last executing test programs: 18m30.45346227s ago: executing program 32 (id=102): symlinkat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 18m18.464475041s ago: executing program 33 (id=117): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000003340)={0x2020}, 0x2020) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0xb, '\x00', 0x0, r6, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x9, &(0x7f00000003c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r5, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m48.296097619s ago: executing program 0 (id=406): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x99, 0x0, 0x0}, {[0x0, 0xf141, 0x9, 0x5]}, 0xa, 0x0, 0x0}) unshare(0xc040480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) epoll_create1(0x80000) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="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", 0x4f7}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="0085", 0x2}], 0x1}}], 0x2, 0x119e75c4067765af) 13m47.986664337s ago: executing program 0 (id=407): bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) 13m47.551782556s ago: executing program 0 (id=408): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) poll(0x0, 0x0, 0x9) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x62040, 0x20) sendfile(0xffffffffffffffff, r4, 0x0, 0x7ffff088) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)}, 0x4004045) bpf$MAP_CREATE(0x0, 0x0, 0x50) 13m44.163472535s ago: executing program 0 (id=411): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13m41.235470157s ago: executing program 0 (id=413): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) getpeername(r0, &(0x7f00000000c0)=@phonet, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) socket$kcm(0x10, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0xa001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) socket$nl_generic(0x10, 0x3, 0x10) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) 13m40.373235019s ago: executing program 0 (id=415): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@dioread_lock}, {@data_err_abort}, {@dax_never}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@discard}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$eJzs3d9rm2sdAPDvmzZru/Wc9qgXxwMei+dId9Al7eq24sWcIHo1UOf9LG1aStOmNGm3liEd/gGCiApeeeWN4B8gyP4EEQZ6LyqKuM1deKORJG+2Nkvarkua0Xw+8O59nvdHv98na9+8T56HvAEMrKmIuBURQxHxSURMpNsz6RL7jaV23LOnDxZrSxLV6p1/JZGk25o/K0nXl9LTRiPiu9+KiCfVamvc8u7e2kKxWNhK6/nK+ma+vLt3ZXV9YaWwUtiYm5u9Pn9j/tr8zKnbthNJM6WYjIib3/jbT3/0q2/e/N2X7/357j8u/6C2czzdf7Ad3dRIIFt/LZqGI2KrF8H6YChtT7bfiQAAcCK1+9NPRcQX6vf/EzFUv5s7ytgZZQYAAAB0S/Vr45GN6kgVAAAAOLcy9TmwSSaXzvcdj0wml2vM4f1MXMwUS+XKl5ZL2xtLjbmyk5HNLK8WCzPpXOHJyCa1+mw6x7ZZv9pSn4uI9yLiJxNj9XpusVRc6veHHwAAADAgLrX0/59PNPr/AAAAwDkz2e8EAAAAgJ7T/wcAAIDzT/8fAAAAzrVv375dW6rN518v7exur5V2riwVymu59e3F3GJpazO3Uiqt1L+zb/24n1cslTa/Ehvb9/OVQrmSL+/u3V0vbW9U7q4eegQ2AAAAcIbe+/yjPyURsf/VsfoSScSFdF+2z7kBvZV5nYP/2rs8gLM31O8EgL4Z7ncCQN/o4wPJMfs7Tt75ffdzAQAAemP6sy3j/2H8HwbFa43/A+eK8X8YXG3G/00JgAGRdQcAA6/34//V6mslBAAAdN14fUkyuXQscDwymVwu4p36YwGyyfJqsTATEe9GxB8nsiO1+mz9zOTYPgMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlE9heenOQkAAADoi4jM35P0+V/TEx+Pt34+cCH5z0R9HRH3fnHnZ/cXKpWt2dr2Jy+2V36ebr968Mz9Vz9s8LBxAAAAOBPNfnqzHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fTs6YPF5hLZs4v7z69HxGRL/LrhGK2vR+vpXPx3EsMHzksiYqgL8fcfRsT77eIntbRiMs2iNX4mIsb6HP9SF+LDIHtUu/7cavf3l4mp+rr9399wurypg9e/2uXgYPzm9W+ow/XvnRPG+ODxb/Id4z+M+GC4/fWnGT/pEP+jjhFHDtW+/729vU5HVn8ZMd36/vMiwstSvrK+mS/v7l1ZXV9YKawUNubmZq/P35i/Nj+TX14tFtJ/28b48ed++7+j2n+xQ/zJY9r/ccf2H/bfx/effrpRfOWdtRb/8keH40+l+97vED+Tvvd9MS3X9k83y/uN8kEf/voPH75Iuk38pQ7tP+7//3KzMnp0+z/5zg//csxLBACcofLu3tpCsVjYOmVhJ0568FT7Xc07opMH3Y83zFnhLSsMxeEtzfvULsfKnvB3fvQteVlOUHj3wJYLafO6FKIPFyMAAKCnXt70n+DgQwPuI71LCgAAAAAAAAAAAAAAAAAAAAbMWXxRWWvM/f40FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSP8PAAD//22Dxkw=") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000890, &(0x7f0000000300)={[{@test_dummy_encryption}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@errors_continue}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) getrlimit(0x9, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = fsmount(r3, 0x0, 0x82) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r5, &(0x7f0000000240)=""/83, 0x53, 