last executing test programs: 13m52.1751983s ago: executing program 3 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000180)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ad43000001005400000001"], 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x38, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x20, 0x5, 0x0, 0x0, {[@generic={0x3, 0x2}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x7, 0xde}]}}}}}, 0x46) 13m48.449072591s ago: executing program 3 (id=585): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x205b) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) 13m47.309277518s ago: executing program 3 (id=589): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 13m43.918712638s ago: executing program 3 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 13m42.62256225s ago: executing program 3 (id=596): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x5, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) get_robust_list(0x0, 0x0, 0x0) 13m39.597988868s ago: executing program 32 (id=570): socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000001400"], 0xfdef) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) 13m38.713472357s ago: executing program 3 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x200000, 0x0, 0x3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 13m38.695805378s ago: executing program 33 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x200000, 0x0, 0x3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 8m39.425629177s ago: executing program 6 (id=1572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000240)="fad33075218151db00316f3a277f", 0xe, 0x20000001, &(0x7f0000000080)={0x11, 0x88a8, r7, 0x1, 0xdd, 0x6, @local}, 0x14) 8m39.093114198s ago: executing program 6 (id=1576): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) writev(r0, &(0x7f0000002a00)=[{&(0x7f0000001880)="fd62a577da0f31ce817d5f06f2114df39bbedb94260795873e6f44d162c0f16eb4876d0b9f84087b4bc2f133c771c40a9b935c6df6f33027464488d1e76b240e5d280c9a4b27f46c78791ab65fd2149eb2a01800f224f6f90af964646ba2036611977ac35fc4ab46981f4e9aeeb24f423316331980ff2d7fde97a2bf4e79", 0x7e}], 0x1) 8m38.541585756s ago: executing program 6 (id=1580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 8m37.332844884s ago: executing program 6 (id=1583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 8m36.598195797s ago: executing program 6 (id=1588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r1, 0x0, 0x0, 0x5, 0x0) get_robust_list(0x0, 0x0, 0x0) 8m36.228992829s ago: executing program 6 (id=1594): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) 8m20.767785783s ago: executing program 34 (id=1594): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) 7m25.700652741s ago: executing program 2 (id=1773): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000ed03010078000000000000000200000a14000000ed0301000000000000000000070500000000000000dc1010ec60a5b748fd49caf26d094e8d0bd096a140"], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x6e22, 0x0, @empty, 0xc70}, 0x1c) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000380)=""/185, &(0x7f0000000440)=0xb9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=r0, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 7m24.46353028s ago: executing program 2 (id=1776): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000400)="886e3011", 0x4}], 0x1}, 0x40c0) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2}}, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 7m23.815285871s ago: executing program 2 (id=1779): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7ffff000, 0x3) 7m23.490591432s ago: executing program 2 (id=1781): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x71bd0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x3c, 0x2, 0x0, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x10}, @mcast1, [0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xd4b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) setxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000cc0)={0x0, 0xfb, 0x15, 0x2, 0x8, "de47b8ff9d6748d0cfe067ceecce19a1"}, 0x15, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 7m21.145590896s ago: executing program 2 (id=1786): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000ed03010078000000000000000200000a14000000ed0301000000000000000000070500000000000000dc1010ec60a5b748fd49caf26d094e8d0bd096a140"], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x6e22, 0x0, @empty, 0xc70}, 0x1c) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000380)=""/185, &(0x7f0000000440)=0xb9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX=r0, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 7m19.15642118s ago: executing program 2 (id=1790): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xc, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="66a14593b9a1"}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 7m3.784219631s ago: executing program 35 (id=1790): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xc, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="66a14593b9a1"}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 2m8.555129886s ago: executing program 0 (id=2741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 2m8.479703378s ago: executing program 0 (id=2743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m8.381014611s ago: executing program 0 (id=2744): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 2m7.163259421s ago: executing program 0 (id=2749): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @dev={0xac, 0x14, 0x14, 0x37}}}) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) 2m6.023579826s ago: executing program 0 (id=2753): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '.\x00'}) 2m4.441226867s ago: executing program 0 (id=2760): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100), &(0x7f0000000240)=@v3={0x3000000, [{0x81, 0x7ff}, {0xfffffff7, 0x8001}]}, 0x18, 0x0) 1m51.700645614s ago: executing program 7 (id=2788): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r1, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200", 0x4}], 0x1}, 0x4005) 1m50.57858966s ago: executing program 7 (id=2790): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800, &(0x7f0000000000)={[{}, {@nogrpid}]}, 0xfe, 0x572, &(0x7f0000000240)="$eJzs3U1rVFcfAPD/nSS+JD4aQeRpFyXgohbrxCR9sdCFXZZWKrR7OyTXIJk4kpmISYXqom66KVIopdLSD9B9l9Iv0E8htIIUCe2imyl35o6OyUwS42hG5/eDq+fcc6/nnrn3fzxnzgwTwMCayP4oRLwSEd8kEYfayoYjL5xoHrf24NpstiVRr3/6VxJJvq91fJL/PZZn/h8Rv30VcaKwsd7qyupCqVxOl/L8ZG3x8mR1ZfXkxcXSfDqfXpqemTn99sz0e+++s/HkvTtr6xvn/vn+kzsfnv762Np3v9w7fCuJM3EgL2tvx1O43p6ZiIn8NRmJM+sOnOpBZf0k2e0LYEeG8jgfiawPOBRDedQDL78vI6IODKhE/MOAas4AMs25/abz4PrLN8u7/0FzAtRq+6P2J833RmJfY240upY8NjPKXonxHtSf1fHrn7dvZVv07n0IgC1dvxERp4aHH+v/DkZb/7dzp7ZxzPo69H/w/NzJxj9v7u0w/ik8HP9Eh/HPWIfY3Ymt479wr/OZO1wEWicb/70fncZ/Dxetxofy3P8aY76R5MLFcpr1bVk3eTxG9mb5zdZzTq/drXcrax//ZVtWf2ssmF/HveF1TZ0r1UpP0+Z2929EvLrF+DfpcP+z1+PcNus4mt5+rVvZ1u1/tuo/R7ze8f4/muskm69PTjaeh8nWU7HR3zeP/t6t/t1uf3b/Rzdv/3jSvl5bffI6ftr3b9qtbCLJF02f8Pnfk3zWSO/J910t1WpLUxF7ko837p9upn9sy7eOz9p//Fjn+N/s+d8fEZ9vs/03j9zsemg/3P+5J7r/XRL1pGvR3Y+++KFb/dvr/95qpI7ne7bT/3W+0tG89GmeZgAAAAAAAOhfhYg4EEmh+DBdKBSLzc93HInRQrlSrZ24UFm+NBeN78qOx0ihtdI91vZ5iKn887Ct/PS6/ExEHI6Ib4f2N/LF2Up5brcbDwAAAAAAAAAAAAAAAAAAAH1irMv3/zN/DO321QHPnJ/8hsG1Zfz34peegL7k/38YXOIfBpf4h8El/mFwiX8YXOIfBpf4h8El/gEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp09m231tQfXZrP83JWV5YXKlZNzaXWhuLg8W5ytLF0uzlcq8+W0OFtZ3OrfK1cql6emY/nqZC1NapPVldXzi5XlS7XzFxdL8+n5dOS5tAoAAAAAAAAAAAAAAAAAAABeLNWV1YVSuZwuvVyJQt68bZ91MD+hHy7+xUoM98dlSPQ4sYudEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs818AAAD//0efKxA=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = socket$igmp(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a40)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000030b94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0x6b, 0x60000000}, 0x50) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 1m49.391422257s ago: executing program 36 (id=2760): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100), &(0x7f0000000240)=@v3={0x3000000, [{0x81, 0x7ff}, {0xfffffff7, 0x8001}]}, 0x18, 0x0) 1m49.366250858s ago: executing program 7 (id=2794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_writev(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/229, 0xe5}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x0, 0x1, 0x3}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 1m45.765353073s ago: executing program 7 (id=2803): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800, &(0x7f0000000000)={[{}, {@nogrpid}]}, 0xfe, 0x572, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = socket$igmp(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a40)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000030b94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0x6b, 0x60000000}, 0x50) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 1m41.830732549s ago: executing program 7 (id=2814): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '.\x00'}) 1m41.370453534s ago: executing program 7 (id=2817): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x501, &(0x7f0000000e40)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xa98480, &(0x7f0000000200)={[{@nodelalloc}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@nolazytime}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000b80), 0x44010, 0x0) chdir(&(0x7f0000000040)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x844) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000300)={0x20071026}, 0x0) setgid(0xee01) r5 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f00000000c0)={0x6, "4eff5e04e1beffa06d1398e723d337406f34c074bf2d5a553ae708e88c059f78", 0x3}) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r6, 0x6, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) sendmsg$NFC_CMD_LLC_SDREQ(r7, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 1m25.337784875s ago: executing program 37 (id=2817): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x501, &(0x7f0000000e40)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xa98480, &(0x7f0000000200)={[{@nodelalloc}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@nolazytime}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000b80), 0x44010, 0x0) chdir(&(0x7f0000000040)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x844) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000300)={0x20071026}, 0x0) setgid(0xee01) r5 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f00000000c0)={0x6, "4eff5e04e1beffa06d1398e723d337406f34c074bf2d5a553ae708e88c059f78", 0x3}) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r6, 0x6, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) sendmsg$NFC_CMD_LLC_SDREQ(r7, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 15.802168685s ago: executing program 8 (id=3054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}], {0x4, 0x5}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x34, 0x0) 12.760899713s ago: executing program 8 (id=3058): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_read_part_table(0x5f3, &(0x7f00000015c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000003740)=[{&(0x7f0000001440)='de', 0x2}], 0x1) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14K3xUbSot1NGtsGkVpB9Kmg1vcYk00I2WRDdlObUDTFDyCIqOCTT74IfgBB+hFEKOi7aFFEW33wQTuysxPbtLtJJGnWu/n94HTOmTM7/3Om2bM7O4eZAE6tixFxOyKGIuJKRJSL9WmRZovU3u7Z0wfz7ZRElt39axJJsW53X+3ycESci4idiBiJiK99OeKbyetxm1vbK3P1em2jKFdbq+vV5tb21eXVuaXaUm1tenrqxszNmeszk1nhSP08HxG3vvjkh9/72Zdu/erT3/r97J8vf7vdrM99tNPuiJg/UoAeOvsu5cdiV/sYbbyJYH0wVPSn1O+GAABwKOMRcSkiPpF//y/HUP5tDgAAABgk2edH419JRAYAAAAMrDQiRiNJK8V839FI00qlM4f3I3E2rTearU8tNjbXFtp1EWNRSheX67XJYq7wWJSSdnkqz78oX3ulPB0R70bED8pn8nJlvlFf6PePHwAAAHBKnLuw9/z/H+U0zwMAAAADZqxnAQAAABgUTvkBAABg8Dn/BwAAgIH2lTt32inbfY73wr2tzZXGvasLteZKZXVzvjLf2FivLDUaS/k9+1YP2l+90Vj/TKxt3q+2as1Wtbm1Pbva2FxrzS7veQQ2AAAAcILevfDod0lE7Hz2TJ6iuA8gwB5/7HcDgOM01O8GAH0z3O8GAH1TOnALIwQMuuSA+p6Td359/G0BAADejImPvX79/62i7uDfBoAPMnN9AOD0cXUPTq+SGYBw6o13Fm/3qj/69f8s+58bBQAAHKvRPCVppbgWOBppWqlEvJM/FqCULC7Xa5MR8aGI+G259Ha7PJW/MjlwzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADAQItI/5Tkd/OPmCiPj776+8BbyT/L8aQo/OTuj+7PtVobU+31fyvn9RHR+nGx/lrmkQAAAADwf6Bznl4sp/rdGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzbOnD+Z300nG/csXImKsW/zhGMmXI1GKiLN/T2L4pdclETF0DPF3HkbEe93iJ/E8y7KxohXd4p95w/HH8kPTPX4aEeeOIT6cZo/a48/tbu+/NC7my+7vv+EiHVXv8S/97/g31GP8eeeQMc4//kW1Z/yHEeeHu48/u/GTHvEvHTL+N76+vd2rLvtpxETXz59kT6xqa3W92tzavrq8OrdUW6qtTU9P3Zi5OXN9ZrK6uFyvFf92jfH9j//y+X79P9sj/tgB/R8/ZP///fj+0w93sqVu8S9f6v75+16P+Gnx2ffJIt+un9jN73TyL3v/5795f7/+L/To/0H//5cP2f8rX/3uHw65KQBwAppb2ytz9XptY5/MyCG2kZE5Sib7Tufv8Wj7OeLLX8tk/T4sfcz0e2QCAACO24sv/f1uCQAAAAAAAAAAAAAAAAAAAJxeJ3E7sVdj7vSnqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+/pPAAAA//+e1d5O") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) 11.221552562s ago: executing program 8 (id=3066): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000012c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000001300)) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) timer_gettime(0x0, 0x0) io_submit(r5, 0x2, &(0x7f00000001c0)=[0x0, 0x0]) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x24, 0xe, 0x87, 0x20, 0x11ba, 0x1001, 0x5403, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf2, 0xff, 0x1e06a499d5815fb9, 0x81, "", [{{0x9, 0x4, 0xc3, 0x8, 0x0, 0xbc, 0xe, 0x0, 0x7}}]}}]}}, 0x0) 10.832701424s ago: executing program 4 (id=3068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}], {0x4, 0x5}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x34, 0x0) 7.21404117s ago: executing program 4 (id=3071): syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0xfffff000}}}, 0xd) 6.714536466s ago: executing program 4 (id=3076): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_read_part_table(0x5f3, &(0x7f00000015c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r4, &(0x7f0000003740)=[{&(0x7f0000001440)='de', 0x2}], 0x1) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14K3xUbSot1NGtsGkVpB9Kmg1vcYk00I2WRDdlObUDTFDyCIqOCTT74IfgBB+hFEKOi7aFFEW33wQTuysxPbtLtJJGnWu/n94HTOmTM7/3Om2bM7O4eZAE6tixFxOyKGIuJKRJSL9WmRZovU3u7Z0wfz7ZRElt39axJJsW53X+3ycESci4idiBiJiK99OeKbyetxm1vbK3P1em2jKFdbq+vV5tb21eXVuaXaUm1tenrqxszNmeszk1nhSP08HxG3vvjkh9/72Zdu/erT3/r97J8vf7vdrM99tNPuiJg/UoAeOvsu5cdiV/sYbbyJYH0wVPSn1O+GAABwKOMRcSkiPpF//y/HUP5tDgAAABgk2edH419JRAYAAAAMrDQiRiNJK8V839FI00qlM4f3I3E2rTearU8tNjbXFtp1EWNRSheX67XJYq7wWJSSdnkqz78oX3ulPB0R70bED8pn8nJlvlFf6PePHwAAAHBKnLuw9/z/H+U0zwMAAAADZqxnAQAAABgUTvkBAABg8Dn/BwAAgIH2lTt32inbfY73wr2tzZXGvasLteZKZXVzvjLf2FivLDUaS/k9+1YP2l+90Vj/TKxt3q+2as1Wtbm1Pbva2FxrzS7veQQ2AAAAcILevfDod0lE7Hz2TJ6iuA8gwB5/7HcDgOM01O8GAH0z3O8GAH1TOnALIwQMuuSA+p6Td359/G0BAADejImPvX79/62i7uDfBoAPMnN9AOD0cXUPTq+SGYBw6o13Fm/3qj/69f8s+58bBQAAHKvRPCVppbgWOBppWqlEvJM/FqCULC7Xa5MR8aGI+G259Ha7PJW/MjlwzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADAQItI/5Tkd/OPmCiPj776+8BbyT/L8aQo/OTuj+7PtVobU+31fyvn9RHR+nGx/lrmkQAAAADwf6Bznl4sp/rdGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzbOnD+Z300nG/csXImKsW/zhGMmXI1GKiLN/T2L4pdclETF0DPF3HkbEe93iJ/E8y7KxohXd4p95w/HH8kPTPX4aEeeOIT6cZo/a48/tbu+/NC7my+7vv+EiHVXv8S/97/g31GP8eeeQMc4//kW1Z/yHEeeHu48/u/GTHvEvHTL+N76+vd2rLvtpxETXz59kT6xqa3W92tzavrq8OrdUW6qtTU9P3Zi5OXN9ZrK6uFyvFf92jfH9j//y+X79P9sj/tgB/R8/ZP///fj+0w93sqVu8S9f6v75+16P+Gnx2ffJIt+un9jN73TyL3v/5795f7/+L/To/0H//5cP2f8rX/3uHw65KQBwAppb2ytz9XptY5/MyCG2kZE5Sib7Tufv8Wj7OeLLX8tk/T4sfcz0e2QCAACO24sv/f1uCQAAAAAAAAAAAAAAAAAAAJxeJ3E7sVdj7vSnqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+/pPAAAA//+e1d5O") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) 6.204319562s ago: executing program 9 (id=3078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) keyctl$link(0x8, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 5.718729047s ago: executing program 5 (id=3079): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100001800500048008"], 0x28}}, 0x0) 5.552134603s ago: executing program 1 (id=3080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.441823856s ago: executing program 4 (id=3081): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) accept$inet6(r2, &(0x7f0000000580)={0xa, 0x0, 0x0, @remote}, 0x0) 5.378259418s ago: executing program 1 (id=3082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2c}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}], {0x4, 0x5}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x34, 0x0) 5.256334462s ago: executing program 5 (id=3083): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 5.095216098s ago: executing program 8 (id=3084): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, 0x0, 0x4040940) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c31c1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x20, 0x7, 0x8, r6, 0x0, 0x0, 0x1397, 0x0, 0x2}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r7, r8, 0x6, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r8, 0xffffffff, {0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x4, "519c0c7ecb902436ba5982a4e4e0f000a847ea5636d926c44a679135a5e1287c63608ea27fc227179b740ac44cd9570b38da675c5ecf4d93fccdafd2a5851cdf", "7c27320d4e791c7c0036f0a4e9b89927738816b818280f660cfdb44ea7fdf60e19ca6e68763b8ad0f953546306b637950843e6db2e770ddc33e35507655418f4", "865c34fb012761cc6093e1adc4b14700e5c5a2a560df1a77c356c4016c472b3a", [0xa, 0xe4b]}}) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) 4.604180443s ago: executing program 9 (id=3085): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) 4.020430872s ago: executing program 1 (id=3086): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b92010024001280090001", @ANYRES16=r0], 0x44}}, 0x8000) 4.012296322s ago: executing program 8 (id=3087): bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xc, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x48050) 3.920668875s ago: executing program 4 (id=3088): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9a", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) 3.850559057s ago: executing program 5 (id=3089): ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/63) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400"/45], 0x0, 0x54}, 0x28) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x218019, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xc008, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x430, 0x20a, 0x278, 0x430, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @remote, [], [0xff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe, 0x2}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2ac50e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}, {{@ipv6={@loopback, @mcast2, [0xff000000], [0x0, 0xffffff00], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x7, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xb, 0x10}, 0xc) tee(r3, r4, 0x5, 0xb) 3.771328749s ago: executing program 9 (id=3090): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '.\x00'}) 3.644505344s ago: executing program 1 (id=3091): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_read_part_table(0x5f3, &(0x7f00000015c0)="$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") r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000003740)=[{&(0x7f0000001440)='de', 0x2}], 0x1) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14K3xUbSot1NGtsGkVpB9Kmg1vcYk00I2WRDdlObUDTFDyCIqOCTT74IfgBB+hFEKOi7aFFEW33wQTuysxPbtLtJJGnWu/n94HTOmTM7/3Om2bM7O4eZAE6tixFxOyKGIuJKRJSL9WmRZovU3u7Z0wfz7ZRElt39axJJsW53X+3ycESci4idiBiJiK99OeKbyetxm1vbK3P1em2jKFdbq+vV5tb21eXVuaXaUm1tenrqxszNmeszk1nhSP08HxG3vvjkh9/72Zdu/erT3/r97J8vf7vdrM99tNPuiJg/UoAeOvsu5cdiV/sYbbyJYH0wVPSn1O+GAABwKOMRcSkiPpF//y/HUP5tDgAAABgk2edH419JRAYAAAAMrDQiRiNJK8V839FI00qlM4f3I3E2rTearU8tNjbXFtp1EWNRSheX67XJYq7wWJSSdnkqz78oX3ulPB0R70bED8pn8nJlvlFf6PePHwAAAHBKnLuw9/z/H+U0zwMAAAADZqxnAQAAABgUTvkBAABg8Dn/BwAAgIH2lTt32inbfY73wr2tzZXGvasLteZKZXVzvjLf2FivLDUaS/k9+1YP2l+90Vj/TKxt3q+2as1Wtbm1Pbva2FxrzS7veQQ2AAAAcILevfDod0lE7Hz2TJ6iuA8gwB5/7HcDgOM01O8GAH0z3O8GAH1TOnALIwQMuuSA+p6Td359/G0BAADejImPvX79/62i7uDfBoAPMnN9AOD0cXUPTq+SGYBw6o13Fm/3qj/69f8s+58bBQAAHKvRPCVppbgWOBppWqlEvJM/FqCULC7Xa5MR8aGI+G259Ha7PJW/MjlwzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADAQItI/5Tkd/OPmCiPj776+8BbyT/L8aQo/OTuj+7PtVobU+31fyvn9RHR+nGx/lrmkQAAAADwf6Bznl4sp/rdGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzbOnD+Z300nG/csXImKsW/zhGMmXI1GKiLN/T2L4pdclETF0DPF3HkbEe93iJ/E8y7KxohXd4p95w/HH8kPTPX4aEeeOIT6cZo/a48/tbu+/NC7my+7vv+EiHVXv8S/97/g31GP8eeeQMc4//kW1Z/yHEeeHu48/u/GTHvEvHTL+N76+vd2rLvtpxETXz59kT6xqa3W92tzavrq8OrdUW6qtTU9P3Zi5OXN9ZrK6uFyvFf92jfH9j//y+X79P9sj/tgB/R8/ZP///fj+0w93sqVu8S9f6v75+16P+Gnx2ffJIt+un9jN73TyL3v/5795f7/+L/To/0H//5cP2f8rX/3uHw65KQBwAppb2ytz9XptY5/MyCG2kZE5Sib7Tufv8Wj7OeLLX8tk/T4sfcz0e2QCAACO24sv/f1uCQAAAAAAAAAAAAAAAAAAAJxeJ3E7sVdj7vSnqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+/pPAAAA//+e1d5O") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020) 2.864218209s ago: executing program 9 (id=3092): r0 = socket$inet(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0xfff) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) 2.863347019s ago: executing program 5 (id=3093): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x51908a0a, 0x0, 0x10, 0x594, 0x40, 0x0, 0x0, 0x2f, 0x200001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x800000080, {0x4, 0x2, 0x3, 0xffffffffffffffff, 0x4, 0x7, {0x7, 0xe, 0x8000000000000001, 0x81, 0x2, 0x9, 0x8001, 0x9, 0xd, 0x1000, 0x0, r2, r3, 0x40000e72, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.782615511s ago: executing program 4 (id=3094): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000012c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000001300)) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) timer_gettime(0x0, 0x0) io_submit(r5, 0x2, &(0x7f00000001c0)=[0x0, 0x0]) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x24, 0xe, 0x87, 0x20, 0x11ba, 0x1001, 0x5403, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf2, 0xff, 0x1e06a499d5815fb9, 0x81, "", [{{0x9, 0x4, 0xc3, 0x8, 0x0, 0xbc, 0xe, 0x0, 0x7}}]}}]}}, 0x0) 1.759205264s ago: executing program 1 (id=3095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) keyctl$link(0x8, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 1.690587786s ago: executing program 5 (id=3096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2c}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x1}], {0x4, 0x5}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x34, 0x0) 1.090974125s ago: executing program 9 (id=3097): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000000000000c0000000d000000ffffff7f04000180"], 0x20}], 0x1}, 0x0) 829.435383ms ago: executing program 8 (id=3098): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) accept$inet6(r2, &(0x7f0000000580)={0xa, 0x0, 0x0, @remote}, 0x0) 717.317897ms ago: executing program 9 (id=3099): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 253.191022ms ago: executing program 5 (id=3100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="03070470790000000000010004000400"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) socket$inet6(0xa, 0x2, 0x0) 0s ago: executing program 1 (id=3101): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000001540)={0x0, {0x0, 0x0, @qam}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x40) sendmmsg(r1, 0x0, 0x0, 0x20) kernel console output (not intermixed with test programs): load. Possible missing sub-device kernel module or initialization failure within module. [ 810.075385][ T2309] pvrusb2: Device being rendered inoperable [ 810.082563][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 810.129482][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 810.858852][T13408] tipc: Enabling of bearer rejected, already enabled [ 811.633421][T13457] loop7: detected capacity change from 0 to 1024 [ 811.687665][T13459] loop1: detected capacity change from 0 to 512 [ 811.710430][T13459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 811.721438][T13457] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 811.760725][T13459] EXT4-fs (loop1): 1 truncate cleaned up [ 811.770314][T13459] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 812.916327][T10568] EXT4-fs (loop7): unmounting filesystem. [ 813.175629][T13475] loop0: detected capacity change from 0 to 256 [ 813.204967][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 813.445068][T13475] FAT-fs (loop0): Directory bread(block 64) failed [ 813.659380][T13475] FAT-fs (loop0): Directory bread(block 65) failed [ 813.840158][T13475] FAT-fs (loop0): Directory bread(block 66) failed [ 813.936959][T13475] FAT-fs (loop0): Directory bread(block 67) failed [ 813.993798][T13475] FAT-fs (loop0): Directory bread(block 68) failed [ 814.041102][T13475] FAT-fs (loop0): Directory bread(block 69) failed [ 814.124641][T13475] FAT-fs (loop0): Directory bread(block 70) failed [ 814.294288][T13475] FAT-fs (loop0): Directory bread(block 71) failed [ 814.438842][T13475] FAT-fs (loop0): Directory bread(block 72) failed [ 814.588538][T13475] FAT-fs (loop0): Directory bread(block 73) failed [ 814.907279][T13495] loop7: detected capacity change from 0 to 512 [ 814.976056][T13495] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 815.120370][T13495] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.2239: bad orphan inode 131083 [ 815.222873][T13495] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 815.834377][T13507] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 816.471564][T13520] loop1: detected capacity change from 0 to 2048 [ 817.116356][T13520] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 817.195557][T10568] EXT4-fs (loop7): unmounting filesystem. [ 817.211519][T13520] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 817.388257][T13533] loop7: detected capacity change from 0 to 512 [ 817.459211][T13533] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 817.498225][T13533] EXT4-fs (loop7): 1 truncate cleaned up [ 817.505811][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 817.519878][T13533] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 817.560257][T13535] device syzkaller1 entered promiscuous mode [ 818.360203][T13554] loop0: detected capacity change from 0 to 4096 [ 818.420108][T13554] EXT4-fs: Ignoring removed mblk_io_submit option [ 818.475017][T10568] EXT4-fs (loop7): unmounting filesystem. [ 818.544287][T13554] EXT4-fs (loop0): Test dummy encryption mode enabled [ 818.603738][T13554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 818.862383][T13563] loop7: detected capacity change from 0 to 1024 [ 818.959355][T13563] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 819.161655][T13565] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 819.172075][T13565] overlayfs: upper fs does not support tmpfile. [ 819.181103][T13565] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 820.208950][T10568] EXT4-fs (loop7): unmounting filesystem. [ 821.043945][T12086] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 821.273943][T12086] usb 2-1: Using ep0 maxpacket: 32 [ 821.295307][T12086] usb 2-1: config 242 has an invalid interface number: 195 but max is 0 [ 821.414359][T13592] loop7: detected capacity change from 0 to 512 [ 821.421422][T13592] EXT4-fs: inline encryption not supported [ 821.451818][T12086] usb 2-1: config 242 has no interface number 0 [ 821.495557][T12086] usb 2-1: config 242 interface 195 has no altsetting 0 [ 821.504808][T13592] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 821.535854][T13592] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.587086][T12086] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 821.667430][T12086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.690217][T13592] EXT4-fs warning (device loop7): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 821.717635][T12086] usb 2-1: Product: syz [ 821.721861][T12086] usb 2-1: Manufacturer: syz [ 821.755322][T12086] usb 2-1: SerialNumber: syz [ 821.970570][T10568] EXT4-fs (loop7): unmounting filesystem. [ 823.073255][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 824.182794][T12086] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 824.230653][T12086] usb 2-1: selecting invalid altsetting 0 [ 824.292707][T12086] usb 2-1: USB disconnect, device number 11 [ 824.308270][ T2309] pvrusb2: Invalid write control endpoint [ 824.350261][T13642] loop0: detected capacity change from 0 to 1024 [ 825.519813][T13642] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 825.759682][ T2309] pvrusb2: Invalid write control endpoint [ 825.787759][ T2309] pvrusb2: Invalid write control endpoint [ 825.804387][ T2309] pvrusb2: Invalid write control endpoint [ 825.906506][ T2309] pvrusb2: Invalid write control endpoint [ 826.087904][ T2309] pvrusb2: Invalid write control endpoint [ 826.227776][ T2309] pvrusb2: Invalid write control endpoint [ 826.233571][ T2309] pvrusb2: Invalid write control endpoint [ 826.294485][ T2309] pvrusb2: Invalid write control endpoint [ 826.300286][ T2309] pvrusb2: Invalid write control endpoint [ 826.306151][ T2309] pvrusb2: Invalid write control endpoint [ 826.311903][ T2309] pvrusb2: Invalid write control endpoint [ 826.333695][ T2309] pvrusb2: Invalid write control endpoint [ 826.339479][ T2309] pvrusb2: Invalid write control endpoint [ 826.345772][ T2309] pvrusb2: Invalid write control endpoint [ 826.351532][ T2309] pvrusb2: Invalid write control endpoint [ 826.365563][ T2309] pvrusb2: Invalid write control endpoint [ 826.371486][ T2309] pvrusb2: Invalid write control endpoint [ 826.389143][ T2309] pvrusb2: Invalid write control endpoint [ 826.415559][ T2309] pvrusb2: Invalid write control endpoint [ 826.479226][ T2309] pvrusb2: Invalid write control endpoint [ 826.686577][ T2309] pvrusb2: Invalid write control endpoint [ 826.864948][ T2309] pvrusb2: Invalid write control endpoint [ 827.005060][ T2309] pvrusb2: Invalid write control endpoint [ 827.132457][ T2309] pvrusb2: Invalid write control endpoint [ 827.158258][ T2309] pvrusb2: Invalid write control endpoint [ 827.250994][ T2309] pvrusb2: Invalid write control endpoint [ 827.324373][ T2309] pvrusb2: Invalid write control endpoint [ 827.343752][ T2309] pvrusb2: Invalid write control endpoint [ 827.349565][ T2309] pvrusb2: Invalid write control endpoint [ 827.395996][ T2309] pvrusb2: Invalid write control endpoint [ 827.430131][ T2309] pvrusb2: Invalid write control endpoint [ 827.466552][ T2309] pvrusb2: Invalid write control endpoint [ 827.473196][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 827.705803][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 827.712253][ T2309] pvrusb2: Invalid write control endpoint [ 827.724151][ T2309] pvrusb2: Invalid write control endpoint [ 827.729940][ T2309] pvrusb2: Invalid write control endpoint [ 827.781861][ T2309] pvrusb2: Invalid write control endpoint [ 827.816991][ T2309] pvrusb2: Invalid write control endpoint [ 827.835722][ T2309] pvrusb2: Invalid write control endpoint [ 827.861816][ T2309] pvrusb2: Invalid write control endpoint [ 827.867788][ T2309] pvrusb2: Invalid write control endpoint [ 827.873544][ T2309] pvrusb2: Invalid write control endpoint [ 827.879568][ T2309] pvrusb2: Invalid write control endpoint [ 827.885381][ T2309] pvrusb2: Invalid write control endpoint [ 827.891131][ T2309] pvrusb2: Invalid write control endpoint [ 827.897686][ T2309] pvrusb2: Invalid write control endpoint [ 827.903481][ T2309] pvrusb2: Invalid write control endpoint [ 827.909338][ T2309] pvrusb2: Invalid write control endpoint [ 828.034224][ T2309] pvrusb2: Invalid write control endpoint [ 828.094694][ T2309] pvrusb2: Invalid write control endpoint [ 828.168227][ T2309] pvrusb2: Invalid write control endpoint [ 828.230343][ T2309] pvrusb2: Invalid write control endpoint [ 828.295101][ T2309] pvrusb2: Invalid write control endpoint [ 828.359205][ T2309] pvrusb2: Invalid write control endpoint [ 828.443470][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 829.015163][ T2309] pvrusb2: Invalid write control endpoint [ 829.044393][ T2309] pvrusb2: Invalid write control endpoint [ 829.082624][ T2309] pvrusb2: Invalid write control endpoint [ 829.119787][ T2309] pvrusb2: Invalid write control endpoint [ 829.161493][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 829.221290][ T2309] pvrusb2: Device being rendered inoperable [ 829.260060][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 829.280887][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 830.350186][T13729] Invalid ELF header magic: != ELF [ 835.737597][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 836.028759][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2299'. [ 836.092744][T13783] loop8: detected capacity change from 0 to 512 [ 836.233791][T13783] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 836.998515][T13783] EXT4-fs (loop8): 1 truncate cleaned up [ 837.015703][T13783] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 837.091435][T13797] loop1: detected capacity change from 0 to 1024 [ 837.136185][T13797] ext4: Unknown parameter 'uid' [ 837.325789][T12086] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 838.136370][T11514] EXT4-fs (loop8): unmounting filesystem. [ 838.273870][T12086] usb 8-1: Using ep0 maxpacket: 32 [ 838.301379][T12086] usb 8-1: config 242 has an invalid interface number: 195 but max is 0 [ 838.320043][T12086] usb 8-1: config 242 has no interface number 0 [ 838.336890][T12086] usb 8-1: config 242 interface 195 has no altsetting 0 [ 838.413027][T13817] fuse: Bad value for 'fd' [ 838.543240][T12086] usb 8-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 838.556148][T13818] loop0: detected capacity change from 0 to 1024 [ 838.578488][T12086] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.589801][T12086] usb 8-1: Product: syz [ 838.604609][T12086] usb 8-1: Manufacturer: syz [ 838.614257][T12086] usb 8-1: SerialNumber: syz [ 838.632993][T13818] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 839.486956][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 840.027706][T12086] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 840.046048][T12086] usb 8-1: selecting invalid altsetting 0 [ 840.052365][ T2309] pvrusb2: Invalid write control endpoint [ 840.060344][T12086] usb 8-1: USB disconnect, device number 6 [ 840.066805][T13852] device syzkaller0 entered promiscuous mode [ 840.378675][ T2309] pvrusb2: Invalid write control endpoint [ 840.385475][ T2309] pvrusb2: Invalid write control endpoint [ 841.073856][ T2309] pvrusb2: Invalid write control endpoint [ 841.091240][ T2309] pvrusb2: Invalid write control endpoint [ 841.142108][T13869] loop0: detected capacity change from 0 to 512 [ 841.155657][ T2309] pvrusb2: Invalid write control endpoint [ 841.161460][ T2309] pvrusb2: Invalid write control endpoint [ 841.174279][T13862] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 841.216851][ T2309] pvrusb2: Invalid write control endpoint [ 841.222666][ T2309] pvrusb2: Invalid write control endpoint [ 841.268077][T13869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 841.293703][ T2309] pvrusb2: Invalid write control endpoint [ 841.299506][ T2309] pvrusb2: Invalid write control endpoint [ 841.363721][ T2309] pvrusb2: Invalid write control endpoint [ 841.383720][ T2309] pvrusb2: Invalid write control endpoint [ 841.437199][ T2309] pvrusb2: Invalid write control endpoint [ 841.443019][ T2309] pvrusb2: Invalid write control endpoint [ 841.448979][ T2309] pvrusb2: Invalid write control endpoint [ 841.455469][ T2309] pvrusb2: Invalid write control endpoint [ 841.461228][ T2309] pvrusb2: Invalid write control endpoint [ 841.495870][ T2309] pvrusb2: Invalid write control endpoint [ 841.499842][T13869] EXT4-fs (loop0): 1 truncate cleaned up [ 841.613680][T13869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 841.768357][ T2309] pvrusb2: Invalid write control endpoint [ 841.978839][ T2309] pvrusb2: Invalid write control endpoint [ 842.119628][ T2309] pvrusb2: Invalid write control endpoint [ 842.176926][ T2309] pvrusb2: Invalid write control endpoint [ 842.182897][ T2309] pvrusb2: Invalid write control endpoint [ 842.188784][ T2309] pvrusb2: Invalid write control endpoint [ 842.194620][ T2309] pvrusb2: Invalid write control endpoint [ 842.200421][ T2309] pvrusb2: Invalid write control endpoint [ 842.224605][ T2309] pvrusb2: Invalid write control endpoint [ 842.230440][ T2309] pvrusb2: Invalid write control endpoint [ 842.473555][ T2309] pvrusb2: Invalid write control endpoint [ 842.485314][ T2309] pvrusb2: Invalid write control endpoint [ 842.494562][T13889] tc action pedit offset must be on 32 bit boundaries [ 842.630563][ T2309] pvrusb2: Invalid write control endpoint [ 842.736244][ T2309] pvrusb2: Invalid write control endpoint [ 842.777234][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 843.713541][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 843.917165][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 843.943744][ T2309] pvrusb2: Invalid write control endpoint [ 844.161886][ T2309] pvrusb2: Invalid write control endpoint [ 844.372606][ T2309] pvrusb2: Invalid write control endpoint [ 844.622935][ T2309] pvrusb2: Invalid write control endpoint [ 844.755011][ T2309] pvrusb2: Invalid write control endpoint [ 844.786127][ T2309] pvrusb2: Invalid write control endpoint [ 844.847664][ T2309] pvrusb2: Invalid write control endpoint [ 844.989777][ T2309] pvrusb2: Invalid write control endpoint [ 845.166189][ T2309] pvrusb2: Invalid write control endpoint [ 845.316907][ T2309] pvrusb2: Invalid write control endpoint [ 845.401156][ T2309] pvrusb2: Invalid write control endpoint [ 845.490066][ T2309] pvrusb2: Invalid write control endpoint [ 845.495985][ T2309] pvrusb2: Invalid write control endpoint [ 845.501845][ T2309] pvrusb2: Invalid write control endpoint [ 845.507910][ T2309] pvrusb2: Invalid write control endpoint [ 845.513778][ T2309] pvrusb2: Invalid write control endpoint [ 845.519519][ T2309] pvrusb2: Invalid write control endpoint [ 845.525325][ T2309] pvrusb2: Invalid write control endpoint [ 845.531096][ T2309] pvrusb2: Invalid write control endpoint [ 845.536913][ T2309] pvrusb2: Invalid write control endpoint [ 845.542674][ T2309] pvrusb2: Invalid write control endpoint [ 845.549675][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 846.457562][ T2309] pvrusb2: Invalid write control endpoint [ 846.463574][ T2309] pvrusb2: Invalid write control endpoint [ 846.493096][ T2309] pvrusb2: Invalid write control endpoint [ 846.505583][ T2309] pvrusb2: Invalid write control endpoint [ 846.522988][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 846.582247][ T2309] pvrusb2: Device being rendered inoperable [ 846.601011][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 846.645122][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 846.655229][T13938] team0 (unregistering): Port device team_slave_0 removed [ 846.817057][T13938] team0 (unregistering): Port device team_slave_1 removed [ 847.547578][T13956] loop7: detected capacity change from 0 to 1024 [ 847.563741][T13956] ext4: Unknown parameter 'uid' [ 848.775759][T13979] device syzkaller0 entered promiscuous mode [ 850.954596][T13996] loop0: detected capacity change from 0 to 512 [ 851.012503][T13996] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 851.089756][T13996] EXT4-fs (loop0): 1 truncate cleaned up [ 851.123925][T13996] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 852.010998][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 854.884225][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'. [ 855.192004][T14059] loop8: detected capacity change from 0 to 512 [ 855.422949][T14059] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 857.068246][T14059] EXT4-fs (loop8): 1 truncate cleaned up [ 857.089320][T14059] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 857.158517][T14077] device syzkaller0 entered promiscuous mode [ 857.721625][T11514] EXT4-fs (loop8): unmounting filesystem. [ 859.251722][T14113] Invalid ELF header magic: != ELF [ 860.034222][T14121] device syzkaller0 entered promiscuous mode [ 860.700107][T14125] loop1: detected capacity change from 0 to 512 [ 860.812805][T14125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 860.867367][T14125] EXT4-fs (loop1): 1 truncate cleaned up [ 860.874496][T14125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 861.636166][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 863.593678][T14154] Invalid ELF header magic: != ELF [ 864.268324][T14164] loop1: detected capacity change from 0 to 512 [ 864.396798][T14164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 864.434536][T14164] EXT4-fs (loop1): 1 truncate cleaned up [ 864.479228][T14164] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 865.108210][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 867.356466][ T4287] Bluetooth: Frame is too long (len 16, expected len 8) [ 867.736971][T14215] loop7: detected capacity change from 0 to 256 [ 867.799483][T14215] FAT-fs (loop7): Directory bread(block 64) failed [ 867.807090][T14215] FAT-fs (loop7): Directory bread(block 65) failed [ 867.813866][T14215] FAT-fs (loop7): Directory bread(block 66) failed [ 867.820444][T14215] FAT-fs (loop7): Directory bread(block 67) failed [ 867.827105][T14215] FAT-fs (loop7): Directory bread(block 68) failed [ 867.833977][T14215] FAT-fs (loop7): Directory bread(block 69) failed [ 867.840634][T14215] FAT-fs (loop7): Directory bread(block 70) failed [ 867.847236][T14215] FAT-fs (loop7): Directory bread(block 71) failed [ 867.853906][T14215] FAT-fs (loop7): Directory bread(block 72) failed [ 867.860544][T14215] FAT-fs (loop7): Directory bread(block 73) failed [ 870.115902][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.122292][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.542698][T14283] Invalid ELF header magic: != ELF [ 877.164187][T14328] Invalid ELF header magic: != ELF [ 877.573955][T12764] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 877.933750][T12764] usb 9-1: Using ep0 maxpacket: 32 [ 877.940809][T12764] usb 9-1: config 242 has an invalid interface number: 195 but max is 0 [ 878.694812][T12764] usb 9-1: config 242 has no interface number 0 [ 878.701178][T12764] usb 9-1: config 242 interface 195 has no altsetting 0 [ 880.687332][T12764] usb 9-1: string descriptor 0 read error: -71 [ 880.693900][T12764] usb 9-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 880.703011][T12764] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.715670][T12764] usb 9-1: can't set config #242, error -71 [ 880.869659][T12764] usb 9-1: USB disconnect, device number 3 [ 883.440035][T14380] Invalid ELF header magic: != ELF [ 884.182317][T14387] loop0: detected capacity change from 0 to 256 [ 884.558066][T14387] FAT-fs (loop0): Directory bread(block 64) failed [ 884.564871][T14387] FAT-fs (loop0): Directory bread(block 65) failed [ 884.571567][T14387] FAT-fs (loop0): Directory bread(block 66) failed [ 884.578318][T14387] FAT-fs (loop0): Directory bread(block 67) failed [ 884.585125][T14387] FAT-fs (loop0): Directory bread(block 68) failed [ 884.591680][T14387] FAT-fs (loop0): Directory bread(block 69) failed [ 884.598459][T14387] FAT-fs (loop0): Directory bread(block 70) failed [ 884.605063][T14387] FAT-fs (loop0): Directory bread(block 71) failed [ 884.611697][T14387] FAT-fs (loop0): Directory bread(block 72) failed [ 884.618268][T14387] FAT-fs (loop0): Directory bread(block 73) failed [ 886.334049][ T4355] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 886.708662][ T4355] usb 2-1: Using ep0 maxpacket: 32 [ 886.734165][ T4355] usb 2-1: config 242 has an invalid interface number: 195 but max is 0 [ 886.759684][ T4355] usb 2-1: config 242 has no interface number 0 [ 886.786415][ T4355] usb 2-1: config 242 interface 195 has no altsetting 0 [ 886.887001][ T4355] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 886.984837][T14405] loop8: detected capacity change from 0 to 512 [ 887.096238][ T4355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.217871][T14405] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 887.303220][ T4355] usb 2-1: Product: syz [ 887.351777][ T4355] usb 2-1: Manufacturer: syz [ 887.393032][ T4355] usb 2-1: SerialNumber: syz [ 887.398258][T14405] EXT4-fs (loop8): 1 truncate cleaned up [ 887.459736][T14405] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 888.303120][T11514] EXT4-fs (loop8): unmounting filesystem. [ 888.441526][T14418] device syzkaller0 entered promiscuous mode [ 888.615969][T14418] tipc: Enabled bearer , priority 0 [ 888.668459][T14416] tipc: Resetting bearer [ 888.739013][T14416] tipc: Disabling bearer [ 889.060649][ T4355] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 889.127501][ T4355] usb 2-1: selecting invalid altsetting 0 [ 889.181136][ T2309] pvrusb2: Invalid write control endpoint [ 889.328971][ T4355] usb 2-1: USB disconnect, device number 12 [ 891.083472][T14455] loop8: detected capacity change from 0 to 1024 [ 891.090634][ T2309] pvrusb2: Invalid write control endpoint [ 891.123911][ T2309] pvrusb2: Invalid write control endpoint [ 891.959652][ T2309] pvrusb2: Invalid write control endpoint [ 892.040744][ T2309] pvrusb2: Invalid write control endpoint [ 892.100934][T14455] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 892.147221][T14455] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 892.150032][ T2309] pvrusb2: Invalid write control endpoint [ 892.323355][ T2309] pvrusb2: Invalid write control endpoint [ 892.371244][ T2309] pvrusb2: Invalid write control endpoint [ 892.465919][ T2309] pvrusb2: Invalid write control endpoint [ 892.491655][ T2309] pvrusb2: Invalid write control endpoint [ 892.530580][ T2309] pvrusb2: Invalid write control endpoint [ 892.791582][ T2309] pvrusb2: Invalid write control endpoint [ 892.844578][ T2309] pvrusb2: Invalid write control endpoint [ 892.933682][ T2309] pvrusb2: Invalid write control endpoint [ 892.953689][ T2309] pvrusb2: Invalid write control endpoint [ 893.000411][ T2309] pvrusb2: Invalid write control endpoint [ 893.029249][ T2309] pvrusb2: Invalid write control endpoint [ 893.035154][ T2309] pvrusb2: Invalid write control endpoint [ 893.040940][ T2309] pvrusb2: Invalid write control endpoint [ 893.046904][ T2309] pvrusb2: Invalid write control endpoint [ 893.052664][ T2309] pvrusb2: Invalid write control endpoint [ 893.058496][ T2309] pvrusb2: Invalid write control endpoint [ 893.064296][ T2309] pvrusb2: Invalid write control endpoint [ 893.070039][ T2309] pvrusb2: Invalid write control endpoint [ 893.076522][ T2309] pvrusb2: Invalid write control endpoint [ 893.082300][ T2309] pvrusb2: Invalid write control endpoint [ 893.088164][ T2309] pvrusb2: Invalid write control endpoint [ 893.114533][ T2309] pvrusb2: Invalid write control endpoint [ 893.120589][ T2309] pvrusb2: Invalid write control endpoint [ 893.148000][ T2309] pvrusb2: Invalid write control endpoint [ 893.163710][ T2309] pvrusb2: Invalid write control endpoint [ 893.189890][ T2309] pvrusb2: Invalid write control endpoint [ 893.210175][ T2309] pvrusb2: Invalid write control endpoint [ 893.238823][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 893.321728][T11514] EXT4-fs (loop8): unmounting filesystem. [ 893.499555][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 893.516952][ T2309] pvrusb2: Invalid write control endpoint [ 893.522857][ T2309] pvrusb2: Invalid write control endpoint [ 893.549411][ T2309] pvrusb2: Invalid write control endpoint [ 893.573850][ T2309] pvrusb2: Invalid write control endpoint [ 893.579672][ T2309] pvrusb2: Invalid write control endpoint [ 893.611760][ T2309] pvrusb2: Invalid write control endpoint [ 893.624908][ T2309] pvrusb2: Invalid write control endpoint [ 893.728211][ T2309] pvrusb2: Invalid write control endpoint [ 893.753164][ T2309] pvrusb2: Invalid write control endpoint [ 893.792797][ T2309] pvrusb2: Invalid write control endpoint [ 893.798836][ T2309] pvrusb2: Invalid write control endpoint [ 893.813899][ T2309] pvrusb2: Invalid write control endpoint [ 893.819732][ T2309] pvrusb2: Invalid write control endpoint [ 893.825588][ T2309] pvrusb2: Invalid write control endpoint [ 893.831336][ T2309] pvrusb2: Invalid write control endpoint [ 893.837187][ T2309] pvrusb2: Invalid write control endpoint [ 893.843793][ T2309] pvrusb2: Invalid write control endpoint [ 893.849597][ T2309] pvrusb2: Invalid write control endpoint [ 893.992790][ T2309] pvrusb2: Invalid write control endpoint [ 894.031393][ T2309] pvrusb2: Invalid write control endpoint [ 894.103238][ T2309] pvrusb2: Invalid write control endpoint [ 894.156574][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 894.322095][T14504] loop8: detected capacity change from 0 to 1024 [ 894.389450][T14504] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 894.727875][ T2309] pvrusb2: Invalid write control endpoint [ 894.748851][ T2309] pvrusb2: Invalid write control endpoint [ 894.948128][ T2309] pvrusb2: Invalid write control endpoint [ 895.079575][ T2309] pvrusb2: Invalid write control endpoint [ 895.135171][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 895.272624][ T2309] pvrusb2: Device being rendered inoperable [ 895.279125][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 895.284589][T11514] EXT4-fs (loop8): unmounting filesystem. [ 895.292385][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 896.785788][T14528] tipc: Enabling of bearer rejected, already enabled [ 897.635369][T14537] loop8: detected capacity change from 0 to 512 [ 897.658837][T14537] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 897.955604][T14537] EXT4-fs (loop8): 1 truncate cleaned up [ 898.049231][T14537] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 898.967835][T14544] Invalid ELF header magic: != ELF [ 899.410028][T11514] EXT4-fs (loop8): unmounting filesystem. [ 899.861827][T14555] device syzkaller0 entered promiscuous mode [ 900.248120][T14561] loop8: detected capacity change from 0 to 1024 [ 900.373553][T14561] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 901.856902][T14581] loop1: detected capacity change from 0 to 256 [ 901.884972][T14581] FAT-fs (loop1): Directory bread(block 64) failed [ 901.891590][T14581] FAT-fs (loop1): Directory bread(block 65) failed [ 901.898285][T14581] FAT-fs (loop1): Directory bread(block 66) failed [ 901.904881][T14581] FAT-fs (loop1): Directory bread(block 67) failed [ 901.911506][T14581] FAT-fs (loop1): Directory bread(block 68) failed [ 901.918197][T14581] FAT-fs (loop1): Directory bread(block 69) failed [ 901.924913][T14581] FAT-fs (loop1): Directory bread(block 70) failed [ 901.931696][T14581] FAT-fs (loop1): Directory bread(block 71) failed [ 901.938408][T14581] FAT-fs (loop1): Directory bread(block 72) failed [ 901.945037][T14581] FAT-fs (loop1): Directory bread(block 73) failed [ 902.285347][T14588] loop7: detected capacity change from 0 to 512 [ 902.325789][T14588] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 902.396830][T14592] loop1: detected capacity change from 0 to 512 [ 902.435444][T14592] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 902.546656][T14592] EXT4-fs error (device loop1): ext4_quota_enable:7049: inode #4: comm syz.1.2520: unexpected EA_INODE flag [ 902.562386][T14588] EXT4-fs (loop7): 1 truncate cleaned up [ 902.749631][T14600] Invalid ELF header magic: != ELF [ 902.817020][T14588] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 902.864915][T14592] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz.1.2520: Bad quota inode: 4, type: 1 [ 903.020018][T14592] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 903.171481][T14592] EXT4-fs (loop1): mount failed [ 903.602445][T10568] EXT4-fs (loop7): unmounting filesystem. [ 904.826079][T11514] EXT4-fs (loop8): unmounting filesystem. [ 905.055056][T14625] loop1: detected capacity change from 0 to 512 [ 905.102745][T14625] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 905.155965][T14625] EXT4-fs error (device loop1): ext4_quota_enable:7049: inode #4: comm syz.1.2537: unexpected EA_INODE flag [ 905.178268][T14625] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz.1.2537: Bad quota inode: 4, type: 1 [ 905.213966][T14625] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 905.265993][T14635] overlayfs: failed to clone upperpath [ 905.272032][T14625] EXT4-fs (loop1): mount failed [ 905.362165][T14625] loop1: detected capacity change from 0 to 1024 [ 906.199444][T14649] netlink: 'syz.0.2535': attribute type 12 has an invalid length. [ 906.213787][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 909.442469][T14689] loop7: detected capacity change from 0 to 512 [ 909.483828][T14689] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 909.605952][T14689] EXT4-fs error (device loop7): ext4_quota_enable:7049: inode #4: comm syz.7.2548: unexpected EA_INODE flag [ 909.647362][T14695] netlink: 'syz.1.2550': attribute type 12 has an invalid length. [ 909.694045][T14689] EXT4-fs error (device loop7): ext4_quota_enable:7052: comm syz.7.2548: Bad quota inode: 4, type: 1 [ 909.729473][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2550'. [ 909.743247][T14689] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 909.769760][T14689] EXT4-fs (loop7): mount failed [ 910.323446][T14704] Invalid ELF header magic: != ELF [ 910.538272][T14689] loop7: detected capacity change from 0 to 1024 [ 911.105063][T14711] device syzkaller0 entered promiscuous mode [ 913.334232][T14743] loop8: detected capacity change from 0 to 512 [ 913.345649][T14743] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 913.459889][T14743] EXT4-fs (loop8): 1 truncate cleaned up [ 913.613926][T14743] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 914.183537][T11514] EXT4-fs (loop8): unmounting