last executing test programs: 3m29.041695833s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 3m24.499497817s ago: executing program 4 (id=17): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, 0x0, 0x0, 0x9, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$UHID_INPUT(r1, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) read$hiddev(r0, &(0x7f0000000100)=""/4096, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffe}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m24.41115305s ago: executing program 4 (id=19): mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r2, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$eJzs3N9u29YZAPBDx441FwsGFGvSNEDZNBfZRRxJXhwY3UU0mrLZSqJA0kVyNRSL0wWzu2HZgDV3udlWYMOudj30dk+wJ9jTrM+QgfqT2JZjLU0XZcDvB8Q81Pl4zncY4hyIEBkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBAl281mKwq9bLAXluIXSraLvP/i6nja3j+PbY5Zef73X/+OQojqf6HRCJfG9Zfefh77w/rP1XBxvHcxNOpNIzx+650ffPT28lJ94EoUhTMSei0effn4l58dHOz/ZtGJLMhOOsjKPOt3vhdCKPN4a3OzeXO3W8bdrJeW98oq7cdJkXaqvIivJ3dCCFsbcbp+L98b7Gx3eml8PflR3Nraun2j3Wxuxh+vD9NOUeaDmx+vl8lu1utlg51RTF19o/1+uF1fiJ9kVVylnX4cP3h4sL8xL8k6qPXfBLXnBbWb7Xar1W63Nm9t3brdbDYmV+uzD5abJ4SThywv/qLltTs/uVBGO9M57vx3OY/Dt/E0+euiUwAAAAD+x6LRPfZodF/+0qjUzXpp81jM02hh6QEAAADfgdFX+4uTGwAhXArR7Pd/AAAA4P/bn858xi5EUSiHq9H0UZXh3WvRYacudQ7PjT86d7LFqns5ujBpZLTZXJ7sJemV6N1x0LvT6G8mmwfz8oiKYiV68moJhD+Hy+OYy/fH2/vTmnEva92sl64n+c3lEDqdC0tVerf63RcPfx9CUTw999WgfyEKDx4e7K///FcH90e5PKlbeXI4+YXE2tm5rIYjufz22XOPkxHfOT7ildGNmHrUXw36a+N+m0fHvzQ+fOklxv+H8N445r1JpmvHx9+o+2ytf9SaGf3RLFrDu9dWJ51NRz7zE5Ezs7gyjrly/cN68+H1Sc3KkSza87JoHz3/3+pcnJJF48S52JiXxcYrZgGwKA9OrkIz6//Mujua3q6tzDR1xiw3Z3Wvl/C5q/svXtDL+fB8Rv9gHPPB5eXnK9KJGb05b0ZvnrKun7a6hXD6WP8Rrv79byHshavT4BetsXW/fzm2qkaHX9cHfD3T7/RJ87LXjuqdc6uHvw7vPPry8Y2Hh599vv/5/hft9sZm88fN5q12WBkNY7Kx9gBwirT4Jlqr/hgVRTb8WWtrq9WpdtO4yJNP4iLb3knjbFClRbLbGeyk8bDIqzzJe3Xh02w7LeNybzjMiyru5kU8zMvs7ujNL/Hk1S9l2u8Mqiwph720U6Zxkg+qTlLF21mZxMO9n/aycjctRgeXwzTJulnSqbJ8EJf5XpGk63FcpumRwGw7HVRZN6uLg3hYZP1OcS/+NO/t9dN4Oy2TIhtW+bjBaV/ZoJsX/VGz64s+2QDwhngUJm+we/Yqu5cuhMacmEWPEQA47uQqvbrohAAAAAAAAAAAAAAAgBlHH9f7yeTFZa/8ROBiC3feOq3q/cUndrQQQlh+iaOm/13Hq4aLHsWCz+Fr7KvxZgx5+tats4PrqNOrohDC/L6+X8csaEICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDP8JwAA///H8oyP") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r3, &(0x7f0000000080)=""/4096, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c003b4496794c8bbe6078ec841697c8a12dfec018533417d613f403944e49d09e69b196e541c37954778f503ee96900ef20ff216c6ac852f0c160ab78d1d3e253524ed4"]) chdir(&(0x7f0000000040)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 3m22.214129469s ago: executing program 4 (id=22): syz_usb_connect$uac2(0x2, 0x8e, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x8e4, 0x163, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x9, 0x20, 0x7, {0x8, 0xb, 0x0, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0xa, 0x1c, 0xff}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x404, 0x0, 0x5, 0x2, 0x1ff, 0x7}, @sample_rate={0x7, 0x24, 0xd, 0x5, 0x2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x7f, 0x10, {0x8, 0x25, 0x1, 0x82, 0x3, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x408, 0x1, 0xe, 0xe, {0x8, 0x25, 0x1, 0x1, 0x6f, 0x21, 0x3}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 3m21.291337249s ago: executing program 4 (id=26): socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3m21.074334025s ago: executing program 32 (id=26): socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3m3.656778617s ago: executing program 2 (id=76): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x3107727c8013a469, 0x2, {0x6, @struct={0x1, 0x4}, 0x0, 0x7, 0x4, 0x1, 0x2, 0x40, 0x481, @usage=0xffff, 0x2, 0x9, [0xfffffffeffffffff, 0x1, 0x3, 0x6, 0x2, 0x4]}, {0x1ff, @usage=0x4, 0x0, 0x79, 0x7, 0x71c0, 0x8, 0x8, 0x442, @usage=0x1, 0x5, 0x7c, [0x69, 0x7, 0x2, 0x8000, 0x400, 0x19]}, {0x4, @usage=0xa57, 0x0, 0x3, 0x3, 0xa, 0x57f9, 0x55a48ef6, 0x450, @usage=0xe131, 0x81, 0x4d5, [0xf6, 0x40, 0x0, 0x1, 0x5, 0x4]}, {0x8478, 0x2, 0x9}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m3.387637605s ago: executing program 2 (id=78): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) 3m3.341457707s ago: executing program 2 (id=80): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0xfffffffffffffff2, 0xe8000) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 3m3.169429292s ago: executing program 2 (id=81): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x4000000) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff004) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) 3m2.043383858s ago: executing program 2 (id=83): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) close_range(r0, 0xffffffffffffffff, 0x0) 2m58.591573917s ago: executing program 2 (id=89): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f00000002c0)=""/78, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m43.114287597s ago: executing program 33 (id=89): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f00000002c0)=""/78, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 14.239504409s ago: executing program 5 (id=470): setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) pwrite64(r0, &(0x7f0000000200)='a', 0x1, 0x80000000e0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 13.55527259s ago: executing program 6 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)={0x78, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342", {0x0, 0xffc}}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2e, 0x49}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x13}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x71}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000356d0205ff96e17055fcccd05aac6ff821ab0befc52a33d7ada3ff2a6cddebfd9f646c4199a6f1dbb7be5bb6ff00527c4920505393e6c59045ae3555", @ANYRES16=r11, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x24044080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) 13.346517247s ago: executing program 5 (id=475): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 10.550575776s ago: executing program 5 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, 0x0, 0xfffffffffffffec9) socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x62401, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 9.940640815s ago: executing program 6 (id=479): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0xb6bc}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x92, 0x5, r0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 9.940385735s ago: executing program 3 (id=480): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x844, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x5f) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}}}}}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) shmat(r2, &(0x7f0000f02000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60, {0x1}, 0xfffffffe, 0x100000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7}]}) 9.181236619s ago: executing program 5 (id=481): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nojournal_checksum}, {@orlov}, {@bh}, {@delalloc}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 8.991579075s ago: executing program 6 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, 0x0, 0xfffffffffffffec9) socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x62401, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 8.991309735s ago: executing program 3 (id=483): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x0, 0x3}]) r4 = fsmount(r2, 0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xc2000}, [@generic={0xe, 0x3, 0x9, 0x3, 0x9}]}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x98, &(0x7f0000000a40)=""/152, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x1, 0x7fff, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b80)=[r4, 0xffffffffffffffff, r2, r4, r2, r4, r4, r2], &(0x7f0000000bc0)=[{0x1, 0x4, 0xd, 0x8}, {0x4, 0x5, 0x9, 0xf}], 0x10, 0x5}, 0x94) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000400)="4024c1", 0x3, 0xffffffffffffffff) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4100, 0x1004}, {&(0x7f00000006c0)=""/103, 0x67}, {&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0)=""/10, 0xa}], 0x9}}], 0x1, 0x7000000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x54}}, 0x1020) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x9, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x800, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 7.423278275s ago: executing program 0 (id=486): setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) pwrite64(r0, &(0x7f0000000200)='a', 0x1, 0x80000000e0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 7.079554865s ago: executing program 0 (id=487): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, 0x0) 6.555058962s ago: executing program 3 (id=488): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0xb6bc}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x92, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) 6.550614292s ago: executing program 5 (id=490): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2011020000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) 6.411603036s ago: executing program 1 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)={0x78, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342", {0x0, 0xffc}}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2e, 0x49}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x13}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x71}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000356d0205ff96e17055fcccd05aac6ff821ab0befc52a33d7ada3ff2a6cddebfd9f646c4199a6f1dbb7be5bb6ff00527c4920505393e6c59045ae3555", @ANYRES16=r11, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x24044080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.537875217s ago: executing program 6 (id=492): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0xb6bc}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x92, 0x5, r0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.536338517s ago: executing program 3 (id=502): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nojournal_checksum}, {@orlov}, {@bh}, {@delalloc}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 3.46297025s ago: executing program 0 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, 0x0, 0xfffffffffffffec9) socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x62401, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 3.048257413s ago: executing program 1 (id=494): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB, @ANYRES32=r3, @ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX=r2], 0x0) 2.847929099s ago: executing program 1 (id=495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r3, 0x5}, 0x80, &(0x7f0000000ac0)}, 0x20008110) 2.669709305s ago: executing program 6 (id=496): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x844, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x5f) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}}}}}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) shmat(r2, &(0x7f0000f02000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60, {0x1}, 0xfffffffe, 0x100000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7}]}) 1.327989588s ago: executing program 3 (id=497): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r1, 0x0, 0x0, 0x4, 0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="bb06000186fd06100008aaaaaaaaaa19fc0200000000000000dafd0000000000ffffffffffebaa99fc0000000026"], 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000030200000000"], 0xb8}}, 0x0) syz_io_uring_setup(0x39d, &(0x7f0000000080)={0x0, 0x20000851, 0x200, 0x4, 0x3a1}, &(0x7f0000000100), 0x0, &(0x7f0000000200)) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x62, 0x40) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000300)={r6, 0x3f80, {0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x3, 0xc, "bf0ae0ddb14f7dcb12141f009ff8c6c7c6c8c217726e2df332eefff6c84e11043c404d07f40357aa29a07013cf20151aeb370b52fd435257676864da2fd35091", "b2bee22974ab79a365a6b2ca9a92591a0bc14035ae9dda58f98ab2e9325b8e1f68d65dfd3f632ddb40c8742e72ecbd953655f382f186825f008d2699d474d63a", "3bb15c3d0e4882e78ad90a9e06379a0a40aec374614dfaec6dcd84a4ec82d525", [0x1000, 0xffff]}}) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 1.326563028s ago: executing program 0 (id=508): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nojournal_checksum}, {@orlov}, {@bh}, {@delalloc}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 1.326057538s ago: executing program 6 (id=498): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x0, 0x3}]) r4 = fsmount(r2, 0x0, 0x80) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xc2000}, [@generic={0xe, 0x3, 0x9, 0x3, 0x9}]}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x98, &(0x7f0000000a40)=""/152, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x1, 0x7fff, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b80)=[r4, 0xffffffffffffffff, r2, r4, r2, r4, r4, r2], &(0x7f0000000bc0)=[{0x1, 0x4, 0xd, 0x8}, {0x4, 0x5, 0x9, 0xf}], 0x10, 0x5}, 0x94) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000400)="4024c1", 0x3, 0xffffffffffffffff) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4100, 0x1004}, {&(0x7f00000006c0)=""/103, 0x67}, {&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f00000003c0)=""/10, 0xa}], 0x9}}], 0x1, 0x7000000, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x54}}, 0x1020) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x9, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x800, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) 1.2624912s ago: executing program 1 (id=499): setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) pwrite64(r0, &(0x7f0000000200)='a', 0x1, 0x80000000e0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 913.688141ms ago: executing program 0 (id=500): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nojournal_checksum}, {@orlov}, {@bh}, {@delalloc}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 913.500621ms ago: executing program 1 (id=501): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 275.559111ms ago: executing program 5 (id=503): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0xb6bc}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x92, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) 256.170012ms ago: executing program 3 (id=504): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, 0x0) 74.626097ms ago: executing program 0 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)={0x78, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342", {0x0, 0xffc}}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2e, 0x49}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x13}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x71}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000356d0205ff96e17055fcccd05aac6ff821ab0befc52a33d7ada3ff2a6cddebfd9f646c4199a6f1dbb7be5bb6ff00527c4920505393e6c59045ae3555", @ANYRES16=r11, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x24044080) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) 0s ago: executing program 1 (id=506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB, @ANYRES32=r3, @ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX=r2], 