last executing test programs: 5m36.741958351s ago: executing program 0 (id=318): r0 = socket(0x2, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') pread64(r4, 0x0, 0x0, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r4, 0x6}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, 0x8) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$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") r6 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r6, 0x12) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x11, 0x0}) 5m34.940264513s ago: executing program 0 (id=320): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x48}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x130, 0x198, 0x0, {0xff0f000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) r7 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r7, 0x0, 0x0) 5m33.83641562s ago: executing program 0 (id=322): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, &(0x7f0000000280)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 5m32.432852483s ago: executing program 0 (id=325): syz_ublk_setup_io_uring(0x952, &(0x7f0000000280)={0x0, 0x48d8, 0x80, 0x1, 0x18b}, &(0x7f00000000c0), 0x0, &(0x7f0000000140)) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ftruncate(0xffffffffffffffff, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) ioctl$int_in(0xffffffffffffffff, 0xfcf6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) tkill(r4, 0x12) ptrace(0x4207, r4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x204000, 0x20) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 5m29.270678988s ago: executing program 0 (id=328): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') socket$alg(0x26, 0x5, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x2d, 0x1001, r4, 0x0) fanotify_mark(r5, 0x22, 0x40001017, r4, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0x541b, 0x0) 5m21.22242199s ago: executing program 0 (id=346): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0, 0x5, 0x0, 0x0, r1}) 5m5.803323268s ago: executing program 32 (id=346): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0, 0x5, 0x0, 0x0, r1}) 1m10.459880982s ago: executing program 1 (id=702): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1m5.959994229s ago: executing program 1 (id=706): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000280)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m0.682307185s ago: executing program 1 (id=711): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 58.939106527s ago: executing program 1 (id=713): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000640)=[{{&(0x7f0000000680)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x4) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20004850) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f023}) openat$binder_debug(0xffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0), 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000200)=0x104) readv(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/106, 0x6a}], 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x1006, 0x2, 0xcf7, 0x70}, 0x5, 0x2, 0x0, 0x2, 0x0, 0xc3}}) ioprio_set$uid(0x3, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x34, 0x10, 0xffffff1f, 0x10000000, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x7a55}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 54.055037803s ago: executing program 1 (id=715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) timerfd_create(0x9, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x59ea, 0xaf, &(0x7f0000000180)=""/175, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x60) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000001a000100aba22c08fbdbdf250a808005090000000000000008000200ac1414aa01905ac5397016a8b25551fec5b11dd61bef3e2765dc9fc89d57adf493b338ecc07586b2c5691890806ce1c4b749d69e5dcaa81b4d3c9227"], 0x24}}, 0x20000050) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) write$P9_RLERROR(r2, &(0x7f0000000000)=ANY=[], 0x11) 48.422714057s ago: executing program 1 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x48}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x130, 0x198, 0x0, {0xff0f000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) r6 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r6, 0x0, 0x0) 33.353271125s ago: executing program 33 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x48}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x130, 0x198, 0x0, {0xff0f000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) r6 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r6, 0x0, 0x0) 31.559733398s ago: executing program 2 (id=740): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r5, &(0x7f0000002240)=""/236, 0xec, 0x4eb) fsmount(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0xe, [[0x9ef8, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x1, 0x0, 0xfffffffe, 0x8001], [0x6, 0xba6, 0x100001, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {0x7, 0x100}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xa}, {0x8000000, 0x8f96}], '\x00', 0x1002}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001800010a00200000000000"], 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) r7 = fanotify_init(0x1a, 0x1) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r7, 0x1, 0x1023, r8, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 27.935119244s ago: executing program 2 (id=743): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socket$nl_route(0x10, 0x3, 0x0) socket(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000080)={[{@name={'name', 0x3d, 'user_.'}}, {@name={'name', 0x3d, 'name'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0xf0b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xf}, {0x5, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 27.768648618s ago: executing program 5 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) gettimeofday(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0xc0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x5, @private0, 0x9a6}}, [0xfffffffffffffff9, 0x2, 0xffffffffffffffff, 0x7fff, 0x5, 0x7, 0x100000000, 0xc, 0x7, 0xfffffffffffffff9, 0xffff, 0x0, 0x0, 0x7, 0x4]}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 26.42528219s ago: executing program 5 (id=746): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 18.749650663s ago: executing program 6 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0xc4000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000b000000cc00"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 18.748421983s ago: executing program 5 (id=758): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r5, &(0x7f0000002240)=""/236, 0xec, 0x4eb) fsmount(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0xe, [[0x9ef8, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x1, 0x0, 0xfffffffe, 0x8001], [0x6, 0xba6, 0x100001, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {0x7, 0x100}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xa}, {0x8000000, 0x8f96}], '\x00', 0x1002}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001800010a00200000000000"], 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) r7 = fanotify_init(0x1a, 0x1) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r7, 0x1, 0x1023, r8, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 18.747478223s ago: executing program 3 (id=759): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x100, 0x140) ioctl$DVB_DEMUX_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f00000003c0)={0x9, 0x0, r0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfdef) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) inotify_init1(0x0) unshare(0x400) preadv(0xffffffffffffffff, 0x0, 0x0, 0xebc, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x288, "f9ab7c3dc1890132b154b281c1a0b7fd12285b513206ee063787faa4d7c8f914", 0x34324142}) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80, &(0x7f0000002500)=ANY=[], 0x1, 0x1f9, &(0x7f0000000180)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r5, 0xe0ffff, 0x19, 0x3) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) 18.735598773s ago: executing program 2 (id=760): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0xe) 14.812966517s ago: executing program 6 (id=749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xa) timerfd_create(0x9, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x59ea, 0xaf, &(0x7f0000000180)=""/175, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x60) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000001a000100aba22c08fbdbdf250a808005090000000000000008000200ac1414aa01905ac5397016a8b25551fec5b11dd61bef3e2765dc9fc89d57adf493b338ecc07586b2c5691890806ce1c4b749d69e5dcaa81b4d3c9227"], 0x24}}, 0x20000050) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) write$P9_RLERROR(r2, &(0x7f0000000000)=ANY=[], 0x11) 14.812703666s ago: executing program 3 (id=750): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000080)={0x8, 0x1, 0x9, 0x52, 0xb, 0x8001, 0xc, 0x9c80}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 14.808819497s ago: executing program 5 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet6(0xa, 0x800, 0xfff7fffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8442, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) epoll_create1(0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_clone(0x14100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) capset(0x0, &(0x7f0000000380)={0x1, 0xd, 0x4, 0x3, 0x8}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) 14.219191431s ago: executing program 4 (id=752): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0xc0402, 0x80) openat(r0, 0x0, 0x0, 0xe0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) timer_gettime(0x0, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000240)) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x162, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000740)={{0xa, 0x0, 0x9, 0xc46, 'syz0\x00', 0x4001}, 0x6, 0x200, 0x4, 0x0, 0x0, 0xc, 'syz0\x00', 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1, 0x2}, &(0x7f0000000140)) close(0x3) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 9.600931051s ago: executing program 6 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100, 0x2280}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7f, 0xb}}]}]}]}, 0x48}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x308, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x130, 0x198, 0x0, {0xff0f000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) r6 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r6, 0x0, 0x0) 9.459039694s ago: executing program 3 (id=754): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18e0094}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9.083585503s ago: executing program 4 (id=755): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8401, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r10, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0xfffffffb, 0x9, 0xeb, 0xfffffffe, 0xc0, 0x6bd6, 0x2, 0x9}}) 8.714744222s ago: executing program 2 (id=756): syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x30000000}) accept$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000040)={0xf, 0x2, 'client1\x00', 0x4, "70067ad327c699d3", "78a45e16571ec69bc5afc81e679e50b0d40d6a65820e48ce9b168132d17e5813", 0xffffff2a, 0x7fff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 7.430885773s ago: executing program 4 (id=757): syz_emit_ethernet(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) r1 = gettid() migrate_pages(r1, 0x3, &(0x7f0000000100)=0x1, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) open_tree(0xffffffffffffffff, 0x0, 0x800) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 5.229444995s ago: executing program 5 (id=762): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x2, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0xc, 0x0) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000002200)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r5, r6, 0x3d5, 0xad}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006900)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x9, 0x0, 0x2, 0x3, {0xfffffffffffffffd, 0x1, 0xfffffffffffffffd, 0xfc4, 0x124, 0x4749, 0x6, 0x9, 0x9, 0x8000, 0x800, r5, r6, 0x9, 0x2}}, {0x0, 0x12}}}, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f00000006c0)={0x50, 0x0, r4, {0x7, 0x26, 0x4, 0x12885b10, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x10, 0x11fff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.229004825s ago: executing program 4 (id=764): socket$kcm(0x10, 0x7, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r2 = open_tree(r0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) rseq(0x0, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0x40000004, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.938792812s ago: executing program 2 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0xc4000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000b000000cc00"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.817623908s ago: executing program 3 (id=766): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socket$nl_route(0x10, 0x3, 0x0) socket(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000080)={[{@name={'name', 0x3d, 'user_.'}}, {@name={'name', 0x3d, 'name'}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xc}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0xf0b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xf}, {0x5, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.674258256s ago: executing program 3 (id=767): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, &(0x7f0000000280)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.649011466s ago: executing program 4 (id=768): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000200)={@remote, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "e9f49a6a81e72a6b"}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x14) shutdown(r3, 0x1) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xb, 0x1, 'TCPMSS\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "ac1a91d256ebf87b31"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 1.624130011s ago: executing program 3 (id=769): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007d40)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x7, 0x4, 0x67, @dev={0xfe, 0x80, '\x00', 0x33}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1, 0x20, 0x3fb, 0xffe}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./cgroup.cpu/cpuset.cpus/file0\x00', 0x210000, &(0x7f00000004c0)={[{@init_itable}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@data_writeback}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") socket$packet(0x11, 0x2, 0x300) chmod(&(0x7f0000000080)='./file1\x00', 0x8) 1.014823526s ago: executing program 2 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7f8000, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000003440)=""/4096) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x6) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 108.508056ms ago: executing program 4 (id=771): r0 = gettid() sched_setscheduler(r0, 0x3, &(0x7f0000000180)=0x7ff) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x4, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffa, 0x0, 0xffffffeb, 0x2004, 0x3, 0x7, 0xf253, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x9537, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x5, 0x2, 0x5, 0x2000000e, 0x2, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x45cb, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x9, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x20002, 0x0, 0x2, 0x9, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x5, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x8001, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0xffff0000, 