0x7) syz_pidfd_open(r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001a000100000000020000000002000000000000000038000008000100ac1414bf95aac6f4136dae35a5222103026b40f89ed375658993171009d8301d71f790b209727856cb7146158da769cd017c82ab16eaa61d3d3780c077a68a200c0b419821372883b9d42072808767a39a0b45f5a96cf6221b997b06204004f84a876f3b6301f5f61e82b93e1d0d4802fdfc24c811ce6352f477a45d2bbf1c19977c"], 0x24}}, 0x8010) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 13m32.797092875s ago: executing program 1 (id=419): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 13m32.375400971s ago: executing program 1 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd14", 0x10, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x3}}}}}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r3, 0x25, 0x0, @val=@perf_event}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x44, 0x0, 0x0}, 0x58) 13m24.088131501s ago: executing program 34 (id=415): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@dioread_lock}, {@data_err_abort}, {@dax_never}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@discard}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000890, &(0x7f0000000300)={[{@test_dummy_encryption}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@errors_continue}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) getrlimit(0x9, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = fsmount(r3, 0x0, 0x82) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r5, &(0x7f0000000240)=""/83, 0x53, 0x7) syz_pidfd_open(r0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001a000100000000020000000002000000000000000038000008000100ac1414bf95aac6f4136dae35a5222103026b40f89ed375658993171009d8301d71f790b209727856cb7146158da769cd017c82ab16eaa61d3d3780c077a68a200c0b419821372883b9d42072808767a39a0b45f5a96cf6221b997b06204004f84a876f3b6301f5f61e82b93e1d0d4802fdfc24c811ce6352f477a45d2bbf1c19977c"], 0x24}}, 0x8010) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 13m21.089671758s ago: executing program 1 (id=427): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 13m20.022598537s ago: executing program 1 (id=429): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000980), 0x0, 0x2000) clock_getres(0x2, 0x0) 13m16.500666736s ago: executing program 1 (id=431): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc) write$vga_arbiter(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac2(0x5, 0x7b, 0x0, 0x0) r3 = syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x80, &(0x7f0000000600)=ANY=[], 0x2, 0x1511, &(0x7f00000031c0)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") mkdirat(r3, &(0x7f0000001dc0)='\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)=""/73, 0x49}, {&(0x7f0000000140)=""/188, 0xbc}], 0x2, &(0x7f00000003c0)=""/236, 0xec}, 0x8}, {{&(0x7f00000004c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000680)=""/32, 0x20}], 0x3, &(0x7f0000000700)=""/24, 0x18}, 0x3}, {{&(0x7f0000000740)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000001c40)=[{&(0x7f00000007c0)=""/101, 0x65}, {&(0x7f0000000840)=""/150, 0x96}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/41, 0x29}, {&(0x7f0000001940)=""/148, 0x94}, {&(0x7f0000001a00)=""/214, 0xd6}, {&(0x7f0000001b00)=""/70, 0x46}, {&(0x7f0000001b80)=""/138, 0x8a}], 0x8, &(0x7f0000001cc0)=""/47, 0x2f}, 0x11d4}], 0x3, 0x10021, 0x0) 13m11.288908245s ago: executing program 1 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd14", 0x10, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x3}}}}}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r3, 0x25, 0x0, @val=@perf_event}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x44, 0x0, 0x0}, 0x58) 12m54.876088174s ago: executing program 35 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd14", 0x10, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x3}}}}}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r3, 0x25, 0x0, @val=@perf_event}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x44, 0x0, 0x0}, 0x58) 8m19.214252189s ago: executing program 2 (id=583): io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() io_submit(r0, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 8m17.529728814s ago: executing program 2 (id=584): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 8m16.720305915s ago: executing program 2 (id=586): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002b00)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 8m7.460808709s ago: executing program 2 (id=590): bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)={0x18, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044005}, 