0x0) kernel console output (not intermixed with test programs): ecomes ready [ 65.014765][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 65.019969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.032594][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 65.037853][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.045485][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 65.051624][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 65.058225][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 65.067259][ T4196] device veth1_vlan entered promiscuous mode [ 65.097689][ T4188] device veth0_vlan entered promiscuous mode [ 65.109785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.118358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.127624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.137646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.146453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.153902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.161638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.170162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.178832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.188730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.197723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.206372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.214802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.222728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.230632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.259859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.268330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.278721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.293218][ T4188] device veth1_vlan entered promiscuous mode [ 65.306556][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.319637][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.343614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.352105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.366485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.379767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.390681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.403059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.424132][ T4189] device veth0_vlan entered promiscuous mode [ 65.436158][ T4196] device veth0_macvtap entered promiscuous mode [ 65.447736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.461641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.471852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.485587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.498924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.507562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.518661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.536278][ T4196] device veth1_macvtap entered promiscuous mode [ 65.548662][ T4188] device veth0_macvtap entered promiscuous mode [ 65.567306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.575582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.584103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.593119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.600866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.611300][ T4189] device veth1_vlan entered promiscuous mode [ 65.619699][ T4188] device veth1_macvtap entered promiscuous mode [ 65.645668][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.668631][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.687730][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.699483][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.710557][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.719382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.728502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.738171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.747196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.756644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.765992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.776296][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.783631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.792536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.801086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.810093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.820276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.828895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.838803][ T4190] device veth0_vlan entered promiscuous mode [ 65.858433][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.869066][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.880437][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.892647][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.901821][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.910918][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.919911][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.933419][ T4189] device veth0_macvtap entered promiscuous mode [ 65.944269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.952464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.961382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.972976][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.984178][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.993179][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.002118][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.017566][ T4190] device veth1_vlan entered promiscuous mode [ 66.032042][ T4189] device veth1_macvtap entered promiscuous mode [ 66.079067][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.093686][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.103770][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.114739][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.127822][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.137451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.148161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.156490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.164324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.173367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.182345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.191128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.218856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.232617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.249666][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.260793][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.271383][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.282105][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.295065][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.339596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.351474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.360796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.371358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.379942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.388123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.398823][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.407668][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.416641][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.425621][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.440035][ T4190] device veth0_macvtap entered promiscuous mode [ 66.453948][ T4201] device veth0_vlan entered promiscuous mode [ 66.482642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.497569][ T4201] device veth1_vlan entered promiscuous mode [ 66.506282][ T4190] device veth1_macvtap entered promiscuous mode [ 66.523709][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.535137][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.562125][ T1435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.570789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.583294][ T1435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.605571][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.618528][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.629796][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.640506][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.650634][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.661369][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.672841][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.703712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.712432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.721459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.730479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.739533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.748467][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.759158][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.769626][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.780330][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.794075][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.804584][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.815739][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.833009][ T4201] device veth0_macvtap entered promiscuous mode [ 66.840532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.848946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.858658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.870429][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.879797][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.880486][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.891093][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.900460][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.912666][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.935023][ T4201] device veth1_macvtap entered promiscuous mode [ 66.948564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.956810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.977998][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.984014][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.996897][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.996935][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.011482][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.025613][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.036175][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.046908][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.056997][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.067687][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.078776][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.086492][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 67.109926][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 67.116477][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 67.122511][ T4271] Bluetooth: hci4: command 0x040f tx timeout [ 67.128950][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 67.145175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.153071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.163669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.205207][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.226539][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.237173][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.251886][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.261847][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.272321][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.282418][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.293119][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.306205][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.338295][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.349376][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.385070][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.397999][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.407067][ T4201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.422368][ T4201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.437034][ T4201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.447106][ T4201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.471486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.493576][ T1435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.502702][ T1435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.511420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.530489][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.546967][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.596775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.613373][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.622773][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.633855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.701393][ T4279] loop1: detected capacity change from 0 to 1024 [ 67.714680][ T2238] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.724976][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.732797][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.740433][ T4236] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 67.773981][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.780919][ T4281] loop2: detected capacity change from 0 to 736 [ 67.842895][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.859934][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.871557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.203208][ T2238] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 68.275719][ T4236] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.554500][ T4236] usb 1-1: not running at top speed; connect to a high speed hub [ 68.591803][ T4288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 68.600833][ T4288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 68.710729][ T2238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.830367][ T2238] usb 5-1: config 0 descriptor?? [ 68.855589][ T4236] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1032, setting to 1023 [ 68.867430][ T4292] loop1: detected capacity change from 0 to 512 [ 68.878893][ T2238] cp210x 5-1:0.0: cp210x converter detected [ 68.956130][ T4292] ======================================================= [ 68.956130][ T4292] WARNING: The mand mount option has been deprecated and [ 68.956130][ T4292] and is ignored by this kernel. Remove the mand [ 68.956130][ T4292] option from the mount to silence this warning. [ 68.956130][ T4292] ======================================================= [ 69.084411][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 69.104433][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 69.114418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 69.134418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.144417][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.154414][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.164412][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.174420][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 69.914441][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 69.924430][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.315468][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 