filesystem. [ 914.372590][T14755] device syzkaller0 entered promiscuous mode [ 916.896473][T14789] loop8: detected capacity change from 0 to 512 [ 916.998930][T14789] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 917.304352][T14789] EXT4-fs (loop8): 1 truncate cleaned up [ 917.364961][T14789] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 917.962676][T11514] EXT4-fs (loop8): unmounting filesystem. [ 918.640747][T14808] netlink: 'syz.8.2586': attribute type 12 has an invalid length. [ 918.700684][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2586'. [ 920.161129][T14833] loop8: detected capacity change from 0 to 1024 [ 920.219750][T14833] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 920.325596][T14837] device syzkaller0 entered promiscuous mode [ 921.243446][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2598'. [ 921.344685][T14843] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 922.310819][T11514] EXT4-fs (loop8): unmounting filesystem. [ 922.604383][T14868] tipc: Enabling of bearer rejected, already enabled [ 924.115571][T14881] loop8: detected capacity change from 0 to 2048 [ 924.453495][T14881] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 924.705002][T14881] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.744055][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2613'. [ 925.085320][T14896] overlayfs: failed to clone upperpath [ 925.161059][T14881] fs-verity: sha512 using implementation "sha512-avx2" [ 925.231474][T14881] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2611: bg 0: block 345: padding at end of block bitmap is not set [ 925.254097][T14889] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 925.291264][T14881] EXT4-fs (loop8): Remounting filesystem read-only [ 925.304780][T14881] fs-verity (loop8, inode 13): Error -28 writing Merkle tree block 0 [ 925.325388][T14881] fs-verity (loop8, inode 13): Error -28 building Merkle tree [ 925.373920][T14889] EXT4-fs (loop8): Remounting filesystem read-only [ 925.471988][T11514] EXT4-fs (loop8): unmounting filesystem. [ 926.289431][T14918] loop1: detected capacity change from 0 to 128 [ 926.320815][T14918] EXT4-fs (loop1): Test dummy encryption mode enabled [ 926.446460][T14918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 926.484641][T14918] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 926.613156][T14927] netlink: 'syz.8.2627': attribute type 12 has an invalid length. [ 926.701992][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2627'. [ 927.519168][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 930.186540][T14956] loop1: detected capacity change from 0 to 256 [ 930.312238][T14956] FAT-fs (loop1): Directory bread(block 64) failed [ 930.368707][T14956] FAT-fs (loop1): Directory bread(block 65) failed [ 930.409242][T14956] FAT-fs (loop1): Directory bread(block 66) failed [ 930.459874][T14956] FAT-fs (loop1): Directory bread(block 67) failed [ 930.511225][T14956] FAT-fs (loop1): Directory bread(block 68) failed [ 930.555951][T14956] FAT-fs (loop1): Directory bread(block 69) failed [ 930.581285][T14956] FAT-fs (loop1): Directory bread(block 70) failed [ 930.617413][T14956] FAT-fs (loop1): Directory bread(block 71) failed [ 930.634205][T14956] FAT-fs (loop1): Directory bread(block 72) failed [ 930.640796][T14956] FAT-fs (loop1): Directory bread(block 73) failed [ 931.556345][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.562761][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.796362][T14975] netlink: 'syz.7.2640': attribute type 12 has an invalid length. [ 932.889109][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2640'. [ 933.987377][T14986] loop0: detected capacity change from 0 to 512 [ 934.024334][T14986] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 934.582035][T14994] tipc: Started in network mode [ 934.587121][T14994] tipc: Node identity ac14140f, cluster identity 4711 [ 934.595151][T14994] tipc: New replicast peer: 255.255.255.255 [ 934.601981][T14994] tipc: Enabled bearer , priority 10 [ 934.688966][T14986] EXT4-fs (loop0): 1 truncate cleaned up [ 934.810446][T14986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 935.643726][T12707] tipc: Node number set to 2886997007 [ 937.529009][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 938.307857][T15032] loop0: detected capacity change from 0 to 256 [ 938.411534][T15032] FAT-fs (loop0): Directory bread(block 64) failed [ 938.463755][T15032] FAT-fs (loop0): Directory bread(block 65) failed [ 938.470484][T15032] FAT-fs (loop0): Directory bread(block 66) failed [ 938.515953][T15032] FAT-fs (loop0): Directory bread(block 67) failed [ 938.546739][T15032] FAT-fs (loop0): Directory bread(block 68) failed [ 938.593849][T15032] FAT-fs (loop0): Directory bread(block 69) failed [ 938.620912][T15032] FAT-fs (loop0): Directory bread(block 70) failed [ 938.754678][T15032] FAT-fs (loop0): Directory bread(block 71) failed [ 938.777220][T15032] FAT-fs (loop0): Directory bread(block 72) failed [ 938.840459][T15032] FAT-fs (loop0): Directory bread(block 73) failed [ 939.300179][T15048] loop1: detected capacity change from 0 to 1024 [ 939.385430][T15048] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 942.646047][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 943.070558][T15091] netlink: 'syz.7.2676': attribute type 12 has an invalid length. [ 943.114336][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2676'. [ 944.696276][T15118] device syzkaller0 entered promiscuous mode [ 945.932956][T15135] Invalid ELF header magic: != ELF [ 950.159736][T15178] Invalid ELF header magic: != ELF [ 953.311321][T15193] tipc: Enabling of bearer rejected, already enabled [ 953.992458][T15216] loop1: detected capacity change from 0 to 512 [ 954.001530][T15216] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 954.084746][T15216] EXT4-fs (loop1): 1 truncate cleaned up [ 954.093395][T15216] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 954.418264][T15233] loop7: detected capacity change from 0 to 256 [ 954.508417][T15233] FAT-fs (loop7): Directory bread(block 64) failed [ 954.549914][T15233] FAT-fs (loop7): Directory bread(block 65) failed [ 954.577651][T15233] FAT-fs (loop7): Directory bread(block 66) failed [ 954.607780][T15233] FAT-fs (loop7): Directory bread(block 67) failed [ 954.631233][T15233] FAT-fs (loop7): Directory bread(block 68) failed [ 954.652814][T15233] FAT-fs (loop7): Directory bread(block 69) failed [ 954.672158][T15233] FAT-fs (loop7): Directory bread(block 70) failed [ 954.696495][T15233] FAT-fs (loop7): Directory bread(block 71) failed [ 954.730918][T15233] FAT-fs (loop7): Directory bread(block 72) failed [ 954.747690][T15233] FAT-fs (loop7): Directory bread(block 73) failed [ 954.869189][T15238] Invalid ELF header magic: != ELF [ 955.401164][T15246] loop7: detected capacity change from 0 to 256 [ 955.411158][T15247] loop0: detected capacity change from 0 to 512 [ 955.481543][T15246] FAT-fs (loop7): Directory bread(block 64) failed [ 955.499483][T15247] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.2719: corrupted in-inode xattr [ 955.569555][T15246] FAT-fs (loop7): Directory bread(block 65) failed [ 955.597206][T15246] FAT-fs (loop7): Directory bread(block 66) failed [ 955.647497][T15247] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.2719: couldn't read orphan inode 15 (err -117) [ 955.680128][T15246] FAT-fs (loop7): Directory bread(block 67) failed [ 955.714108][T15246] FAT-fs (loop7): Directory bread(block 68) failed [ 955.743789][T15246] FAT-fs (loop7): Directory bread(block 69) failed [ 955.750466][T15246] FAT-fs (loop7): Directory bread(block 70) failed [ 955.757225][T15247] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 955.844455][T15253] tipc: Enabling of bearer rejected, already enabled [ 955.925087][T15246] FAT-fs (loop7): Directory bread(block 71) failed [ 956.010351][T15246] FAT-fs (loop7): Directory bread(block 72) failed [ 956.167829][T15246] FAT-fs (loop7): Directory bread(block 73) failed [ 956.533551][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 956.911404][T15263] device syzkaller0 entered promiscuous mode [ 957.193981][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 958.098295][T15288] tipc: Enabling of bearer rejected, already enabled [ 959.598389][T15304] loop8: detected capacity change from 0 to 512 [ 959.614112][T15304] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 959.690209][T15304] EXT4-fs (loop8): 1 truncate cleaned up [ 959.708713][T15304] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 959.797958][T15314] loop0: detected capacity change from 0 to 256 [ 959.937032][T15314] FAT-fs (loop0): Directory bread(block 64) failed [ 959.953762][T15314] FAT-fs (loop0): Directory bread(block 65) failed [ 959.964154][T15314] FAT-fs (loop0): Directory bread(block 66) failed [ 959.993410][T15314] FAT-fs (loop0): Directory bread(block 67) failed [ 960.017124][T15314] FAT-fs (loop0): Directory bread(block 68) failed [ 960.050442][T15314] FAT-fs (loop0): Directory bread(block 69) failed [ 960.133121][T15314] FAT-fs (loop0): Directory bread(block 70) failed [ 960.158914][T15314] FAT-fs (loop0): Directory bread(block 71) failed [ 960.181530][T15314] FAT-fs (loop0): Directory bread(block 72) failed [ 960.228756][T15314] FAT-fs (loop0): Directory bread(block 73) failed [ 961.284834][T11514] EXT4-fs (loop8): unmounting filesystem. [ 961.579619][T15338] loop1: detected capacity change from 0 to 256 [ 961.694071][T15338] FAT-fs (loop1): Directory bread(block 64) failed [ 961.696567][T15327] tipc: Enabling of bearer rejected, already enabled [ 961.743928][T15338] FAT-fs (loop1): Directory bread(block 65) failed [ 961.755466][T15338] FAT-fs (loop1): Directory bread(block 66) failed [ 961.762261][T15338] FAT-fs (loop1): Directory bread(block 67) failed [ 961.773784][T15338] FAT-fs (loop1): Directory bread(block 68) failed [ 961.780588][T15338] FAT-fs (loop1): Directory bread(block 69) failed [ 961.809623][T15338] FAT-fs (loop1): Directory bread(block 70) failed [ 961.821976][T15338] FAT-fs (loop1): Directory bread(block 71) failed [ 961.833227][T15338] FAT-fs (loop1): Directory bread(block 72) failed [ 961.841846][T15338] FAT-fs (loop1): Directory bread(block 73) failed [ 962.882513][T15358] device syzkaller0 entered promiscuous mode [ 963.034625][T15359] loop8: detected capacity change from 0 to 256 [ 963.240442][T15359] FAT-fs (loop8): Directory bread(block 64) failed [ 963.355195][T15359] FAT-fs (loop8): Directory bread(block 65) failed [ 963.537589][T15359] FAT-fs (loop8): Directory bread(block 66) failed [ 963.660543][T15359] FAT-fs (loop8): Directory bread(block 67) failed [ 963.698132][T15359] FAT-fs (loop8): Directory bread(block 68) failed [ 963.729154][T15359] FAT-fs (loop8): Directory bread(block 69) failed [ 963.760279][T15359] FAT-fs (loop8): Directory bread(block 70) failed [ 963.815700][T15359] FAT-fs (loop8): Directory bread(block 71) failed [ 963.853951][T15359] FAT-fs (loop8): Directory bread(block 72) failed [ 963.860542][T15359] FAT-fs (loop8): Directory bread(block 73) failed [ 964.558833][T15367] loop7: detected capacity change from 0 to 128 [ 964.784933][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 964.802431][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 964.814552][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 964.828466][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 964.836206][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 964.856932][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 965.127210][ T6476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.152438][T15376] loop7: detected capacity change from 0 to 1024 [ 965.350668][T15376] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 966.487728][ T6476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.696561][T15391] tipc: Enabling of bearer rejected, already enabled [ 966.781922][T15368] chnl_net:caif_netlink_parms(): no params data found [ 966.816997][T10568] EXT4-fs (loop7): unmounting filesystem. [ 966.913897][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 967.045699][ T6476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.166458][T15404] device syzkaller0 entered promiscuous mode [ 967.239738][T15407] loop7: detected capacity change from 0 to 512 [ 967.258374][ T6476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.304592][T15407] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 967.396743][T15407] EXT4-fs error (device loop7): ext4_quota_enable:7049: inode #4: comm syz.7.2770: unexpected EA_INODE flag [ 967.417892][T15407] EXT4-fs error (device loop7): ext4_quota_enable:7052: comm syz.7.2770: Bad quota inode: 4, type: 1 [ 967.431968][T15407] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 967.463083][T15407] EXT4-fs (loop7): mount failed [ 967.582417][T15407] loop7: detected capacity change from 0 to 1024 [ 968.995254][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 969.762039][T15431] loop7: detected capacity change from 0 to 256 [ 969.855367][T15431] FAT-fs (loop7): Directory bread(block 64) failed [ 969.887703][T15431] FAT-fs (loop7): Directory bread(block 65) failed [ 969.895033][T15431] FAT-fs (loop7): Directory bread(block 66) failed [ 969.901837][T15431] FAT-fs (loop7): Directory bread(block 67) failed [ 969.921176][T15431] FAT-fs (loop7): Directory bread(block 68) failed [ 969.929596][T15431] FAT-fs (loop7): Directory bread(block 69) failed [ 969.943204][T15431] FAT-fs (loop7): Directory bread(block 70) failed [ 969.950260][T15431] FAT-fs (loop7): Directory bread(block 71) failed [ 969.967175][T15431] FAT-fs (loop7): Directory bread(block 72) failed [ 969.974280][T15431] FAT-fs (loop7): Directory bread(block 73) failed [ 970.932415][T15476] loop7: detected capacity change from 0 to 1024 [ 971.073875][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 971.262142][T15476] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 973.155822][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 973.837325][T15491] tipc: Enabling of bearer rejected, already enabled [ 973.964103][T10568] EXT4-fs (loop7): unmounting filesystem. [ 973.996854][T15368] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.004369][T15368] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.012647][T15368] device bridge_slave_0 entered promiscuous mode [ 974.024082][T15368] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.091632][T15368] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.120177][T15368] device bridge_slave_1 entered promiscuous mode [ 974.127310][T15498] loop7: detected capacity change from 0 to 512 [ 974.142688][T15498] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 974.206781][T15368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.234760][T15498] EXT4-fs error (device loop7): ext4_quota_enable:7049: inode #4: comm syz.7.2781: unexpected EA_INODE flag [ 974.254637][T15368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.281748][T15498] EXT4-fs error (device loop7): ext4_quota_enable:7052: comm syz.7.2781: Bad quota inode: 4, type: 1 [ 974.298240][T15498] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 974.314949][T15498] EXT4-fs (loop7): mount failed [ 974.372360][T15368] team0: Port device team_slave_0 added [ 974.415486][T15368] team0: Port device team_slave_1 added [ 974.422742][T15498] loop7: detected capacity change from 0 to 1024 [ 974.510070][T15368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.535083][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.797343][T15368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.122261][T15368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.149821][T15368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.263884][T15368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.284476][ T6476] tipc: Disabling bearer [ 975.290153][ T6476] tipc: Left network mode [ 975.348697][T15516] loop7: detected capacity change from 0 to 256 [ 975.380506][T15368] device hsr_slave_0 entered promiscuous mode [ 975.414725][T15368] device hsr_slave_1 entered promiscuous mode [ 975.431381][T15516] FAT-fs (loop7): Directory bread(block 64) failed [ 975.442272][T15516] FAT-fs (loop7): Directory bread(block 65) failed [ 975.449354][T15368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.483567][T15368] Cannot create hsr debugfs directory [ 975.484039][T15516] FAT-fs (loop7): Directory bread(block 66) failed [ 975.533970][T15516] FAT-fs (loop7): Directory bread(block 67) failed [ 975.540751][T15516] FAT-fs (loop7): Directory bread(block 68) failed [ 975.584012][T15516] FAT-fs (loop7): Directory bread(block 69) failed [ 975.593042][T15516] FAT-fs (loop7): Directory bread(block 70) failed [ 975.622977][T15516] FAT-fs (loop7): Directory bread(block 71) failed [ 975.642528][T15516] FAT-fs (loop7): Directory bread(block 72) failed [ 975.664243][T15516] FAT-fs (loop7): Directory bread(block 73) failed [ 976.992415][T15543] tipc: Enabling of bearer rejected, already enabled [ 977.734494][T15546] loop7: detected capacity change from 0 to 1024 [ 977.805003][T15546] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 978.762509][T10568] EXT4-fs (loop7): unmounting filesystem. [ 978.908682][T15565] loop8: detected capacity change from 0 to 512 [ 978.949943][T15565] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 979.002540][T15565] EXT4-fs error (device loop8): ext4_quota_enable:7049: inode #4: comm syz.8.2795: unexpected EA_INODE flag [ 979.025027][T15565] EXT4-fs error (device loop8): ext4_quota_enable:7052: comm syz.8.2795: Bad quota inode: 4, type: 1 [ 979.048815][T15565] EXT4-fs warning (device loop8): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 979.082422][T15565] EXT4-fs (loop8): mount failed [ 980.112124][T15581] loop8: detected capacity change from 0 to 256 [ 980.253442][T15581] FAT-fs (loop8): Directory bread(block 64) failed [ 980.301172][T15581] FAT-fs (loop8): Directory bread(block 65) failed [ 