disconnect, device number 11 [ 1141.230195][T13754] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1141.512906][T13754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1141.550611][T13754] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1142.105318][T13754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1142.314749][T14113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1142.871032][T13754] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1143.169318][T13754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1143.508538][T10876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1143.529145][T10876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1143.543141][T10876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1143.554223][T10876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1143.568641][T10876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1144.281150][ T1112] bridge_slave_1: left allmulticast mode [ 1144.300636][ T1112] bridge_slave_1: left promiscuous mode [ 1144.319154][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.356232][ T1112] bridge_slave_0: left allmulticast mode [ 1144.362691][ T1112] bridge_slave_0: left promiscuous mode [ 1144.370065][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.907407][T10322] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1144.933731][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.049824][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.082554][T10322] usb 7-1: Using ep0 maxpacket: 16 [ 1145.091388][ T1112] bond0 (unregistering): Released all slaves [ 1145.108320][T10322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.576885][T10322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.598521][T10322] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1145.608238][T10322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.659172][T10876] Bluetooth: hci3: command tx timeout [ 1145.663340][T10322] usb 7-1: config 0 descriptor?? [ 1145.689211][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1145.781615][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1145.800013][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1145.821735][T10322] xbox_remote_probe: endpoint_in message size==0? [ 1145.843048][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1145.892288][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1146.024461][ T1112] hsr_slave_0: left promiscuous mode [ 1146.067760][ T1112] hsr_slave_1: left promiscuous mode [ 1146.147134][T10322] usbhid 7-1:0.0: can't add hid device: -71 [ 1146.163311][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.191189][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.239530][T10322] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1146.356687][T10322] usb 7-1: USB disconnect, device number 6 [ 1146.797925][T14152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1147.703155][T10876] Bluetooth: hci3: command tx timeout [ 1147.942392][T10876] Bluetooth: hci4: command tx timeout [ 1148.902871][T10322] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1149.782905][T10876] Bluetooth: hci3: command tx timeout [ 1149.785903][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 1149.868132][T10322] usb 10-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1149.879602][T10322] usb 10-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1149.891193][T10322] usb 10-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1149.895330][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 1149.908749][T10322] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1149.945069][T10322] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1150.035148][T10876] Bluetooth: hci4: command tx timeout [ 1150.052441][T10322] usb 10-1: SerialNumber: syz [ 1150.340107][T14164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.351220][T14164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.872635][T10876] Bluetooth: hci3: command tx timeout [ 1152.178663][T14189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1152.230025][T10876] Bluetooth: hci4: command tx timeout [ 1152.899879][T10322] rndis_host 10-1:253.0: RNDIS init failed, -71 [ 1153.001408][T10322] rndis_host 10-1:253.0: probe with driver rndis_host failed with error -71 [ 1153.216870][T10322] usb 10-1: USB disconnect, device number 12 [ 1154.209307][T14195] PKCS8: Unsupported PKCS#8 version [ 1154.293906][T10876] Bluetooth: hci4: command tx timeout [ 1155.388857][T10876] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 1156.034586][T14218] Zero length message leads to an empty skb [ 1159.014339][T14122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.048798][T14122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.097083][T14122] bridge_slave_0: entered allmulticast mode [ 1159.145836][T14122] bridge_slave_0: entered promiscuous mode [ 1159.271951][T14122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.281905][T14122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.291734][T14122] bridge_slave_1: entered allmulticast mode [ 1159.300485][T14122] bridge_slave_1: entered promiscuous mode [ 1160.114653][T14122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.170905][T14122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.522371][T14256] macsec1: entered promiscuous mode [ 1160.532433][T14256] macsec1: entered allmulticast mode [ 1160.552422][ T5767] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1160.569360][T14122] team0: Port device team_slave_0 added [ 1160.643882][T14122] team0: Port device team_slave_1 added [ 1160.743610][ T5767] usb 7-1: Using ep0 maxpacket: 32 [ 1160.781857][ T5767] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.815834][ T5767] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.860280][ T5767] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.880077][ T5791] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1160.907093][ T5767] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.952838][T14122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.963056][ T5767] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1160.982048][ T5767] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1161.003817][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.042412][ T5767] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.075755][ T5767] usb 7-1: config 0 descriptor?? [ 1161.112497][T14122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.123328][ T5791] usb 3-1: Using ep0 maxpacket: 16 [ 1161.134855][ T5791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.157959][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1161.204001][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1161.217155][T14122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.246396][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.278461][ T5791] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1161.314997][ T5791] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1161.370916][ T5791] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1161.384709][T14122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.407107][ T5791] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1161.620256][ T5791] usb 3-1: Manufacturer: syz [ 1161.662698][ T5791] usb 3-1: config 0 descriptor?? [ 1161.669881][ T5915] bridge_slave_1: left allmulticast mode [ 1161.695907][ T5915] bridge_slave_1: left promiscuous mode [ 1161.727563][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.760482][ T5915] bridge_slave_0: left allmulticast mode [ 1161.851885][ T5915] bridge_slave_0: left promiscuous mode [ 1162.243761][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.448859][ T5767] usbhid 7-1:0.0: can't add hid device: -71 [ 1162.465746][ T5767] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1162.517004][ T5791] rc_core: IR keymap rc-hauppauge not found [ 1162.533510][ T5767] usb 7-1: USB disconnect, device number 7 [ 1162.541117][ T5791] Registered IR keymap rc-empty [ 1162.568047][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1162.623925][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1162.668316][ T5791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1162.720878][ T5791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 1162.781280][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1162.917589][ T5915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.958323][ T5915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.990107][ T5915] bond0 (unregistering): Released all slaves [ 1163.112409][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1163.149468][T14283] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1282'. [ 1163.162341][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1163.188621][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1163.246614][T14294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1163.262517][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1163.296514][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1163.352451][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1163.451028][ T5915] hsr_slave_0: left promiscuous mode [ 1163.452350][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1163.504837][ T5915] hsr_slave_1: left promiscuous mode [ 1163.512639][T14299] PKCS8: Unsupported PKCS#8 version [ 1163.513889][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1163.525220][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.617614][ T5791] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1163.916963][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.955506][ T5791] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1164.072329][ T5791] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1164.109785][ T5791] usb 3-1: USB disconnect, device number 17 [ 1165.887123][ T5915] team0 (unregistering): Port device team_slave_1 removed [ 1165.949742][ T5915] team0 (unregistering): Port device team_slave_0 removed [ 1166.480454][T14325] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1167.781174][T14122] hsr_slave_0: entered promiscuous mode [ 1167.801341][T14122] hsr_slave_1: entered promiscuous mode [ 1167.815852][T14122] debugfs: 'hsr0' already exists in 'hsr' [ 1167.826781][T14330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1167.835514][T14330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1167.843817][T14122] Cannot create hsr debugfs directory [ 1168.042268][T14144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.050463][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.062480][T14144] bridge_slave_0: entered allmulticast mode [ 1168.093086][T14144] bridge_slave_0: entered promiscuous mode [ 1168.139506][T14334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1290'. [ 1168.188795][T14144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.217459][T14144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.239647][T14144] bridge_slave_1: entered allmulticast mode [ 1168.265562][T14144] bridge_slave_1: entered promiscuous mode [ 1168.682924][T14144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.675568][T14144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.676822][T14345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.014755][T14144] team0: Port device team_slave_0 added [ 1171.122845][T14144] team0: Port device team_slave_1 added [ 1171.292568][ T5791] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1171.879880][T14144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.890515][ T5791] usb 3-1: Using ep0 maxpacket: 32 [ 1171.910841][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1171.962343][ T5791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.982235][ T5791] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.995064][T14144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.018568][ T5791] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.041293][T14144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.060990][ T5791] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1172.075858][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.111950][ T5791] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1172.134727][ T5791] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1172.146768][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.158165][T14144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.181936][ T5791] usb 3-1: config 0 descriptor?? [ 1172.479399][T14367] PKCS8: Unsupported PKCS#8 version [ 1172.480154][T14144] hsr_slave_0: entered promiscuous mode [ 1172.493511][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1172.632069][T14144] hsr_slave_1: entered promiscuous mode [ 1172.743366][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1172.746549][T14144] debugfs: 'hsr0' already exists in 'hsr' [ 1172.789737][T14144] Cannot create hsr debugfs directory [ 1172.790775][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.865418][T10876] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1172.977492][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1173.196234][ T5791] usbhid 3-1:0.0: can't add hid device: -71 [ 1173.212081][ T5791] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1173.216590][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1173.250590][ T5791] usb 3-1: USB disconnect, device number 18 [ 1173.268155][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1173.352689][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1173.394690][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1173.415834][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1173.471784][ T10] usb 7-1: Manufacturer: syz [ 1173.499413][ T10] usb 7-1: config 0 descriptor?? [ 1174.252374][ T10] rc_core: IR keymap rc-hauppauge not found [ 1174.277498][T14377] xt_CT: No such helper "pptp" [ 1174.285908][ T10] Registered IR keymap rc-empty [ 1174.299460][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1174.512514][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1174.549242][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1174.756216][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input42 [ 1175.197112][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1175.442789][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1175.684872][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1175.772566][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1175.822480][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1175.877467][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1175.923444][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1175.954357][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1175.983704][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1176.007242][ T10] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1176.500332][ T10] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1176.665506][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.672634][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.730474][ T10] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1177.695789][ T10] usb 7-1: USB disconnect, device number 8 [ 1178.091694][T14122] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1178.191601][T14122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1178.220599][T14122] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1178.270612][T14122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1179.504370][T14122] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1179.688132][T14122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1179.702719][T14122] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1179.992630][T14122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1181.022284][ T5746] IPVS: starting estimator thread 0... [ 1181.252573][T14428] IPVS: using max 29 ests per chain, 69600 per kthread [ 1181.280280][T14414] xt_CT: No such helper "pptp" [ 1182.999834][T14122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.195156][T10322] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1183.248373][T14122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.420959][T10322] usb 10-1: Using ep0 maxpacket: 16 [ 1183.424668][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.433550][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.499452][T10322] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.579169][T10322] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1183.684203][T10322] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1183.888328][T10322] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1183.899933][T10322] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1183.925232][T10322] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1183.959602][T10322] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1184.813149][T10322] usb 10-1: Manufacturer: syz [ 1184.927404][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.934853][ T5909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.034723][T10322] usb 10-1: config 0 descriptor?? [ 1185.134813][T14447] xt_CT: No such helper "pptp" [ 1185.193943][ T5753] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1185.408036][ T5753] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1185.437845][ T5753] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1185.476390][ T5753] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1185.507739][T10322] rc_core: IR keymap rc-hauppauge not found [ 1185.539184][T10322] Registered IR keymap rc-empty [ 1185.548035][ T5753] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1185.570477][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1185.574228][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1185.613356][ T5753] usb 3-1: SerialNumber: syz [ 1185.642378][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1185.652672][T14144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1185.686693][T14144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1185.694926][T10322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1185.720890][T14144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1185.830147][T10322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input43 [ 1185.851312][T14144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1185.883786][T14452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.892805][T14452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.019988][T14144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1186.037717][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1186.080137][T14144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1186.090496][T14144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1186.097779][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1186.121238][T14144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1186.144349][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1186.788764][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1186.843136][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1187.164891][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1187.454465][ T5753] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 1187.456696][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1187.521515][ T5753] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 1187.548434][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1187.614947][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1187.662510][T10322] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1187.684501][ T5753] usb 3-1: USB disconnect, device number 19 [ 1187.749999][T10322] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1187.819240][T10322] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1187.923558][T10322] usb 10-1: USB disconnect, device number 13 [ 1188.066697][T14144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.635877][T14144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.717984][T14480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.725241][T14480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.856427][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.863616][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.019980][T14504] xt_CT: No such helper "pptp" [ 1194.107883][T14550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1195.163247][ T5754] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1195.691574][T14122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.722389][ T5754] usb 7-1: Using ep0 maxpacket: 16 [ 1195.817338][ T5754] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.886745][ T5754] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1196.015329][ T5754] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1196.102931][ T5754] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1196.145931][T14571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1196.178110][T14144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.216848][ T5754] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1196.391562][ T5754] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1196.428848][ T5754] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1196.486471][ T5754] usb 7-1: Manufacturer: syz [ 1196.571594][ T5754] usb 7-1: config 0 descriptor?? [ 1197.102378][ T5754] rc_core: IR keymap rc-hauppauge not found [ 1197.154346][ T5754] Registered IR keymap rc-empty [ 1197.172894][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.273633][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.337655][ T5754] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1197.386913][ T5754] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input44 [ 1197.442882][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.492481][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.525017][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.553201][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.583463][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.624137][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.652427][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.693295][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.753721][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.803292][ T5754] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1197.812865][T14122] veth0_vlan: entered promiscuous mode [ 1197.862398][ T5754] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1197.894209][T14122] veth1_vlan: entered promiscuous mode [ 1197.919688][ T5754] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1198.006743][ T5754] usb 7-1: USB disconnect, device number 9 [ 1198.408963][T14122] veth0_macvtap: entered promiscuous mode [ 1198.449681][T14122] veth1_macvtap: entered promiscuous mode [ 1198.527877][T14122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.661478][T14122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.841300][T14144] veth0_vlan: entered promiscuous mode [ 1199.088819][T14601] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1332'. [ 1199.457321][ T5911] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.494671][T14144] veth1_vlan: entered promiscuous mode [ 1199.571098][ T5911] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.601337][ T5911] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.786743][ T5911] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.975086][T14144] veth0_macvtap: entered promiscuous mode [ 1200.025478][T14144] veth1_macvtap: entered promiscuous mode [ 1200.153388][T14144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1200.219643][T14144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1200.286872][ T1166] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.314016][ T1166] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.344710][ T1166] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.389999][ T1166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.659225][T14552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.691010][T14552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.802237][ T5911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.810827][ T5911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.484997][T14627] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1201.492251][T14627] overlayfs: failed to set xattr on upper [ 1201.498090][T14627] overlayfs: ...falling back to redirect_dir=nofollow. [ 1201.505052][T14627] overlayfs: ...falling back to index=off. [ 1201.511624][T14627] overlayfs: ...falling back to uuid=null. [ 1201.518249][T14627] overlayfs: conflicting lowerdir path [ 1203.267499][ T7094] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.333707][T14636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1204.507676][T14625] xt_CT: No such helper "pptp" [ 1204.557440][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1204.577216][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1204.589480][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1204.598484][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1204.611474][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1205.357818][ T7094] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.611341][ T7094] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.755712][ T7094] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.079435][ T7094] bridge_slave_1: left allmulticast mode [ 1206.085382][ T7094] bridge_slave_1: left promiscuous mode [ 1206.091194][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.101647][ T7094] bridge_slave_0: left allmulticast mode [ 1206.108464][ T7094] bridge_slave_0: left promiscuous mode [ 1206.114450][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.722758][ T5746] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1206.764797][T10876] Bluetooth: hci3: command tx timeout [ 1207.243876][T10322] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1207.874214][ T5746] usb 2-1: Using ep0 maxpacket: 16 [ 1208.018271][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.064438][T10322] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1208.109364][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.121181][T10322] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1208.136047][T10322] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1208.161918][T10322] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1208.176768][ T5746] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1208.205664][T10322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1208.213213][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.224901][ T7094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.244950][T10322] usb 3-1: SerialNumber: syz [ 1208.269339][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1208.270986][ T5746] usb 2-1: config 0 descriptor?? [ 1208.283774][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1208.292819][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1208.314363][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1208.330234][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1208.383140][ T7094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.392808][ T5746] xbox_remote_probe: endpoint_in message size==0? [ 1208.424267][ T7094] bond0 (unregistering): Released all slaves [ 1208.602623][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.611706][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.687165][ T5746] usbhid 2-1:0.0: can't add hid device: -71 [ 1208.728921][ T5746] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1208.829985][ T5746] usb 2-1: USB disconnect, device number 26 [ 1208.838270][ T5628] Bluetooth: hci3: command tx timeout [ 1209.023740][ T7094] hsr_slave_0: left promiscuous mode [ 1209.079151][ T7094] hsr_slave_1: left promiscuous mode [ 1209.259957][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1209.363553][ T7094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.523598][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1209.683273][ T7094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.746741][ T7094] veth1_macvtap: left promiscuous mode [ 1209.774171][ T7094] veth0_macvtap: left promiscuous mode [ 1209.858067][ T7094] veth1_vlan: left promiscuous mode [ 1209.954758][ T7094] veth0_vlan: left promiscuous mode [ 1209.975294][T10322] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 1210.102848][T10322] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 1210.269881][T10322] usb 3-1: USB disconnect, device number 20 [ 1210.436133][ T5628] Bluetooth: hci4: command tx timeout [ 1210.453138][T14698] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1344'. [ 1210.978403][ T5628] Bluetooth: hci3: command tx timeout [ 1212.235184][ T7094] team0 (unregistering): Port device team_slave_1 removed [ 1212.299461][ T7094] team0 (unregistering): Port device team_slave_0 removed [ 1212.504415][ T5628] Bluetooth: hci4: command tx timeout [ 1212.821677][T14713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.062907][ T5628] Bluetooth: hci3: command tx timeout [ 1213.767945][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1214.612492][ T5628] Bluetooth: hci4: command tx timeout [ 1214.652523][T14730] binder_alloc: 14729: binder_alloc_buf, no vma [ 1214.808042][T14724] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1214.866073][T14724] ALSA: mixer_oss: invalid index 1374389 [ 1215.093213][T14724] ALSA: mixer_oss: invalid OSS volume 'P' [ 1216.669139][ T5628] Bluetooth: hci4: command tx timeout [ 1218.287940][ T5775] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1218.336438][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.478782][ T5775] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1218.514908][ T5775] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1218.556495][ T5775] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1218.607914][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1358'. [ 1218.623875][ T5775] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1218.641466][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1218.650209][ T5775] usb 3-1: SerialNumber: syz [ 1218.893992][T14757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.903492][T14757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.236440][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.340763][ T5628] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1219.569195][T14677] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1219.765913][T14677] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1219.885389][T14677] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1220.020474][T14677] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1220.170622][T14677] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1220.207181][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.239265][T14677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1220.275660][T14677] usb 2-1: SerialNumber: syz [ 1220.419449][T14638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.441963][T14638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.443089][ T5775] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 1220.488911][T14638] bridge_slave_0: entered allmulticast mode [ 1220.498365][ T5775] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 1220.525183][T14780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.530433][T14638] bridge_slave_0: entered promiscuous mode [ 1220.534177][T14780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.594547][ T5775] usb 3-1: USB disconnect, device number 21 [ 1220.704557][T14638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.724296][T14638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.744955][T14638] bridge_slave_1: entered allmulticast mode [ 1220.771451][T14638] bridge_slave_1: entered promiscuous mode [ 1220.895365][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.627578][T14794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1221.923584][T14677] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 1222.017502][T14677] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 1222.163230][T14677] usb 2-1: USB disconnect, device number 27 [ 1223.323540][ T5284] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1223.427586][T14638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.513678][T14638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.966628][T14638] team0: Port device team_slave_0 added [ 1224.493710][T14638] team0: Port device team_slave_1 added [ 1225.212109][T14638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.299752][T14638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.660903][T14638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.697988][T14638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.715236][T14638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.965645][T14638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.824388][ T12] bridge_slave_1: left allmulticast mode [ 1226.845072][ T12] bridge_slave_1: left promiscuous mode [ 1226.872518][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.913603][ T12] bridge_slave_0: left allmulticast mode [ 1226.941853][ T12] bridge_slave_0: left promiscuous mode [ 1226.968894][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.921674][T14843] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1227.931902][T14843] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1228.941085][T14845] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1372'. [ 1229.572589][T14851] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1373'. [ 1230.990437][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.995865][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1232.053745][ T12] bond0 (unregistering): Released all slaves [ 1232.765391][ T5284] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1234.636776][T14888] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1234.643998][T14888] overlayfs: failed to set xattr on upper [ 1234.649830][T14888] overlayfs: ...falling back to redirect_dir=nofollow. [ 1234.656872][T14888] overlayfs: ...falling back to index=off. [ 1234.662790][T14888] overlayfs: ...falling back to uuid=null. [ 1234.668971][T14888] overlayfs: conflicting lowerdir path [ 1235.898877][T14638] hsr_slave_0: entered promiscuous mode [ 