70.321861][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 70.330335][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 70.337050][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 70.343258][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 70.354558][ T4236] usb 1-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 70.384217][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.395741][ T4292] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.413369][ T4304] loop2: detected capacity change from 0 to 1024 [ 70.447370][ T4236] usb 1-1: Product: syz [ 70.451627][ T4236] usb 1-1: Manufacturer: syz [ 70.456667][ T4292] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.479692][ T4292] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.6: corrupted inode contents [ 70.494969][ T4292] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz.1.6: mark_inode_dirty error [ 70.512774][ T4292] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.6: corrupted inode contents [ 70.532573][ T4292] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.6: mark_inode_dirty error [ 70.540750][ T4236] usb 1-1: SerialNumber: syz [ 70.561825][ T4304] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 70.586508][ T2238] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 70.606118][ T154] hfsplus: b-tree write err: -5, ino 25 [ 70.626854][ T154] hfsplus: b-tree write err: -5, ino 4 [ 70.632504][ T154] hfsplus: b-tree write err: -5, ino 2 [ 70.638432][ T2238] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 70.646332][ T4236] usb 1-1: can't set config #1, error -71 [ 70.657425][ T2238] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 70.670462][ T4236] usb 1-1: USB disconnect, device number 2 [ 70.680604][ T2238] usb 5-1: cp210x converter now attached to ttyUSB0 [ 70.706053][ T2238] usb 5-1: USB disconnect, device number 2 [ 70.724621][ T2238] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 70.736185][ T2238] cp210x 5-1:0.0: device disconnected [ 71.592543][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.599252][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.698131][ T4316] loop2: detected capacity change from 0 to 1024 [ 71.805445][ T4236] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.842419][ T4322] loop4: detected capacity change from 0 to 736 [ 72.929395][ T4236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.949825][ T4236] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 73.023179][ T4328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 73.032215][ T4328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 73.134118][ T4236] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.269729][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.499871][ T4236] usb 1-1: config 0 descriptor?? [ 73.517826][ T4331] loop2: detected capacity change from 0 to 256 [ 74.033681][ T4236] usb 1-1: can't set config #0, error -71 [ 74.041530][ T4236] usb 1-1: USB disconnect, device number 3 [ 74.203105][ T4338] loop0: detected capacity change from 0 to 1024 [ 74.892472][ T4338] hfsplus: xattr searching failed [ 74.955862][ T4344] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.061442][ T4196] syz-executor (4196) used greatest stack depth: 20272 bytes left [ 75.114152][ T4348] loop3: detected capacity change from 0 to 512 [ 75.147914][ T4351] loop1: detected capacity change from 0 to 512 [ 75.187280][ T4341] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.216283][ T4356] Invalid ELF header type: 0 != 1 [ 75.233029][ T4348] EXT4-fs (loop3): Mount option "journal_ioprio=0x0000000000000006" incompatible with ext2 [ 75.279792][ T4351] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 75.320120][ T4341] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.324695][ T4351] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.582362][ T4341] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.673571][ T4368] loop2: detected capacity change from 0 to 256 [ 75.699486][ T4371] loop3: detected capacity change from 0 to 736 [ 75.750064][ T4368] exfat: Unknown parameter 'keep_last_dots' [ 75.772489][ T4341] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.084660][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 76.837658][ T26] audit: type=1326 audit(1778831724.617:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4386 comm="syz.3.35" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0397ba5e59 code=0x0 [ 76.900412][ T4365] chnl_net:caif_netlink_parms(): no params data found [ 76.945028][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.030798][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 77.144660][ T7] usb 2-1: config 232 has an invalid interface number: 232 but max is 0 [ 77.153043][ T7] usb 2-1: config 232 has no interface number 0 [ 77.195336][ T7] usb 2-1: config 232 interface 232 has no altsetting 0 [ 77.298093][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.390449][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.465414][ T7] usb 2-1: New USB device found, idVendor=22b8, idProduct=2a64, bcdDevice=e0.d0 [ 77.538824][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.555549][ T4365] device bridge_slave_0 entered promiscuous mode [ 77.732946][ T7] usb 2-1: Product: syz [ 77.773950][ T7] usb 2-1: Manufacturer: syz [ 77.827282][ T7] usb 2-1: SerialNumber: syz [ 77.834719][ T4271] Bluetooth: hci3: command 0x0409 tx timeout [ 77.867379][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.867441][ T4406] loop0: detected capacity change from 0 to 1024 [ 77.885988][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.901475][ T4365] device bridge_slave_1 entered promiscuous mode [ 77.960148][ T4406] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 78.060524][ T4365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.107030][ T4365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.620603][ T4365] team0: Port device team_slave_0 added [ 78.642786][ T4423] loop0: detected capacity change from 0 to 128 [ 78.662481][ T4365] team0: Port device team_slave_1 added [ 78.699711][ T4423] FAT-fs (loop0): Unrecognized mount option "fmask=00000000000000003Oojnonumtail=0" or missing value [ 78.819085][ T4365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.850486][ T4365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.898981][ T4365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.992647][ T4365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.001791][ T4426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 79.039823][ T4430] loop2: detected capacity change from 0 to 512 [ 79.060807][ T4365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.115626][ T4430] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.178980][ T4365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.376056][ T26] audit: type=1800 audit(1778831727.107:3): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.43" name="file2" dev="loop2" ino=1048591 res=0 errno=0 [ 79.416733][ T7] hub 2-1:232.232: bad descriptor, ignoring hub [ 79.418821][ T4365] device hsr_slave_0 entered promiscuous mode [ 79.423637][ T7] hub: probe of 2-1:232.232 failed with error -5 [ 79.438183][ T7] usb_serial_simple 2-1:232.232: moto_modem converter detected [ 79.447650][ T7] usb 2-1: moto_modem converter now attached to ttyUSB0 [ 79.474682][ T4242] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 79.508709][ T7] usb 2-1: USB disconnect, device number 2 [ 79.510850][ T4365] device hsr_slave_1 entered promiscuous mode [ 79.699929][ T4365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.730974][ T4365] Cannot create hsr debugfs directory [ 79.970764][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 80.043187][ T4445] Zero length message leads to an empty skb [ 80.211594][ T4448] capability: warning: `syz.1.46' uses deprecated v2 capabilities in a way that may be insecure [ 80.288151][ T4445] loop2: detected capacity change from 0 to 1024 [ 80.359920][ T4445] EXT4-fs (loop2): inline encryption not supported [ 80.397311][ T4445] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.504197][ T4445] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 80.504197][ T4445] [ 80.776461][ T7] moto_modem ttyUSB0: moto_modem converter now disconnected from ttyUSB0 [ 80.785318][ T7] usb_serial_simple 2-1:232.232: device disconnected [ 80.798768][ T4365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.809843][ T4365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.586120][ T25] cfg80211: failed to load regulatory.db [ 81.741893][ T4365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.024912][ T4242] usb 4-1: device descriptor read/all, error -71 [ 82.044553][ T2238] Bluetooth: hci3: command 0x040f tx timeout [ 82.048380][ T4442] loop2: detected capacity change from 0 to 512 [ 82.204760][ T4365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.337474][ T4442] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.44: missing EA_INODE flag [ 82.357980][ T4442] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.44: error while reading EA inode 12 err=-117 [ 82.394832][ T4442] EXT4-fs (loop2): 1 orphan inode deleted [ 82.400618][ T4442] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 82.726841][ T4365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.764875][ T4242] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.787796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.851548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.887004][ T4365] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.057744][ T4341] device hsr_slave_0 left promiscuous mode [ 83.077140][ T4341] device hsr_slave_1 left promiscuous mode [ 83.098203][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.155915][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.156486][ T4242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.193823][ T4242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.218382][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.262442][ T4498] loop0: detected capacity change from 0 to 764 [ 83.294256][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.330823][ T4497] loop1: detected capacity change from 0 to 1024 [ 83.344926][ T4242] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.371585][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.400989][ T4242] usb 4-1: SerialNumber: syz [ 83.419934][ T4498] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 83.451580][ T4501] loop2: detected capacity change from 0 to 4096 [ 83.459803][ T4497] hfsplus: invalid uid specified [ 83.482274][ T4341] device bridge_slave_1 left promiscuous mode [ 83.498808][ T4497] hfsplus: unable to parse mount options [ 83.514229][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.660790][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 84.747267][ T4501] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 84.748833][ T4242] usb 4-1: 0:2 : does not exist [ 84.803286][ T4501] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 84.818170][ T4341] device bridge_slave_0 left promiscuous mode [ 84.831737][ T4501] System zones: 0-5 [ 84.857411][ T4501] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,nouid32,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 84.890945][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.967879][ T4509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.114632][ T4242] usb 4-1: USB disconnect, device number 3 [ 85.153951][ T4341] device veth1_macvtap left promiscuous mode [ 85.193037][ T4341] device veth0_macvtap left promiscuous mode [ 85.217586][ T4341] device veth1_vlan left promiscuous mode [ 85.257862][ T4341] device veth0_vlan left promiscuous mode [ 85.564307][ T4518] loop3: detected capacity change from 0 to 1024 [ 85.642945][ T4518] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 85.642945][ T4518] [ 86.960521][ T4236] Bluetooth: hci3: command 0x0405 tx timeout [ 87.451842][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 87.473381][ T4533] loop2: detected capacity change from 0 to 128 [ 87.667927][ T4533] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 88.077385][ T4534] loop1: detected capacity change from 0 to 1024 [ 88.138199][ T144] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 88.233217][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 88.428309][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.550709][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.283299][ T4341] bond0 (unregistering): Released all slaves [ 90.439627][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.456468][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.476637][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.483757][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.716293][ T4553] device syzkaller0 entered promiscuous mode [ 90.848695][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.862083][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.908877][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.945941][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.953024][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.994847][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.011481][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.042196][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.073805][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.092934][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.125562][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.153907][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.205841][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.226081][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.263251][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.327544][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.347397][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.642756][ T4561] loop2: detected capacity change from 0 to 8192 [ 91.967611][ T4561] loop2: p1 < > p3[EZD] [ 92.000295][ T4561] loop2: p3 start 3238002688 is beyond EOD, truncated [ 92.080289][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.114275][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.472289][ T4365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.485388][ T4582] loop3: detected capacity change from 0 to 512 [ 92.571241][ T4582] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nombcache,minixdf,errors=remount-ro,min_batch_time=0x000000000000bbbd,. Quota mode: writeback. [ 92.663406][ T4582] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.956429][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 95.548182][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.578427][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.648392][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.706665][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.748962][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.795032][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.820923][ T4623] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.832182][ T4365] device veth0_vlan entered promiscuous mode [ 95.857004][ T4365] device veth1_vlan entered promiscuous mode [ 