980.334143][T15581] FAT-fs (loop8): Directory bread(block 66) failed [ 980.340789][T15581] FAT-fs (loop8): Directory bread(block 67) failed [ 980.393792][T15581] FAT-fs (loop8): Directory bread(block 68) failed [ 980.410694][T15581] FAT-fs (loop8): Directory bread(block 69) failed [ 980.439174][T15581] FAT-fs (loop8): Directory bread(block 70) failed [ 980.446700][T15581] FAT-fs (loop8): Directory bread(block 71) failed [ 980.453329][T15581] FAT-fs (loop8): Directory bread(block 72) failed [ 980.460386][T15581] FAT-fs (loop8): Directory bread(block 73) failed [ 980.502013][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 980.512056][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 980.522597][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 980.530468][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 980.538165][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 980.547027][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 981.557862][ T6476] device hsr_slave_0 left promiscuous mode [ 981.693186][ T6476] device hsr_slave_1 left promiscuous mode [ 981.714716][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.769286][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.794484][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.813963][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.841337][ T6476] device bridge_slave_1 left promiscuous mode [ 981.877545][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.986827][ T6476] device bridge_slave_0 left promiscuous mode [ 981.993192][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.043163][T15600] Invalid ELF header magic: != ELF [ 982.120564][ T6476] device veth1_macvtap left promiscuous mode [ 982.151852][ T6476] device veth0_macvtap left promiscuous mode [ 982.182295][ T6476] device veth0_vlan left promiscuous mode [ 982.323485][ T4287] Bluetooth: hci1: Malformed LE Event: 0x0b [ 982.403506][T15611] fuse: Bad value for 'fd' [ 982.539157][T15614] loop7: detected capacity change from 0 to 1024 [ 982.604040][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 982.659636][T15621] loop8: detected capacity change from 0 to 512 [ 982.676578][T15621] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 982.687597][T15614] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 982.870115][T15621] EXT4-fs error (device loop8): ext4_quota_enable:7049: inode #4: comm syz.8.2805: unexpected EA_INODE flag [ 982.908941][T15621] EXT4-fs error (device loop8): ext4_quota_enable:7052: comm syz.8.2805: Bad quota inode: 4, type: 1 [ 983.380263][T15621] EXT4-fs warning (device loop8): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 983.427051][T15621] EXT4-fs (loop8): mount failed [ 983.519748][T15621] loop8: detected capacity change from 0 to 1024 [ 984.579065][ T6476] team0 (unregistering): Port device team_slave_1 removed [ 984.715583][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 985.306866][ T6476] team0 (unregistering): Port device team_slave_0 removed [ 985.462551][ T6476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.592077][ T6476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.095712][ T6476] bond0 (unregistering): Released all slaves [ 986.217246][T15368] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 986.256293][T15368] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 986.277522][T15368] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 986.315397][T10568] EXT4-fs (loop7): unmounting filesystem. [ 986.438364][T15368] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 986.753919][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 986.894790][T15368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.939343][T15368] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.947706][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 986.974088][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 987.025789][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 987.050282][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 987.082843][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.090072][ T7096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.157893][T15585] chnl_net:caif_netlink_parms(): no params data found [ 987.212066][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 987.244582][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 987.270247][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 987.298833][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.306055][ T7096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.324845][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 987.346107][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 987.381916][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 987.423419][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 987.499524][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 987.511670][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 987.529888][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 987.539762][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 987.549028][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 987.591996][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 987.621580][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 987.671798][T15368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 987.707698][T15585] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.721763][T15585] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.730151][T15585] device bridge_slave_0 entered promiscuous mode [ 987.739186][T15585] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.747455][T15585] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.755928][T15585] device bridge_slave_1 entered promiscuous mode [ 987.780333][T15585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.793183][T15585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.698315][T15585] team0: Port device team_slave_0 added [ 988.812689][ T6476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.823599][ T6476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44481 - 0 [ 988.833897][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 988.859065][T15585] team0: Port device team_slave_1 added [ 988.992866][ T6476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.029906][ T6476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44481 - 0 [ 989.063452][T15585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.075356][T15585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.181244][T15585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.269918][ T6476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.289758][ T6476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44481 - 0 [ 989.312591][T15585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.328942][T15585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.401845][T15585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.488499][ T6476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.528433][ T6476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44481 - 0 [ 989.640110][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 989.648766][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 989.696161][T15717] Invalid ELF header magic: != ELF [ 989.728139][T15368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.883290][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 989.906007][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 989.988525][T15585] device hsr_slave_0 entered promiscuous mode [ 990.005817][T15585] device hsr_slave_1 entered promiscuous mode [ 990.020547][T15585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.036510][T15585] Cannot create hsr debugfs directory [ 990.069567][T15368] device veth0_vlan entered promiscuous mode [ 990.083333][T15726] device syzkaller0 entered promiscuous mode [ 990.108172][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 990.118254][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 990.226582][T15368] device veth1_vlan entered promiscuous mode [ 990.241163][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 990.270880][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 990.287978][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 990.442063][ T6476] tipc: Disabling bearer [ 990.449443][ T6476] tipc: Left network mode [ 990.454689][T14944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 990.490758][T14944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 990.515277][T14944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 990.557594][T15368] device veth0_macvtap entered promiscuous mode [ 990.798213][T15368] device veth1_macvtap entered promiscuous mode [ 990.860317][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.879834][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.892855][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.910731][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.913026][T15747] fuse: Bad value for 'fd' [ 990.922176][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.942632][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.960728][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.971467][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.990848][T15368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.003349][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 991.015591][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 991.046037][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 991.075365][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 991.148767][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.181093][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.223825][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.266069][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.307880][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.352603][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.362657][T15368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.384330][T15368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.610626][T15368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.065497][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 992.105288][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 992.185974][T15368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.196795][T15767] binder: 15766:15767 ioctl 4018620d 0 returned -22 [ 992.201526][T15368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.212887][T15368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.222006][T15368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.309863][T15767] binder: 15766:15767 unknown command 1074553619 [ 992.341174][T15767] binder: 15766:15767 ioctl c0306201 200000000040 returned -22 [ 992.489027][T15585] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 992.564072][ T7059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.571966][ T7059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.597290][T15585] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 992.605417][T15771] loop8: detected capacity change from 0 to 256 [ 992.615670][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 992.668063][T15771] FAT-fs (loop8): Directory bread(block 64) failed [ 992.700417][T15771] FAT-fs (loop8): Directory bread(block 65) failed [ 992.717612][T15585] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 992.722021][T15771] FAT-fs (loop8): Directory bread(block 66) failed [ 992.732861][T15771] FAT-fs (loop8): Directory bread(block 67) failed [ 992.733534][T15585] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 992.769824][T15771] FAT-fs (loop8): Directory bread(block 68) failed [ 992.796285][T15771] FAT-fs (loop8): Directory bread(block 69) failed [ 992.820722][T15771] FAT-fs (loop8): Directory bread(block 70) failed [ 992.841992][T15771] FAT-fs (loop8): Directory bread(block 71) failed [ 992.859410][ T7059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.878634][ T7059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.890313][T15771] FAT-fs (loop8): Directory bread(block 72) failed [ 992.910330][T15771] FAT-fs (loop8): Directory bread(block 73) failed [ 992.996861][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.003292][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.330694][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 993.957785][T15585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.674339][T15585] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.069858][ T6476] device hsr_slave_0 left promiscuous mode [ 995.164377][ T6476] device hsr_slave_1 left promiscuous mode [ 995.365369][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.559891][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.592491][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.610295][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.749446][ T6476] device bridge_slave_1 left promiscuous mode [ 995.775202][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.821142][T15808] fuse: Bad value for 'fd' [ 995.854530][ T6476] device bridge_slave_0 left promiscuous mode [ 995.863087][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.004395][ T6476] device veth1_macvtap left promiscuous mode [ 996.010517][ T6476] device veth0_macvtap left promiscuous mode [ 996.029683][ T6476] device veth0_vlan left promiscuous mode [ 996.814735][ T6476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.876413][ T6476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.188859][ T6476] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 997.220341][ T6476] bond0 (unregistering): Released all slaves [ 997.290572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 997.298399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 997.349606][T15823] device veth0 entered promiscuous mode [ 997.359951][T15824] device bond0 entered promiscuous mode [ 997.365831][T15824] device bond_slave_0 entered promiscuous mode [ 997.372507][T15824] device bond_slave_1 entered promiscuous mode [ 997.379591][T15825] device bond0 left promiscuous mode [ 997.387896][T15825] device bond_slave_0 left promiscuous mode [ 997.404082][T15825] device bond_slave_1 left promiscuous mode [ 997.414555][T15825] device veth0 left promiscuous mode [ 997.426595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 997.464459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 997.482045][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.489268][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.500833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 997.509872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 997.518551][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.525707][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.664089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 997.672291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 997.731363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 997.740462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 997.751606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 997.783907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 998.190570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 998.207364][T15838] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 998.215080][T15838] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 998.637386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 998.690867][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 998.724462][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 998.737222][T15585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 998.751678][T15585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 998.768708][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 998.807484][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 998.894507][ T4585] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 999.343788][ T4585] usb 9-1: Using ep0 maxpacket: 32 [ 999.355690][ T4585] usb 9-1: config 242 has an invalid interface number: 195 but max is 0 [ 999.423384][ T4585] usb 9-1: config 242 has no interface number 0 [ 999.460316][ T4585] usb 9-1: config 242 interface 195 has no altsetting 0 [ 999.686569][ T4585] usb 9-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 999.755134][ T4585] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.763195][ T4585] usb 9-1: Product: syz [ 999.800731][ T4585] usb 9-1: Manufacturer: syz [ 999.824015][ T4585] usb 9-1: SerialNumber: syz [ 1000.089797][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1000.112430][ T7059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1000.155506][T15585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.521370][T15870] Invalid ELF header magic: != ELF [ 1001.212189][ T4585] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1001.227233][ T4585] usb 9-1: selecting invalid altsetting 0 [ 1001.233143][ T2309] pvrusb2: Invalid write control endpoint [ 1001.318828][ T4585] usb 9-1: USB disconnect, device number 4 [ 1002.714413][ T2309] pvrusb2: Invalid write control endpoint [ 1002.721132][ T2309] pvrusb2: Invalid write control endpoint [ 1002.799965][ T2309] pvrusb2: Invalid write control endpoint [ 1002.874297][ T2309] pvrusb2: Invalid write control endpoint [ 1002.880117][ T2309] pvrusb2: Invalid write control endpoint [ 1002.961535][ T2309] pvrusb2: Invalid write control endpoint [ 1002.972899][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1002.994373][T15912] syz.8.2859 sent an empty control message without MSG_MORE. [ 1002.996709][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1003.020073][ T2309] pvrusb2: Invalid write control endpoint [ 1003.036391][ T2309] pvrusb2: Invalid write control endpoint [ 1003.042231][ T2309] pvrusb2: Invalid write control endpoint [ 1003.107816][ T2309] pvrusb2: Invalid write control endpoint [ 1003.129502][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1003.146806][ T2309] pvrusb2: Invalid write control endpoint [ 1003.152698][ T2309] pvrusb2: Invalid write control endpoint [ 1003.165333][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1003.201922][T15585] device veth0_vlan entered promiscuous mode [ 1003.213201][ T2309] pvrusb2: Invalid write control endpoint [ 1003.230733][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1003.249975][ T2309] pvrusb2: Invalid write control endpoint [ 1003.261040][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1003.280392][ T2309] pvrusb2: Invalid write control endpoint [ 1003.305170][T15585] device veth1_vlan entered promiscuous mode [ 1003.324494][ T2309] pvrusb2: Invalid write control endpoint [ 1003.343090][ T2309] pvrusb2: Invalid write control endpoint [ 1003.387179][ T2309] pvrusb2: Invalid write control endpoint [ 1003.426447][ T2309] pvrusb2: Invalid write control endpoint [ 1003.432280][ T2309] pvrusb2: Invalid write control endpoint [ 1003.490663][ T2309] pvrusb2: Invalid write control endpoint [ 1003.502174][ T2309] pvrusb2: Invalid write control endpoint [ 1003.514739][ T2309] pvrusb2: Invalid write control endpoint [ 1003.520197][T15585] device veth0_macvtap entered promiscuous mode [ 1003.526972][ T2309] pvrusb2: Invalid write control endpoint [ 1003.545727][ T2309] pvrusb2: Invalid write control endpoint [ 1003.557373][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1003.564278][ T2309] pvrusb2: Invalid write control endpoint [ 1003.581561][ T2309] pvrusb2: Invalid write control endpoint [ 1003.590347][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1003.611933][ T2309] pvrusb2: Invalid write control endpoint [ 1003.632181][ T2309] pvrusb2: Invalid write control endpoint [ 1003.636461][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1003.658507][ T2309] pvrusb2: Invalid write control endpoint [ 1003.698870][T15585] device veth1_macvtap entered promiscuous mode [ 1003.708339][ T2309] pvrusb2: Invalid write control endpoint [ 1003.745951][ T2309] pvrusb2: Invalid write control endpoint [ 1003.752302][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1003.800127][T15585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.841566][T15585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.893173][T15585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.937749][T15585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.976905][T15585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.987614][T15585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.002473][T15585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.020731][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1004.031109][T15585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.042693][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1004.610334][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1004.622822][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1004.692734][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1004.700214][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1004.748307][T15585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.759232][T15585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.769957][T15585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.779857][T15585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.790572][T15585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.800720][T15585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.811383][T15585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.821268][T15585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.843110][T15585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.931553][T15585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.942214][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1004.968436][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1005.190938][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1005.354311][T12764] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1005.533793][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1005.585119][T12764] usb 2-1: Using ep0 maxpacket: 32 [ 1005.594821][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1005.604256][T12764] usb 2-1: config 242 has an invalid interface number: 195 but max is 0 [ 1005.612774][T12764] usb 2-1: config 242 has no interface number 0 [ 1005.618993][T15585] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.639564][T12764] usb 2-1: config 242 interface 195 has no altsetting 0 [ 1005.656156][T15585] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.677996][T12764] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 1005.686669][T15585] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.700707][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 1005.703602][T12764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.723726][ T2309] pvrusb2: Invalid write control endpoint [ 1005.727746][T15585] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.730603][ T2309] pvrusb2: Invalid write control endpoint [ 1005.744749][T12764] usb 2-1: Product: syz [ 1005.748952][T12764] usb 2-1: Manufacturer: syz [ 1005.753564][T12764] usb 2-1: SerialNumber: syz [ 1005.770881][ T2309] pvrusb2: Invalid write control endpoint [ 1005.822924][ T2309] pvrusb2: Invalid write control endpoint [ 1005.850304][ T2309] pvrusb2: Invalid write control endpoint [ 1005.888755][ T2309] pvrusb2: Invalid write control endpoint [ 1005.936304][ T2309] pvrusb2: Invalid write control endpoint [ 1005.942289][ T2309] pvrusb2: Invalid write control endpoint [ 1005.994121][ T2309] pvrusb2: Invalid write control endpoint [ 1006.001138][ T2309] pvrusb2: Invalid write control endpoint [ 1006.053421][ T2309] pvrusb2: Invalid write control endpoint [ 1006.111451][ T2309] pvrusb2: Invalid write control endpoint [ 1006.140577][ T2309] pvrusb2: Invalid write control endpoint [ 1006.152824][ T2309] pvrusb2: Invalid write control endpoint [ 1006.178698][ T2309] pvrusb2: Invalid write control endpoint [ 1006.187008][ T2309] pvrusb2: Invalid write control endpoint [ 1006.192854][ T2309] pvrusb2: Invalid write control endpoint [ 1006.202796][ T2309] pvrusb2: Invalid write control endpoint [ 1006.212324][ T2309] pvrusb2: Invalid write control endpoint [ 1006.222212][ T2309] pvrusb2: Invalid write control endpoint [ 1006.222763][ T7059] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.228681][ T2309] pvrusb2: Invalid write control endpoint [ 1006.253082][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 1006.514000][ T7059] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.526281][ T2309] pvrusb2: Invalid write control endpoint [ 1006.532160][ T2309] pvrusb2: Invalid write control endpoint [ 1006.569757][ T2309] pvrusb2: Invalid write control endpoint [ 1006.593790][ T2309] pvrusb2: Invalid write control endpoint [ 1006.678403][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1006.753878][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 1007.007991][ T2309] pvrusb2: Device being rendered inoperable [ 1007.114432][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1007.142118][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.191436][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.285005][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1007.333059][ T7059] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.354972][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1007.485684][ T7059] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.595960][ T4457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.624862][ T4457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.628813][T15923] chnl_net:caif_netlink_parms(): no params data found [ 1007.669187][ T6476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1007.991139][T15923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.998626][T15923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.007795][T15923] device bridge_slave_0 entered promiscuous mode [ 1008.020375][T15923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.028149][T15923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.038457][T15923] device bridge_slave_1 entered promiscuous mode [ 1008.075544][T15971] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2793'. [ 1008.358281][T15923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.410404][T15923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.446681][ T7059] tipc: Disabling bearer [ 1008.454847][ T7059] tipc: Left network mode [ 1008.556331][T15923] team0: Port device team_slave_0 added [ 1008.588782][T15923] team0: Port device team_slave_1 added [ 1008.810738][T12764] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1008.818583][T12764] usb 2-1: selecting invalid altsetting 0 [ 1008.843773][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 1008.853076][T12764] usb 2-1: USB disconnect, device number 13 [ 1008.854000][ T2309] pvrusb2: Invalid write control endpoint [ 1008.948871][ T2309] pvrusb2: Invalid write control endpoint [ 1008.955182][ T2309] pvrusb2: Invalid write control endpoint [ 1008.961010][ T2309] pvrusb2: Invalid write control endpoint [ 1008.997650][T15923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.014415][ T2309] pvrusb2: Invalid write control endpoint [ 1009.024488][T15923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.187197][ T2309] pvrusb2: Invalid write control endpoint [ 1009.217612][T15923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.239370][ T2309] pvrusb2: Invalid write control endpoint [ 1009.249664][T15923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.264020][T15923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.294796][ T2309] pvrusb2: Invalid write control endpoint [ 1009.300892][ T2309] pvrusb2: Invalid write control endpoint [ 1009.336550][ T2309] pvrusb2: Invalid write control endpoint [ 1009.351233][T15923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.358590][ T2309] pvrusb2: Invalid write control endpoint [ 1009.386955][ T2309] pvrusb2: Invalid write control endpoint [ 1009.457990][ T2309] pvrusb2: Invalid write control endpoint [ 1009.478661][ T2309] pvrusb2: Invalid write control endpoint [ 1009.497292][ T2309] pvrusb2: Invalid write control endpoint [ 1009.513135][T15923] device hsr_slave_0 entered promiscuous mode [ 1009.520533][ T2309] pvrusb2: Invalid write control endpoint [ 1009.564922][ T2309] pvrusb2: Invalid write control endpoint [ 1009.571365][T15923] device hsr_slave_1 entered promiscuous mode [ 1009.591482][ T2309] pvrusb2: Invalid write control endpoint [ 1009.601507][T15923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.617366][ T2309] pvrusb2: Invalid write control endpoint [ 1009.623213][ T2309] pvrusb2: Invalid write control endpoint [ 1009.639277][T15923] Cannot create hsr debugfs directory [ 1009.643809][ T2309] pvrusb2: Invalid write control endpoint [ 1009.667747][ T2309] pvrusb2: Invalid write control endpoint [ 1009.680171][ T2309] pvrusb2: Invalid write control endpoint [ 1009.686402][ T2309] pvrusb2: Invalid write control endpoint [ 1009.692274][ T2309] pvrusb2: Invalid write control endpoint [ 1009.703594][ T2309] pvrusb2: Invalid write control endpoint [ 1009.716477][ T2309] pvrusb2: Invalid write control endpoint [ 1009.733733][ T2309] pvrusb2: Invalid write control endpoint [ 1009.748661][ T2309] pvrusb2: Invalid write control endpoint [ 1009.771420][ T2309] pvrusb2: Invalid write control endpoint [ 1009.795693][ T2309] pvrusb2: Invalid write control endpoint [ 1009.810402][ T2309] pvrusb2: Invalid write control endpoint [ 1009.840670][ T2309] pvrusb2: Invalid write control endpoint [ 1009.859009][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1011.365463][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 1011.618220][T16021] loop8: detected capacity change from 0 to 256 [ 1011.699207][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 1011.721787][ T2309] pvrusb2: Invalid write control endpoint [ 1011.788548][ T2309] pvrusb2: Invalid write control endpoint [ 1011.829955][T16021] FAT-fs (loop8): Directory bread(block 64) failed [ 1011.863389][ T2309] pvrusb2: Invalid write control endpoint [ 1011.877453][T16021] FAT-fs (loop8): Directory bread(block 65) failed [ 1011.924943][ T2309] pvrusb2: Invalid write control endpoint [ 1011.954801][T16021] FAT-fs (loop8): Directory bread(block 66) failed [ 1011.979418][ T2309] pvrusb2: Invalid write control endpoint [ 1012.002032][T16021] FAT-fs (loop8): Directory bread(block 67) failed [ 1012.029685][ T2309] pvrusb2: Invalid write control endpoint [ 1012.081983][T16021] FAT-fs (loop8): Directory bread(block 68) failed [ 1012.102042][ T2309] pvrusb2: Invalid write control endpoint [ 1012.148443][T16021] FAT-fs (loop8): Directory bread(block 69) failed [ 1012.160864][ T2309] pvrusb2: Invalid write control endpoint [ 1012.200155][T16021] FAT-fs (loop8): Directory bread(block 70) failed [ 1012.207356][ T2309] pvrusb2: Invalid write control endpoint [ 1012.259835][ T2309] pvrusb2: Invalid write control endpoint [ 1012.271414][T16021] FAT-fs (loop8): Directory bread(block 71) failed [ 1012.311200][ T2309] pvrusb2: Invalid write control endpoint [ 1012.322743][T16021] FAT-fs (loop8): Directory bread(block 72) failed [ 1012.352398][ T2309] pvrusb2: Invalid write control endpoint [ 1012.399950][T16021] FAT-fs (loop8): Directory bread(block 73) failed [ 1012.426963][ T2309] pvrusb2: Invalid write control endpoint [ 1012.432788][ T2309] pvrusb2: Invalid write control endpoint [ 1012.533755][ T2309] pvrusb2: Invalid write control endpoint [ 1012.539560][ T2309] pvrusb2: Invalid write control endpoint [ 1012.549574][ T2309] pvrusb2: Invalid write control endpoint [ 1012.555888][ T2309] pvrusb2: Invalid write control endpoint [ 1012.561665][ T2309] pvrusb2: Invalid write control endpoint [ 1012.633820][ T2309] pvrusb2: Invalid write control endpoint [ 1012.678291][ T2309] pvrusb2: Invalid write control endpoint [ 1012.730001][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 1013.147526][T16043] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1013.155332][T16043] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1013.516257][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 1013.723970][ T4322] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1013.972525][ T2309] pvrusb2: Invalid write control endpoint [ 1013.978654][ T4322] usb 10-1: Using ep0 maxpacket: 32 [ 1013.990579][ T2309] pvrusb2: Invalid write control endpoint [ 1014.031232][ T2309] pvrusb2: Invalid write control endpoint [ 1014.037290][ T2309] pvrusb2: Invalid write control endpoint [ 1014.043027][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1014.071960][ T2309] pvrusb2: Device being rendered inoperable [ 1014.091977][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1014.119205][ T4322] usb 10-1: config 242 has an invalid interface number: 195 but max is 0 [ 1014.128030][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1014.133679][ T4322] usb 10-1: config 242 has no interface number 0 [ 1014.172137][ T4322] usb 10-1: config 242 interface 195 has no altsetting 0 [ 1014.200304][ T4322] usb 10-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 1014.252187][ T4322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.298055][ T4322] usb 10-1: Product: syz [ 1014.302378][ T4322] usb 10-1: Manufacturer: syz [ 1014.336603][ T4322] usb 10-1: SerialNumber: syz [ 1014.426393][T16036] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2880'. [ 1014.962407][T16058] device veth0 entered promiscuous mode [ 1015.841969][T16058] device bond0 entered promiscuous mode [ 1015.848100][T16058] device bond_slave_0 entered promiscuous mode [ 1015.863852][T16058] device bond_slave_1 entered promiscuous mode [ 1016.214332][ T4322] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1016.222052][ T4322] usb 10-1: selecting invalid altsetting 0 [ 1016.228423][ T2309] pvrusb2: Invalid write control endpoint [ 1016.261215][ T4322] usb 10-1: USB disconnect, device number 2 [ 1016.740405][T16078] Invalid ELF header magic: != ELF [ 1016.749675][T16064] device bond0 left promiscuous mode [ 1016.763780][T16064] device bond_slave_0 left promiscuous mode [ 1016.771133][T16080] loop9: detected capacity change from 0 to 256 [ 1016.783032][T16064] device bond_slave_1 left promiscuous mode [ 1016.824924][T16064] device veth0 left promiscuous mode [ 1016.909288][T16080] FAT-fs (loop9): Directory bread(block 64) failed [ 1016.976616][T16080] FAT-fs (loop9): Directory bread(block 65) failed [ 1016.983309][T16080] FAT-fs (loop9): Directory bread(block 66) failed [ 1017.021197][T16080] FAT-fs (loop9): Directory bread(block 67) failed [ 1017.072083][T16080] FAT-fs (loop9): Directory bread(block 68) failed [ 1017.097583][ T2309] pvrusb2: Invalid write control endpoint [ 1017.103491][ T2309] pvrusb2: Invalid write control endpoint [ 1017.114847][T16080] FAT-fs (loop9): Directory bread(block 69) failed [ 1017.121514][T16080] FAT-fs (loop9): Directory bread(block 70) failed [ 1017.142299][ T2309] pvrusb2: Invalid write control endpoint [ 1017.158187][ T2309] pvrusb2: Invalid write control endpoint [ 1017.183215][T16080] FAT-fs (loop9): Directory bread(block 71) failed [ 1017.210567][T16080] FAT-fs (loop9): Directory bread(block 72) failed [ 1017.230722][ T2309] pvrusb2: Invalid write control endpoint [ 1017.243263][T16080] FAT-fs (loop9): Directory bread(block 73) failed [ 1017.314302][ T2309] pvrusb2: Invalid write control endpoint [ 1017.337404][ T2309] pvrusb2: Invalid write control endpoint [ 1017.384075][ T2309] pvrusb2: Invalid write control endpoint [ 1017.456466][ T2309] pvrusb2: Invalid write control endpoint [ 1017.703536][ T2309] pvrusb2: Invalid write control endpoint [ 1017.844194][T16088] tipc: Started in network mode [ 1017.849838][T16088] tipc: Node identity ac14140f, cluster identity 4711 [ 1017.860601][T16088] tipc: New replicast peer: 255.255.255.255 [ 1017.867836][T16088] tipc: Enabled bearer , priority 10 [ 1017.960985][ T2309] pvrusb2: Invalid write control endpoint [ 1018.123808][ T2309] pvrusb2: Invalid write control endpoint [ 1018.170302][ T2309] pvrusb2: Invalid write control endpoint [ 1018.215434][ T2309] pvrusb2: Invalid write control endpoint [ 1018.260361][ T2309] pvrusb2: Invalid write control endpoint [ 1018.290406][ T2309] pvrusb2: Invalid write control endpoint [ 1018.322683][ T2309] pvrusb2: Invalid write control endpoint [ 1018.359630][ T2309] pvrusb2: Invalid write control endpoint [ 1018.368573][ T2309] pvrusb2: Invalid write control endpoint [ 1018.400993][ T2309] pvrusb2: Invalid write control endpoint [ 1018.431769][ T2309] pvrusb2: Invalid write control endpoint [ 1018.459590][ T2309] pvrusb2: Invalid write control endpoint [ 1018.491102][ T2309] pvrusb2: Invalid write control endpoint [ 1018.531171][ T2309] pvrusb2: Invalid write control endpoint [ 1018.560817][ T2309] pvrusb2: Invalid write control endpoint [ 1018.578086][ T2309] pvrusb2: Invalid write control endpoint [ 1018.614984][ T2309] pvrusb2: Invalid write control endpoint [ 1018.622032][T16099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2893'. [ 1018.678407][ T2309] pvrusb2: Invalid write control endpoint [ 1018.706047][ T2309] pvrusb2: Invalid write control endpoint [ 1018.729160][ T7059] device hsr_slave_0 left promiscuous mode [ 1018.737285][ T2309] pvrusb2: Invalid write control endpoint [ 1018.752790][ T7059] device hsr_slave_1 left promiscuous mode [ 1018.760074][ T2309] pvrusb2: Invalid write control endpoint [ 1018.790432][ T2309] pvrusb2: Invalid write control endpoint [ 1018.818383][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1019.046567][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.067555][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.335329][ T7059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.853219][ T7059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.956249][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 1019.962810][ T2309] pvrusb2: Invalid write control endpoint [ 1019.992867][ T7059] device bridge_slave_1 left promiscuous mode [ 1020.010963][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.046577][ T2309] pvrusb2: Invalid write control endpoint [ 1020.085186][ T7059] device bridge_slave_0 left promiscuous mode [ 1020.091480][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.102685][ T2309] pvrusb2: Invalid write control endpoint [ 1020.129137][ T2309] pvrusb2: Invalid write control endpoint [ 1020.159601][ T2309] pvrusb2: Invalid write control endpoint [ 1020.203141][ T2309] pvrusb2: Invalid write control endpoint [ 1020.240700][ T2309] pvrusb2: Invalid write control endpoint [ 1020.267425][ T2309] pvrusb2: Invalid write control endpoint [ 1020.287806][ T7059] device veth1_macvtap left promiscuous mode [ 1020.313249][ T7059] device veth0_macvtap left promiscuous mode [ 1020.315408][T16130] Invalid ELF header magic: != ELF [ 1020.352544][ T7059] device veth1_vlan left promiscuous mode [ 1020.359920][ T2309] pvrusb2: Invalid write control endpoint [ 1020.380635][ T7059] device veth0_vlan left promiscuous mode [ 1020.385171][ T2309] pvrusb2: Invalid write control endpoint [ 1020.411352][ T2309] pvrusb2: Invalid write control endpoint [ 1020.431133][ T2309] pvrusb2: Invalid write control endpoint [ 1020.451211][ T2309] pvrusb2: Invalid write control endpoint [ 1020.453543][T16134] Bluetooth: MGMT ver 1.22 [ 1020.469421][ T2309] pvrusb2: Invalid write control endpoint [ 1020.493588][ T2309] pvrusb2: Invalid write control endpoint [ 1020.513290][ T2309] pvrusb2: Invalid write control endpoint [ 1020.537088][ T2309] pvrusb2: Invalid write control endpoint [ 1020.556592][ T2309] pvrusb2: Invalid write control endpoint [ 1020.577102][ T2309] pvrusb2: Invalid write control endpoint [ 1020.611124][ T2309] pvrusb2: Invalid write control endpoint [ 1020.640793][ T2309] pvrusb2: Invalid write control endpoint [ 1020.664782][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 1021.775487][ T2309] pvrusb2: Invalid write control endpoint [ 1021.781347][ T2309] pvrusb2: Invalid write control endpoint [ 1021.799010][T16154] loop1: detected capacity change from 0 to 256 [ 1021.824291][ T2309] pvrusb2: Invalid write control endpoint [ 1021.830213][ T2309] pvrusb2: Invalid write control endpoint [ 1021.854023][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1021.938005][ T2309] pvrusb2: Device being rendered inoperable [ 1021.950899][T16154] FAT-fs (loop1): Directory bread(block 64) failed [ 1021.977987][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1022.021616][T16154] FAT-fs (loop1): Directory bread(block 65) failed [ 1022.043799][T16154] FAT-fs (loop1): Directory bread(block 66) failed [ 1022.051050][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1022.074080][T16154] FAT-fs (loop1): Directory bread(block 67) failed [ 1022.084120][T16154] FAT-fs (loop1): Directory bread(block 68) failed [ 1022.090695][T16154] FAT-fs (loop1): Directory bread(block 69) failed [ 1022.125105][T16154] FAT-fs (loop1): Directory bread(block 70) failed [ 1022.148528][T16154] FAT-fs (loop1): Directory bread(block 71) failed [ 1022.171911][T16154] FAT-fs (loop1): Directory bread(block 72) failed [ 1022.199015][T16154] FAT-fs (loop1): Directory bread(block 73) failed [ 1023.760543][T16182] Invalid ELF header magic: != ELF [ 1025.780922][ T7059] team0 (unregistering): Port device team_slave_1 removed [ 1026.041433][ T7059] team0 (unregistering): Port device team_slave_0 removed [ 1026.079112][T16201] loop1: detected capacity change from 0 to 256 [ 1026.115107][T16201] FAT-fs (loop1): Directory bread(block 64) failed [ 1026.121764][T16201] FAT-fs (loop1): Directory bread(block 65) failed [ 1026.140895][T16201] FAT-fs (loop1): Directory bread(block 66) failed [ 1026.151509][T16201] FAT-fs (loop1): Directory bread(block 67) failed [ 1026.158572][T16201] FAT-fs (loop1): Directory bread(block 68) failed [ 1026.172111][T16201] FAT-fs (loop1): Directory bread(block 69) failed [ 1026.179092][T16201] FAT-fs (loop1): Directory bread(block 70) failed [ 1026.202986][T16201] FAT-fs (loop1): Directory bread(block 71) failed [ 1026.210524][ T7059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.230254][T16201] FAT-fs (loop1): Directory bread(block 72) failed [ 1026.237186][T16201] FAT-fs (loop1): Directory bread(block 73) failed [ 1026.335754][ T7059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.410241][T16209] loop1: detected capacity change from 0 to 8192 [ 1028.162076][ T7059] bond0 (unregistering): Released all slaves [ 1028.912226][ T22] tipc: Node number set to 2886997007 [ 1029.113827][ T4582] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1029.764216][ T4582] usb 2-1: Using ep0 maxpacket: 8 [ 1029.787300][T15923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1029.834253][ T4582] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 45, changing to 7 [ 1029.860160][ T4582] usb 2-1: New USB device found, idVendor=0582, idProduct=001d, bcdDevice= 0.40 [ 1029.926281][ T4582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.184139][ T4582] usb 2-1: Product: ㇚甑ഭ궜銣ῗ酌⯈稞 [ 1030.216430][ T4582] usb 2-1: Manufacturer: ࠚ [ 1030.511128][T15923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1030.846589][ T4582] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 1030.910465][ T4582] usb 2-1: USB disconnect, device number 14 [ 1031.001319][T16248] loop8: detected capacity change from 0 to 512 [ 1031.012431][T16248] EXT4-fs: Ignoring removed orlov option [ 1031.076145][T16248] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1031.241539][T16248] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #16: comm syz.8.2928: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 1031.261664][T16248] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.2928: couldn't read orphan inode 16 (err -117) [ 1031.285410][T16248] EXT4-fs (loop8): 1 orphan inode deleted [ 1031.291337][T16248] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1032.556135][T15923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1032.622370][T15923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1032.893001][T11514] EXT4-fs (loop8): unmounting filesystem. [ 1033.198795][T16266] loop8: detected capacity change from 0 to 1024 [ 1033.237269][T16266] EXT4-fs: Invalid want_extra_isize 3 [ 1033.299129][ T5192] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1033.397566][T15923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.871230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1033.884865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1033.996465][T15923] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.034113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1034.094468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1034.153887][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.161033][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.270903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1034.311344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1034.854610][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.861782][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.881903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1034.901177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1035.244791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1035.376075][T16287] Invalid ELF header magic: != ELF [ 1035.584313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1035.789595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1035.941649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1036.003926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1036.325170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1036.381907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1036.442034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1036.501810][T16292] loop9: detected capacity change from 0 to 512 [ 1036.518273][T15923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1036.583407][T16292] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1036.611354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1036.625084][T16292] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1036.655619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1036.853541][T16292] EXT4-fs error (device loop9): ext4_orphan_get:1431: comm syz.9.2939: bad orphan inode 131083 [ 1037.073820][T16292] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1038.983054][T15585] EXT4-fs (loop9): unmounting filesystem. [ 1039.023499][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2944'. [ 1039.235950][T16327] device syzkaller0 entered promiscuous mode [ 1039.388520][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1039.402059][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1039.439667][T15923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.779931][T16335] Invalid ELF header magic: != ELF [ 1041.296348][T16362] loop1: detected capacity change from 0 to 8 [ 1041.603156][T16364] tipc: Enabling of bearer rejected, already enabled [ 1041.773819][T16359] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1041.782528][T16359] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.792261][T16359] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1041.800435][T16359] SQUASHFS error: Failed to read block 0x4df: -5 [ 1041.811485][T16359] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1041.819656][T16359] SQUASHFS error: Failed to read block 0x4e0: -5 [ 1041.830835][T16359] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1041.838957][T16359] SQUASHFS error: Failed to read block 0x4de: -5 [ 1041.858430][ T26] audit: type=1800 audit(1778785036.827:19): pid=16359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2951" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1042.407040][T16372] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2956'. [ 1042.799438][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1042.827943][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1042.886908][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1042.902736][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1042.936165][T15923] device veth0_vlan entered promiscuous mode [ 1042.970609][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1042.990141][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1043.048558][T15923] device veth1_vlan entered promiscuous mode [ 1043.732352][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1043.805322][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1043.819645][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1043.874735][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1043.895586][T15923] device veth0_macvtap entered promiscuous mode [ 1043.913520][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1043.970565][T15923] device veth1_macvtap entered promiscuous mode [ 1044.204295][T16398] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1044.211782][T16398] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1044.461232][T16400] Invalid ELF header magic: != ELF [ 1044.715030][T15923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.738692][T15923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.773710][T15923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.793782][T15923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.813702][T15923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.834212][T12086] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1044.842370][T15923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.940801][T15923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1044.951389][T15923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.968736][T15923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.977808][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1044.997987][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1045.036129][T15923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.052706][T15923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.063566][T15923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.075116][T15923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.088192][T15923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.113711][T12086] usb 10-1: Using ep0 maxpacket: 32 [ 1045.125919][T12086] usb 10-1: config 242 has an invalid interface number: 195 but max is 0 [ 1045.129433][T15923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.153865][T12086] usb 10-1: config 242 has no interface number 0 [ 1045.174106][T15923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.183766][T12086] usb 10-1: config 242 interface 195 has no altsetting 0 [ 1045.192535][T15923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.212940][T12086] usb 10-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 1045.231690][T15923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.249275][T12086] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.258278][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1045.268081][T12086] usb 10-1: Product: syz [ 1045.283765][T12086] usb 10-1: Manufacturer: syz [ 1045.293771][T12086] usb 10-1: SerialNumber: syz [ 1045.295221][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1045.340077][T15923] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.368778][T15923] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.388818][T15923] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.411564][T15923] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.611416][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.639967][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.668129][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1045.874509][ T7096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.905401][ T7096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.913466][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1046.074674][T16415] tipc: Enabling of bearer rejected, already enabled [ 1046.947791][T12086] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1047.012534][T12086] usb 10-1: selecting invalid altsetting 0 [ 1047.080215][T12086] usb 10-1: USB disconnect, device number 3 [ 1047.109664][ T2309] pvrusb2: Invalid write control endpoint [ 1047.203872][T16427] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2968'. [ 1048.398592][ T2309] pvrusb2: Invalid write control endpoint [ 1048.444449][ T2309] pvrusb2: Invalid write control endpoint [ 1048.502031][ T2309] pvrusb2: Invalid write control endpoint [ 1048.899463][ T2309] pvrusb2: Invalid write control endpoint [ 1048.933222][ T2309] pvrusb2: Invalid write control endpoint [ 1048.974236][ T2309] pvrusb2: Invalid write control endpoint [ 1048.981008][ T2309] pvrusb2: Invalid write control endpoint [ 1048.995232][ T2309] pvrusb2: Invalid write control endpoint [ 1049.009448][ T2309] pvrusb2: Invalid write control endpoint [ 1049.018503][ T2309] pvrusb2: Invalid write control endpoint [ 1049.247112][ T2309] pvrusb2: Invalid write control endpoint [ 1049.547345][ T2309] pvrusb2: Invalid write control endpoint [ 1049.621272][ T2309] pvrusb2: Invalid write control endpoint [ 1049.641922][ T2309] pvrusb2: Invalid write control endpoint [ 1049.658543][ T2309] pvrusb2: Invalid write control endpoint [ 1049.666612][ T2309] pvrusb2: Invalid write control endpoint [ 1049.673516][ T2309] pvrusb2: Invalid write control endpoint [ 1049.683879][ T2309] pvrusb2: Invalid write control endpoint [ 1049.689753][ T2309] pvrusb2: Invalid write control endpoint [ 1049.774842][ T2309] pvrusb2: Invalid write control endpoint [ 1050.209657][ T2309] pvrusb2: Invalid write control endpoint [ 1050.268274][ T2309] pvrusb2: Invalid write control endpoint [ 1050.598729][T16473] tipc: Enabling of bearer rejected, already enabled [ 1051.308676][ T2309] pvrusb2: Invalid write control endpoint [ 1051.370787][ T2309] pvrusb2: Invalid write control endpoint [ 1051.425554][ T2309] pvrusb2: Invalid write control endpoint [ 1051.509312][ T2309] pvrusb2: Invalid write control endpoint [ 1051.550580][ T2309] pvrusb2: Invalid write control endpoint [ 1051.556992][ T2309] pvrusb2: Invalid write control endpoint [ 1051.824887][ T2309] pvrusb2: Invalid write control endpoint [ 1051.830867][ T2309] pvrusb2: Invalid write control endpoint [ 1051.902384][T16480] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1051.910189][T16480] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1052.178491][ T2309] pvrusb2: Invalid write control endpoint [ 1052.213804][T12707] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1052.405254][ T2309] pvrusb2: Invalid write control endpoint [ 1052.454791][ T2309] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1052.474235][T12707] usb 2-1: Using ep0 maxpacket: 32 [ 1052.481204][T12707] usb 2-1: config 242 has an invalid interface number: 195 but max is 0 [ 1052.533762][T12707] usb 2-1: config 242 has no interface number 0 [ 1052.540093][T12707] usb 2-1: config 242 interface 195 has no altsetting 0 [ 1052.761177][T12707] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 1052.772343][T12707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.184819][T12707] usb 2-1: Product: syz [ 1053.189358][T12707] usb 2-1: Manufacturer: syz [ 1053.194599][T12707] usb 2-1: SerialNumber: syz [ 1053.301049][ T2309] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 1053.309820][ T2309] pvrusb2: Invalid write control endpoint [ 1053.329466][ T2309] pvrusb2: Invalid write control endpoint [ 1053.441399][ T2309] pvrusb2: Invalid write control endpoint [ 1053.447370][ T2309] pvrusb2: Invalid write control endpoint [ 1053.453359][ T2309] pvrusb2: Invalid write control endpoint [ 1053.459540][ T2309] pvrusb2: Invalid write control endpoint [ 1053.465517][ T2309] pvrusb2: Invalid write control endpoint [ 1053.471499][ T2309] pvrusb2: Invalid write control endpoint [ 1053.477455][ T2309] pvrusb2: Invalid write control endpoint [ 1053.483967][ T2309] pvrusb2: Invalid write control endpoint [ 1053.489924][ T2309] pvrusb2: Invalid write control endpoint [ 1053.543842][ T2309] pvrusb2: Invalid write control endpoint [ 1053.549651][ T2309] pvrusb2: Invalid write control endpoint [ 1053.691975][ T2309] pvrusb2: Invalid write control endpoint [ 1053.730887][ T2309] pvrusb2: Invalid write control endpoint [ 1053.796060][ T2309] pvrusb2: Invalid write control endpoint [ 1054.455327][ T2309] pvrusb2: Invalid write control endpoint [ 1054.481841][ T2309] pvrusb2: Invalid write control endpoint [ 1054.500036][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.509395][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.590315][ T2309] pvrusb2: Invalid write control endpoint [ 1054.782727][T12707] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1054.810683][ T2309] pvrusb2: Invalid write control endpoint [ 1054.886887][T12707] usb 2-1: selecting invalid altsetting 0 [ 1054.906640][T12707] usb 2-1: USB disconnect, device number 15 [ 1054.912996][T12707] pvrusb2: Device being rendered inoperable [ 1054.933736][ T2309] pvrusb2: Invalid write control endpoint [ 1054.956590][ T2309] pvrusb2: Attached sub-driver cs53l32a [ 1055.241071][T16522] Invalid ELF header magic: != ELF [ 1056.060282][ T2309] pvrusb2: Invalid write control endpoint [ 1056.069417][ T2309] pvrusb2: Invalid write control endpoint [ 1056.237499][ T2309] pvrusb2: Invalid write control endpoint [ 1056.417805][ T2309] pvrusb2: Invalid write control endpoint [ 1056.547739][ T2309] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 1056.674564][ T2309] pvrusb2: Device being rendered inoperable [ 1056.680785][ T2309] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 1056.710726][ T2309] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 1057.119603][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2995'. [ 1057.285291][T16548] loop1: detected capacity change from 0 to 256 [ 1058.524819][T16546] device hsr_slave_0 left promiscuous mode [ 1059.019363][T16546] device hsr_slave_1 left promiscuous mode [ 1059.611940][T16558] tipc: Enabling of bearer rejected, already enabled [ 1060.229229][T16575] loop8: detected capacity change from 0 to 1024 [ 1060.518109][T16575] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1060.527165][T16575] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.903526][T11514] EXT4-fs (loop8): unmounting filesystem. [ 1062.316175][T16608] tipc: Enabling of bearer rejected, already enabled [ 1065.031320][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3017'. [ 1065.059084][T16636] device hsr_slave_0 left promiscuous mode [ 1065.082916][T16636] device hsr_slave_1 left promiscuous mode [ 1065.723365][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1068.038188][T16683] loop1: detected capacity change from 0 to 1024 [ 1068.062335][T16683] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1068.106705][T16683] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #32: comm syz.1.3034: iget: special inode unallocated [ 1068.148391][T16683] EXT4-fs (loop1): no journal found [ 1068.166192][T16683] EXT4-fs (loop1): can't get journal size [ 1068.202895][T16683] EXT4-fs (loop1): filesystem is read-only [ 1068.213576][T16683] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1068.314935][T15368] EXT4-fs (loop1): unmounting filesystem. [ 1068.715375][T16703] loop1: detected capacity change from 0 to 2048 [ 1069.042049][T16703] EXT4-fs: Ignoring removed i_version option [ 1069.437306][T16703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1069.484034][T16703] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.359036][T15368] EXT4-fs (loop1): unmounting filesystem. [ 1070.556400][T16728] loop1: detected capacity change from 0 to 512 [ 1070.599238][T16728] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1070.672768][T16728] EXT4-fs (loop1): 1 truncate cleaned up [ 1070.697097][T16731] autofs4:pid:16731:autofs_fill_super: called with bogus options [ 1070.738948][T16728] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1071.478196][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3047'. [ 1071.641982][T15368] EXT4-fs (loop1): unmounting filesystem. [ 1074.611385][T16783] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3057'. [ 1075.530667][T16788] tipc: Enabling of bearer rejected, already enabled [ 1075.871908][T16792] loop8: detected capacity change from 0 to 512 [ 1075.936034][T16792] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1075.970154][T16796] loop1: detected capacity change from 0 to 2048 [ 1076.016862][T16792] EXT4-fs (loop8): 1 truncate cleaned up [ 1076.029356][T16792] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1076.085063][T16796] Alternate GPT is invalid, using primary GPT. [ 1076.118974][T16796] loop1: p2 p3 p7 [ 1076.297862][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 1077.365024][T11514] EXT4-fs (loop8): unmounting filesystem. [ 1077.907017][T16830] loop1: detected capacity change from 0 to 512 [ 1078.270530][T16842] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1078.278157][T16842] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1079.287969][T16843] tipc: Enabling of bearer rejected, already enabled [ 1080.962868][T16830] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 1081.104406][T16848] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3072'. [ 1081.361664][T16255] udevd[16255]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1081.376659][ T4385] udevd[4385]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 1081.401331][ T5192] udevd[5192]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1081.413784][T12072] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1081.488794][T16862] loop4: detected capacity change from 0 to 512 [ 1081.520940][T16862] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1081.574470][T16862] EXT4-fs (loop4): 1 truncate cleaned up [ 1081.589845][T16862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1081.613728][T12072] usb 9-1: Using ep0 maxpacket: 32 [ 1081.648954][T12072] usb 9-1: device descriptor read/all, error -71 [ 1082.726335][T15923] EXT4-fs (loop4): unmounting filesystem. [ 1083.014582][T16886] loop1: detected capacity change from 0 to 512 [ 1083.022209][T16886] EXT4-fs: Ignoring removed orlov option [ 1083.028631][T16886] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1083.087047][T16886] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.3082: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 1083.104721][T16886] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3082: couldn't read orphan inode 16 (err -117) [ 1083.117134][T16886] EXT4-fs (loop1): 1 orphan inode deleted [ 1083.123005][T16886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1083.487799][T16902] tipc: Enabling of bearer rejected, already enabled [ 1084.175461][T15368] EXT4-fs (loop1): unmounting filesystem. [ 1084.370175][T16910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3086'. [ 1084.454013][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3088'. [ 1084.576264][T16917] autofs4:pid:16917:autofs_fill_super: called with bogus options [ 1085.249617][T16926] loop1: detected capacity change from 0 to 512 [ 1085.317761][T16926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1085.396167][T16926] EXT4-fs (loop1): 1 truncate cleaned up [ 1085.458977][T16926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1086.531495][T16940] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1086.539049][T16940] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1086.627513][T15368] EXT4-fs (loop1): unmounting filesystem. [ 1087.007744][ T4325] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1087.283884][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 1087.354313][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 1087.368595][ T4325] usb 5-1: config 242 has an invalid interface number: 195 but max is 0 [ 1087.426135][ T4325] usb 5-1: config 242 has no interface number 0 [ 1087.450646][ T4325] usb 5-1: config 242 interface 195 has no altsetting 0 [ 1087.500197][ T4325] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 1087.515642][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.527458][ T4325] usb 5-1: Product: syz [ 1087.531775][ T4325] usb 5-1: Manufacturer: syz [ 1087.538938][ T4325] usb 5-1: SerialNumber: syz [ 1088.243056][T16977] ================================================================== [ 1088.251196][T16977] BUG: KASAN: global-out-of-bounds in dvb_device_open+0xe8/0x370 [ 1088.259141][T16977] Read of size 8 at addr ffffffff8b942a80 by task syz.1.3101/16977 [ 1088.267180][T16977] [ 1088.269532][T16977] CPU: 1 PID: 16977 Comm: syz.1.3101 Not tainted syzkaller #0 [ 1088.277070][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1088.287142][T16977] Call Trace: [ 1088.290428][T16977] [ 1088.293442][T16977] dump_stack_lvl+0x188/0x24e [ 1088.298273][T16977] ? read_lock_is_recursive+0x10/0x10 [ 1088.303735][T16977] ? show_regs_print_info+0x12/0x12 [ 1088.308957][T16977] ? load_image+0x400/0x400 [ 1088.313496][T16977] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1088.319036][T16977] ? __virt_addr_valid+0x188/0x540 [ 1088.324203][T16977] ? __virt_addr_valid+0x465/0x540 [ 1088.329322][T16977] ? dvb_device_open+0xe8/0x370 [ 1088.334182][T16977] print_report+0xa8/0x210 [ 1088.338605][T16977] kasan_report+0x10b/0x140 [ 1088.343143][T16977] ? schedule_preempt_disabled+0x20/0x20 [ 1088.348784][T16977] ? dvb_device_open+0xe8/0x370 [ 1088.353645][T16977] dvb_device_open+0xe8/0x370 [ 1088.358345][T16977] chrdev_open+0x5c5/0x6a0 [ 1088.362838][T16977] ? cd_forget+0x160/0x160 [ 1088.367257][T16977] ? fsnotify_perm+0x39b/0x550 [ 1088.372082][T16977] ? cd_forget+0x160/0x160 [ 1088.376498][T16977] do_dentry_open+0x7e9/0x10d0 [ 1088.381326][T16977] path_openat+0x2635/0x2ee0 [ 1088.385956][T16977] ? verify_lock_unused+0x140/0x140 [ 1088.391177][T16977] ? do_syscall_64+0x4c/0xa0 [ 1088.395782][T16977] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.401866][T16977] ? do_filp_open+0x430/0x430 [ 1088.406552][T16977] do_filp_open+0x1f1/0x430 [ 1088.411065][T16977] ? vfs_tmpfile+0x480/0x480 [ 1088.415682][T16977] ? _raw_spin_unlock+0x24/0x40 [ 1088.420537][T16977] ? alloc_fd+0x58f/0x630 [ 1088.424916][T16977] do_sys_openat2+0x150/0x4b0 [ 1088.429604][T16977] ? up_read+0x20/0x20 [ 1088.433679][T16977] ? do_sys_open+0xe0/0xe0 [ 1088.438098][T16977] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1088.444091][T16977] ? lock_chain_count+0x20/0x20 [ 1088.448961][T16977] __x64_sys_openat+0x135/0x160 [ 1088.453823][T16977] do_syscall_64+0x4c/0xa0 [ 1088.458286][T16977] ? clear_bhb_loop+0x60/0xb0 [ 1088.463057][T16977] ? clear_bhb_loop+0x60/0xb0 [ 1088.467750][T16977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.473690][T16977] RIP: 0033:0x7f99ae75d68e [ 1088.478208][T16977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1088.497959][T16977] RSP: 002b:00007f99af5a1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1088.506467][T16977] RAX: ffffffffffffffda RBX: 00007f99af5a26c0 RCX: 00007f99ae75d68e [ 1088.514476][T16977] RDX: 0000000000000002 RSI: 00007f99af5a1c00 RDI: ffffffffffffff9c [ 1088.522488][T16977] RBP: 00007f99af5a1c00 R08: 0000000000000000 R09: 0000000000000000 [ 1088.530471][T16977] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1088.538464][T16977] R13: 00007f99aea16038 R14: 00007f99aea15fa0 R15: 00007ffc588cd6e8 [ 1088.546630][T16977] [ 1088.549647][T16977] [ 1088.551962][T16977] The buggy address belongs to the variable: [ 1088.558024][T16977] .str+0x0/0x20 [ 1088.561737][T16977] [ 1088.564064][T16977] The buggy address belongs to the physical page: [ 1088.570555][T16977] page:ffffea00002e5080 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb942 [ 1088.580723][T16977] flags: 0xfff00000001000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1088.588667][T16977] raw: 00fff00000001000 ffffea00002e5088 ffffea00002e5088 0000000000000000 [ 1088.597255][T16977] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1088.605840][T16977] page dumped because: kasan: bad access detected [ 1088.612257][T16977] page_owner info is not present (never set?) [ 1088.618318][T16977] [ 1088.620635][T16977] Memory state around the buggy address: [ 1088.626344][T16977] ffffffff8b942980: 05 f9 f9 f9 00 00 00 01 f9 f9 f9 f9 00 00 00 00 [ 1088.634412][T16977] ffffffff8b942a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1088.642470][T16977] >ffffffff8b942a80: 04 f9 f9 f9 05 f9 f9 f9 05 f9 f9 f9 00 00 02 f9 [ 1088.650536][T16977] ^ [ 1088.654599][T16977] ffffffff8b942b00: f9 f9 f9 f9 07 f9 f9 f9 00 00 00 00 07 f9 f9 f9 [ 1088.662661][T16977] ffffffff8b942b80: 05 f9 f9 f9 05 f9 f9 f9 05 f9 f9 f9 00 00 00 00 [ 1088.670720][T16977] ================================================================== [ 1088.735251][T16977] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1088.742512][T16977] CPU: 0 PID: 16977 Comm: syz.1.3101 Not tainted syzkaller #0 [ 1088.750085][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1088.760159][T16977] Call Trace: [ 1088.763464][T16977] [ 1088.766415][T16977] dump_stack_lvl+0x188/0x24e [ 1088.771127][T16977] ? memcpy+0x3c/0x60 [ 1088.775233][T16977] ? show_regs_print_info+0x12/0x12 [ 1088.780485][T16977] ? load_image+0x400/0x400 [ 1088.785030][T16977] panic+0x2e5/0x730 [ 1088.788956][T16977] ? bpf_jit_dump+0xd0/0xd0 [ 1088.793502][T16977] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1088.799516][T16977] ? _raw_spin_unlock+0x40/0x40 [ 1088.804396][T16977] check_panic_on_warn+0x80/0xa0 [ 1088.809458][T16977] ? dvb_device_open+0xe8/0x370 [ 1088.814356][T16977] end_report+0x66/0x110 [ 1088.818645][T16977] kasan_report+0x118/0x140 [ 1088.823190][T16977] ? schedule_preempt_disabled+0x20/0x20 [ 1088.828950][T16977] ? dvb_device_open+0xe8/0x370 [ 1088.833849][T16977] dvb_device_open+0xe8/0x370 [ 1088.838570][T16977] chrdev_open+0x5c5/0x6a0 [ 1088.843026][T16977] ? cd_forget+0x160/0x160 [ 1088.847482][T16977] ? fsnotify_perm+0x39b/0x550 [ 1088.852281][T16977] ? cd_forget+0x160/0x160 [ 1088.856722][T16977] do_dentry_open+0x7e9/0x10d0 [ 1088.861514][T16977] path_openat+0x2635/0x2ee0 [ 1088.866140][T16977] ? verify_lock_unused+0x140/0x140 [ 1088.871345][T16977] ? do_syscall_64+0x4c/0xa0 [ 1088.875943][T16977] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.882016][T16977] ? do_filp_open+0x430/0x430 [ 1088.886715][T16977] do_filp_open+0x1f1/0x430 [ 1088.891230][T16977] ? vfs_tmpfile+0x480/0x480 [ 1088.895838][T16977] ? _raw_spin_unlock+0x24/0x40 [ 1088.900724][T16977] ? alloc_fd+0x58f/0x630 [ 1088.905077][T16977] do_sys_openat2+0x150/0x4b0 [ 1088.909769][T16977] ? up_read+0x20/0x20 [ 1088.913864][T16977] ? do_sys_open+0xe0/0xe0 [ 1088.918309][T16977] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1088.924301][T16977] ? lock_chain_count+0x20/0x20 [ 1088.929160][T16977] __x64_sys_openat+0x135/0x160 [ 1088.934023][T16977] do_syscall_64+0x4c/0xa0 [ 1088.938448][T16977] ? clear_bhb_loop+0x60/0xb0 [ 1088.943130][T16977] ? clear_bhb_loop+0x60/0xb0 [ 1088.947818][T16977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.953725][T16977] RIP: 0033:0x7f99ae75d68e [ 1088.958146][T16977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1088.977789][T16977] RSP: 002b:00007f99af5a1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1088.986210][T16977] RAX: ffffffffffffffda RBX: 00007f99af5a26c0 RCX: 00007f99ae75d68e [ 1088.994184][T16977] RDX: 0000000000000002 RSI: 00007f99af5a1c00 RDI: ffffffffffffff9c [ 1089.002157][T16977] RBP: 00007f99af5a1c00 R08: 0000000000000000 R09: 0000000000000000 [ 1089.010131][T16977] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1089.018102][T16977] R13: 00007f99aea16038 R14: 00007f99aea15fa0 R15: 00007ffc588cd6e8 [ 1089.026082][T16977] [ 1089.029373][T16977] Kernel Offset: disabled [ 1089.033719][T16977] Rebooting in 86400 seconds..