0x9, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x8001000, 0x80040101, 0x81, 0x8, 0x6, 0x200003, 0xfffffffe, 0x5, 0x80, 0x9, 0x8001, 0x12000, 0x4, 0x7, 0x400004, 0x3, 0x9, 0x3, 0x8, 0xb3d, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100dffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x8003, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x7, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x481, 0x0, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xffffffa3, 0x136, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0)) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports/1\x00', 0x200) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) 0s ago: executing program 5 (id=772): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0xc4000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000b000000cc00"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) kernel console output (not intermixed with test programs): tman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.380336][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.391132][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.401765][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.412813][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.425535][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.438985][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.450620][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.462204][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.473126][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.484396][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.495260][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.505922][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.517106][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 91.527375][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 91.529467][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 91.544349][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.555946][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.570427][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.581184][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.592268][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 91.592281][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 91.605322][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.616075][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.634142][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.646239][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.662925][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.673699][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.710537][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.730514][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.742011][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.761718][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.780264][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.794727][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.806528][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.816903][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.827713][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.840836][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.849555][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.862059][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.873045][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.887758][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.898191][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.920617][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.936713][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.948094][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.965909][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.991846][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.045327][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.086842][ T7] cfg80211: failed to load regulatory.db [ 92.139782][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.148692][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.173351][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.195105][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.209930][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.242953][ T4369] input: syz1 as /devices/virtual/input/input5 [ 92.809192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 92.829183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 92.849191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 92.869186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 92.879189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 92.889185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 92.899183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 92.909188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 92.919182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 92.929182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 92.993725][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.120311][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.178086][ T4372] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 93.198295][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.226098][ T4373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.251251][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.283222][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.392037][ T4370] bridge0: port 3(syz_tun) entered blocking state [ 93.399117][ T4370] bridge0: port 3(syz_tun) entered disabled state [ 93.414701][ T4370] device syz_tun entered promiscuous mode [ 93.424189][ T4370] bridge0: port 3(syz_tun) entered blocking state [ 93.431055][ T4370] bridge0: port 3(syz_tun) entered forwarding state [ 93.496529][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.549655][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.697699][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.721426][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.916129][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.966345][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.005987][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.036103][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.097730][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.108012][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.684657][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.725877][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.841177][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.848695][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.902977][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.973927][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.019406][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.096939][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.125431][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.185330][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.203991][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.222910][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.303472][ T4395] process 'syz.0.1' launched './file1' with NULL argv: empty string added [ 99.327195][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 99.337754][ T4290] CPU: 1 PID: 4290 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 99.345379][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.355505][ T4290] Workqueue: hci3 hci_rx_work [ 99.360294][ T4290] Call Trace: [ 99.363617][ T4290] [ 99.366590][ T4290] dump_stack_lvl+0x188/0x24e [ 99.371328][ T4290] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 99.377055][ T4290] ? show_regs_print_info+0x12/0x12 [ 99.382498][ T4290] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 99.388531][ T4290] sysfs_create_dir_ns+0x26a/0x290 [ 99.393747][ T4290] ? __lock_acquire+0x7c40/0x7c40 [ 99.398867][ T4290] ? sysfs_warn_dup+0xa0/0xa0 [ 99.403666][ T4290] ? preempt_schedule_thunk+0x16/0x18 [ 99.409142][ T4290] kobject_add_internal+0x617/0xca0 [ 99.414534][ T4290] kobject_add+0x160/0x230 [ 99.419018][ T4290] ? kobject_init+0x1c0/0x1c0 [ 99.423776][ T4290] ? __raw_spin_lock_init+0x41/0x100 [ 99.429152][ T4290] ? klist_children_get+0x50/0x50 [ 99.435021][ T4290] ? get_device_parent+0x121/0x3e0 [ 99.440213][ T4290] device_add+0x470/0x1050 [ 99.444729][ T4290] hci_conn_add_sysfs+0xd1/0x1e0 [ 99.449788][ T4290] le_conn_complete_evt+0xfac/0x15c0 [ 99.455201][ T4290] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 99.461622][ T4290] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 99.467310][ T4290] ? mutex_unlock+0x10/0x10 [ 99.472070][ T4290] ? skb_pull_data+0xec/0x1f0 [ 99.476798][ T4290] hci_le_conn_complete_evt+0x183/0x440 [ 99.482410][ T4290] ? hci_remote_host_features_evt+0x230/0x230 [ 99.488526][ T4290] hci_event_packet+0x7b3/0x1290 [ 99.493518][ T4290] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 99.499212][ T4290] ? hci_conn_valid+0x220/0x220 [ 99.504120][ T4290] ? kcov_remote_start+0x1b3/0x810 [ 99.509311][ T4290] ? hci_send_to_monitor+0x9c/0x4a0 [ 99.514571][ T4290] hci_rx_work+0x3eb/0xd40 [ 99.519138][ T4290] ? process_one_work+0x7b4/0x1160 [ 99.524477][ T4290] process_one_work+0x8ab/0x1160 [ 99.529507][ T4290] ? worker_detach_from_pool+0x240/0x240 [ 99.535199][ T4290] ? _raw_spin_lock_irq+0xb7/0xf0 [ 99.540290][ T4290] ? _raw_spin_lock_irqsave+0x100/0x100 [ 99.545981][ T4290] ? wq_worker_running+0x97/0x190 [ 99.551069][ T4290] worker_thread+0xaf5/0x12a0 [ 99.555830][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 99.561786][ T4290] kthread+0x29d/0x330 [ 99.565939][ T4290] ? worker_clr_flags+0x1a0/0x1a0 [ 99.571012][ T4290] ? kthread_blkcg+0xd0/0xd0 [ 99.575647][ T4290] ret_from_fork+0x1f/0x30 [ 99.580133][ T4290] [ 99.621868][ T4392] Bluetooth: MGMT ver 1.22 [ 99.673669][ T4290] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 99.690395][ T4290] Bluetooth: hci3: failed to register connection device [ 99.916478][ T4394] loop2: detected capacity change from 0 to 1024 [ 100.142262][ T4399] loop4: detected capacity change from 0 to 8 [ 100.177820][ T4399] ======================================================= [ 100.177820][ T4399] WARNING: The mand mount option has been deprecated and [ 100.177820][ T4399] and is ignored by this kernel. Remove the mand [ 100.177820][ T4399] option from the mount to silence this warning. [ 100.177820][ T4399] ======================================================= [ 102.295495][ T4399] unable to read inode lookup table [ 106.049389][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 106.230330][ T4447] ubi0: attaching mtd0 [ 106.245537][ T4447] ubi0: scanning is finished [ 106.250717][ T4447] ubi0: empty MTD device detected [ 106.791664][ T4447] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 106.799595][ T4447] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 106.808156][ T4447] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 106.816676][ T4447] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 106.825043][ T4447] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 106.831961][ T4447] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 106.840772][ T4447] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2202572698 [ 106.850937][ T4447] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 106.994126][ T4449] ubi0: background thread "ubi_bgt0d" started, PID 4449 [ 107.026864][ T4446] device syzkaller0 entered promiscuous mode [ 107.069859][ T4450] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17'. [ 108.270627][ T4446] tipc: Started in network mode [ 108.275717][ T4446] tipc: Node identity 767f140ce4d8, cluster identity 4711 [ 108.319824][ T4446] tipc: Enabled bearer , priority 0 [ 108.404396][ T4444] tipc: Resetting bearer [ 108.454507][ T4460] loop2: detected capacity change from 0 to 1024 [ 108.574346][ T4444] tipc: Disabling bearer [ 108.601296][ T4464] loop4: detected capacity change from 0 to 128 [ 108.940662][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 108.952474][ T4290] CPU: 1 PID: 4290 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 108.960133][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.970283][ T4290] Workqueue: hci0 hci_rx_work [ 108.975032][ T4290] Call Trace: [ 108.978351][ T4290] [ 108.981330][ T4290] dump_stack_lvl+0x188/0x24e [ 108.986073][ T4290] ? show_regs_print_info+0x12/0x12 [ 108.991332][ T4290] ? load_image+0x410/0x410 [ 108.995910][ T4290] sysfs_create_dir_ns+0x26a/0x290 [ 109.001186][ T4290] ? __lock_acquire+0x7c40/0x7c40 [ 109.006272][ T4290] ? sysfs_warn_dup+0xa0/0xa0 [ 109.011099][ T4290] ? do_raw_spin_unlock+0x11d/0x230 [ 109.016349][ T4290] kobject_add_internal+0x617/0xca0 [ 109.021600][ T4290] kobject_add+0x160/0x230 [ 109.026077][ T4290] ? kobject_init+0x1c0/0x1c0 [ 109.031084][ T4290] ? __raw_spin_lock_init+0x41/0x100 [ 109.036413][ T4290] ? klist_children_get+0x50/0x50 [ 109.041533][ T4290] ? get_device_parent+0x121/0x3e0 [ 109.046849][ T4290] device_add+0x470/0x1050 [ 109.051359][ T4290] hci_conn_add_sysfs+0xd1/0x1e0 [ 109.056478][ T4290] le_conn_complete_evt+0xfac/0x15c0 [ 109.062371][ T4290] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 109.068813][ T4290] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 109.074539][ T4290] ? mutex_unlock+0x10/0x10 [ 109.079190][ T4290] ? skb_pull_data+0xec/0x1f0 [ 109.083959][ T4290] hci_le_conn_complete_evt+0x183/0x440 [ 109.089669][ T4290] ? hci_remote_host_features_evt+0x230/0x230 [ 109.095793][ T4290] hci_event_packet+0x7b3/0x1290 [ 109.101049][ T4290] ? lock_chain_count+0x20/0x20 [ 109.105977][ T4290] ? hci_conn_valid+0x220/0x220 [ 109.111030][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.116997][ T4290] ? kcov_remote_start+0x50f/0x810 [ 109.122260][ T4290] ? lockdep_hardirqs_on+0x94/0x140 [ 109.127521][ T4290] ? hci_send_to_monitor+0x9c/0x4a0 [ 109.132775][ T4290] hci_rx_work+0x3eb/0xd40 [ 109.137257][ T4290] ? _raw_spin_unlock+0x40/0x40 [ 109.142189][ T4290] ? process_one_work+0x7b4/0x1160 [ 109.147389][ T4290] process_one_work+0x8ab/0x1160 [ 109.152391][ T4290] ? worker_detach_from_pool+0x240/0x240 [ 109.158172][ T4290] ? _raw_spin_lock_irq+0xb7/0xf0 [ 109.163267][ T4290] ? _raw_spin_lock_irqsave+0x100/0x100 [ 109.168887][ T4290] ? wq_worker_running+0x97/0x190 [ 109.173989][ T4290] worker_thread+0xaf5/0x12a0 [ 109.178742][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.184885][ T4290] kthread+0x29d/0x330 [ 109.189104][ T4290] ? worker_clr_flags+0x1a0/0x1a0 [ 109.194188][ T4290] ? kthread_blkcg+0xd0/0xd0 [ 109.198855][ T4290] ret_from_fork+0x1f/0x30 [ 109.203443][ T4290] [ 109.244350][ T4290] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 109.259997][ T4290] Bluetooth: hci0: failed to register connection device [ 110.225616][ T4469] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 112.971447][ T4489] loop0: detected capacity change from 0 to 8 [ 113.019657][ T4489] unable to read inode lookup table [ 113.053448][ T4496] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.834032][ T4496] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 115.450568][ T4513] ubi: mtd0 is already attached to ubi0 [ 116.130883][ T4506] sctp: failed to load transform for md5: -2 [ 118.767708][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 118.779362][ T4290] CPU: 0 PID: 4290 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 118.786998][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.797130][ T4290] Workqueue: hci1 hci_rx_work [ 118.802034][ T4290] Call Trace: [ 118.805368][ T4290] [ 118.808343][ T4290] dump_stack_lvl+0x188/0x24e [ 118.813097][ T4290] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 118.818953][ T4290] ? show_regs_print_info+0x12/0x12 [ 118.824353][ T4290] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 118.830170][ T4290] sysfs_create_dir_ns+0x26a/0x290 [ 118.835350][ T4290] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 118.841044][ T4290] ? sysfs_warn_dup+0xa0/0xa0 [ 118.845798][ T4290] ? kobject_add_internal+0x602/0xca0 [ 118.851243][ T4290] kobject_add_internal+0x617/0xca0 [ 118.856508][ T4290] kobject_add+0x160/0x230 [ 118.861160][ T4290] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 118.867057][ T4290] ? kobject_init+0x1c0/0x1c0 [ 118.871811][ T4290] ? __raw_spin_lock_init+0x41/0x100 [ 118.877271][ T4290] ? klist_children_get+0x50/0x50 [ 118.882391][ T4290] ? get_device_parent+0x121/0x3e0 [ 118.887622][ T4290] device_add+0x470/0x1050 [ 118.892120][ T4290] hci_conn_add_sysfs+0xd1/0x1e0 [ 118.897131][ T4290] le_conn_complete_evt+0xfac/0x15c0 [ 118.902499][ T4290] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 118.908903][ T4290] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 118.914601][ T4290] ? mutex_unlock+0x10/0x10 [ 118.919146][ T4290] ? skb_pull_data+0xec/0x1f0 [ 118.923883][ T4290] hci_le_conn_complete_evt+0x183/0x440 [ 118.929494][ T4290] ? hci_remote_host_features_evt+0x230/0x230 [ 118.935606][ T4290] hci_event_packet+0x7b3/0x1290 [ 118.940599][ T4290] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 118.946317][ T4290] ? hci_conn_valid+0x220/0x220 [ 118.951224][ T4290] ? kcov_remote_start+0x1b3/0x810 [ 118.956386][ T4290] ? hci_send_to_monitor+0x9c/0x4a0 [ 118.961644][ T4290] hci_rx_work+0x3eb/0xd40 [ 118.966158][ T4290] ? process_one_work+0x7b4/0x1160 [ 118.971413][ T4290] process_one_work+0x8ab/0x1160 [ 118.976425][ T4290] ? worker_detach_from_pool+0x240/0x240 [ 118.982314][ T4290] ? _raw_spin_lock_irq+0xb7/0xf0 [ 118.987409][ T4290] ? _raw_spin_lock_irqsave+0x100/0x100 [ 118.993013][ T4290] ? wq_worker_running+0x97/0x190 [ 118.998109][ T4290] worker_thread+0xaf5/0x12a0 [ 119.002855][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 119.008834][ T4290] kthread+0x29d/0x330 [ 119.012966][ T4290] ? worker_clr_flags+0x1a0/0x1a0 [ 119.018038][ T4290] ? kthread_blkcg+0xd0/0xd0 [ 119.022675][ T4290] ret_from_fork+0x1f/0x30 [ 119.027276][ T4290] [ 119.129870][ T4543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'. [ 119.724984][ T4290] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 119.747903][ T4290] Bluetooth: hci1: failed to register connection device [ 120.760978][ T4553] device syzkaller0 entered promiscuous mode [ 121.101491][ T4553] tipc: Started in network mode [ 121.106452][ T4553] tipc: Node identity 52970750f34, cluster identity 4711 [ 121.692349][ T4553] tipc: Enabled bearer , priority 0 [ 121.922410][ T4562] bridge0: port 3(syz_tun) entered blocking state [ 121.929306][ T4562] bridge0: port 3(syz_tun) entered disabled state [ 121.941803][ T4562] device syz_tun entered promiscuous mode [ 121.948826][ T4562] bridge0: port 3(syz_tun) entered blocking state [ 121.955520][ T4562] bridge0: port 3(syz_tun) entered forwarding state [ 122.012027][ T4562] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 122.161963][ T4551] tipc: Resetting bearer [ 122.978788][ T4551] tipc: Disabling bearer [ 123.483688][ T4320] tipc: Node number set to 2715223888 [ 124.203264][ T4580] syz.1.30 (4580) used greatest stack depth: 17744 bytes left [ 125.383387][ T4574] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 125.856955][ T4590] siw: device registration error -23 [ 125.930696][ T27] audit: type=1800 audit(1788275568.391:2): pid=4590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="attr_allow_any_host" dev="configfs" ino=34885 res=0 errno=0 [ 125.955849][ T4590] nvmet: adding nsid 1 to subsystem testnqn [ 126.848122][ T27] audit: type=1800 audit(1788275569.301:3): pid=4590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="addr_trtype" dev="configfs" ino=34891 res=0 errno=0 [ 126.899437][ T27] audit: type=1800 audit(1788275569.341:4): pid=4590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.46" name="addr_adrfam" dev="configfs" ino=34892 res=0 errno=0 [ 127.197803][ T4590] nvmet: transport type 0 not supported [ 127.278740][ T4604] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.287962][ T4604] overlayfs: missing 'lowerdir' [ 129.829408][ T4323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.984865][ T4618] loop3: detected capacity change from 0 to 1024 [ 132.574691][ T4635] bridge0: port 3(syz_tun) entered blocking state [ 132.574955][ T4635] bridge0: port 3(syz_tun) entered disabled state [ 132.588865][ T4635] device syz_tun entered promiscuous mode [ 132.590322][ T4635] bridge0: port 3(syz_tun) entered blocking state [ 132.590913][ T4635] bridge0: port 3(syz_tun) entered forwarding state [ 132.729934][ T4635] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 132.871690][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.878330][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.823717][ T4649] loop1: detected capacity change from 0 to 32768 [ 135.056633][ T4649] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.60 (4649) [ 135.168329][ T4649] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 135.180256][ T4649] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 135.190495][ T4649] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.200642][ T4649] BTRFS info (device loop1): use zstd compression, level 3 [ 135.207980][ T4649] BTRFS info (device loop1): force clearing of disk cache [ 135.215379][ T4649] BTRFS info (device loop1): enabling disk space caching [ 135.223269][ T4649] BTRFS info (device loop1): disk space caching is enabled [ 135.837412][ T4649] BTRFS info (device loop1): enabling ssd optimizations [ 135.864614][ T4649] BTRFS info (device loop1): rebuilding free space tree [ 135.921787][ T4649] BTRFS info (device loop1): disabling free space tree [ 135.928969][ T4649] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.939262][ T4649] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.219966][ T4677] loop3: detected capacity change from 0 to 128 [ 136.619544][ T4681] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 139.466040][ T4274] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 139.612451][ T4695] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.513983][ T4707] loop3: detected capacity change from 0 to 512 [ 140.526345][ T4707] EXT4-fs: inline encryption not supported [ 140.574739][ T4707] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 140.660742][ T4711] gfs2: not a GFS2 filesystem [ 140.683648][ T4711] hpfs: Bad magic ... probably not HPFS [ 140.742871][ T4707] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.308913][ T4707] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 141.475136][ T4707] EXT4-fs (loop3): 1 truncate cleaned up [ 141.485261][ T4707] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 143.691260][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 143.754475][ T4732] bridge0: port 3(syz_tun) entered blocking state [ 143.761288][ T4732] bridge0: port 3(syz_tun) entered disabled state [ 143.773272][ T4732] device syz_tun entered promiscuous mode [ 143.781783][ T4732] bridge0: port 3(syz_tun) entered blocking state [ 143.788387][ T4732] bridge0: port 3(syz_tun) entered forwarding state [ 143.852887][ T4732] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 146.941828][ T4759] loop2: detected capacity change from 0 to 32768 [ 146.956791][ T4759] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.77 (4759) [ 147.039386][ T4759] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 147.049724][ T4759] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 147.058513][ T4759] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 147.069305][ T4759] BTRFS info (device loop2): use zstd compression, level 3 [ 147.076844][ T4759] BTRFS info (device loop2): force clearing of disk cache [ 147.084073][ T4759] BTRFS info (device loop2): enabling disk space caching [ 147.091193][ T4759] BTRFS info (device loop2): disk space caching is enabled [ 148.226942][ T4759] BTRFS info (device loop2): enabling ssd optimizations [ 148.244568][ T4759] BTRFS info (device loop2): rebuilding free space tree [ 148.304592][ T4759] BTRFS info (device loop2): disabling free space tree [ 148.305785][ T4759] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.306403][ T4759] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.859311][ T4794] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 148.945535][ T4796] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 149.038026][ T4797] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 149.903692][ T4285] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 155.251477][ T4817] tty tty2: ldisc open failed (-12), clearing slot 1 [ 158.237230][ T4838] loop1: detected capacity change from 0 to 4096 [ 158.465090][ T4842] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.278854][ T4843] loop3: detected capacity change from 0 to 1024 [ 159.997258][ T4852] loop2: detected capacity change from 0 to 1024 [ 160.731941][ T4854] ubi: mtd0 is already attached to ubi0 [ 160.763637][ T4368] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.396168][ T4290] Bluetooth: hci1: failed to read key size for handle 200 [ 171.258880][ T4918] netlink: 'syz.2.106': attribute type 2 has an invalid length. [ 171.286935][ T4918] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.106'. [ 171.309214][ T4361] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 175.403634][ T4943] loop0: detected capacity change from 0 to 1024 [ 182.263623][ T4984] loop0: detected capacity change from 0 to 1024 [ 185.704972][ T4349] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.199268][ T4342] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 186.399272][ T4342] usb 4-1: Using ep0 maxpacket: 16 [ 186.417862][ T4342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.442245][ T4342] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 186.465390][ T4342] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 186.477537][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 186.494036][ T4342] usb 4-1: Product: syz [ 186.498512][ T4342] usb 4-1: Manufacturer: syz [ 186.504806][ T4342] usb 4-1: SerialNumber: syz [ 186.524719][ T4342] usb 4-1: config 0 descriptor?? [ 186.599290][ T4349] usb 5-1: device descriptor read/64, error -71 [ 186.774734][ T4719] usb 4-1: USB disconnect, device number 2 [ 186.869303][ T4349] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 187.059282][ T4349] usb 5-1: Using ep0 maxpacket: 16 [ 187.069689][ T4349] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.089043][ T4349] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.122782][ T4349] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 187.139175][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 187.147343][ T4349] usb 5-1: Product: syz [ 187.169238][ T4349] usb 5-1: Manufacturer: syz [ 187.173982][ T4349] usb 5-1: SerialNumber: syz [ 187.190063][ T4349] usb 5-1: config 0 descriptor?? [ 187.403053][ T4342] usb 5-1: USB disconnect, device number 3 [ 188.084122][ T4290] Bluetooth: hci3: unexpected subevent 0x1a length: 30 > 6 [ 193.085806][ T5048] loop0: detected capacity change from 0 to 16 [ 193.129024][ T5048] erofs: (device loop0): mounted with root inode @ nid 36. [ 193.335397][ T4411] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.448557][ T5050] loop1: detected capacity change from 0 to 1024 [ 193.668473][ T4368] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.315142][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.315544][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.459236][ T4349] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 195.219200][ T4349] usb 3-1: Using ep0 maxpacket: 16 [ 195.221502][ T4349] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.221564][ T4349] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 195.224263][ T4349] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 195.224296][ T4349] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 195.224320][ T4349] usb 3-1: Product: syz [ 195.224337][ T4349] usb 3-1: Manufacturer: syz [ 195.224354][ T4349] usb 3-1: SerialNumber: syz [ 195.228695][ T4349] usb 3-1: config 0 descriptor?? [ 195.463311][ T4710] usb 3-1: USB disconnect, device number 2 [ 195.778484][ T5080] gadgetfs: bound to dummy_udc driver [ 196.059392][ T4710] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 196.062212][ C1] gadgetfs: connected [ 196.063775][ T4710] gadgetfs: disconnected [ 196.239740][ C1] gadgetfs: connected [ 196.243861][ T4710] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 196.243967][ T4710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 196.244031][ T4710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.594540][ T5075] gadgetfs: suspended from state 3 [ 196.594824][ T5075] gadgetfs: disconnected [ 196.687422][ T4710] usb 1-1: can't set config #1, error -71 [ 196.693066][ T4710] usb 1-1: USB disconnect, device number 3 [ 197.190049][ T4710] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 197.248917][ T5073] tty tty1: ldisc open failed (-12), clearing slot 0 [ 197.379328][ T4710] usb 1-1: Using ep0 maxpacket: 16 [ 197.386684][ T4710] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.407830][ T4710] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.455882][ T4710] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 197.502540][ T4710] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 197.526714][ T4710] usb 1-1: Product: syz [ 197.538181][ T5091] loop2: detected capacity change from 0 to 1024 [ 197.545734][ T4710] usb 1-1: Manufacturer: syz [ 197.556074][ T4710] usb 1-1: SerialNumber: syz [ 197.588151][ T4710] usb 1-1: config 0 descriptor?? [ 200.702186][ T4349] usb 1-1: USB disconnect, device number 4 [ 207.020851][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 207.020873][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 207.026935][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 207.035530][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 209.315856][ T5150] loop2: detected capacity change from 0 to 1024 [ 209.434854][ T5148] loop4: detected capacity change from 0 to 1024 [ 210.017310][ T5153] loop2: detected capacity change from 0 to 1024 [ 211.799342][ T4349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 212.024772][ T4349] usb 2-1: Using ep0 maxpacket: 16 [ 212.032059][ T4349] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.092060][ T4349] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.307585][ T4349] usb 2-1: string descriptor 0 read error: -71 [ 212.322835][ T4349] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 212.359265][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 212.390972][ T4349] usb 2-1: config 0 descriptor?? [ 212.399425][ T4349] usb 2-1: can't set config #0, error -71 [ 212.420282][ T4349] usb 2-1: USB disconnect, device number 3 [ 212.566216][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 212.587799][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 212.624878][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 212.640949][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 212.654907][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 212.667881][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 212.727649][ T5170] overlayfs: missing 'lowerdir' [ 212.738942][ T5167] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 216.944318][ T5196] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.953244][ T5196] overlayfs: missing 'lowerdir' [ 218.505906][ T5194] loop3: detected capacity change from 0 to 1024 [ 218.718820][ T4411] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.888193][ T5202] loop2: detected