95.946502][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.981279][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.049164][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.085150][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.145404][ T4365] device veth0_macvtap entered promiscuous mode [ 96.173198][ T4628] loop0: detected capacity change from 0 to 512 [ 96.185551][ T4365] device veth1_macvtap entered promiscuous mode [ 96.252032][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.259008][ T4628] EXT4-fs (loop0): Ignoring removed bh option [ 96.278606][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.306526][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.510684][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.644496][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.751950][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.856099][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.078426][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.104848][ T4628] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 97.165745][ T4365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.234657][ T4628] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.248654][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.279617][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.320184][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.375025][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.416638][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.452826][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.490219][ T4365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.542660][ T4365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.601230][ T4365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.625300][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.643545][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.693297][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.734719][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.771851][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.807455][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.858242][ T4365] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.874596][ T4649] loop3: detected capacity change from 0 to 8192 [ 97.885935][ T4365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.945674][ T4365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.056165][ T4365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.188928][ T4182] loop3: p1 < > p3[EZD] [ 98.205261][ T4182] loop3: p3 start 3238002688 is beyond EOD, truncated [ 98.270771][ T4669] loop1: detected capacity change from 0 to 1024 [ 98.378238][ T4674] loop0: detected capacity change from 0 to 1024 [ 99.056821][ T4649] loop3: p1 < > p3[EZD] [ 99.104603][ T4669] EXT4-fs (loop1): inline encryption not supported [ 99.165250][ T4669] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.223516][ T4649] loop3: p3 start 3238002688 is beyond EOD, truncated [ 99.321557][ T4669] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 99.321557][ T4669] [ 99.391674][ T4403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.421334][ T4403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.566823][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.707226][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.723962][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.738359][ T4686] loop1: detected capacity change from 0 to 512 [ 99.783860][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.056366][ T4686] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nombcache,minixdf,errors=remount-ro,min_batch_time=0x000000000000bbbd,. Quota mode: writeback. [ 101.074917][ T4686] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.202512][ T4698] loop5: detected capacity change from 0 to 1024 [ 101.337447][ T4698] hfsplus: wrong filesystem version [ 101.613280][ T3561] loop3: p1 < > p3[EZD] [ 101.649597][ T3561] loop3: p3 start 3238002688 is beyond EOD, truncated [ 102.380560][ T4721] loop1: detected capacity change from 0 to 512 [ 103.123043][ T4718] loop3: detected capacity change from 0 to 1024 [ 103.447371][ T4721] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.460419][ T4721] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.678932][ T4721] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.102: bad orphan inode 16 [ 104.695212][ T4721] ext4_test_bit(bit=15, block=4) = 0 [ 104.700516][ T4721] EXT4-fs (loop1): 1 orphan inode deleted [ 104.706309][ T4721] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,acl,stripe=0x0000000000000001,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,auto_da_alloc,,errors=continue. Quota mode: none. [ 104.855313][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 106.403802][ T4752] loop5: detected capacity change from 0 to 2048 [ 106.528716][ T4761] loop0: detected capacity change from 0 to 16 [ 107.234598][ T4761] erofs: (device loop0): mounted with root inode @ nid 36. [ 107.277396][ T4205] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 8524 in[4096, 0] out[9000] [ 107.305548][ T4759] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 8524 in[4096, 0] out[9000] [ 107.325624][ T4752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.365697][ T26] audit: type=1800 audit(1778831755.117:4): pid=4759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.96" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 108.421057][ T4778] loop5: detected capacity change from 0 to 512 [ 108.457271][ T4771] loop1: detected capacity change from 0 to 8192 [ 108.494761][ T4780] loop3: detected capacity change from 0 to 2048 [ 108.545172][ T4178] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 108.550577][ T4178] loop3: partition table partially beyond EOD, truncated [ 108.563292][ T4182] loop1: p1 < > p3[EZD] [ 108.832874][ T4178] loop3: p1 size 196608 extends beyond EOD, truncated [ 108.887308][ T4182] loop1: p3 start 3238002688 is beyond EOD, truncated [ 108.995711][ T4778] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nombcache,minixdf,errors=remount-ro,min_batch_time=0x000000000000bbbd,. Quota mode: writeback. [ 109.084812][ T4778] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.104992][ T4178] loop3: p2 start 4278190080 is beyond EOD, truncated [ 109.112711][ T4178] loop3: p4 size 8192 extends beyond EOD, truncated [ 109.122597][ T4178] loop3: p5 size 196608 extends beyond EOD, truncated [ 109.143086][ T4178] loop3: p6 size 8192 extends beyond EOD, truncated [ 109.164903][ T4771] loop1: p1 < > p3[EZD] [ 109.170424][ T4771] loop1: p3 start 3238002688 is beyond EOD, truncated [ 109.221422][ T4780] loop3: p1 p2 < > p3 < p5 p6 > p4 [ 109.226717][ T4780] loop3: partition table partially beyond EOD, truncated [ 109.233941][ T4780] loop3: p1 size 196608 extends beyond EOD, truncated [ 109.241857][ T4780] loop3: p2 start 4278190080 is beyond EOD, truncated [ 109.249601][ T4780] loop3: p4 size 8192 extends beyond EOD, truncated [ 109.257094][ T4780] loop3: p5 size 196608 extends beyond EOD, truncated [ 109.264755][ T4780] loop3: p6 size 8192 extends beyond EOD, truncated [ 109.420534][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 109.420585][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 109.434355][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 109.460668][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.642803][ T4798] loop0: detected capacity change from 0 to 1024 [ 110.711924][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 111.909490][ T4798] hfsplus: wrong filesystem version [ 111.937606][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 111.961607][ T4797] udevd[4797]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 112.112743][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 112.127121][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 112.130849][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 112.143007][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 113.298628][ T4820] udevd[4820]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 113.330972][ T4818] loop3: detected capacity change from 0 to 4096 [ 113.621724][ T4818] EXT4-fs (loop3): Test dummy encryption mode enabled [ 113.641648][ T4818] EXT4-fs (loop3): Ignoring removed orlov option [ 113.706496][ T4818] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,bsddf,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 114.403063][ T4852] loop3: detected capacity change from 0 to 16 [ 114.836735][ T4852] erofs: (device loop3): mounted with root inode @ nid 36. [ 114.884832][ T4205] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 8524 in[4096, 0] out[9000] [ 114.910225][ T4849] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 8524 in[4096, 0] out[9000] [ 114.965140][ T4849] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 8524 in[4096, 0] out[9000] [ 114.991487][ T4849] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 8524 in[4096, 0] out[9000] [ 115.057481][ T26] audit: type=1800 audit(1778831762.717:5): pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.125" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 115.140648][ T4854] loop5: detected capacity change from 0 to 2048 [ 115.207857][ T4464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.411387][ T4854] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 115.578966][ T4854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.601402][ T4464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.738097][ T4464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.804618][ T4237] Bluetooth: hci5: command 0x0409 tx timeout [ 115.844112][ T4833] chnl_net:caif_netlink_parms(): no params data found [ 115.962929][ T4464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.350906][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.391787][ T4893] loop1: detected capacity change from 0 to 128 [ 117.397329][ T4833] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.430670][ T4833] device bridge_slave_0 entered promiscuous mode [ 117.473535][ T4893] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 117.483327][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.514493][ T4893] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 117.521527][ T4833] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.556191][ T4833] device bridge_slave_1 entered promiscuous mode [ 117.675753][ T4833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.732545][ T4833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.884552][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 118.376648][ T4833] team0: Port device team_slave_0 added [ 118.397908][ T4833] team0: Port device team_slave_1 added [ 118.497846][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.514029][ T4912] loop3: detected capacity change from 0 to 1024 [ 118.561310][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.649116][ T4912] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.739391][ T4912] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Out of memory [ 118.755013][ T4912] EXT4-fs error (device loop3): ext4_setattr:5586: inode #15: comm syz.3.140: mark_inode_dirty error [ 118.775252][ T4912] EXT4-fs error (device loop3) in ext4_setattr:5645: Out of memory [ 118.787137][ T4912] attempt to access beyond end of device [ 118.787137][ T4912] loop3: rw=1, want=3606377192, limit=1024 [ 118.798961][ T4912] EXT4-fs warning (device loop3): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1803188595) [ 118.811163][ T4912] Buffer I/O error on device loop3, logical block 1803188595 [ 118.819069][ T4912] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Out of memory [ 118.831989][ T4912] EXT4-fs error (device loop3): mpage_map_and_submit_extent:2524: inode #15: comm syz.3.140: mark_inode_dirty error [ 118.846154][ T4912] EXT4-fs error (device loop3): mpage_map_and_submit_extent:2528: comm syz.3.140: Failed to mark inode 15 dirty [ 118.861635][ T4912] attempt to access beyond end of device [ 118.861635][ T4912] loop3: rw=1, want=3403208900, limit=1024 [ 118.861673][ T4833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.873033][ T4912] EXT4-fs warning (device loop3): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1701604449) [ 118.873098][ T4912] Buffer I/O error on device loop3, logical block 1701604449 [ 118.932228][ T4201] EXT4-fs (loop3): Inode 15 (ffff8880609c9de8): i_reserved_data_blocks (1) not cleared! [ 119.082276][ T4935] loop3: detected capacity change from 0 to 1024 [ 119.090389][ T4833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.104941][ T4833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.204509][ T4833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.390626][ T4833] device hsr_slave_0 entered promiscuous mode [ 119.433538][ T4833] device hsr_slave_1 entered promiscuous mode [ 119.455216][ T4271] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.481252][ T4945] loop0: detected capacity change from 0 to 2048 [ 119.523660][ T4797] Alternate GPT is invalid, using primary GPT. [ 119.532450][ T4797] loop0: p2 p3 p7 [ 119.575002][ T4945] Alternate GPT is invalid, using primary GPT. [ 119.581535][ T4945] loop0: p2 p3 p7 [ 119.635334][ T3561] Alternate GPT is invalid, using primary GPT. [ 119.646215][ T3561] loop0: p2 p3 p7 [ 119.854957][ T4271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.870838][ T4271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.883910][ T4820] udevd[4820]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 119.895718][ T4797] udevd[4797]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 119.914162][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 119.964604][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 119.990397][ T4797] udevd[4797]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 120.000681][ T4820] udevd[4820]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 120.010359][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 120.025476][ T4271] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.034784][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.046510][ T4271] usb 2-1: SerialNumber: syz [ 120.106509][ T4797] udevd[4797]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 120.119541][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 120.120281][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 120.245992][ T4833] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.267541][ T4833] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.301640][ T4833] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.336062][ T4271] usb 2-1: 0:2 : does not exist [ 120.357636][ T4464] device hsr_slave_0 left promiscuous mode [ 120.364075][ T4464] device hsr_slave_1 left promiscuous mode [ 120.373606][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.404569][ T4271] usb 2-1: USB disconnect, device number 3 [ 120.418414][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.432880][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.443608][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.458842][ T4464] device bridge_slave_1 left promiscuous mode [ 120.459781][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.474604][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.525245][ T4464] device bridge_slave_0 left promiscuous mode [ 120.531563][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.553120][ T4464] device veth1_macvtap left promiscuous mode [ 120.560130][ T4464] device veth0_macvtap left promiscuous mode [ 120.567311][ T4464] device veth1_vlan left promiscuous mode [ 120.573177][ T4464] device veth0_vlan left promiscuous mode [ 121.236088][ T4977] loop5: detected capacity change from 0 to 2048 [ 121.272926][ T4464] team0 (unregistering): Port device team_slave_1 removed [ 121.289379][ T4464] team0 (unregistering): Port device team_slave_0 removed [ 121.341437][ T4977] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 64 [ 121.358787][ T4980] loop3: detected capacity change from 0 to 128 [ 121.376185][ T4464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.096363][ T4237] Bluetooth: hci5: command 0x0419 tx timeout [ 122.117363][ T4980] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 122.132991][ T4980] UDF-fs: warning (device loop3): udf_fill_super: No fileset found [ 122.156099][ T4464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.171809][ T4983] loop1: detected capacity change from 0 to 1024 [ 122.277993][ T26] audit: type=1326 audit(1778831770.057:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fa825e59 code=0x7ffc0000 [ 122.623935][ T4983] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.804436][ T26] audit: type=1326 audit(1778831770.147:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fa825e59 code=0x7ffc0000 [ 122.845631][ T26] audit: type=1326 audit(1778831770.217:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f28fa825e59 code=0x7ffc0000 [ 122.869850][ T4983] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Out of memory [ 122.885573][ T26] audit: type=1326 audit(1778831770.217:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fa825e59 code=0x7ffc0000 [ 122.885610][ T4983] EXT4-fs error (device loop1): ext4_setattr:5586: inode #15: comm syz.1.153: mark_inode_dirty error [ 122.921493][ T26] audit: type=1326 audit(1778831770.227:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fa825e59 code=0x7ffc0000 [ 122.945983][ T4983] EXT4-fs error (device loop1) in ext4_setattr:5645: Out of memory [ 122.954888][ T4991] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7546266866099511129 [ 122.972359][ T4983] attempt to access beyond end of device [ 122.972359][ T4983] loop1: rw=1, want=3606377192, limit=1024 [ 122.983710][ T4983] EXT4-fs warning (device loop1): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1803188595) [ 122.995620][ T4983] Buffer I/O error on device loop1, logical block 1803188595 [ 123.003075][ T4983] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Out of memory [ 123.013080][ T4983] EXT4-fs error (device loop1): mpage_map_and_submit_extent:2524: inode #15: comm syz.1.153: mark_inode_dirty error [ 123.044558][ T26] audit: type=1326 audit(1778831770.227:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f28fa825e59 code=0x7ffc0000 [ 123.068599][ T4983] EXT4-fs error (device loop1): mpage_map_and_submit_extent:2528: comm syz.1.153: Failed to mark inode 15 dirty [ 123.089238][ T4983] attempt to access beyond end of device [ 123.089238][ T4983] loop1: rw=1, want=3403208900, limit=1024 [ 123.101729][ T4983] EXT4-fs warning (device loop1): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1701604449) [ 123.113444][ T26] audit: type=1326 audit(1778831770.237:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fa825e59 code=0x7ffc0000 [ 123.113613][ T4983] Buffer I/O error on device loop1, logical block 1701604449 [ 123.282220][ T26] audit: type=1326 audit(1778831770.247:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f28fa825e59 code=0x7ffc0000 [ 123.315787][ T4189] EXT4-fs (loop1): Inode 15 (ffff8880609d89f8): i_reserved_data_blocks (1) not cleared! [ 123.324065][ T26] audit: type=1326 audit(1778831770.367:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.0.155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28fa825e59 code=0x7ffc0000 [ 123.359767][ T4464] bond0 (unregistering): Released all slaves [ 123.475300][ T4833] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.723509][ T5013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 124.949153][ T5023] netlink: 'syz.1.164': attribute type 10 has an invalid length. [ 125.023520][ T5023] team0: Device hsr_slave_0 failed to register rx_handler [ 125.661310][ T5023] syz.1.164 (5023) used greatest stack depth: 19344 bytes left [ 125.757504][ T4833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.871579][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.019451][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.118922][ T4833] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.250225][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.278322][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.305478][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.312577][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.414484][ T4277] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.549136][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.588964][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.624920][ T4277] usb 2-1: device descriptor read/64, error -71 [ 126.667714][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.741521][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.748655][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.775978][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.799907][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.831026][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.860082][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.910058][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.933233][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.948981][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.004445][ T4277] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.073615][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.103444][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.118263][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.127789][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.141260][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.194479][ T4277] usb 2-1: device descriptor read/64, error -71 [ 127.195622][ T4242] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.369437][ T4277] usb usb2-port1: attempt power cycle [ 127.565754][ T4242] usb 4-1: Using ep0 maxpacket: 16 [ 127.651803][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.675649][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.692312][ T4833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.700224][ T4242] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.722607][ T4242] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.784525][ T4277] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.875088][ T4191] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.884718][ T4277] usb 2-1: device descriptor read/8, error -71 [ 127.924709][ T4242] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 128.130423][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.138880][ T4242] usb 4-1: Product: syz [ 128.143260][ T4242] usb 4-1: Manufacturer: syz [ 128.148307][ T4242] usb 4-1: SerialNumber: syz [ 128.154571][ T4277] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.158350][ T4242] usb 4-1: config 0 descriptor?? [ 128.277400][ T4277] usb 2-1: device descriptor read/8, error -71 [ 128.344518][ T4191] usb 1-1: Using ep0 maxpacket: 8 [ 128.394723][ T4277] usb usb2-port1: unable to enumerate USB device [ 128.448837][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.469111][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.482846][ T4191] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 128.534543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.546164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.573435][ T4833] device veth0_vlan entered promiscuous mode [ 128.585544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.603790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.634553][ T4237] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 128.647753][ T4833] device veth1_vlan entered promiscuous mode [ 128.690260][ T4191] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 128.709409][ T4191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.717921][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.723051][ T4191] usb 1-1: Product: syz [ 128.730257][ T4191] usb 1-1: Manufacturer: syz [ 128.735964][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.740102][ T4191] usb 1-1: SerialNumber: syz [ 128.749674][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.757741][ T4191] usb 1-1: config 0 descriptor?? [ 128.770565][ T1435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.793988][ T4833] device veth0_macvtap entered promiscuous mode [ 128.812306][ T4191] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 128.825036][ T4833] device veth1_macvtap entered promiscuous mode [ 128.831652][ T4191] usb 1-1: setting power ON [ 128.837198][ T4191] dvb-usb: bulk message failed: -22 (2/0) [ 128.853448][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.900259][ T4191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.931436][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.945812][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.962765][ T4242] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 128.973193][ T4290] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 128.974838][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 128.992471][ T4191] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 128.994772][ T4290] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 129.002391][ T4191] usb 1-1: media controller created [ 129.013955][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.018165][ T4237] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 129.039319][ T5074] dvb-usb: bulk message failed: -22 (3/0) [ 129.043075][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.051918][ T5074] cxusb: i2c rd: len=147 is too big! [ 129.051918][ T5074] [ 129.061999][ T4242] imon:send_packet: packet tx failed (-71) [ 129.064505][ T4290] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 129.077229][ T4191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.077616][ T4237] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.091887][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.104913][ T4242] imon 4-1:0.0: panel buttons/knobs setup failed [ 129.110904][ T4290] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 129.130647][ T4237] usb 6-1: config 0 descriptor?? [ 129.134200][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.136924][ T4290] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 129.147107][ T4191] usb 1-1: selecting invalid altsetting 6 [ 129.170759][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.171203][ T4290] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 129.191267][ T4191] usb 1-1: digital interface selection failed (-22) [ 129.198196][ T4191] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 129.201283][ T4290] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 129.208343][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.220475][ T4237] cp210x 6-1:0.0: cp210x converter detected [ 129.235290][ T4290] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 129.242864][ T4290] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 129.255445][ T4290] hid-generic 0006:0008:0008.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 129.260724][ T4191] usb 1-1: setting power OFF [ 129.270227][ T4242] rc_core: IR keymap rc-imon-pad not found [ 129.275207][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.291523][ T4242] Registered IR keymap rc-empty [ 129.302429][ T4191] dvb-usb: bulk message failed: -22 (2/0) [ 129.320315][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.321162][ T4242] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 129.342356][ T4191] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 129.354507][ T4191] (NULL device *): no alternate interface [ 129.360913][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.372103][ T4242] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 129.411867][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.413780][ T4191] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 129.434263][ T5126] fido_id[5126]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.453374][ T4191] usb 1-1: USB disconnect, device number 4 [ 129.459477][ T4242] imon:send_packet: packet tx failed (-71) [ 129.473498][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.496239][ T4242] imon 4-1:0.0: remote input dev register failed [ 129.502684][ T4242] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 129.536604][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.546590][ T4833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.574675][ T4833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.603896][ T4833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.616307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.627361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.638150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.697638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.806579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.855394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.871486][ T4242] imon 4-1:0.0: unable to initialize intf0, err 0 [ 129.872218][ T4833] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.878094][ T4242] imon:imon_probe: failed to initialize context! [ 129.878112][ T4242] imon 4-1:0.0: unable to register, err -19 [ 129.905086][ T4242] usb 4-1: USB disconnect, device number 4 [ 129.934027][ T4833] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.945054][ T4833] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.953896][ T4833] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.994632][ T4237] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 130.002504][ T4237] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 130.050612][ T4237] usb 6-1: cp210x converter now attached to ttyUSB0 [ 130.070193][ T4237] usb 6-1: USB disconnect, device number 2 [ 130.152493][ T4237] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 130.182409][ T4237] cp210x 6-1:0.0: device disconnected [ 131.821939][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.844360][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.937320][ T5164] loop3: detected capacity change from 0 to 256 [ 131.955925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.979864][ T4381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.000072][ T5154] loop1: detected capacity change from 0 to 1024 [ 132.015329][ T4381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.015797][ T5164] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff18446744073709551615eGW1wp\`X=C;׆27^_INITI).gJi)lDz씘j\^*TBqoߔ)Miyo" or missing value [ 132.032851][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.690336][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.697067][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.180327][ T5183] netlink: 36 bytes leftover after parsing attributes in process `syz.5.189'. [ 133.424591][ T1108] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.560398][ T5192] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 133.648288][ T5192] team0: Device hsr_slave_0 failed to register rx_handler [ 133.844566][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 134.434962][ T1108] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.453562][ T1108] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.729505][ T1108] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 134.868470][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.876978][ T26] audit: type=1326 audit(1778831782.657:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5201 comm="syz.6.193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda2b4b9e59 code=0x0 [ 134.919388][ T5204] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 134.927823][ T5204] team0: Device hsr_slave_0 failed to register rx_handler [ 134.954218][ T1108] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 134.979554][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.017457][ T1108] usb 4-1: config 0 descriptor?? [ 135.045694][ T1108] usb 4-1: can't set config #0, error -71 [ 135.290531][ T1108] usb 4-1: USB disconnect, device number 5 [ 135.606785][ T5220] loop5: detected capacity change from 0 to 512 [ 135.699049][ T5220] EXT4-fs (loop5): orphan cleanup on readonly fs [ 135.723843][ T5220] Quota error (device loop5): v2_read_file_info: Block with free entry too big (9 >= 6). [ 135.756615][ T5220] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.798424][ T5235] device syzkaller0 entered promiscuous mode [ 135.805180][ T5220] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 135.913509][ T5238] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 135.924753][ T5238] team0: Device hsr_slave_0 failed to register rx_handler [ 136.708293][ T5220] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.198: bad orphan inode 14 [ 136.722241][ T5220] ext4_test_bit(bit=13, block=18) = 1 [ 136.730571][ T5220] is_bad_inode(inode)=0 [ 136.735510][ T5220] NEXT_ORPHAN(inode)=0 [ 136.739700][ T5220] max_ino=32 [ 136.742916][ T5220] i_nlink=1 [ 136.746401][ T5220] EXT4-fs (loop5): 1 truncate cleaned up [ 136.752148][ T5220] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.786752][ T5239] netlink: 'syz.6.200': attribute type 10 has an invalid length. [ 136.804796][ T5239] team0: Device hsr_slave_0 failed to register rx_handler [ 137.100955][ T5258] netlink: 'syz.6.205': attribute type 10 has an invalid length. [ 137.116324][ T5258] team0: Device hsr_slave_0 failed to register rx_handler [ 138.113410][ T5267] loop0: detected capacity change from 0 to 256 [ 138.305547][ T5267] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff18446744073709551615eGW1wp\`X=C;׆27^_INITI).gJi)lDz씘j\^*TBqoߔ)Miyo" or missing value [ 140.134504][ T4290] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.264619][ T5280] netlink: 'syz.6.209': attribute type 10 has an invalid length. [ 140.274995][ T5280] team0: Device hsr_slave_0 failed to register rx_handler [ 140.464513][ T4290] usb 1-1: Using ep0 maxpacket: 16 [ 140.589365][ T4290] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.662023][ T4290] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.673306][ T5294] loop3: detected capacity change from 0 to 256 [ 140.695457][ T4290] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 140.774669][ T5294] FAT-fs (loop3): Unrecognized mount option "";ᮠW" or missing value [ 140.843352][ T4290] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.970634][ T4290] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 141.134770][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.831608][ T4290] usb 1-1: config 0 descriptor?? [ 143.118609][ T5305] netlink: 'syz.6.215': attribute type 10 has an invalid length. [ 143.126520][ T4290] usb 1-1: can't set config #0, error -71 [ 143.133388][ T4290] usb 1-1: USB disconnect, device number 5 [ 143.171133][ T5305] team0: Device hsr_slave_0 failed to register rx_handler [ 143.200251][ T5310] loop0: detected capacity change from 0 to 2048 [ 143.424570][ T4277] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.479954][ T5310] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000002d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 143.792413][ T26] audit: type=1800 audit(1778831791.567:16): pid=5310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.217" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 144.134031][ T4277] usb 2-1: device not accepting address 8, error -71 [ 144.297244][ T5344] netlink: 'syz.3.222': attribute type 10 has an invalid length. [ 144.333026][ T5344] team0: Device hsr_slave_0 failed to register rx_handler [ 144.594597][ T4233] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 144.619349][ T5366] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 144.628601][ T5366] team0: Device hsr_slave_0 failed to register rx_handler [ 145.734522][ T4233] usb 6-1: Using ep0 maxpacket: 32 [ 145.750077][ T5373] netlink: 88 bytes leftover after parsing attributes in process `syz.3.227'. [ 145.895124][ T4233] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 145.921972][ T5377] netlink: 'syz.0.226': attribute type 10 has an invalid length. [ 145.931480][ T5377] team0: Device hsr_slave_0 failed to register rx_handler [ 146.934657][ T4233] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 146.964111][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.965502][ T5381] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.983415][ T4233] usb 6-1: Product: syz [ 146.987834][ T4233] usb 6-1: Manufacturer: syz [ 146.992443][ T4233] usb 6-1: SerialNumber: syz [ 147.012904][ T4233] usb 6-1: config 0 descriptor?? [ 147.044812][ T5357] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.220333][ T4271] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.485308][ T5406] netlink: 'syz.0.232': attribute type 10 has an invalid length. [ 147.494827][ T4271] usb 4-1: Using ep0 maxpacket: 8 [ 147.500312][ T5406] team0: Device hsr_slave_0 failed to register rx_handler [ 147.514448][ T4233] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.644814][ T4271] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 147.865273][ T4271] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 147.901299][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.969406][ T4271] usb 4-1: Product: syz [ 148.009532][ T4271] usb 4-1: Manufacturer: syz [ 148.052707][ T4271] usb 4-1: SerialNumber: syz [ 148.091819][ T5410] netlink: 16 bytes leftover after parsing attributes in process `syz.6.233'. [ 148.162743][ T4271] usb 4-1: config 0 descriptor?? [ 148.267729][ T4271] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 148.293129][ T4271] usb 4-1: setting power ON [ 148.312553][ T4271] dvb-usb: bulk message failed: -22 (2/0) [ 148.325434][ T4271] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.354809][ T4271] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 148.364593][ T4271] usb 4-1: media controller created [ 148.382815][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.403202][ T4271] usb 4-1: selecting invalid altsetting 6 [ 148.414074][ T4271] usb 4-1: digital interface selection failed (-22) [ 148.418764][ T5417] loop0: detected capacity change from 0 to 512 [ 148.421313][ T4271] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 148.474623][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 148.533642][ T5389] dvb-usb: bulk message failed: -22 (3/0) [ 148.555594][ T5389] cxusb: i2c rd: len=147 is too big! [ 148.555594][ T5389] [ 148.567329][ T4191] usb 6-1: USB disconnect, device number 3 [ 148.594585][ T4233] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 148.614997][ T4271] usb 4-1: setting power OFF [ 148.634707][ T4271] dvb-usb: bulk message failed: -22 (2/0) [ 148.641599][ T5420] netlink: 'syz.6.235': attribute type 10 has an invalid length. [ 148.652587][ T5420] team0: Device hsr_slave_0 failed to register rx_handler [ 148.763454][ T5427] dvb-usb: bulk message failed: -22 (63/0) [ 148.776195][ T4271] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 148.799224][ T5417] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 148.906048][ T5417] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.914425][ T4271] (NULL device *): no alternate interface [ 148.923765][ T5417] EXT4-fs (loop0): shut down requested (2) [ 148.938599][ T5417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.041850][ T4271] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 149.057838][ T4233] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 149.077259][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.120279][ T4271] usb 4-1: USB disconnect, device number 6 [ 149.138451][ T4233] usb 2-1: Product: syz [ 149.148539][ T4233] usb 2-1: Manufacturer: syz [ 149.160018][ T4233] usb 2-1: SerialNumber: syz [ 149.191898][ T4233] usb 2-1: config 0 descriptor?? [ 149.249398][ T4233] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 149.268311][ T4233] usb 2-1: setting power ON [ 149.337238][ T4233] dvb-usb: bulk message failed: -22 (2/0) [ 150.513239][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.920210][ T4233] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 150.942207][ T4233] usb 2-1: media controller created [ 150.994922][ T26] audit: type=1326 audit(1778831798.447:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5450 comm="syz.3.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0397ba5e59 code=0x0 [ 151.079508][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.568238][ T4233] usb 2-1: selecting invalid altsetting 6 [ 151.620403][ T4233] usb 2-1: digital interface selection failed (-22) [ 151.666557][ T4233] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 151.815194][ T4233] usb 2-1: setting power OFF [ 151.859324][ T4233] dvb-usb: bulk message failed: -22 (2/0) [ 151.930046][ T4233] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 151.994781][ T4233] (NULL device *): no alternate interface [ 152.747057][ T4233] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 154.846930][ T4233] usb 2-1: USB disconnect, device number 10 [ 154.856454][ T5472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.245'. [ 157.198610][ T5494] netlink: 'syz.3.252': attribute type 10 has an invalid length. [ 157.207111][ T5494] team0: Device hsr_slave_0 failed to register rx_handler [ 158.978562][ T5522] loop5: detected capacity change from 0 to 512 [ 159.199979][ T5522] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 159.268202][ T5522] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.382341][ T5522] EXT4-fs (loop5): shut down requested (2) [ 159.764572][ T26] audit: type=1326 audit(1778831807.197:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.3.259" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0397ba5e59 code=0x0 [ 159.789353][ T5522] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.866039][ T26] audit: type=1326 audit(1778831808.437:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5542 comm="syz.6.253" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2b4b9e59 code=0x0 [ 162.144575][ T4271] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 164.513696][ T4271] usb 2-1: device not accepting address 11, error -71 [ 166.049270][ T5593] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 166.057346][ T5593] team0: Device hsr_slave_0 failed to register rx_handler [ 166.175468][ T5595] netlink: 16 bytes leftover after parsing attributes in process `syz.6.262'. [ 166.247041][ T5600] netlink: 'syz.5.265': attribute type 10 has an invalid length. [ 166.258060][ T5600] team0: Device hsr_slave_0 failed to register rx_handler [ 166.300700][ T5602] device syzkaller0 entered promiscuous mode [ 167.544799][ T26] audit: type=1326 audit(1778831815.317:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5606 comm="syz.5.273" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f086374de59 code=0x0 [ 167.914761][ T5611] loop1: detected capacity change from 0 to 512 [ 168.849145][ T4271] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.862362][ T5611] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 168.970440][ T5611] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.150573][ T5611] EXT4-fs (loop1): shut down requested (2) [ 169.161440][ T5611] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 169.184643][ T4271] usb 1-1: Using ep0 maxpacket: 8 [ 169.324738][ T4271] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 170.204731][ T4271] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 170.213808][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.254456][ T4271] usb 1-1: Product: syz [ 170.258662][ T4271] usb 1-1: Manufacturer: syz [ 170.263257][ T4271] usb 1-1: SerialNumber: syz [ 170.303128][ T4271] usb 1-1: config 0 descriptor?? [ 170.385719][ T4271] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 170.434505][ T4271] usb 1-1: setting power ON [ 170.439761][ T4271] dvb-usb: bulk message failed: -22 (2/0) [ 170.494697][ T4271] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.524034][ T4271] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 170.559944][ T4271] usb 1-1: media controller created [ 171.025308][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.524839][ T4271] usb 1-1: selecting invalid altsetting 6 [ 172.625346][ T4271] usb 1-1: digital interface selection failed (-22) [ 172.631983][ T4271] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 172.684820][ T4271] usb 1-1: setting power OFF [ 172.699506][ T4271] dvb-usb: bulk message failed: -22 (2/0) [ 172.740520][ T4271] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 172.746642][ T5657] netlink: 16 bytes leftover after parsing attributes in process `syz.5.283'. [ 172.759739][ T26] audit: type=1326 audit(1778831820.537:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.282" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28fa825e59 code=0x0 [ 172.855076][ T4271] (NULL device *): no alternate interface [ 172.940636][ T4271] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 173.040595][ T4271] usb 1-1: USB disconnect, device number 6 [ 176.075464][ T5692] device syzkaller0 entered promiscuous mode [ 177.356034][ T5698] netlink: 'syz.6.284': attribute type 10 has an invalid length. [ 177.396464][ T5698] team0: Device hsr_slave_0 failed to register rx_handler [ 180.089329][ T26] audit: type=1326 audit(1778831827.867:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5713 comm="syz.6.295" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2b4b9e59 code=0x0 [ 183.876944][ T26] audit: type=1326 audit(1778831831.657:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.6.296" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2b4b9e59 code=0x0 [ 185.105285][ T4206] Bluetooth: hci5: link tx timeout [ 185.111032][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.120525][ T4206] Bluetooth: hci5: link tx timeout [ 185.125738][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.396504][ T5775] device syzkaller0 entered promiscuous mode [ 186.733834][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 186.808205][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 187.269192][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 187.565831][ T4191] Bluetooth: hci5: command 0x0406 tx timeout [ 188.087673][ T5790] netlink: 'syz.3.301': attribute