1235.906690][T14638] hsr_slave_1: entered promiscuous mode [ 1235.907340][T14638] debugfs: 'hsr0' already exists in 'hsr' [ 1235.907363][T14638] Cannot create hsr debugfs directory [ 1235.912535][T14680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.912626][T14680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.912764][T14680] bridge_slave_0: entered allmulticast mode [ 1235.922485][T14680] bridge_slave_0: entered promiscuous mode [ 1235.983830][T14680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.983923][T14680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.984090][T14680] bridge_slave_1: entered allmulticast mode [ 1235.991050][T14680] bridge_slave_1: entered promiscuous mode [ 1236.081288][ T12] hsr_slave_0: left promiscuous mode [ 1236.086287][ T12] hsr_slave_1: left promiscuous mode [ 1236.087589][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.087621][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.089185][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.089297][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.116020][ T12] veth1_macvtap: left promiscuous mode [ 1236.116061][ T12] veth0_macvtap: left promiscuous mode [ 1236.116143][ T12] veth1_vlan: left promiscuous mode [ 1236.116201][ T12] veth0_vlan: left promiscuous mode [ 1238.091658][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1238.106690][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.115980][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.146875][T14909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1238.190959][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1238.770433][ T5628] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1240.120025][T14680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.184215][T14680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.205907][T14921] xt_CT: No such helper "pptp" [ 1241.048569][T14680] team0: Port device team_slave_0 added [ 1241.296716][T14680] team0: Port device team_slave_1 added [ 1241.781538][T14942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.467150][T14680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.495844][T14680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.556465][T14680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.591519][T14680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.837797][T14680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.315615][T14958] blktrace: Concurrent blktraces are not allowed on loop4 [ 1244.556310][T14680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.960088][T14964] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1244.969226][T14964] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1246.488648][T14973] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1399'. [ 1246.899921][T14680] hsr_slave_0: entered promiscuous mode [ 1246.913326][T14680] hsr_slave_1: entered promiscuous mode [ 1246.919757][T14680] debugfs: 'hsr0' already exists in 'hsr' [ 1246.925934][T14680] Cannot create hsr debugfs directory [ 1253.616525][T15011] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1253.623624][T15011] overlayfs: failed to set xattr on upper [ 1253.630527][T15011] overlayfs: ...falling back to redirect_dir=nofollow. [ 1253.637480][T15011] overlayfs: ...falling back to index=off. [ 1253.643367][T15011] overlayfs: ...falling back to uuid=null. [ 1253.649213][T15011] overlayfs: conflicting lowerdir path [ 1254.979998][T14638] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1255.024474][T14638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1255.938217][T14638] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1256.616869][T15029] xt_CT: No such helper "pptp" [ 1256.659920][T14638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1256.696376][T14638] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1257.099430][T14638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1257.301753][T14638] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1257.304620][T10323] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1257.370128][T14638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1257.652269][T10323] usb 3-1: Using ep0 maxpacket: 16 [ 1258.457641][T10323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.484248][T10323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.496627][T10323] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1258.506236][T10323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.520304][T10323] usb 3-1: config 0 descriptor?? [ 1258.540467][T10323] xbox_remote_probe: endpoint_in message size==0? [ 1258.736760][T10323] usbhid 3-1:0.0: can't add hid device: -71 [ 1258.762642][T10323] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1259.042564][T10323] usb 3-1: USB disconnect, device number 22 [ 1259.622771][T14638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.726011][T14638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.796525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.803742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.023350][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.030669][ T7115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.482724][T14680] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1263.534417][T14680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1263.579186][T14680] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1263.629406][T14680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1263.667148][T14680] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1263.705862][T14680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1263.729572][T14680] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1263.766385][T14680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1264.027096][T14680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.082727][T14680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.109496][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.116700][ T5915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.157378][T14552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.164599][T14552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.827473][T15104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1267.296265][T10876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1267.306622][T10876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1267.319773][T10876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1267.332418][T10876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1267.340789][T10876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1268.223067][ T1000] bridge_slave_1: left allmulticast mode [ 1268.228790][ T1000] bridge_slave_1: left promiscuous mode [ 1268.244319][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.270777][ T1000] bridge_slave_0: left allmulticast mode [ 1268.292484][ T1000] bridge_slave_0: left promiscuous mode [ 1268.298474][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.743397][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.818441][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.860125][ T1000] bond0 (unregistering): Released all slaves [ 1269.385914][ T5628] Bluetooth: hci3: command tx timeout [ 1270.831326][T15158] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1429'. [ 1271.250148][T15146] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1427'. [ 1271.288583][T10876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1271.301799][T10876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1271.310162][T10876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1271.319547][T10876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1271.327513][T10876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1271.421544][T10876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1271.431413][ T1000] hsr_slave_0: left promiscuous mode [ 1271.439065][T10876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1271.454226][T10876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1271.466921][T10876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1271.474076][T10876] Bluetooth: hci3: command tx timeout [ 1271.481866][T10876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1271.512653][T15142] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 1271.534944][ T1000] hsr_slave_1: left promiscuous mode [ 1271.557324][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.583907][T15142] ALSA: mixer_oss: invalid index 1374389 [ 1271.629744][T15142] ALSA: mixer_oss: invalid OSS volume 'PHONE' [ 1271.645089][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.614380][T15165] Bluetooth: hci4: command tx timeout [ 1273.621299][T15165] Bluetooth: hci3: command tx timeout [ 1273.629849][T15165] Bluetooth: hci6: command tx timeout [ 1273.725200][T15186] blktrace: Concurrent blktraces are not allowed on loop2 [ 1274.396325][ T5641] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 1275.115188][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 1275.179833][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 1275.702340][ T5641] Bluetooth: hci6: command tx timeout [ 1275.707909][T15165] Bluetooth: hci3: command tx timeout [ 1275.713550][T15165] Bluetooth: hci4: command tx timeout [ 1275.722324][ T801] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1275.882589][ T801] usb 7-1: Using ep0 maxpacket: 16 [ 1275.894713][ T801] usb 7-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1275.927466][ T801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1275.969345][ T801] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1275.991337][ T801] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1276.025528][ T801] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1276.094495][ T801] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1276.321565][ T801] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1277.137535][ T801] usb 7-1: Manufacturer: syz [ 1277.179108][ T801] usb 7-1: config 0 descriptor?? [ 1277.782847][ T5628] Bluetooth: hci6: command tx timeout [ 1277.788475][ T5628] Bluetooth: hci4: command tx timeout [ 1277.822260][ T801] rc_core: IR keymap rc-hauppauge not found [ 1277.828245][ T801] Registered IR keymap rc-empty [ 1277.841837][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1277.874903][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1277.903650][ T801] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1277.932487][ T801] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input45 [ 1277.965210][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1278.005141][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1278.266827][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1278.292320][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1278.332324][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1278.422587][T15236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1279.315143][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1279.345954][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1279.402329][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1279.462393][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1279.502023][ T801] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1279.864455][ T5628] Bluetooth: hci6: command tx timeout [ 1279.972101][ T5628] Bluetooth: hci4: command tx timeout [ 1280.072242][ T801] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1280.156699][ T801] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1280.384828][ T801] usb 7-1: USB disconnect, device number 10 [ 1280.689684][T15250] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1439'. [ 1280.875136][ T5641] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 1281.703777][T15260] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1441'. [ 1282.064400][ T1000] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.072825][ T1000] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.423080][ T1000] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.837789][T15301] loop6: detected capacity change from 0 to 256 [ 1285.854874][ T1000] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.405309][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 1286.419146][T15314] raw_sendmsg: syz.6.1449 forgot to set AF_INET. Fix it! [ 1286.429299][T15111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.442430][T15111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.470719][T15111] bridge_slave_0: entered allmulticast mode [ 1286.491021][T15111] bridge_slave_0: entered promiscuous mode [ 1286.583518][T15111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.630444][T15111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.696056][T15111] bridge_slave_1: entered allmulticast mode [ 1286.753038][T15111] bridge_slave_1: entered promiscuous mode [ 1287.152958][T15342] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1455'. [ 1287.334887][T15111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.388928][T15349] loop6: detected capacity change from 0 to 512 [ 1287.456665][T15111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.522556][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.534646][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.542096][T15160] bridge_slave_0: entered allmulticast mode [ 1287.554935][T15160] bridge_slave_0: entered promiscuous mode [ 1287.615194][T15349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1287.640115][T15349] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1287.680286][T15160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.692450][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.701519][T15349] EXT4-fs (loop6): shut down requested (1) [ 1287.711929][T15160] bridge_slave_1: entered allmulticast mode [ 1287.727956][T15160] bridge_slave_1: entered promiscuous mode [ 1287.796084][T15111] team0: Port device team_slave_0 added [ 1287.838457][T11853] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.007146][T15111] team0: Port device team_slave_1 added [ 1288.110759][T15160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.335640][T15160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.488549][T15111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.495897][T15111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.522410][T15111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.543943][T15111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.552493][T15111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.581766][T15111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.631973][T15380] loop2: detected capacity change from 0 to 4096 [ 1288.696637][T15380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.765009][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1288.801498][T15383] loop1: detected capacity change from 0 to 1764 [ 1288.831236][ T30] audit: type=1800 audit(1778410824.663:10): pid=15380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1464" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1288.857083][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1289.007205][T15383] ISOFS: Unable to identify CD-ROM format. [ 1289.013392][ T5775] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1289.025643][T15160] team0: Port device team_slave_0 added [ 1289.178283][T15161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.185836][ T5775] usb 7-1: device descriptor read/64, error -71 [ 1289.201906][T15161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.234127][T15161] bridge_slave_0: entered allmulticast mode [ 1289.249006][T15161] bridge_slave_0: entered promiscuous mode [ 1289.263470][T15160] team0: Port device team_slave_1 added [ 1289.274795][T15161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.283886][T15161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.291226][T15161] bridge_slave_1: entered allmulticast mode [ 1289.306636][T15161] bridge_slave_1: entered promiscuous mode [ 1289.315162][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1290.332299][ T5775] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1290.472311][ T5775] usb 7-1: device descriptor read/64, error -71 [ 1290.643010][T15111] hsr_slave_0: entered promiscuous mode [ 1290.684071][T15111] hsr_slave_1: entered promiscuous mode [ 1290.723314][T15111] debugfs: 'hsr0' already exists in 'hsr' [ 1290.749559][T15111] Cannot create hsr debugfs directory [ 1290.891430][T15160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.924133][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.051825][T15160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.126475][T15161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.167414][T15403] loop2: detected capacity change from 0 to 2048 [ 1291.177014][T15161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.215864][T15160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.269342][T15160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.272684][ T5775] usb usb7-port1: attempt power cycle [ 1291.305984][T15403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1291.563115][T15402] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1291.713257][T15402] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 1291.888203][T15402] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1291.888203][T15402] [ 1291.986314][T15402] EXT4-fs (loop2): Total free blocks count 0 [ 1292.059635][T15402] EXT4-fs (loop2): Free/Dirty block details [ 1292.070836][T15160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1292.150355][T15402] EXT4-fs (loop2): free_blocks=4096 [ 1292.226364][T15402] EXT4-fs (loop2): dirty_blocks=512 [ 1292.317177][T15402] EXT4-fs (loop2): Block reservation details [ 1292.356099][T15402] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 1292.485980][T15424] loop6: detected capacity change from 0 to 256 [ 1292.513397][T15424] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffffÿÿÿÿÿÿÿÿÿ1844674407370955161518446744073709551615' [ 1292.626541][ T1097] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 450 with error 28 [ 1292.722094][ T5635] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1292.801195][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1292.877168][T15160] hsr_slave_0: entered promiscuous mode [ 1292.900529][T15160] hsr_slave_1: entered promiscuous mode [ 1292.928102][T15160] debugfs: 'hsr0' already exists in 'hsr' [ 1292.965335][T15160] Cannot create hsr debugfs directory [ 1293.041902][T15161] team0: Port device team_slave_0 added [ 1293.227375][T15161] team0: Port device team_slave_1 added [ 1293.410400][T15440] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1293.834021][T15161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.841085][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.871004][T15161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.932591][T15444] xt_CONNSECMARK: invalid mode: 66 [ 1293.963702][T15444] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1295.210372][T15452] loop1: detected capacity change from 0 to 128 [ 1295.720324][T15161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.777718][T15161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.055428][T15161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.091501][T15452] FAT-fs (loop1): bogus number of reserved sectors [ 1296.100138][T15452] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1296.109635][T15452] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1297.963746][T15161] hsr_slave_0: entered promiscuous mode [ 1297.986180][T15161] hsr_slave_1: entered promiscuous mode [ 1298.000645][T15161] debugfs: 'hsr0' already exists in 'hsr' [ 1298.024159][T15161] Cannot create hsr debugfs directory [ 1298.252412][ T1000] bridge_slave_1: left allmulticast mode [ 1298.268512][ T1000] bridge_slave_1: left promiscuous mode [ 1298.283328][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.329241][ T1000] bridge_slave_0: left allmulticast mode [ 1298.355176][ T1000] bridge_slave_0: left promiscuous mode [ 1298.381296][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.493664][ T1000] bridge_slave_1: left allmulticast mode [ 1298.516919][ T1000] bridge_slave_1: left promiscuous mode [ 1298.546838][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.613624][ T1000] bridge_slave_0: left allmulticast mode [ 1298.633620][ T1000] bridge_slave_0: left promiscuous mode [ 1298.666658][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.254399][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.313730][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.341402][ T1000] bond0 (unregistering): Released all slaves [ 1299.566963][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.575338][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.682981][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.696359][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.708322][ T1000] bond0 (unregistering): Released all slaves [ 1300.551657][T15508] loop2: detected capacity change from 0 to 512 [ 1300.586873][T15508] EXT4-fs: Ignoring removed bh option [ 1300.607248][T15508] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1300.645222][T15511] ======================================================= [ 1300.645222][T15511] WARNING: The mand mount option has been deprecated and [ 1300.645222][T15511] and is ignored by this kernel. Remove the mand [ 1300.645222][T15511] option from the mount to silence this warning. [ 1300.645222][T15511] ======================================================= [ 1300.768811][T15508] EXT4-fs (loop2): 1 truncate cleaned up [ 1300.808580][T15508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.890625][T15508] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1497: bg 0: block 465: padding at end of block bitmap is not set [ 1300.927546][T15508] EXT4-fs (loop2): Remounting filesystem read-only [ 1300.941053][ T30] audit: type=1326 audit(1778410836.773:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15507 comm="syz.2.1497" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20e7d9cdd9 code=0x0 [ 1301.004852][ T1000] hsr_slave_0: left promiscuous mode [ 1301.015397][ T1000] hsr_slave_1: left promiscuous mode [ 1301.021647][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.029635][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.048128][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.055869][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.071379][ T1000] hsr_slave_0: left promiscuous mode [ 1301.078006][ T1000] hsr_slave_1: left promiscuous mode [ 1301.084309][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.093182][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.117606][ T1000] veth1_macvtap: left promiscuous mode [ 1301.123899][ T1000] veth0_macvtap: left promiscuous mode [ 1301.129560][ T1000] veth1_vlan: left promiscuous mode [ 1301.137453][ T1000] veth0_vlan: left promiscuous mode [ 1301.469271][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.928153][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 1301.955785][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 1302.388181][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 1302.424088][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 1302.966850][T15525] loop6: detected capacity change from 0 to 512 [ 1303.011159][T15525] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1303.047646][T15525] EXT4-fs (loop6): invalid journal inode [ 1303.057739][T15525] EXT4-fs (loop6): can't get journal size [ 1303.283782][T15525] EXT4-fs (loop6): 1 truncate cleaned up [ 1303.375472][T15525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1303.840653][ T1000] IPVS: stop unused estimator thread 0... [ 1303.991505][T15111] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1304.039446][T15111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1304.069266][T15111] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1304.120941][T15111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1304.129711][T15550] loop2: detected capacity change from 0 to 1024 [ 1304.165827][T15111] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1304.172920][T15550] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1304.235033][T15111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1304.290947][T15552] loop1: detected capacity change from 0 to 512 [ 1304.304811][T15552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1304.395744][T15552] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1304.465423][T15552] EXT4-fs error (device loop1): ext4_iget_extra_inode:5127: inode #15: comm syz.1.1512: corrupted in-inode xattr: e_value size too large [ 1304.494388][T15552] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1304.502465][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1304.520019][ C0] EXT4-fs (loop1): initial error at time 1778410840: ext4_iget_extra_inode:5127: inode 15 [ 1304.530095][ C0] EXT4-fs (loop1): last error at time 1778410840: ext4_iget_extra_inode:5127: inode 15 [ 1304.544999][T15552] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1512: couldn't read orphan inode 15 (err -117) [ 1304.619582][T15552] loop1: lost filesystem error report for type 5 error -117 [ 1304.657509][T15552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1304.797130][T15111] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1304.805095][ T30] audit: type=1800 audit(1778410840.633:12): pid=15552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1512" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1304.861613][T15111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1305.128047][ T5284] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1305.589273][T15111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.594928][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.692661][T15111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.759907][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.767131][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.823742][ T5909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.830983][ T5909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.319740][T15160] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1306.348202][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1306.407226][T15160] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1306.458794][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1306.491094][T15160] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1306.538840][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1306.557969][T15160] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1306.588978][T15160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1306.961203][T15635] loop2: detected capacity change from 0 to 1024 [ 1307.087274][T15635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.114110][T15635] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1307.168479][T15635] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 2: comm syz.2.1529: lblock 2 mapped to illegal pblock 2 (length 4) [ 1307.189003][T15640] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1530'. [ 1307.256798][T15643] loop1: detected capacity change from 0 to 128 [ 1307.290036][ T5284] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1307.300398][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1307.322385][T15643] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1307.347077][T15161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1307.388528][T15161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1307.400474][T15161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1307.417954][T15161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1307.454920][T15161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1307.506054][T15161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1307.523597][T15161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1307.565008][T15161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1307.967271][T15160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.090792][T15160] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.194563][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.201904][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.298653][T14552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.305902][T14552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.451254][T15161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.523110][T15111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.553262][T15681] loop1: detected capacity change from 0 to 512 [ 1308.576600][T15681] EXT4-fs: Ignoring removed bh option [ 1308.595222][T15681] EXT4-fs: Ignoring removed mblk_io_submit option [ 1308.651060][T15161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.667607][T15681] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 1308.762146][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.769402][ T7115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.889881][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.897130][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.008172][T15690] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1543'. [ 1310.124405][T15111] veth0_vlan: entered promiscuous mode [ 1310.199964][T15111] veth1_vlan: entered promiscuous mode [ 1310.375200][ T5284] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1310.446490][T15111] veth0_macvtap: entered promiscuous mode [ 1310.489860][T15111] veth1_macvtap: entered promiscuous mode [ 1310.600024][T15111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.667642][T15111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.756116][ T1097] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.786079][ T1097] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.835779][ T1097] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.866790][ T1097] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.200896][T15732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1548'. [ 1311.325391][T15732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1548'. [ 1311.367792][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.412361][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.481233][T15160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.697958][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.729103][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.377025][T15161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.467919][T15758] loop1: detected capacity change from 0 to 512 [ 1312.575249][T15758] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1312.699346][ T5284] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1312.722939][T15758] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1552: iget: bogus i_mode (2) [ 1312.804658][T15758] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1312.812213][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1312.828218][ C0] EXT4-fs (loop1): initial error at time 1778410848: ext4_orphan_get:1397: inode 15 [ 1312.837701][ C0] EXT4-fs (loop1): last error at time 1778410848: ext4_orphan_get:1397: inode 15 [ 1312.854411][T15758] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1552: couldn't read orphan inode 15 (err -117) [ 1312.897193][T15758] loop1: lost filesystem error report for type 5 error -117 [ 1312.908547][T15758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1313.933354][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.100406][T15160] veth0_vlan: entered promiscuous mode [ 1314.162315][T15160] veth1_vlan: entered promiscuous mode [ 1314.376060][T15160] veth0_macvtap: entered promiscuous mode [ 1314.470275][T15160] veth1_macvtap: entered promiscuous mode [ 1314.527771][T15160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1314.552928][T15160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.658598][ T7115] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.688550][T15789] loop1: detected capacity change from 0 to 4096 [ 1314.719939][ T7115] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.767655][ T7115] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.810376][ T7115] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.934168][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1561'. [ 1314.951643][T15789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.054323][T15801] hsr_slave_0: left promiscuous mode [ 1315.093114][T15801] hsr_slave_1: left promiscuous mode [ 1315.167755][ T30] audit: type=1800 audit(1778410851.003:13): pid=15789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1555" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 1315.401829][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.496274][T15161] veth0_vlan: entered promiscuous mode [ 1315.559155][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.578579][T15161] veth1_vlan: entered promiscuous mode [ 1315.595870][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.983793][T15161] veth0_macvtap: entered promiscuous mode [ 1316.015419][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.028241][T15161] veth1_macvtap: entered promiscuous mode [ 1316.047100][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.169733][T15161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.286188][T15161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.378045][T15825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1567'. [ 1316.381778][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.402444][T15825] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 1316.453474][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.486119][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.518846][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.746976][T15831] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1568'. [ 1316.934020][T15828] netlink: 'syz.7.152': attribute type 2 has an invalid length. [ 1316.942729][T15828] netlink: 'syz.7.152': attribute type 2 has an invalid length. [ 1317.589235][ T7115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.621409][ T7115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.824763][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.898708][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.209054][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1576'. [ 