capacity change from 0 to 1024 [ 222.035144][ T5223] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 223.879295][ T4803] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 224.119486][ T4803] usb 3-1: Using ep0 maxpacket: 16 [ 224.776043][ T4803] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 224.794723][ T4803] usb 3-1: can't read configurations, error -71 [ 226.182744][ T5247] loop0: detected capacity change from 0 to 1024 [ 226.193228][ T5244] loop3: detected capacity change from 0 to 1024 [ 226.278541][ T5250] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 226.287417][ T5250] overlayfs: missing 'lowerdir' [ 228.954881][ T5255] loop1: detected capacity change from 0 to 1024 [ 229.171023][ T5259] Zero length message leads to an empty skb [ 230.338916][ T5265] loop2: detected capacity change from 0 to 256 [ 232.489615][ T5274] loop0: detected capacity change from 0 to 1024 [ 232.591905][ T5279] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.810708][ T5299] loop4: detected capacity change from 0 to 16 [ 234.839168][ T4710] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 236.519234][ T4710] usb 3-1: Using ep0 maxpacket: 16 [ 236.784697][ T4710] usb 3-1: device descriptor read/all, error -71 [ 238.222359][ T5312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.215'. [ 240.316621][ T5321] loop2: detected capacity change from 0 to 1024 [ 242.048725][ T5337] loop2: detected capacity change from 0 to 2048 [ 242.149799][ T5337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.177700][ T5364] loop3: detected capacity change from 0 to 128 [ 245.958690][ T5364] FAT-fs (loop3): Directory bread(block 414) failed [ 245.965846][ T5364] FAT-fs (loop3): Directory bread(block 415) failed [ 245.972671][ T5364] FAT-fs (loop3): Directory bread(block 416) failed [ 245.979392][ T5364] FAT-fs (loop3): Directory bread(block 417) failed [ 245.987083][ T5364] FAT-fs (loop3): Directory bread(block 418) failed [ 245.993882][ T5364] FAT-fs (loop3): Directory bread(block 419) failed [ 246.002191][ T5364] FAT-fs (loop3): Directory bread(block 420) failed [ 246.008931][ T5364] FAT-fs (loop3): Directory bread(block 421) failed [ 246.137367][ T5368] loop1: detected capacity change from 0 to 1024 [ 249.028998][ T5386] loop1: detected capacity change from 0 to 1024 [ 249.329244][ T4804] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 249.856332][ T5396] loop0: detected capacity change from 0 to 8192 [ 249.864556][ T4804] usb 4-1: Using ep0 maxpacket: 8 [ 249.872273][ T4804] usb 4-1: config 0 has no interfaces? [ 249.878743][ T4804] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 249.888402][ T4804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.898737][ T4804] usb 4-1: config 0 descriptor?? [ 252.245598][ T4361] usb 4-1: USB disconnect, device number 3 [ 252.637708][ T5406] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 252.647511][ T5406] overlayfs: missing 'lowerdir' [ 253.544230][ T5409] loop3: detected capacity change from 0 to 1024 [ 253.713295][ T5412] loop2: detected capacity change from 0 to 1024 [ 255.729396][ T5422] loop4: detected capacity change from 0 to 1024 [ 255.752202][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.758567][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.367476][ T5451] loop2: detected capacity change from 0 to 1024 [ 260.467811][ T5275] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.214231][ T4324] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 262.231737][ T5464] loop2: detected capacity change from 0 to 1024 [ 262.429249][ T4324] usb 2-1: Using ep0 maxpacket: 16 [ 262.436564][ T4324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.617372][ T4324] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.485037][ T5473] loop0: detected capacity change from 0 to 1024 [ 263.781755][ T4324] usb 2-1: string descriptor 0 read error: -71 [ 263.789731][ T4324] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 263.799047][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 264.526878][ T5275] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.582909][ T4324] usb 2-1: config 0 descriptor?? [ 264.611409][ T4324] usb 2-1: can't set config #0, error -71 [ 264.658760][ T4324] usb 2-1: USB disconnect, device number 4 [ 268.222709][ T5501] loop3: detected capacity change from 0 to 1024 [ 268.374160][ T5275] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.562557][ T5529] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 272.571567][ T5529] overlayfs: missing 'lowerdir' [ 275.398249][ T5549] loop0: detected capacity change from 0 to 1024 [ 275.606053][ T5275] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.937981][ T5570] loop1: detected capacity change from 0 to 1024 [ 279.371238][ T5275] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.234038][ T5580] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 280.243033][ T5580] overlayfs: missing 'lowerdir' [ 282.280260][ T5590] loop3: detected capacity change from 0 to 128 [ 282.449753][ T5590] qnx6: superblock #1 checksum error [ 282.559294][ T5279] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.876786][ T5598] overlayfs: failed to resolve './bus': -2 [ 283.580432][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 285.211437][ T5596] netlink: 'syz.1.295': attribute type 5 has an invalid length. [ 285.249393][ T5596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.295'. [ 285.285123][ T5596] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 286.916173][ T5596] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 286.979256][ T5596] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 287.019206][ T5596] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 287.069316][ T5596] device geneve2 entered promiscuous mode [ 289.059620][ T5629] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 289.068405][ T5629] overlayfs: missing 'lowerdir' [ 293.459005][ T5672] overlayfs: failed to resolve './bus': -2 [ 293.752353][ T5669] sched: RT throttling activated [ 294.607938][ T5675] loop2: detected capacity change from 0 to 8192 [ 295.200036][ T5681] loop3: detected capacity change from 0 to 1024 [ 297.280113][ T5692] netlink: 'syz.0.310': attribute type 2 has an invalid length. [ 297.545655][ T5692] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.310'. [ 297.967709][ T5700] loop3: detected capacity change from 0 to 1024 [ 299.235592][ T5721] loop0: detected capacity change from 0 to 128 [ 299.258132][ T5721] FAT-fs (loop0): Directory bread(block 414) failed [ 299.265077][ T5721] FAT-fs (loop0): Directory bread(block 415) failed [ 299.271948][ T5721] FAT-fs (loop0): Directory bread(block 416) failed [ 299.278710][ T5721] FAT-fs (loop0): Directory bread(block 417) failed [ 299.285518][ T5721] FAT-fs (loop0): Directory bread(block 418) failed [ 299.292308][ T5721] FAT-fs (loop0): Directory bread(block 419) failed [ 299.299122][ T5721] FAT-fs (loop0): Directory bread(block 420) failed [ 299.305872][ T5721] FAT-fs (loop0): Directory bread(block 421) failed [ 300.152473][ T4388] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 300.389284][ T4388] usb 3-1: Using ep0 maxpacket: 16 [ 301.274779][ T4388] usb 3-1: device descriptor read/all, error -71 [ 301.838992][ T5742] overlayfs: failed to resolve './bus': -2 [ 302.525807][ T5749] loop4: detected capacity change from 0 to 1024 [ 303.595787][ T5275] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 305.825624][ T5770] loop3: detected capacity change from 0 to 256 [ 306.679646][ T5770] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.735358][ T5776] loop1: detected capacity change from 0 to 1024 [ 306.861939][ T5770] netlink: 64 bytes leftover after parsing attributes in process `syz.3.326'. [ 307.271349][ T5783] loop4: detected capacity change from 0 to 4096 [ 307.430707][ T5789] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.876241][ T5797] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 309.051175][ T4710] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 309.309215][ T4710] usb 3-1: Using ep0 maxpacket: 16 [ 309.316417][ T4710] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.450902][ T4710] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.613838][ T5804] gadgetfs: bound to dummy_udc driver [ 310.351417][ T4388] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 310.359175][ C0] gadgetfs: connected [ 310.364127][ T4388] gadgetfs: disconnected [ 310.670218][ C0] gadgetfs: connected [ 310.698262][ T4388] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 310.708204][ T5801] gadgetfs: suspended from state 3 [ 310.713983][ T5801] gadgetfs: disconnected [ 310.767903][ T4710] usb 3-1: string descriptor 0 read error: -71 [ 310.775644][ T4388] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 310.779840][ T4710] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 310.794497][ T4710] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 310.804726][ T4710] usb 3-1: config 0 descriptor?? [ 310.819230][ T4710] usb 3-1: can't set config #0, error -71 [ 310.826831][ T4710] usb 3-1: USB disconnect, device number 9 [ 310.919200][ T4388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.955286][ T4388] usb 1-1: can't set config #1, error -71 [ 310.985384][ T4388] usb 1-1: USB disconnect, device number 5 [ 311.295686][ T5822] loop0: detected capacity change from 0 to 2048 [ 311.403674][ T5822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.434003][ T5823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'. [ 311.491359][ T5821] loop3: detected capacity change from 0 to 1024 [ 312.114295][ T5830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.341'. [ 312.130588][ T5830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'. [ 312.985467][ T5834] loop4: detected capacity change from 0 to 1024 [ 313.966914][ T5854] loop2: detected capacity change from 0 to 128 [ 313.999770][ T5854] FAT-fs (loop2): Directory bread(block 414) failed [ 314.006633][ T5854] FAT-fs (loop2): Directory bread(block 415) failed [ 314.013570][ T5854] FAT-fs (loop2): Directory bread(block 416) failed [ 314.020380][ T5854] FAT-fs (loop2): Directory bread(block 417) failed [ 314.027165][ T5854] FAT-fs (loop2): Directory bread(block 418) failed [ 314.034015][ T5854] FAT-fs (loop2): Directory bread(block 419) failed [ 314.040839][ T5854] FAT-fs (loop2): Directory bread(block 420) failed [ 314.047704][ T5854] FAT-fs (loop2): Directory bread(block 421) failed [ 315.136449][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 315.147759][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 315.158648][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x4883 instead [ 315.169490][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xe875 instead [ 315.219774][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 315.230729][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 315.241537][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 315.252325][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 315.263186][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 315.274116][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 315.284900][ T5846] jffs2: Further such events for this erase block will not be printed [ 315.295067][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 315.306157][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 315.316918][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x4883 instead [ 315.368819][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xe875 instead [ 315.379374][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 315.569370][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 316.753097][ T4288] Bluetooth: hci2: failed to read key size for handle 200 [ 316.800919][ T5873] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 316.809893][ T5873] overlayfs: missing 'lowerdir' [ 317.622328][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.628722][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.753968][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 317.788093][ T5870] loop2: detected capacity change from 0 to 4096 [ 317.899946][ T5878] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.970277][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 318.331630][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 318.565953][ T4288] Bluetooth: hci0: unexpected event for opcode 0x0c7d [ 319.194160][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 319.227537][ T5846] jffs2: Further such events for this erase block will not be printed [ 319.289696][ T5898] loop3: detected capacity change from 0 to 1024 [ 319.323154][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 319.389177][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 319.416362][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x4883 instead [ 319.454819][ T5279] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 319.492642][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xe875 instead [ 319.699641][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 319.806556][ T5902] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 319.815403][ T5902] overlayfs: missing 'lowerdir' [ 320.445166][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 320.545153][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x4883 instead [ 322.270584][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xe875 instead [ 322.310181][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 322.399107][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 322.464137][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x4883 instead [ 322.521417][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xe875 instead [ 324.029228][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 324.065604][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 324.109109][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x4883 instead [ 324.160339][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xe875 instead [ 324.194697][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 324.249707][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 324.279333][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x4883 instead [ 325.832613][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xe875 instead [ 325.881189][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 325.929954][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 325.969174][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x4883 instead [ 326.046215][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xe875 instead [ 326.089273][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 326.119425][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 326.159359][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4883 instead [ 326.199267][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xe875 instead [ 326.254587][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 326.299138][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 326.349135][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x4883 instead [ 326.399184][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xe875 instead [ 326.429271][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 326.459406][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 326.489175][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x4883 instead [ 326.529439][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xe875 instead [ 326.577413][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 326.620051][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 326.674642][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x4883 instead [ 326.714693][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xe875 instead [ 326.787144][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 