type 10 has an invalid length. [ 188.138410][ T5790] team0: Device hsr_slave_0 failed to register rx_handler [ 189.592269][ T26] audit: type=1326 audit(1778831837.357:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.3.309" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0397ba5e59 code=0x0 [ 189.905040][ T5811] device syzkaller0 entered promiscuous mode [ 190.509748][ T26] audit: type=1326 audit(1778831838.277:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.3.311" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0397ba5e59 code=0x0 [ 194.131486][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.137944][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.438544][ T4206] Bluetooth: hci5: link tx timeout [ 196.443693][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.394303][ T4206] Bluetooth: hci5: link tx timeout [ 199.399773][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.407696][ T4206] Bluetooth: hci5: link tx timeout [ 199.412818][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.426346][ T4206] Bluetooth: hci5: link tx timeout [ 199.431604][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.442977][ T4206] Bluetooth: hci5: link tx timeout [ 199.448227][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.455992][ T4206] Bluetooth: hci5: link tx timeout [ 199.461102][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.470006][ T4206] Bluetooth: hci5: link tx timeout [ 199.475202][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.482847][ T4206] Bluetooth: hci5: link tx timeout [ 199.488181][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.524716][ T4206] Bluetooth: hci5: link tx timeout [ 199.529864][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.537674][ T4206] Bluetooth: hci5: link tx timeout [ 199.542794][ T4206] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.431461][ T5897] device syzkaller0 entered promiscuous mode [ 205.650593][ T5928] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 205.843617][ T5928] team0: Device hsr_slave_0 failed to register rx_handler [ 205.891702][ T5930] netlink: 'syz.6.332': attribute type 10 has an invalid length. [ 205.925967][ T5930] team0: Device hsr_slave_0 failed to register rx_handler [ 207.208669][ T4205] Bluetooth: hci5: link tx timeout [ 207.214001][ T4205] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.240968][ T2302] Bluetooth: hci3: command 0x0406 tx timeout [ 207.424854][ T26] audit: type=1326 audit(1778831855.167:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.6.335" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2b4b9e59 code=0x0 [ 208.482214][ T5956] device syzkaller0 entered promiscuous mode [ 211.103626][ T4205] Bluetooth: hci5: link tx timeout [ 211.108816][ T4205] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.947341][ T4205] Bluetooth: hci5: link tx timeout [ 212.952695][ T4205] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.964553][ T4205] Bluetooth: hci5: link tx timeout [ 212.969691][ T4205] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 212.977875][ T4205] Bluetooth: hci5: link tx timeout [ 212.982999][ T4205] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.384843][ T5788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 213.672306][ T26] audit: type=1326 audit(1778831861.027:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e7cb9e59 code=0x0 [ 213.696674][ T5788] usb 4-1: Using ep0 maxpacket: 16 [ 213.814700][ T5788] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.854102][ T6006] netlink: 'syz.6.344': attribute type 10 has an invalid length. [ 214.864859][ T6006] team0: Device hsr_slave_0 failed to register rx_handler [ 215.020050][ T5788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 215.184759][ T5788] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 215.205751][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.213771][ T5788] usb 4-1: Product: syz [ 215.224463][ T5788] usb 4-1: Manufacturer: syz [ 215.234776][ T5788] usb 4-1: SerialNumber: syz [ 215.254582][ T5788] usb 4-1: config 0 descriptor?? [ 217.756452][ T5788] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 217.774437][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 218.224647][ T5788] imon:send_packet: packet tx failed (-71) [ 218.244601][ T5788] imon 4-1:0.0: panel buttons/knobs setup failed [ 219.531671][ T6032] device syzkaller0 entered promiscuous mode [ 219.554578][ T5788] rc_core: IR keymap rc-imon-pad not found [ 219.560750][ T5788] Registered IR keymap rc-empty [ 219.594634][ T5788] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 219.636162][ T5788] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 219.687947][ T5788] imon:send_packet: packet tx failed (-71) [ 219.714943][ T5788] imon 4-1:0.0: remote input dev register failed [ 219.745424][ T5788] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 219.888584][ T5788] imon 4-1:0.0: unable to initialize intf0, err 0 [ 219.921021][ T5788] imon:imon_probe: failed to initialize context! [ 219.954769][ T5788] imon 4-1:0.0: unable to register, err -19 [ 219.985833][ T5788] usb 4-1: USB disconnect, device number 7 [ 220.492962][ T6057] netlink: 'syz.3.358': attribute type 10 has an invalid length. [ 220.504646][ T6057] team0: Device hsr_slave_0 failed to register rx_handler [ 220.624476][ T5788] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 221.398628][ T26] audit: type=1326 audit(1778831869.177:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.6.359" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2b4b9e59 code=0x0 [ 221.474637][ T5788] usb 6-1: Using ep0 maxpacket: 16 [ 222.349472][ T5788] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.391024][ T5788] usb 6-1: config 0 interface 0 has no altsetting 0 [ 222.660804][ T4234] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 223.167467][ T5788] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 224.655356][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.685315][ T5788] usb 6-1: Product: syz [ 224.704832][ T5788] usb 6-1: Manufacturer: syz [ 224.714428][ T5788] usb 6-1: SerialNumber: syz [ 225.232566][ T5788] usb 6-1: config 0 descriptor?? [ 225.384534][ T5788] usb 6-1: can't set config #0, error -71 [ 225.410547][ T5788] usb 6-1: USB disconnect, device number 4 [ 227.541516][ T4205] Bluetooth: hci5: link tx timeout [ 227.546745][ T4205] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.612459][ T6103] device syzkaller0 entered promiscuous mode [ 228.488309][ T6125] netlink: 'syz.5.371': attribute type 10 has an invalid length. [ 228.499645][ T6125] team0: Device hsr_slave_0 failed to register rx_handler [ 231.144479][ T5788] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 231.765878][ T4242] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 231.814752][ T5788] usb 2-1: Using ep0 maxpacket: 16 [ 231.966266][ T5788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.004424][ T5788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 232.044494][ T4242] usb 4-1: Using ep0 maxpacket: 16 [ 232.230545][ T4205] Bluetooth: hci5: link tx timeout [ 232.238428][ T4205] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 232.252627][ T4205] Bluetooth: hci5: link tx timeout [ 232.275381][ T4205] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.424652][ T5788] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 232.434593][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.442847][ T5788] usb 2-1: Product: syz [ 232.447490][ T5788] usb 2-1: Manufacturer: syz [ 232.452185][ T5788] usb 2-1: SerialNumber: syz [ 232.457247][ T4242] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.466932][ T5788] usb 2-1: config 0 descriptor?? [ 232.649967][ T4242] usb 4-1: config 0 interface 0 has no altsetting 0 [ 232.758779][ T5788] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 232.824726][ T4242] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 232.839071][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.890937][ T4242] usb 4-1: Product: syz [ 232.891814][ T6166] device syzkaller0 entered promiscuous mode [ 232.913219][ T4242] usb 4-1: Manufacturer: syz [ 232.930137][ T4242] usb 4-1: SerialNumber: syz [ 232.959103][ T4242] usb 4-1: config 0 descriptor?? [ 233.698345][ T4242] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 233.734557][ T5788] rc_core: IR keymap rc-imon-pad not found [ 233.743388][ T5788] Registered IR keymap rc-empty [ 233.767570][ T5788] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 233.793396][ T5788] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 234.014771][ T6178] netlink: 'syz.5.384': attribute type 10 has an invalid length. [ 234.037779][ T6178] team0: Device hsr_slave_0 failed to register rx_handler [ 234.424433][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 234.769062][ T2302] Bluetooth: hci5: command 0x0406 tx timeout [ 234.795685][ T5788] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 234.810968][ T5788] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 234.823155][ T5788] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:13> initialized [ 234.833759][ T5788] usb 2-1: USB disconnect, device number 13 [ 235.988305][ T4242] rc_core: IR keymap rc-imon-pad not found [ 235.994158][ T4242] Registered IR keymap rc-empty [ 236.007013][ T4242] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 236.026922][ T4242] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 236.244442][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 236.356089][ T4242] imon:send_packet: packet tx failed (-71) [ 236.395543][ T4242] imon 4-1:0.0: remote input dev register failed [ 236.464510][ T4242] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 236.847564][ T4191] Bluetooth: hci5: command 0x0405 tx timeout [ 237.242754][ T4242] imon 4-1:0.0: unable to initialize intf0, err 0 [ 237.274557][ T4242] imon:imon_probe: failed to initialize context! [ 237.293094][ T4242] imon 4-1:0.0: unable to register, err -19 [ 237.329674][ T4242] usb 4-1: USB disconnect, device number 8 [ 237.622171][ T6203] device syzkaller0 entered promiscuous mode [ 239.554644][ T2302] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 241.092942][ T6226] netlink: 'syz.1.400': attribute type 10 has an invalid length. [ 241.103467][ T6226] team0: Device hsr_slave_0 failed to register rx_handler [ 243.074474][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 243.829284][ T13] usb 7-1: Using ep0 maxpacket: 16 [ 245.405878][ T26] audit: type=1326 audit(1778831892.917:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3e7cb9e59 code=0x0 [ 245.818970][ T13] usb 7-1: device descriptor read/all, error -71 [ 245.992322][ T6277] netlink: 'syz.5.414': attribute type 10 has an invalid length. [ 246.001785][ T6277] team0: Device hsr_slave_0 failed to register rx_handler [ 246.204925][ T13] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 246.692354][ T13] usb 7-1: Using ep0 maxpacket: 16 [ 246.814767][ T13] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.837772][ T6286] loop0: detected capacity change from 0 to 512 [ 246.861088][ T6286] EXT4-fs (loop0): Ignoring removed orlov option [ 246.869397][ T13] usb 7-1: config 0 interface 0 has no altsetting 0 [ 246.880513][ T6288] loop1: detected capacity change from 0 to 512 [ 246.887358][ T6286] EXT4-fs (loop0): Ignoring removed bh option [ 246.999069][ T6288] EXT4-fs (loop1): Ignoring removed orlov option [ 247.022933][ T6288] EXT4-fs (loop1): Ignoring removed bh option [ 247.043961][ T6286] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 247.097312][ T6288] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 247.174859][ T13] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 247.201565][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.267157][ T13] usb 7-1: Product: syz [ 247.292459][ T13] usb 7-1: Manufacturer: syz [ 247.327506][ T4820] udevd[4820]: incorrect ext4 checksum on /dev/loop1 [ 247.385099][ T13] usb 7-1: SerialNumber: syz [ 247.463823][ T13] usb 7-1: config 0 descriptor?? [ 247.760874][ T13] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input13 [ 248.017617][ T4191] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 248.097692][ T13] rc_core: IR keymap rc-imon-pad not found [ 248.103907][ T13] Registered IR keymap rc-empty [ 248.118712][ T13] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 248.149505][ T13] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 248.215231][ T13] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 248.266124][ T13] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 248.277456][ T4191] usb 1-1: Using ep0 maxpacket: 16 [ 248.318315][ T13] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:4> initialized [ 248.394708][ T4191] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.454488][ T4191] usb 1-1: config 0 interface 0 has no altsetting 0 [ 248.670141][ T1108] usb 7-1: USB disconnect, device number 4 [ 248.676080][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 249.150542][ T26] audit: type=1326 audit(1778831896.927:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.3.426" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0397ba5e59 code=0x0 [ 249.781181][ T4191] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 249.798072][ T4191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.806278][ T4191] usb 1-1: Product: syz [ 249.813053][ T4191] usb 1-1: Manufacturer: syz [ 249.817745][ T4191] usb 1-1: SerialNumber: syz [ 249.890405][ T4191] usb 1-1: config 0 descriptor?? [ 250.041156][ T6327] device syzkaller0 entered promiscuous mode [ 250.161870][ T6331] loop6: detected capacity change from 0 to 512 [ 250.255119][ T6331] EXT4-fs (loop6): Ignoring removed orlov option [ 250.299669][ T6331] EXT4-fs (loop6): Ignoring removed bh option [ 250.307508][ T4191] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 250.343465][ T6323] netlink: 'syz.5.428': attribute type 10 has an invalid length. [ 250.362313][ T6323] team0: Device hsr_slave_0 failed to register rx_handler [ 250.388877][ T6331] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 250.549247][ T4820] udevd[4820]: incorrect ext4 checksum on /dev/loop6 [ 250.597737][ T6337] loop3: detected capacity change from 0 to 512 [ 250.624531][ T4191] rc_core: IR keymap rc-imon-pad not found [ 250.630464][ T4191] Registered IR keymap rc-empty [ 251.122816][ T6337] EXT4-fs (loop3): Ignoring removed orlov option [ 251.124355][ T4191] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 251.131931][ T6337] EXT4-fs (loop3): Ignoring removed bh option [ 251.148991][ T4191] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 251.254087][ T6337] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 251.335208][ T4191] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 251.413456][ T4191] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 251.427607][ T4191] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:8> initialized [ 251.523345][ T4191] usb 1-1: USB disconnect, device number 8 [ 251.529303][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 252.620265][ T26] audit: type=1326 audit(1778831900.177:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.440" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28fa825e59 code=0x0 [ 253.053463][ T6370] device syzkaller0 entered promiscuous mode [ 