1318.223079][T15857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1577'. [ 1318.248676][T15858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.285516][T15858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.326977][T15858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.428850][T15858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.118473][T15867] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1579'. [ 1319.927202][T14788] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1320.123501][T14788] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1320.158012][T15877] loop8: detected capacity change from 0 to 8192 [ 1320.721969][ T30] audit: type=1800 audit(1778410856.543:14): pid=15897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1582" name="file1" dev="loop8" ino=1048649 res=0 errno=0 [ 1320.733380][T15899] loop4: detected capacity change from 0 to 256 [ 1322.155121][T15929] netlink: 'syz.6.1598': attribute type 1 has an invalid length. [ 1323.117502][T15950] xt_CONNSECMARK: invalid mode: 66 [ 1323.365013][T15950] loop8: detected capacity change from 0 to 2048 [ 1323.815761][T15950] loop8: p3 < > p4 < > [ 1323.820053][T15950] loop8: partition table partially beyond EOD, truncated [ 1323.827476][T15950] loop8: p3 start 4284289 is beyond EOD, truncated [ 1324.226686][T12745] udevd[12745]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 1324.515910][T15967] loop4: detected capacity change from 0 to 1024 [ 1324.589138][T15706] Set syz1 is full, maxelem 65536 reached [ 1324.936317][T15967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1325.156027][T15706] Process accounting resumed [ 1325.555592][T15161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.043340][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1326.056785][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1326.065776][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1326.082402][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1326.100529][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1327.541845][T16037] loop7: detected capacity change from 0 to 128 [ 1328.183457][ T5641] Bluetooth: hci1: command tx timeout [ 1328.459917][T16054] loop1: detected capacity change from 0 to 256 [ 1328.621386][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.464950][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.741025][T16093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1648'. [ 1329.850153][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.262697][ T5641] Bluetooth: hci1: command tx timeout [ 1330.554653][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.631988][T16116] loop4: detected capacity change from 0 to 1024 [ 1330.721318][T16116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1330.749022][ T30] audit: type=1800 audit(1778410866.583:15): pid=16116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1656" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1330.872129][ T30] audit: type=1804 audit(1778410866.693:16): pid=16126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1656" name="/newroot/14/file1/cgroup.controllers" dev="loop4" ino=18 res=1 errno=0 [ 1331.238689][T15161] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.097218][T16145] 9pnet_fd: p9_fd_create_tcp (16145): problem connecting socket to 127.0.0.1 [ 1332.342706][ T5641] Bluetooth: hci1: command tx timeout [ 1332.940184][T15998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.095622][T15998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.103079][T15998] bridge_slave_0: entered allmulticast mode [ 1333.111365][T15998] bridge_slave_0: entered promiscuous mode [ 1333.120971][T15998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.131838][T15998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.139415][T15998] bridge_slave_1: entered allmulticast mode [ 1333.147768][T15998] bridge_slave_1: entered promiscuous mode [ 1333.428023][T16176] loop8: detected capacity change from 0 to 128 [ 1333.485269][T15998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.517924][T16176] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1333.602843][T15998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.670336][T16176] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.765853][ T48] bridge_slave_1: left allmulticast mode [ 1333.791975][ T48] bridge_slave_1: left promiscuous mode [ 1333.830392][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.888214][ T48] bridge_slave_0: left allmulticast mode [ 1333.917146][T15111] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1333.918007][ T48] bridge_slave_0: left promiscuous mode [ 1333.980151][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.167668][T16194] loop8: detected capacity change from 0 to 164 [ 1334.308947][T16194] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1677'. [ 1334.444730][ T5641] Bluetooth: hci1: command tx timeout [ 1335.185082][T16213] loop7: detected capacity change from 0 to 1024 [ 1335.217661][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.272056][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.317266][ T48] bond0 (unregistering): Released all slaves [ 1335.395201][T16213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.801233][T15998] team0: Port device team_slave_0 added [ 1335.810734][T15160] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.911603][T15998] team0: Port device team_slave_1 added [ 1336.026877][T16223] loop8: detected capacity change from 0 to 512 [ 1336.051413][T16223] EXT4-fs: Ignoring removed oldalloc option [ 1336.110044][T16223] EXT4-fs: Ignoring removed nobh option [ 1336.231686][T16223] [ 1336.234103][T16223] ====================================================== [ 1336.241135][T16223] WARNING: possible circular locking dependency detected [ 1336.248256][T16223] syzkaller #0 Not tainted [ 1336.252752][T16223] ------------------------------------------------------ [ 1336.260043][T16223] syz.8.1684/16223 is trying to acquire lock: [ 1336.266196][T16223] ffff8880a8868c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 1336.276179][T16223] [ 1336.276179][T16223] but task is already holding lock: [ 1336.283653][T16223] ffff88808b63afa0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x5f0/0x890 [ 1336.293607][T16223] [ 1336.293607][T16223] which lock already depends on the new lock. [ 1336.293607][T16223] [ 1336.304123][T16223] [ 1336.304123][T16223] the existing dependency chain (in reverse order) is: [ 1336.313212][T16223] [ 1336.313212][T16223] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 1336.320928][T16223] down_write+0x8b/0x1f0 [ 1336.325782][T16223] ext4_destroy_inline_data+0x2d/0xe0 [ 1336.331730][T16223] ext4_do_writepages+0x118b/0x3f20 [ 1336.337507][T16223] ext4_writepages+0x347/0x790 [ 1336.342838][T16223] do_writepages+0x278/0x600 [ 1336.347995][T16223] filemap_writeback+0x22d/0x2e0 [ 1336.353523][T16223] ext4_convert_inline_data+0x474/0x610 [ 1336.359720][T16223] ext4_page_mkwrite+0x343/0x1890 [ 1336.365299][T16223] do_page_mkwrite+0x17a/0x440 [ 1336.370898][T16223] do_wp_page+0xa77/0x4350 [ 1336.375986][T16223] __handle_mm_fault+0x1ab6/0x2a00 [ 1336.381680][T16223] handle_mm_fault+0x36d/0xa20 [ 1336.387010][T16223] do_user_addr_fault+0x5a3/0x12f0 [ 1336.392784][T16223] exc_page_fault+0x6f/0xd0 [ 1336.397841][T16223] asm_exc_page_fault+0x26/0x30 [ 1336.403224][T16223] [ 1336.403224][T16223] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1336.411705][T16223] __lock_acquire+0x14b8/0x2630 [ 1336.417131][T16223] lock_acquire+0x1b1/0x370 [ 1336.422339][T16223] ext4_writepages+0x21d/0x790 [ 1336.427653][T16223] do_writepages+0x278/0x600 [ 1336.432811][T16223] __writeback_single_inode+0x164/0x1350 [ 1336.439020][T16223] writeback_single_inode+0x4d3/0xf30 [ 1336.444977][T16223] write_inode_now+0x174/0x1f0 [ 1336.450301][T16223] iput.part.0+0x7f3/0xf50 [ 1336.455358][T16223] iput+0x35/0x40 [ 1336.459563][T16223] ext4_xattr_block_set+0x6f7/0x3660 [ 1336.465522][T16223] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 1336.472017][T16223] __ext4_expand_extra_isize+0x346/0x480 [ 1336.478219][T16223] __ext4_mark_inode_dirty+0x67d/0x890 [ 1336.484218][T16223] ext4_evict_inode+0x846/0x1a30 [ 1336.489693][T16223] evict+0x3c2/0xad0 [ 1336.494134][T16223] iput.part.0+0x605/0xf50 [ 1336.499096][T16223] iput+0x35/0x40 [ 1336.503292][T16223] ext4_orphan_cleanup+0x71e/0x11e0 [ 1336.509025][T16223] ext4_fill_super+0x916c/0xb5d0 [ 1336.514757][T16223] get_tree_bdev_flags+0x38c/0x620 [ 1336.520507][T16223] vfs_get_tree+0x92/0x320 [ 1336.525556][T16223] path_mount+0x7d0/0x23d0 [ 1336.530519][T16223] __x64_sys_mount+0x293/0x310 [ 1336.535822][T16223] do_syscall_64+0x10b/0xf80 [ 1336.541074][T16223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.547945][T16223] [ 1336.547945][T16223] other info that might help us debug this: [ 1336.547945][T16223] [ 1336.558164][T16223] Possible unsafe locking scenario: [ 1336.558164][T16223] [ 1336.565606][T16223] CPU0 CPU1 [ 1336.570958][T16223] ---- ---- [ 1336.576311][T16223] lock(&ei->xattr_sem); [ 1336.580651][T16223] lock(&sbi->s_writepages_rwsem); [ 1336.588392][T16223] lock(&ei->xattr_sem); [ 1336.595271][T16223] rlock(&sbi->s_writepages_rwsem); [ 1336.600561][T16223] [ 1336.600561][T16223] *** DEADLOCK *** [ 1336.600561][T16223] [ 1336.608691][T16223] 3 locks held by syz.8.1684/16223: [ 1336.613880][T16223] #0: ffff88807b1760d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1336.624244][T16223] #1: ffff88807b176600 (sb_internal){.+.+}-{0:0}, at: evict+0x3c2/0xad0 [ 1336.632758][T16223] #2: ffff88808b63afa0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x5f0/0x890 [ 1336.643077][T16223] [ 1336.643077][T16223] stack backtrace: [ 1336.648956][T16223] CPU: 1 UID: 0 PID: 16223 Comm: syz.8.1684 Not tainted syzkaller #0 PREEMPT(full) [ 1336.649000][T16223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1336.649022][T16223] Call Trace: [ 1336.649036][T16223] [ 1336.649050][T16223] dump_stack_lvl+0x100/0x190 [ 1336.649092][T16223] print_circular_bug.cold+0x178/0x1c7 [ 1336.649157][T16223] check_noncircular+0x146/0x160 [ 1336.649196][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.649249][T16223] __lock_acquire+0x14b8/0x2630 [ 1336.649302][T16223] lock_acquire+0x1b1/0x370 [ 1336.649343][T16223] ? do_writepages+0x278/0x600 [ 1336.649403][T16223] ? __pfx___might_resched+0x10/0x10 [ 1336.649464][T16223] ext4_writepages+0x21d/0x790 [ 1336.649498][T16223] ? do_writepages+0x278/0x600 [ 1336.649554][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.649599][T16223] ? __pfx_ext4_writepages+0x10/0x10 [ 1336.649640][T16223] ? do_writepages+0x4b5/0x600 [ 1336.649696][T16223] ? do_writepages+0x4b5/0x600 [ 1336.649752][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.649798][T16223] ? __pfx_ext4_writepages+0x10/0x10 [ 1336.649833][T16223] do_writepages+0x278/0x600 [ 1336.649892][T16223] ? __pfx_do_writepages+0x10/0x10 [ 1336.649951][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.649998][T16223] __writeback_single_inode+0x164/0x1350 [ 1336.650056][T16223] ? find_held_lock+0x2b/0x80 [ 1336.650114][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.650159][T16223] ? __pfx___writeback_single_inode+0x10/0x10 [ 1336.650217][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.650261][T16223] ? do_raw_spin_unlock+0x145/0x1e0 [ 1336.650312][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.650369][T16223] writeback_single_inode+0x4d3/0xf30 [ 1336.650444][T16223] ? ext4_evict_inode+0x846/0x1a30 [ 1336.650489][T16223] write_inode_now+0x174/0x1f0 [ 1336.650556][T16223] ? path_mount+0x7d0/0x23d0 [ 1336.650607][T16223] ? __pfx_write_inode_now+0x10/0x10 [ 1336.650707][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.650760][T16223] ? find_held_lock+0x2b/0x80 [ 1336.650828][T16223] ? iput.part.0+0x7e6/0xf50 [ 1336.650883][T16223] ? iput.part.0+0x7e6/0xf50 [ 1336.650938][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.650998][T16223] iput.part.0+0x7f3/0xf50 [ 1336.651053][T16223] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1336.651127][T16223] iput+0x35/0x40 [ 1336.651180][T16223] ext4_xattr_block_set+0x6f7/0x3660 [ 1336.651242][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.651298][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.651357][T16223] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 1336.651427][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.651481][T16223] ? xattr_find_entry+0x240/0x2e0 [ 1336.651539][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.651593][T16223] ? ext4_xattr_block_find+0x59/0x430 [ 1336.651653][T16223] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 1336.651738][T16223] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 1336.651810][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.651863][T16223] ? dquot_initialize_needed+0x183/0x2a0 [ 1336.651940][T16223] __ext4_expand_extra_isize+0x346/0x480 [ 1336.652003][T16223] __ext4_mark_inode_dirty+0x67d/0x890 [ 1336.652050][T16223] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1336.652094][T16223] ? __pfx___might_resched+0x10/0x10 [ 1336.652163][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.652222][T16223] ? __ext4_journal_start_sb+0x1ce/0x670 [ 1336.652292][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.652345][T16223] ? ext4_evict_inode+0x6c8/0x1a30 [ 1336.652392][T16223] ext4_evict_inode+0x846/0x1a30 [ 1336.652445][T16223] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1336.652487][T16223] ? evict+0x37e/0xad0 [ 1336.652539][T16223] ? evict+0x37e/0xad0 [ 1336.652590][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.652648][T16223] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1336.652692][T16223] evict+0x3c2/0xad0 [ 1336.652748][T16223] ? __pfx_evict+0x10/0x10 [ 1336.652801][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.652859][T16223] ? iput.part.0+0x5fd/0xf50 [ 1336.652914][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.652975][T16223] iput.part.0+0x605/0xf50 [ 1336.653030][T16223] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1336.653103][T16223] iput+0x35/0x40 [ 1336.653156][T16223] ext4_orphan_cleanup+0x71e/0x11e0 [ 1336.653210][T16223] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 1336.653259][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.653313][T16223] ? ext4_register_li_request+0xef/0xa00 [ 1336.653370][T16223] ext4_fill_super+0x916c/0xb5d0 [ 1336.653447][T16223] ? __pfx_ext4_fill_super+0x10/0x10 [ 1336.653497][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.653555][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.653608][T16223] ? sb_set_blocksize+0x1fe/0x290 [ 1336.653653][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.653707][T16223] ? setup_bdev_super+0x425/0x730 [ 1336.653770][T16223] get_tree_bdev_flags+0x38c/0x620 [ 1336.653837][T16223] ? __pfx_ext4_fill_super+0x10/0x10 [ 1336.653889][T16223] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1336.653959][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.654016][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.654069][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.654123][T16223] ? security_capable+0x80/0x260 [ 1336.654191][T16223] vfs_get_tree+0x92/0x320 [ 1336.654247][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.654303][T16223] path_mount+0x7d0/0x23d0 [ 1336.654361][T16223] ? __pfx_path_mount+0x10/0x10 [ 1336.654416][T16223] ? lockdep_hardirqs_on+0x78/0x100 [ 1336.654483][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.654540][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.654594][T16223] ? kmem_cache_free+0x127/0x6c0 [ 1336.654653][T16223] ? __x64_sys_mount+0x293/0x310 [ 1336.654706][T16223] __x64_sys_mount+0x293/0x310 [ 1336.654761][T16223] ? __pfx___x64_sys_mount+0x10/0x10 [ 1336.654818][T16223] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.654872][T16223] ? rcu_is_watching+0x12/0xc0 [ 1336.654940][T16223] do_syscall_64+0x10b/0xf80 [ 1336.655011][T16223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.655056][T16223] RIP: 0033:0x7fb53079e04a [ 1336.655089][T16223] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.655133][T16223] RSP: 002b:00007fb5316dbe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1336.655172][T16223] RAX: ffffffffffffffda RBX: 00007fb5316dbee0 RCX: 00007fb53079e04a [ 1336.655202][T16223] RDX: 00002000000001c0 RSI: 0000200000000b80 RDI: 00007fb5316dbea0 [ 1336.655231][T16223] RBP: 00002000000001c0 R08: 00007fb5316dbee0 R09: 0000000000800744 [ 1336.655260][T16223] R10: 0000000000800744 R11: 0000000000000246 R12: 0000200000000b80 [ 1336.655289][T16223] R13: 00007fb5316dbea0 R14: 000000000000047a R15: 0000200000000300 [ 1336.655332][T16223] [ 1337.358951][T16223] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.1684: iget: bad extra_isize 90 (inode size 256) [ 1337.399606][T16223] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1337.402202][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1337.417837][ C0] EXT4-fs (loop8): initial error at time 1778410873: ext4_xattr_inode_iget:441: inode 11 [ 1337.427717][ C0] EXT4-fs (loop8): last error at time 1778410873: ext4_xattr_inode_iget:441: inode 11 [ 1337.441073][T16223] EXT4-fs error (device loop8): ext4_xattr_inode_iget:444: comm syz.8.1684: error while reading EA inode 11 err=-117 [ 1337.455948][T16223] loop8: lost filesystem error report for type 5 error -117 [ 1337.478534][T15998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.488983][T16223] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1337.493687][T15998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.508005][T16223] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.1684: iget: bad extra_isize 90 (inode size 256) [ 1337.549635][T16223] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1337.550285][T16223] EXT4-fs error (device loop8): ext4_xattr_inode_iget:444: comm syz.8.1684: error while reading EA inode 11 err=-117 [ 1337.571765][T15998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.571788][T16223] loop8: lost filesystem error report for type 5 error -117 [ 1337.585145][T16223] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.1684: iget: bad extra_isize 90 (inode size 256) [ 1337.608747][T16223] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 1337.612981][T16223] EXT4-fs error (device loop8): ext4_xattr_inode_iget:444: comm syz.8.1684: error while reading EA inode 18 err=-117 [ 1337.654475][T16223] loop8: lost filesystem error report for type 5 error -117 [ 1337.655085][T16223] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.1684: iget: bad extra_isize 90 (inode size 256) [ 1337.663902][T15998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.677294][T16223] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 1337.683853][T16223] EXT4-fs error (device loop8): ext4_xattr_inode_iget:444: comm syz.8.1684: error while reading EA inode 18 err=-117 [ 1337.706938][T16223] loop8: lost filesystem error report for type 5 error -117 [ 1337.708243][T15998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.725850][T16223] EXT4-fs (loop8): 1 orphan inode deleted [ 1337.741782][T15998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.765748][T16223] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.888501][T15111] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.899231][T15998] hsr_slave_0: entered promiscuous mode [ 1337.919250][T15998] hsr_slave_1: entered promiscuous mode [ 1337.926638][T15998] debugfs: 'hsr0' already exists in 'hsr' [ 1337.938697][T15998] Cannot create hsr debugfs directory [ 1338.162055][ T48] hsr_slave_0: left promiscuous mode [ 1338.168182][ T48] hsr_slave_1: left promiscuous mode [ 1338.175958][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1338.183751][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.191725][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1338.201098][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.221526][ T48] veth1_macvtap: left promiscuous mode [ 1338.227865][ T48] veth0_macvtap: left promiscuous mode [ 1338.233680][ T48] veth1_vlan: left promiscuous mode [ 1338.239148][ T48] veth0_vlan: left promiscuous mode [ 1338.443591][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1338.458080][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1338.861280][T15998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1338.878475][T15998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1338.891219][ T48] IPVS: stop unused estimator thread 0... [ 1338.897680][T15998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1338.910798][T15998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1338.919978][T15998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1338.941270][T15998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1338.951064][T15998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1338.962520][T15998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1339.101689][T15998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.139120][T15998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.161240][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.168414][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.213912][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.221185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.710047][T15998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1339.989794][T15998] veth0_vlan: entered promiscuous mode [ 1340.001329][T15998] veth1_vlan: entered promiscuous mode [ 1340.031415][T15998] veth0_macvtap: entered promiscuous mode [ 1340.045191][T15998] veth1_macvtap: entered promiscuous mode [ 1340.067699][T15998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.084958][T15998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.106106][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.115439][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.129530][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.138940][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.183784][T15998] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 1340.230934][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.239802][T15998] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 1340.248478][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.286492][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.296961][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.053284][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1341.449902][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1341.872527][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1342.263784][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4