326.829219][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 326.885558][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x4883 instead [ 326.925333][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xe875 instead [ 326.985258][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 327.024533][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 327.078237][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x4883 instead [ 327.129209][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xe875 instead [ 327.201113][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 327.243358][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 327.270070][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x4883 instead [ 327.459658][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xe875 instead [ 327.472347][ T5937] loop3: detected capacity change from 0 to 2048 [ 327.500717][ T5937] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.566081][ T5941] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 327.574966][ T5941] overlayfs: missing 'lowerdir' [ 328.209232][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 328.450855][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 328.789392][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x4883 instead [ 328.999277][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xe875 instead [ 329.609281][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 329.724856][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 329.770508][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x4883 instead [ 330.043147][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xe875 instead [ 330.498512][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 330.518286][ T5954] loop3: detected capacity change from 0 to 1024 [ 330.548800][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 330.560172][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x4883 instead [ 330.726345][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xe875 instead [ 331.569557][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 331.624500][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 332.067124][ T5974] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 332.076583][ T5974] overlayfs: missing 'lowerdir' [ 332.693700][ T5977] netlink: 36 bytes leftover after parsing attributes in process `syz.4.368'. [ 333.013386][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x4883 instead [ 334.675151][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xe875 instead [ 334.772202][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 334.795044][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 336.341757][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x4883 instead [ 336.444157][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xe875 instead [ 336.501271][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 336.519280][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 336.582544][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x4883 instead [ 336.685066][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xe875 instead [ 336.719312][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 336.789230][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 336.839126][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x4883 instead [ 336.899172][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xe875 instead [ 337.686477][ T6004] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 337.869241][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 337.940270][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 337.989339][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x4883 instead [ 338.008238][ T6006] loop1: detected capacity change from 0 to 256 [ 338.019201][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xe875 instead [ 338.102067][ T6006] exfat: Deprecated parameter 'utf8' [ 338.117518][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 338.157058][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 338.193595][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x4883 instead [ 338.214545][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xe875 instead [ 338.231830][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.243312][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.251987][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.262269][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.269979][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.277436][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.278060][ T6006] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 338.306973][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 338.400303][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 338.430414][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x4883 instead [ 338.481868][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xe875 instead [ 338.519404][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 338.572086][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 338.605576][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x4883 instead [ 338.657014][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xe875 instead [ 338.710248][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 338.765825][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 338.818356][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x4883 instead [ 338.897950][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xe875 instead [ 338.969318][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 339.075823][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 339.145142][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x4883 instead [ 339.168762][ T6020] loop1: detected capacity change from 0 to 2048 [ 339.199172][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xe875 instead [ 339.273760][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 339.298460][ T6020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.328531][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 339.555315][ T6010] chnl_net:caif_netlink_parms(): no params data found [ 339.562358][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x4883 instead [ 340.364262][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xe875 instead [ 340.391752][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 340.442363][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 340.461711][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 340.608368][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x4883 instead [ 340.667536][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xe875 instead [ 341.382850][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 341.489893][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.506066][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.535150][ T6010] device bridge_slave_0 entered promiscuous mode [ 341.625357][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 341.670241][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.819287][ T4319] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 342.055154][ T4319] usb 3-1: Using ep0 maxpacket: 16 [ 342.389290][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x4883 instead [ 342.458080][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.469535][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 342.489189][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xe875 instead [ 342.512715][ T4319] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.539319][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 342.552242][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.585047][ T6010] device bridge_slave_1 entered promiscuous mode [ 342.597375][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 342.659356][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x4883 instead [ 342.708386][ T6052] loop1: detected capacity change from 0 to 1024 [ 342.745334][ T5846] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xe875 instead [ 342.807548][ T6010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.833210][ T5846] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 342.875358][ T5279] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.897415][ T5846] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 343.076709][ T4319] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 343.100934][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 343.110767][ T6010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.499272][ T6058] loop3: detected capacity change from 0 to 8192 [ 343.833434][ T4319] usb 3-1: config 0 descriptor?? [ 343.854064][ T4319] usb 3-1: can't set config #0, error -71 [ 344.124562][ T6063] PKCS7: Unknown OID: [4] 0.0 [ 344.129776][ T6063] PKCS7: Only support pkcs7_signedData type [ 344.371029][ T4319] usb 3-1: USB disconnect, device number 10 [ 344.390208][ T6010] team0: Port device team_slave_0 added [ 344.448334][ T6010] team0: Port device team_slave_1 added [ 344.549340][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 345.159278][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.210106][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.645894][ T4290] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 346.276731][ T6010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.426210][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.454676][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.524478][ T6010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.629437][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 346.763253][ T6088] loop2: detected capacity change from 0 to 1024 [ 346.771767][ T5846] bridge0: port 3(syz_tun) entered disabled state [ 347.010992][ T5275] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 347.876508][ T6098] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 348.250522][ T5846] device syz_tun left promiscuous mode [ 348.326271][ T5846] bridge0: port 3(syz_tun) entered disabled state [ 348.433566][ T6010] device hsr_slave_0 entered promiscuous mode [ 348.514540][ T6107] usb usb8: usbfs: process 6107 (syz.1.389) did not claim interface 0 before use [ 348.549738][ T6010] device hsr_slave_1 entered promiscuous mode [ 349.270285][ T6010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.277931][ T6010] Cannot create hsr debugfs directory [ 349.483474][ T6096] bridge0: port 3(syz_tun) entered blocking state [ 349.509982][ T6096] bridge0: port 3(syz_tun) entered disabled state [ 349.529539][ T6096] device syz_tun entered promiscuous mode [ 349.543467][ T6096] bridge0: port 3(syz_tun) entered blocking state [ 349.550067][ T6096] bridge0: port 3(syz_tun) entered forwarding state [ 349.878767][ T4413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.147473][ T6123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 350.666361][ T4413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.743906][ T6122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 350.970737][ T4413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.186545][ T6126] loop3: detected capacity change from 0 to 1024 [ 351.212469][ T4413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.718888][ T6010] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.743200][ T6010] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.783480][ T6134] loop3: detected capacity change from 0 to 256 [ 352.790154][ T6010] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.842252][ T6010] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.949665][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 354.743596][ T4413] tipc: Left network mode [ 354.828823][ T6010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.969308][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.991315][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.878469][ T6010] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.063184][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.090076][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.285926][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.293152][ T5047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.319535][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.340479][ T6151] netlink: 'syz.2.398': attribute type 2 has an invalid length. [ 356.408338][ T6151] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.398'. [ 356.678993][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.692607][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.720147][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.727419][ T5047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.327217][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 358.336728][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 358.351029][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 358.382291][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.402369][ T6160] loop3: detected capacity change from 0 to 1024 [ 358.486923][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.513299][ T5275] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 358.577387][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 358.620221][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.709747][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.744298][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.790724][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.829770][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.984173][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.003807][ T6171] loop3: detected capacity change from 0 to 1024 [ 360.529921][ T6188] loop3: detected capacity change from 0 to 8192 [ 363.512509][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.532533][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.605669][ T6010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.275945][ T4413] device hsr_slave_0 left promiscuous mode [ 365.326105][ T4413] device hsr_slave_1 left promiscuous mode [ 365.377660][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.393125][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.431511][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.449187][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.471839][ T4413] device bridge_slave_1 left promiscuous mode [ 365.481172][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.546713][ T4413] device bridge_slave_0 left promiscuous mode [ 365.566813][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.688044][ T4413] device veth1_macvtap left promiscuous mode [ 365.700204][ T4413] device veth0_macvtap left promiscuous mode [ 365.706450][ T4413] device veth1_vlan left promiscuous mode [ 365.749635][ T4413] device veth0_vlan left promiscuous mode [ 366.976479][ T6233] loop2: detected capacity change from 0 to 1024 [ 367.399507][ T5623] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 367.451279][ T27] audit: type=1326 audit(1788275809.911:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.2.415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11b9e159 code=0x7ffc0000 [ 367.623981][ T5623] usb 2-1: Using ep0 maxpacket: 16 [ 367.629191][ T27] audit: type=1326 audit(1788275809.971:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.2.415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11b9e159 code=0x7ffc0000 [ 367.629244][ T27] audit: type=1326 audit(1788275809.971:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.2.415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11b9e159 code=0x7ffc0000 [ 367.629282][ T27] audit: type=1326 audit(1788275809.971:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.2.415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11b9e159 code=0x7ffc0000 [ 367.863412][ T5623] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.251031][ T5623] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.456386][ T27] audit: type=1326 audit(1788275809.971:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.2.415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fae11b9e159 code=0x7ffc0000 [ 368.485485][ T5623] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 368.485519][ T5623] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 368.485541][ T5623] usb 2-1: Product: syz [ 368.485557][ T5623] usb 2-1: Manufacturer: syz [ 368.485576][ T5623] usb 2-1: SerialNumber: syz [ 368.497510][ T27] audit: type=1326 audit(1788275809.971:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.2.415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11b9e159 code=0x7ffc0000 [ 368.547623][ T27] audit: type=1326 audit(1788275809.971:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.2.415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11b9e159 code=0x7ffc0000 [ 368.575714][ T27] audit: type=1326 audit(1788275809.971:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.2.415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11b9e159 code=0x7ffc0000 [ 368.606488][ T27] audit: type=1326 audit(1788275809.971:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.2.415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fae11b9e159 code=0x7ffc0000 [ 368.654719][ T27] audit: type=1326 audit(1788275809.981:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.2.415" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae11b9e159 code=0x7ffc0000 [ 368.698129][ T5623] usb 2-1: config 0 descriptor?? [ 370.181670][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 370.246987][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 370.302936][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.370986][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.824989][ T4413] bond0 (unregistering): Released all slaves [ 371.375514][ T5623] usb 2-1: USB disconnect, device number 6 [ 371.973933][ T6266] loop4: detected capacity change from 0 to 8192 [ 373.158433][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.196978][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.367989][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.384694][ T6278] db_root: cannot open: ./m [ 373.400255][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.453377][ T6010] device veth0_vlan entered promiscuous mode [ 373.471580][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.500437][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.566711][ T6010] device veth1_vlan entered promiscuous mode [ 374.473795][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 374.532083][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 374.701774][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 374.819260][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 374.901710][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 374.995924][ T6010] device veth0_macvtap entered promiscuous mode [ 375.088444][ T6010] device veth1_macvtap entered promiscuous mode [ 375.206199][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.381304][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.481288][ T6298] loop1: detected capacity change from 0 to 64 [ 375.568084][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.795081][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.093294][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.717578][ T6305] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 376.815428][ T6305] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 377.980686][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.011657][ T6300] loop4: detected capacity change from 0 to 1024 [ 378.169194][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.180732][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.194515][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.205037][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 378.217105][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 378.230317][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 378.275353][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 378.959621][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.966631][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.984957][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.057253][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.089154][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.149106][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.187788][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.326142][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.365264][ T6010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.661588][ T6010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.162380][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.226951][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.241128][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.268047][ T6010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.340511][ T6010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.370895][ T6010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.421705][ T6010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.871832][ T6328] loop1: detected capacity change from 0 to 8192 [ 382.905342][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.965738][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.008267][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 383.194410][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.275391][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.284723][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 385.752993][ T4290] Bluetooth: hci5: failed to read key size for handle 200 [ 386.362396][ T6361] netlink: 'syz.4.438': attribute type 2 has an invalid length. [ 387.144096][ T6361] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.438'. [ 387.277961][ T6359] loop1: detected capacity change from 0 to 1024 [ 389.543300][ T6384] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 389.552126][ T6384] overlayfs: missing 'lowerdir' [ 391.546945][ T6396] loop4: detected capacity change from 0 to 256 [ 393.131650][ T6412] cgroup: name respecified [ 393.257931][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.451'. [ 393.477622][ T4710] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 393.689244][ T4710] usb 2-1: Using ep0 maxpacket: 16 [ 393.702640][ T4710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.905382][ T4710] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.221723][ T4710] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 394.248590][ T4710] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 394.284754][ T4710] usb 2-1: Product: syz [ 394.293414][ T4710] usb 2-1: Manufacturer: syz [ 394.298871][ T4710] usb 2-1: SerialNumber: syz [ 394.345752][ T4710] usb 2-1: config 0 descriptor?? [ 395.054641][ T4710] usb 2-1: can't set config #0, error -71 [ 395.072039][ T4710] usb 2-1: USB disconnect, device number 7 [ 395.164005][ T6430] loop4: detected capacity change from 0 to 1024 [ 397.335602][ T6438] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 397.348597][ T6438] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 400.393979][ T6459] loop2: detected capacity change from 0 to 256 [ 402.840940][ T6474] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 402.849825][ T6474] overlayfs: missing 'lowerdir' [ 407.654267][ T6508] loop1: detected capacity change from 0 to 1024 [ 408.416548][ T6511] loop1: detected capacity change from 0 to 1024 [ 408.627687][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 409.465143][ T6526] loop2: detected capacity change from 0 to 1024 [ 409.578125][ T6532] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 409.587100][ T6532] overlayfs: missing 'lowerdir' [ 411.018513][ T5275] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 413.195772][ T6546] tipc: Enabling of bearer rejected, failed to enable media [ 414.709291][ T6557] loop4: detected capacity change from 0 to 128 [ 415.000589][ T6557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 415.041450][ T6557] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 415.267329][ T6564] loop2: detected capacity change from 0 to 1024 [ 416.164920][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 420.052249][ T6603] loop1: detected capacity change from 0 to 2048 [ 420.090406][ T6601] loop2: detected capacity change from 0 to 1024 [ 420.102671][ T6603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.077443][ T5279] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 422.817498][ T6621] loop5: detected capacity change from 0 to 64 [ 425.028086][ T6635] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 425.037073][ T6635] overlayfs: missing 'lowerdir' [ 425.428976][ T6632] loop5: detected capacity change from 0 to 1024 [ 425.439162][ T6641] mmap: syz.1.500 (6641) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 425.831002][ T6648] cgroup: name respecified [ 426.909142][ T4320] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 427.099521][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 427.156740][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.286810][ T4320] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 427.491998][ T4320] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 427.661213][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 427.784838][ T4320] usb 3-1: Product: syz [ 427.848010][ T4320] usb 3-1: Manufacturer: syz [ 427.908340][ T4320] usb 3-1: SerialNumber: syz [ 428.058095][ T4320] usb 3-1: config 0 descriptor?? [ 428.422671][ T4318] usb 3-1: USB disconnect, device number 11 [ 429.342417][ T6675] loop4: detected capacity change from 0 to 512 [ 429.358238][ T6675] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 430.976942][ T6675] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 430.998618][ T6675] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.507: bg 0: block 248: padding at end of block bitmap is not set [ 431.024453][ T6675] __quota_error: 65 callbacks suppressed [ 431.024509][ T6675] Quota error (device loop4): write_blk: dquota write failed [ 431.038678][ T6675] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 431.048748][ T6675] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.507: Failed to acquire dquot type 1 [ 431.080057][ T6675] EXT4-fs (loop4): 1 truncate cleaned up [ 431.085894][ T6675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 433.640591][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 433.668474][ T76] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 434.825057][ T76] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 436.211459][ T6704] loop4: detected capacity change from 0 to 64 [ 436.223364][ T6702] loop1: detected capacity change from 0 to 1024 [ 436.300857][ T6705] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 436.309952][ T6705] overlayfs: missing 'lowerdir' [ 437.121284][ T5279] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 439.881690][ T6734] loop3: detected capacity change from 0 to 512 [ 439.897170][ T6734] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 440.048619][ T6734] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 440.068132][ T6734] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.521: bg 0: block 248: padding at end of block bitmap is not set [ 440.092359][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.108031][ T6734] Quota error (device loop3): write_blk: dquota write failed [ 440.117405][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.125202][ T6734] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 440.136918][ T6734] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.521: Failed to acquire dquot type 1 [ 440.157154][ T6734] EXT4-fs (loop3): 1 truncate cleaned up [ 440.163718][ T6734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 442.559131][ T955] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 442.612355][ T4439] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 442.628713][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 442.667221][ T4439] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:12: Failed to release dquot type 1 [ 442.752590][ T955] usb 1-1: Dual-Role OTG device on HNP port [ 442.778404][ T955] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 442.847861][ T955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.056949][ T955] gspca_main: spca501-2.14.0 probing 0000:0000 [ 443.066509][ T955] gspca_spca501: reg write: error -32 [ 443.074237][ T955] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 443.082250][ T955] spca501: probe of 1-1:1.0 failed with error -22 [ 443.831620][ T4324] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 444.579797][ T6774] trusted_key: encrypted_key: insufficient parameters specified [ 446.354728][ T4805] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 446.691425][ T6788] loop2: detected capacity change from 0 to 64 [ 446.754014][ T6789] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 446.764024][ T6789] overlayfs: missing 'lowerdir' [ 451.544895][ T6811] loop2: detected capacity change from 0 to 512 [ 451.916459][ T6811] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 452.194586][ T6811] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 452.212281][ T6811] Quota error (device loop2): write_blk: dquota write failed [ 452.219919][ T6811] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 452.229554][ T6811] Quota error (device loop2): write_blk: dquota write failed [ 452.237084][ T6811] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 452.247291][ T6811] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.534: Failed to acquire dquot type 1 [ 452.267204][ T6811] EXT4-fs (loop2): 1 truncate cleaned up [ 452.274028][ T6811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 452.300547][ T6808] Quota error (device loop2): write_blk: dquota write failed [ 452.308793][ T6808] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 452.318884][ T6808] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.534: Failed to acquire dquot type 1 [ 452.539416][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 453.919293][ T4342] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 454.229129][ T955] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 454.640227][ T955] usb 5-1: Using ep0 maxpacket: 16 [ 454.668475][ T955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.851147][ T955] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.921366][ T955] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 454.982814][ T955] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 456.327877][ T955] usb 5-1: Product: syz [ 456.337117][ T955] usb 5-1: Manufacturer: syz [ 456.339203][ T4342] usb 6-1: Using ep0 maxpacket: 16 [ 456.461754][ T955] usb 5-1: SerialNumber: syz [ 456.509840][ T955] usb 5-1: config 0 descriptor?? [ 456.581049][ T4342] usb 6-1: device descriptor read/all, error -71 [ 456.750720][ T955] usb 5-1: can't set config #0, error -71 [ 456.772172][ T955] usb 5-1: USB disconnect, device number 4 [ 458.400880][ T6866] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 460.654830][ T6896] loop4: detected capacity change from 0 to 64 [ 463.498410][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 464.342319][ T6923] cgroup: name respecified [ 465.959878][ T6938] cgroup: name respecified [ 474.408892][ T6994] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 474.417839][ T6994] overlayfs: missing 'lowerdir' [ 479.311548][ T7016] loop3: detected capacity change from 0 to 4096 [ 484.104880][ T4318] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 488.620804][ T7061] cgroup: name respecified [ 489.674627][ T7069] cgroup: name respecified [ 489.895345][ T27] audit: type=1800 audit(1788275932.351:80): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.585" name="c_srate" dev="configfs" ino=43457 res=0 errno=0 [ 490.909185][ T7067] loop2: detected capacity change from 0 to 512 [ 490.917630][ T7067] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 491.233510][ T7067] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 491.250579][ T7067] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.583: bg 0: block 248: padding at end of block bitmap is not set [ 491.276165][ T7067] Quota error (device loop2): write_blk: dquota write failed [ 491.283864][ T7067] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 491.293771][ T7067] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.583: Failed to acquire dquot type 1 [ 491.509927][ T7067] EXT4-fs (loop2): 1 truncate cleaned up [ 491.529188][ T7067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 493.387090][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 493.434600][ T47] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 493.449378][ T47] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1 [ 493.514067][ T7093] loop4: detected capacity change from 0 to 1024 [ 497.786470][ T7118] cgroup: name respecified [ 501.521759][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.528226][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.574207][ T7147] loop4: detected capacity change from 0 to 1024 [ 502.406073][ T5275] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 504.273885][ T7166] cgroup: name respecified [ 506.507479][ T27] audit: type=1326 audit(1788275948.251:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.3.612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a4b9e159 code=0x7ffc0000 [ 507.085296][ T27] audit: type=1326 audit(1788275948.251:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.3.612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a4b9e159 code=0x7ffc0000 [ 507.964741][ T27] audit: type=1326 audit(1788275948.261:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.3.612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f52a4b5e98e code=0x7ffc0000 [ 508.159809][ T27] audit: type=1326 audit(1788275948.261:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.3.612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a4b9e159 code=0x7ffc0000 [ 508.183957][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.976733][ T7195] loop2: detected capacity change from 0 to 1024 [ 508.989119][ T27] audit: type=1326 audit(1788275948.261:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.3.612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a4b9e159 code=0x7ffc0000 [ 509.003755][ T7187] loop1: detected capacity change from 0 to 1024 [ 509.092492][ T27] audit: type=1326 audit(1788275948.261:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.3.612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52a4b9e159 code=0x7ffc0000 [ 509.160126][ T7197] loop3: detected capacity change from 0 to 1024 [ 509.174057][ T6767] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 509.181109][ T27] audit: type=1326 audit(1788275948.261:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.3.612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a4b9e159 code=0x7ffc0000 [ 509.337569][ T27] audit: type=1326 audit(1788275948.261:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.3.612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a4b9e159 code=0x7ffc0000 [ 509.452106][ T27] audit: type=1326 audit(1788275948.261:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.3.612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f52a4b9e159 code=0x7ffc0000 [ 509.689260][ T27] audit: type=1326 audit(1788275948.261:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.3.612" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a4b9e159 code=0x7ffc0000 [ 512.430966][ T7224] loop1: detected capacity change from 0 to 4096 [ 512.440074][ T7224] __ntfs_warning: 13 callbacks suppressed [ 512.440155][ T7224] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 513.484567][ T7224] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 513.496471][ T7224] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 513.508508][ T7224] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 513.528867][ T7224] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 513.540702][ T7224] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 513.552621][ T7224] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 513.572786][ T7224] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr. [ 513.581116][ T7224] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 513.608847][ T7224] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 513.620737][ T7224] ntfs: volume version 3.1. [ 515.859586][ T7235] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 515.868384][ T7235] overlayfs: missing 'lowerdir' [ 516.761806][ T7243] loop5: detected capacity change from 0 to 512 [ 516.832078][ T7243] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 518.628117][ T7243] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 518.644357][ T7243] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.629: bg 0: block 248: padding at end of block bitmap is not set [ 518.661776][ T7243] __quota_error: 11 callbacks suppressed [ 518.661836][ T7243] Quota error (device loop5): write_blk: dquota write failed [ 518.675218][ T7243] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 518.685358][ T7243] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.629: Failed to acquire dquot type 1 [ 518.704030][ T7243] EXT4-fs (loop5): 1 truncate cleaned up [ 518.709994][ T7243] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 519.175505][ T6010] EXT4-fs (loop5): unmounting filesystem. [ 519.185422][ T7247] Cannot find add_set index 2 as target [ 519.349091][ T6885] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 519.371081][ T6885] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:21: Failed to release dquot type 1 [ 524.272633][ T7292] loop2: detected capacity change from 0 to 1024 [ 525.161891][ T5275] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 530.538994][ T7327] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 530.539066][ T7327] overlayfs: missing 'lowerdir' [ 530.574487][ T7329] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 530.574517][ T7329] overlayfs: missing 'lowerdir' [ 531.320683][ T7334] loop2: detected capacity change from 0 to 1024 [ 535.467310][ T7351] loop2: detected capacity change from 0 to 16 [ 537.251637][ T7351] erofs: (device loop2): mounted with root inode @ nid 36. [ 538.323545][ T27] audit: type=1800 audit(1788275980.781:105): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.646" name="id" dev="configfs" ino=44492 res=0 errno=0 [ 541.260440][ T7377] tmpfs: Unknown parameter 'quota' [ 543.635076][ T7390] loop3: detected capacity change from 0 to 1024 [ 545.372010][ T7410] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 552.513497][ T7435] cgroup: name respecified [ 554.174436][ T7448] loop5: detected capacity change from 0 to 128 [ 554.205038][ T7448] EXT4-fs: Ignoring removed orlov option [ 554.431642][ T7448] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 554.465147][ T7448] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 554.681782][ T7456] loop4: detected capacity change from 0 to 1024 [ 554.966386][ T7463] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 554.975499][ T7463] overlayfs: missing 'lowerdir' [ 555.743383][ T6010] EXT4-fs (loop5): unmounting filesystem. [ 556.279774][ T7476] binder_alloc: binder_alloc_mmap_handler: 7471 200000ffe000-200001000000 already mapped failed -16 [ 556.380810][ T7477] binder: 7471:7477 ioctl c018620c 0 returned -14 [ 560.520639][ T7495] cgroup: name respecified [ 561.039668][ T7504] loop3: detected capacity change from 0 to 128 [ 561.283952][ T7504] FAT-fs (loop3): Directory bread(block 414) failed [ 561.290980][ T7504] FAT-fs (loop3): Directory bread(block 415) failed [ 561.297802][ T7504] FAT-fs (loop3): Directory bread(block 416) failed [ 561.304698][ T7504] FAT-fs (loop3): Directory bread(block 417) failed [ 561.311542][ T7504] FAT-fs (loop3): Directory bread(block 418) failed [ 561.318705][ T7504] FAT-fs (loop3): Directory bread(block 419) failed [ 561.325539][ T7504] FAT-fs (loop3): Directory bread(block 420) failed [ 561.332428][ T7504] FAT-fs (loop3): Directory bread(block 421) failed [ 562.206801][ T7511] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 562.215621][ T7511] overlayfs: missing 'lowerdir' [ 562.952138][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.958644][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.301682][ T7529] loop3: detected capacity change from 0 to 512 [ 564.388658][ T7529] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 566.597202][ T7529] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 566.611754][ T7529] Quota error (device loop3): write_blk: dquota write failed [ 566.619440][ T7529] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 566.628600][ T7529] Quota error (device loop3): write_blk: dquota write failed [ 566.636274][ T7529] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 566.646244][ T7529] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.700: Failed to acquire dquot type 1 [ 566.658435][ T7529] EXT4-fs (loop3): 1 truncate cleaned up [ 566.664248][ T7529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 566.747507][ T7524] Quota error (device loop3): write_blk: dquota write failed [ 566.757259][ T7524] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 566.767319][ T7524] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.700: Failed to acquire dquot type 1 [ 568.277714][ T7526] loop2: detected capacity change from 0 to 1024 [ 568.307244][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 568.324764][ T7526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 568.367021][ T7526] EXT4-fs: inline encryption not supported [ 568.393017][ T7526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 568.424192][ T7526] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 568.528456][ T7526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842e028, mo2=0002] [ 568.600486][ T7526] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 568.609212][ T7526] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.834532][ T4285] EXT4-fs (loop2): unmounting filesystem. [ 572.812117][ T7562] loop5: detected capacity change from 0 to 64 [ 574.009069][ T4804] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 575.911349][ T7579] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 575.920263][ T7579] overlayfs: missing 'lowerdir' [ 576.688502][ T7585] loop3: detected capacity change from 0 to 1024 [ 578.484917][ T7585] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 578.715945][ T7586] cgroup: name respecified [ 582.642150][ T7604] loop1: detected capacity change from 0 to 512 [ 583.316222][ T7604] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 584.338711][ T7604] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 584.358124][ T7604] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.715: bg 0: block 248: padding at end of block bitmap is not set [ 584.384273][ T7604] Quota error (device loop1): write_blk: dquota write failed [ 584.392236][ T7604] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 584.402622][ T7604] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.715: Failed to acquire dquot type 1 [ 584.429261][ T7604] EXT4-fs (loop1): 1 truncate cleaned up [ 584.435199][ T7604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 584.833850][ T7607] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 587.287039][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 587.300116][ T4341] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 587.324490][ T4341] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 590.533028][ T7640] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 590.541918][ T7640] overlayfs: missing 'lowerdir' [ 590.843700][ T7646] autofs4:pid:7646:autofs_fill_super: called with bogus options [ 594.066736][ T7662] loop3: detected capacity change from 0 to 128 [ 594.537857][ T7667] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4275] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7667] [ 594.574871][ T7667] netlink: 388 bytes leftover after parsing attributes in process `syz.3.726'. [ 594.588111][ T4290] Bluetooth: Wrong link type (-22) [ 595.247044][ T7671] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 596.371629][ T7677] loop5: detected capacity change from 0 to 16 [ 597.314138][ T7677] erofs: (device loop5): mounted with root inode @ nid 36. [ 603.423043][ T6110] bridge0: port 3(syz_tun) entered disabled state [ 603.565205][ T6110] device syz_tun left promiscuous mode [ 603.565277][ T6110] bridge0: port 3(syz_tun) entered disabled state [ 604.053971][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 604.070620][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 604.079812][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 604.087849][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 604.095828][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 604.103484][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 604.918731][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 606.752292][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 606.876495][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.884227][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.895255][ T7700] device bridge_slave_0 entered promiscuous mode [ 606.928700][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.949449][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.957823][ T7700] device bridge_slave_1 entered promiscuous mode [ 607.027328][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.082561][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.158490][ T7700] team0: Port device team_slave_0 added [ 607.187702][ T7700] team0: Port device team_slave_1 added [ 607.870318][ T5623] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 607.935231][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.989449][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.032717][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.076076][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.090670][ T5623] usb 5-1: Using ep0 maxpacket: 16 [ 608.098164][ T5623] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.119021][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.159054][ T5623] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 608.190469][ T5623] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 608.224789][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 608.235202][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.281459][ T5623] usb 5-1: Product: syz [ 608.302028][ T5623] usb 5-1: Manufacturer: syz [ 608.349728][ T5623] usb 5-1: SerialNumber: syz [ 608.450425][ T5623] usb 5-1: config 0 descriptor?? [ 608.540003][ T7700] device hsr_slave_0 entered promiscuous mode [ 608.589767][ T7700] device hsr_slave_1 entered promiscuous mode [ 608.602231][ T5623] usb 5-1: can't set config #0, error -71 [ 608.634849][ T5623] usb 5-1: USB disconnect, device number 6 [ 608.829082][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 609.359362][ T7730] fuse: Unknown parameter '0x0000000000000009' [ 610.899553][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 611.082462][ T7700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.090213][ T7700] Cannot create hsr debugfs directory [ 612.311412][ T4291] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 612.320329][ T4291] Bluetooth: hci1: Injecting HCI hardware error event [ 612.330149][ T4288] Bluetooth: hci1: hardware error 0x00 [ 612.432420][ T7747] cgroup: name respecified [ 613.319219][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 613.943790][ T7700] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 613.958554][ T7700] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 613.972641][ T7700] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.003424][ T7700] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.143969][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.165401][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 614.175105][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 614.190071][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.211539][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 614.228871][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 614.241525][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.248720][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.268297][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 614.277754][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 614.287933][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 614.299480][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.306641][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.317158][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 614.338638][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 614.349534][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 614.364496][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 614.385321][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 614.395720][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 614.408132][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 614.417862][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 614.427942][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 614.444997][ T7700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.458093][ T7700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 614.470962][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 614.483088][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 614.848316][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.861449][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.878359][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.263007][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 615.272691][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 615.298572][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 615.309983][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 615.322371][ T7700] device veth0_vlan entered promiscuous mode [ 615.330373][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 615.339277][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 615.349159][ T4288] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 615.362465][ T7700] device veth1_vlan entered promiscuous mode [ 615.392433][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 615.402415][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 615.411592][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 615.424506][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 615.436507][ T7700] device veth0_macvtap entered promiscuous mode [ 615.448809][ T7700] device veth1_macvtap entered promiscuous mode [ 615.468016][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.479820][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.489950][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.500544][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.517562][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.528072][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.538488][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.549267][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.564533][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.575137][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.590265][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.622603][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 615.631356][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 615.640322][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 615.649614][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 615.660848][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.673125][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.683965][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.698076][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.712212][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.722969][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.733147][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.744109][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.754089][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.764617][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.776100][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.787585][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 615.797092][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 615.810949][ T7700] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.821720][ T7700] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.831548][ T7700] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.840873][ T7700] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.944728][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.959994][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.983503][ T6881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 616.000137][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.008027][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.015982][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 617.875391][ T7778] loop3: detected capacity change from 0 to 16 [ 617.891277][ T7778] erofs: (device loop3): mounted with root inode @ nid 36. [ 619.360540][ T7786] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 619.369445][ T7786] overlayfs: missing 'lowerdir' [ 619.796445][ T7788] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 620.130479][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.138387][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.643969][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.201949][ T7804] snd_dummy snd_dummy.0: control 0:9:3142:syz0:16385 is already present [ 622.482280][ T7806] loop6: detected capacity change from 0 to 512 [ 624.047042][ T7806] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 624.394886][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.401428][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.431043][ T7806] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 624.448246][ T7806] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.749: bg 0: block 248: padding at end of block bitmap is not set [ 624.468519][ T7806] Quota error (device loop6): write_blk: dquota write failed [ 624.476350][ T7806] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 624.486639][ T7806] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.749: Failed to acquire dquot type 1 [ 624.506676][ T7806] EXT4-fs (loop6): 1 truncate cleaned up [ 624.512633][ T7806] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 625.257370][ T7700] EXT4-fs (loop6): unmounting filesystem. [ 625.279257][ T1172] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 625.288402][ T1172] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1 [ 625.980771][ T7813] Cannot find add_set index 2 as target [ 626.559869][ T7821] loop2: detected capacity change from 0 to 1024 [ 626.646620][ T7821] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 631.156477][ T7846] cgroup: name respecified [ 631.405523][ T7845] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 631.549334][ T7845] overlayfs: missing 'lowerdir' [ 633.254068][ T7856] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 634.155019][ T27] audit: type=1800 audit(1788276076.611:106): pid=7862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.762" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 634.771253][ T7864] Bluetooth: MGMT ver 1.22 [ 634.851141][ T7864] loop3: detected capacity change from 0 to 1024 [ 634.903398][ T7869] input: syz1 as /devices/virtual/input/input12 [ 634.921392][ T6767] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 635.314289][ T7875] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 635.323100][ T7875] overlayfs: missing 'lowerdir' [ 635.380018][ T7871] [ 635.382454][ T7871] ====================================================== [ 635.389621][ T7871] WARNING: possible circular locking dependency detected [ 635.396687][ T7871] syzkaller #0 Not tainted [ 635.401134][ T7871] ------------------------------------------------------ [ 635.408184][ T7871] syz.4.771/7871 is trying to acquire lock: [ 635.414110][ T7871] ffff888028c0e278 (&p->frag_sem){++++}-{3:3}, at: configfs_rmdir+0x3e0/0x980 [ 635.423169][ T7871] [ 635.423169][ T7871] but task is already holding lock: [ 635.430567][ T7871] ffff888073ed73f0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 635.440379][ T7871] [ 635.440379][ T7871] which lock already depends on the new lock. [ 635.440379][ T7871] [ 635.450814][ T7871] [ 635.450814][ T7871] the existing dependency chain (in reverse order) is: [ 635.459861][ T7871] [ 635.459861][ T7871] -> #3 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 635.468607][ T7871] down_write+0x36/0x60 [ 635.473413][ T7871] configfs_depend_item_unlocked+0x14f/0x430 [ 635.479975][ T7871] usbg_make_tpg+0x1f3/0x580 [ 635.485214][ T7871] target_fabric_make_tpg+0xa0/0x6d0 [ 635.491163][ T7871] configfs_mkdir+0x511/0x9e0 [ 635.496419][ T7871] vfs_mkdir+0x386/0x570 [ 635.501221][ T7871] do_mkdirat+0x1d8/0x440 [ 635.506117][ T7871] __x64_sys_mkdir+0x6a/0x80 [ 635.511281][ T7871] do_syscall_64+0x4c/0xa0 [ 635.516316][ T7871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.522856][ T7871] [ 635.522856][ T7871] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 635.530563][ T7871] __mutex_lock+0x12d/0xae0 [ 635.535634][ T7871] tcm_set_name+0x26/0x90 [ 635.540535][ T7871] function_make+0x195/0x350 [ 635.545768][ T7871] configfs_mkdir+0x511/0x9e0 [ 635.551018][ T7871] vfs_mkdir+0x386/0x570 [ 635.555833][ T7871] do_mkdirat+0x1d8/0x440 [ 635.560723][ T7871] __x64_sys_mkdir+0x6a/0x80 [ 635.565879][ T7871] do_syscall_64+0x4c/0xa0 [ 635.570866][ T7871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.577331][ T7871] [ 635.577331][ T7871] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 635.585636][ T7871] __mutex_lock+0x12d/0xae0 [ 635.590700][ T7871] uvcg_frame_dw_max_video_frame_buffer_size_store+0x111/0x360 [ 635.598814][ T7871] configfs_write_iter+0x30b/0x400 [ 635.604522][ T7871] vfs_write+0x482/0x9a0 [ 635.609445][ T7871] ksys_write+0x14d/0x260 [ 635.614344][ T7871] do_syscall_64+0x4c/0xa0 [ 635.619334][ T7871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.625820][ T7871] [ 635.625820][ T7871] -> #0 (&p->frag_sem){++++}-{3:3}: [ 635.633247][ T7871] __lock_acquire+0x2d18/0x7c40 [ 635.638787][ T7871] lock_acquire+0x1bb/0x4a0 [ 635.643861][ T7871] down_write_killable+0x45/0x90 [ 635.649360][ T7871] configfs_rmdir+0x3e0/0x980 [ 635.654611][ T7871] vfs_rmdir+0x34e/0x4a0 [ 635.659418][ T7871] do_rmdir+0x29a/0x5c0 [ 635.664132][ T7871] __x64_sys_unlinkat+0xc0/0xe0 [ 635.669551][ T7871] do_syscall_64+0x4c/0xa0 [ 635.674543][ T7871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.681037][ T7871] [ 635.681037][ T7871] other info that might help us debug this: [ 635.681037][ T7871] [ 635.691304][ T7871] Chain exists of: [ 635.691304][ T7871] &p->frag_sem --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 635.691304][ T7871] [ 635.705194][ T7871] Possible unsafe locking scenario: [ 635.705194][ T7871] [ 635.712683][ T7871] CPU0 CPU1 [ 635.718075][ T7871] ---- ---- [ 635.723474][ T7871] lock(&sb->s_type->i_mutex_key#23); [ 635.728985][ T7871] lock(&opts->dep_lock); [ 635.735963][ T7871] lock(&sb->s_type->i_mutex_key#23); [ 635.744014][ T7871] lock(&p->frag_sem); [ 635.748212][ T7871] [ 635.748212][ T7871] *** DEADLOCK *** [ 635.748212][ T7871] [ 635.756392][ T7871] 3 locks held by syz.4.771/7871: [ 635.761461][ T7871] #0: ffff8880193a4460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 635.770793][ T7871] #1: ffff88814941aee0 (&default_group_class[depth - 1]#7/1){+.+.}-{3:3}, at: do_rmdir+0x1b7/0x5c0 [ 635.781669][ T7871] #2: ffff888073ed73f0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xea/0x4a0 [ 635.791833][ T7871] [ 635.791833][ T7871] stack backtrace: [ 635.797751][ T7871] CPU: 0 PID: 7871 Comm: syz.4.771 Not tainted syzkaller #0 [ 635.805077][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.815208][ T7871] Call Trace: [ 635.818606][ T7871] [ 635.821656][ T7871] dump_stack_lvl+0x188/0x24e [ 635.826476][ T7871] ? load_image+0x410/0x410 [ 635.831080][ T7871] ? show_regs_print_info+0x12/0x12 [ 635.836340][ T7871] ? print_circular_bug+0x12b/0x1a0 [ 635.841581][ T7871] check_noncircular+0x296/0x330 [ 635.846540][ T7871] ? add_chain_block+0x9b0/0x9b0 [ 635.851493][ T7871] ? lockdep_lock+0xf1/0x1f0 [ 635.856099][ T7871] ? _find_first_zero_bit+0xd2/0x100 [ 635.861435][ T7871] __lock_acquire+0x2d18/0x7c40 [ 635.866326][ T7871] ? __schedule+0x1087/0x4030 [ 635.871079][ T7871] ? verify_lock_unused+0x140/0x140 [ 635.876304][ T7871] ? configfs_rmdir+0x3a9/0x980 [ 635.881172][ T7871] lock_acquire+0x1bb/0x4a0 [ 635.885694][ T7871] ? configfs_rmdir+0x3e0/0x980 [ 635.890591][ T7871] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 635.896237][ T7871] ? read_lock_is_recursive+0x10/0x10 [ 635.901629][ T7871] ? mutex_unlock+0x10/0x10 [ 635.906143][ T7871] ? do_raw_spin_lock+0x128/0x2f0 [ 635.911174][ T7871] ? configfs_detach_prep+0x1de/0x2b0 [ 635.916567][ T7871] ? preempt_schedule_thunk+0x16/0x18 [ 635.921973][ T7871] ? configfs_rmdir+0x3e0/0x980 [ 635.926840][ T7871] down_write_killable+0x45/0x90 [ 635.931788][ T7871] ? configfs_rmdir+0x3e0/0x980 [ 635.936656][ T7871] configfs_rmdir+0x3e0/0x980 [ 635.941357][ T7871] vfs_rmdir+0x34e/0x4a0 [ 635.945629][ T7871] do_rmdir+0x29a/0x5c0 [ 635.949796][ T7871] ? d_delete_notify+0x150/0x150 [ 635.954769][ T7871] ? getname_flags+0x206/0x500 [ 635.959561][ T7871] __x64_sys_unlinkat+0xc0/0xe0 [ 635.964520][ T7871] do_syscall_64+0x4c/0xa0 [ 635.968990][ T7871] ? clear_bhb_loop+0x60/0xb0 [ 635.973705][ T7871] ? clear_bhb_loop+0x60/0xb0 [ 635.978398][ T7871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.984319][ T7871] RIP: 0033:0x7f88fd99e159 [ 635.988798][ T7871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.008530][ T7871] RSP: 002b:00007f88fe8a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 636.017006][ T7871] RAX: ffffffffffffffda RBX: 00007f88fdc26090 RCX: 00007f88fd99e159 [ 636.024988][ T7871] RDX: 0000000000000200 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 636.032970][ T7871] RBP: 00007f88fda35024 R08: 0000000000000000 R09: 0000000000000000 [ 636.040946][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.048941][ T7871] R13: 00007f88fdc26128 R14: 00007f88fdc26090 R15: 00007ffc29409cd8 [ 636.056936][ T7871] [ 637.019016][ T7358] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 637.209195][ T7358] usb 3-1: Using ep0 maxpacket: 16 [ 637.216044][ T7358] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.226269][ T7358] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 637.237177][ T7358] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 637.246300][ T7358] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 637.254809][ T7358] usb 3-1: Product: syz [ 637.259052][ T7358] usb 3-1: Manufacturer: syz [ 637.263670][ T7358] usb 3-1: SerialNumber: syz [ 637.274858][ T7358] usb 3-1: config 0 descriptor?? [ 637.484938][ T4342] usb 3-1: USB disconnect, device number 13