253.174731][ T4233] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 253.934586][ T4233] usb 7-1: Using ep0 maxpacket: 16 [ 254.084674][ T4233] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.144511][ T4233] usb 7-1: config 0 interface 0 has no altsetting 0 [ 254.395464][ T4233] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 254.416358][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.455716][ T4233] usb 7-1: Product: syz [ 254.475103][ T4233] usb 7-1: Manufacturer: syz [ 254.493565][ T4233] usb 7-1: SerialNumber: syz [ 254.601388][ T4233] usb 7-1: config 0 descriptor?? [ 254.683617][ T6393] loop0: detected capacity change from 0 to 512 [ 254.699699][ T6392] loop1: detected capacity change from 0 to 512 [ 254.749166][ T6392] EXT4-fs (loop1): Ignoring removed orlov option [ 254.760763][ T6392] EXT4-fs (loop1): Ignoring removed bh option [ 254.787107][ T6393] EXT4-fs (loop0): Ignoring removed orlov option [ 254.799622][ T6393] EXT4-fs (loop0): Ignoring removed bh option [ 254.807342][ T6392] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 254.858984][ T6393] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 254.907240][ T4233] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input17 [ 255.111941][ T4820] udevd[4820]: incorrect ext4 checksum on /dev/loop0 [ 255.444725][ T5788] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 255.654695][ T4233] rc_core: IR keymap rc-imon-pad not found [ 255.661369][ T4233] Registered IR keymap rc-empty [ 255.671566][ T4233] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 255.682643][ T4233] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 255.704554][ T5788] usb 2-1: Using ep0 maxpacket: 16 [ 255.745126][ T4233] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 255.763260][ T4233] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 255.797885][ T4233] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:5> initialized [ 255.834615][ T5788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.872919][ T5788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.049874][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.062899][ T5788] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 256.073091][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.114916][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.122945][ T5788] usb 2-1: Product: syz [ 256.134444][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 256.152005][ T5788] usb 2-1: Manufacturer: syz [ 256.162133][ T5788] usb 2-1: SerialNumber: syz [ 256.181442][ T5788] usb 2-1: config 0 descriptor?? [ 256.271029][ T25] usb 7-1: USB disconnect, device number 5 [ 256.529213][ T5788] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 257.274471][ T5788] rc_core: IR keymap rc-imon-pad not found [ 257.280562][ T5788] Registered IR keymap rc-empty [ 257.860463][ T26] audit: type=1326 audit(1778831905.637:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6420 comm="syz.6.455" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2b4b9e59 code=0x0 [ 257.927449][ T5788] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 258.270684][ T5788] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 258.280068][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 258.411997][ T6427] device syzkaller0 entered promiscuous mode [ 258.538291][ T5788] imon:send_packet: packet tx failed (-71) [ 258.562744][ T5788] imon 2-1:0.0: remote input dev register failed [ 258.585821][ T5788] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 259.090742][ T5788] imon 2-1:0.0: unable to initialize intf0, err 0 [ 259.097668][ T5788] imon:imon_probe: failed to initialize context! [ 259.104215][ T5788] imon 2-1:0.0: unable to register, err -19 [ 259.144260][ T5788] usb 2-1: USB disconnect, device number 14 [ 259.628933][ T4233] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 259.739715][ T26] audit: type=1326 audit(1778831907.517:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.5.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f086374de59 code=0x0 [ 259.884977][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 260.017987][ T4233] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.170232][ T4233] usb 1-1: config 0 interface 0 has no altsetting 0 [ 261.185436][ T4233] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 261.220321][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.256392][ T6463] loop6: detected capacity change from 0 to 1024 [ 261.267629][ T4233] usb 1-1: Product: syz [ 261.277320][ T4233] usb 1-1: Manufacturer: syz [ 261.282356][ T4233] usb 1-1: SerialNumber: syz [ 261.302422][ T4233] usb 1-1: config 0 descriptor?? [ 261.584528][ T4277] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 261.612272][ T4233] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 261.648009][ T6465] netlink: 104 bytes leftover after parsing attributes in process `syz.6.469'. [ 262.054442][ T4277] usb 4-1: Using ep0 maxpacket: 16 [ 262.244817][ T4277] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.256141][ T4233] rc_core: IR keymap rc-imon-pad not found [ 262.261963][ T4233] Registered IR keymap rc-empty [ 262.272878][ T4233] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 262.304673][ T4277] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.323878][ T6469] loop6: detected capacity change from 0 to 512 [ 262.328361][ T4233] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 262.385347][ T4233] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 262.402059][ T4233] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 262.432648][ T6469] EXT4-fs (loop6): Ignoring removed orlov option [ 262.441330][ T4233] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:9> initialized [ 262.456048][ T6469] EXT4-fs (loop6): Ignoring removed bh option [ 262.505312][ T4277] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 262.554444][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.567850][ T4277] usb 4-1: Product: syz [ 262.572695][ T4277] usb 4-1: Manufacturer: syz [ 262.573074][ T6469] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 262.578024][ T4277] usb 4-1: SerialNumber: syz [ 262.598365][ T4277] usb 4-1: config 0 descriptor?? [ 262.742439][ T4233] usb 1-1: USB disconnect, device number 9 [ 262.748361][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 262.897733][ T4277] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 265.721612][ T6480] netlink: 'syz.6.474': attribute type 10 has an invalid length. [ 265.730058][ T6480] team0: Device hsr_slave_0 failed to register rx_handler [ 266.364544][ T4277] rc_core: IR keymap rc-imon-pad not found [ 266.370555][ T4277] Registered IR keymap rc-empty [ 266.394432][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 266.402052][ T4277] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 266.490539][ T4277] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 266.867544][ T4277] imon:send_packet: packet tx failed (-71) [ 266.954597][ T26] audit: type=1326 audit(1778831914.727:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6502 comm="syz.3.480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0397ba5e59 code=0x0 [ 267.011370][ T4277] imon 4-1:0.0: remote input dev register failed [ 267.247225][ T4277] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 267.811830][ T4277] imon 4-1:0.0: unable to initialize intf0, err 0 [ 267.835538][ T4277] imon:imon_probe: failed to initialize context! [ 267.897898][ T4277] imon 4-1:0.0: unable to register, err -19 [ 267.935284][ T4277] usb 4-1: USB disconnect, device number 9 [ 267.970246][ T6520] loop0: detected capacity change from 0 to 1024 [ 268.373232][ T6522] netlink: 104 bytes leftover after parsing attributes in process `syz.0.484'. [ 268.901192][ T6524] loop1: detected capacity change from 0 to 512 [ 269.017469][ T6524] EXT4-fs (loop1): Ignoring removed orlov option [ 269.046924][ T6524] EXT4-fs (loop1): Ignoring removed bh option [ 269.115296][ T6524] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 269.288251][ T4182] udevd[4182]: incorrect ext4 checksum on /dev/loop1 [ 269.489630][ T6533] loop5: detected capacity change from 0 to 512 [ 269.555986][ T6533] EXT4-fs (loop5): Ignoring removed orlov option [ 269.577311][ T6533] EXT4-fs (loop5): Ignoring removed bh option [ 269.642000][ T6533] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 269.674635][ T4191] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 269.762737][ T4182] udevd[4182]: incorrect ext4 checksum on /dev/loop5 [ 269.994818][ T4191] usb 1-1: Using ep0 maxpacket: 16 [ 273.402033][ T6557] loop3: detected capacity change from 0 to 512 [ 273.463861][ T6557] EXT4-fs (loop3): Ignoring removed orlov option [ 273.503288][ T6557] EXT4-fs (loop3): Ignoring removed bh option [ 273.613450][ T6562] device syzkaller0 entered promiscuous mode [ 273.738097][ T6557] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 274.224200][ T26] audit: type=1326 audit(1778831921.997:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.6.496" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2b4b9e59 code=0x0 [ 274.720181][ T4182] udevd[4182]: incorrect ext4 checksum on /dev/loop3 [ 275.041433][ T4191] usb 1-1: device descriptor read/all, error -71 [ 275.063839][ T6575] loop0: detected capacity change from 0 to 512 [ 275.139858][ T6579] loop3: detected capacity change from 0 to 1024 [ 275.190865][ T6575] EXT4-fs (loop0): Ignoring removed orlov option [ 275.204596][ T4234] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 275.225345][ T6575] EXT4-fs (loop0): Ignoring removed bh option [ 275.364269][ T6575] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,orlov,bh,delalloc,,errors=continue. Quota mode: writeback. [ 275.524528][ T6586] netlink: 104 bytes leftover after parsing attributes in process `syz.3.497'. [ 275.577104][ T4234] usb 6-1: Using ep0 maxpacket: 16 [ 275.736363][ T4234] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.946516][ T4234] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.095316][ T4234] usb 6-1: string descriptor 0 read error: -71 [ 276.118159][ T4182] udevd[4182]: incorrect ext4 checksum on /dev/loop0 [ 276.125054][ T4234] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 276.187822][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.265746][ T4234] usb 6-1: config 0 descriptor?? [ 276.300511][ T4234] usb 6-1: can't set config #0, error -71 [ 276.412827][ T4234] usb 6-1: USB disconnect, device number 5 [ 276.491834][ T6599] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 317.009381][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.015747][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.448454][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.454954][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.444392][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 381.451409][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4342/1:b..l [ 381.459645][ C1] (detected by 1, t=10502 jiffies, g=20445, q=180) [ 381.466301][ C1] task:kworker/u4:8 state:R running task stack:21264 pid: 4342 ppid: 2 flags:0x00004000 [ 381.477848][ C1] Workqueue: bat_events batadv_nc_worker [ 381.483492][ C1] Call Trace: [ 381.486751][ C1] [ 381.489659][ C1] __schedule+0x11ef/0x43c0 [ 381.494153][ C1] ? release_firmware_map_entry+0x190/0x190 [ 381.500031][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 381.505313][ C1] preempt_schedule_irq+0xbb/0x160 [ 381.510403][ C1] ? __cond_resched+0xd0/0xd0 [ 381.515065][ C1] ? rcu_is_watching+0x11/0xa0 [ 381.519808][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 381.525603][ C1] irqentry_exit+0x63/0x70 [ 381.529998][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 381.535981][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 381.541248][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 381.560850][ C1] RSP: 0018:ffffc9000341faa0 EFLAGS: 00000206 [ 381.566898][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 37c10526a5a80100 [ 381.574864][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3aa0 RDI: ffffffff8a79fe00 [ 381.582816][ C1] RBP: ffffc9000341fbc0 R08: dffffc0000000000 R09: 1ffffffff203aa18 [ 381.590763][ C1] R10: dffffc0000000000 R11: fffffbfff203aa19 R12: ffffffff8c31eb20 [ 381.598718][ C1] R13: 1ffff92000683f60 R14: 0000000000000246 R15: dffffc0000000000 [ 381.606690][ C1] ? rcu_lock_release+0x5/0x20 [ 381.611449][ C1] ? read_lock_is_recursive+0x10/0x10 [ 381.616928][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 381.621946][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 381.627914][ C1] rcu_lock_acquire+0x2a/0x30 [ 381.632576][ C1] ? rcu_lock_acquire+0x5/0x30 [ 381.637329][ C1] batadv_nc_worker+0xc9/0x5c0 [ 381.642074][ C1] process_one_work+0x85f/0x1010 [ 381.647006][ C1] ? worker_detach_from_pool+0x240/0x240 [ 381.652626][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 381.657899][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 381.662909][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 381.668435][ C1] ? wq_worker_running+0x97/0x170 [ 381.673444][ C1] worker_thread+0xaa6/0x1290 [ 381.678108][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 381.683984][ C1] kthread+0x436/0x520 [ 381.688030][ C1] ? rcu_lock_release+0x20/0x20 [ 381.692859][ C1] ? kthread_blkcg+0xd0/0xd0 [ 381.697426][ C1] ret_from_fork+0x1f/0x30 [ 381.701851][ C1] [ 381.704850][ C1] rcu: rcu_preempt kthread starved for 9870 jiffies! g20445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 381.715935][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 381.725884][ C1] rcu: RCU grace-period kthread stack dump: [ 381.731747][ C1] task:rcu_preempt state:R running task stack:27152 pid: 15 ppid: 2 flags:0x00004000 [ 381.742495][ C1] Call Trace: [ 381.745755][ C1] [ 381.748670][ C1] __schedule+0x11ef/0x43c0 [ 381.753159][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 381.759030][ C1] ? release_firmware_map_entry+0x190/0x190 [ 381.765162][ C1] ? __mod_timer+0x91e/0xd00 [ 381.769736][ C1] schedule+0x11b/0x1e0 [ 381.773897][ C1] schedule_timeout+0x184/0x2d0 [ 381.778729][ C1] ? console_conditional_schedule+0x40/0x40 [ 381.784596][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 381.790471][ C1] ? update_process_times+0x200/0x200 [ 381.795823][ C1] ? prepare_to_swait_event+0x331/0x350 [ 381.801351][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 381.806189][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 381.812320][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 381.817108][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 381.822304][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 381.827481][ C1] rcu_gp_kthread+0x9b/0x370 [ 381.832084][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 381.837971][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 381.843065][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 381.848932][ C1] ? __kthread_parkme+0x157/0x1b0 [ 381.853939][ C1] kthread+0x436/0x520 [ 381.857983][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 381.863095][ C1] ? kthread_blkcg+0xd0/0xd0 [ 381.867663][ C1] ret_from_fork+0x1f/0x30 [ 381.872065][ C1] [ 381.875080][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 381.881385][ C1] Sending NMI from CPU 1 to CPUs 0: [ 381.886577][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10