0x20000) 8m3.764071447s ago: executing program 2 (id=593): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 8m3.42344351s ago: executing program 2 (id=594): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xf) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x4000001) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xa4}}, 0xc0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, 0x0) 7m47.780427399s ago: executing program 36 (id=594): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xf) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x4000001) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xa4}}, 0xc0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, 0x0) 3m35.932863768s ago: executing program 7 (id=887): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000050d00)={0x1, &(0x7f0000050c80)=[{0x4000000, 0x92, 0x0, 0x1}]}) 3m34.809540754s ago: executing program 7 (id=890): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x317e, 0x4) write$tun(r0, &(0x7f0000000840)=ANY=[], 0x11b0) 3m32.593610064s ago: executing program 7 (id=893): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) write(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000200)="3c74716b0c7af949f3342f5322727c96", 0x10, 0x805, 0x0, 0x0) 3m31.560773733s ago: executing program 7 (id=897): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4b6, &(0x7f0000000700)="$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") openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3m27.885338715s ago: executing program 7 (id=904): setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000004240), 0x4) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000006000)) 3m24.559849342s ago: executing program 7 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0xffffffffffffff9e) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x1002001, 0xde60fe10fea4447b, 0x3ff, 0x7fff, 0x0, 0x40000006, 0x0, 0x0, 0x10, 0x5}}, 0x50) io_submit(0x0, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000efff00050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 3m9.0786854s ago: executing program 37 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0xffffffffffffff9e) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x1002001, 0xde60fe10fea4447b, 0x3ff, 0x7fff, 0x0, 0x40000006, 0x0, 0x0, 0x10, 0x5}}, 0x50) io_submit(0x0, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000efff00050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 2m34.925777168s ago: executing program 8 (id=1004): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 2m34.250336991s ago: executing program 8 (id=1007): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$uac1(0x4, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150020000004082052f0040000102030109026000030104100b0904000000010100000a050125070a00020102"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c24"], 0x0) 2m30.94584678s ago: executing program 8 (id=1013): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="abdabb4908777d", 0x7, 0x0, &(0x7f0000000380)={0x2, 0x4a22, @local}, 0x10) 2m30.233333779s ago: executing program 8 (id=1015): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x2000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000050d00)={0x0, &(0x7f0000050c80)}) 2m29.472929739s ago: executing program 8 (id=1017): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000003, 0x169302) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, 0x1, [0x0], [0x0, 0x0, 0x0, 0x10001], [0x9, 0x0, 0x8], [0xfffffffffffffffd, 0x4, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000400)={0x0, 0x0, r3}) 2m28.711605226s ago: executing program 8 (id=1019): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) 2m12.753694992s ago: executing program 38 (id=1019): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) 1m11.670738174s ago: executing program 3 (id=1185): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1m9.42696743s ago: executing program 3 (id=1189): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xcc50) 1m7.728168349s ago: executing program 3 (id=1193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0xffffffffffffff9e) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x1002001, 0xde60fe10fea4447b, 0x3ff, 0x7fff, 0x0, 0x40000006, 0x0, 0x0, 0x10, 0x5}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r7 = fsopen(0x0, 0x0) r8 = fsmount(r7, 0x1, 0x5) fchdir(r8) r9 = openat(0xffffffffffffff9c, 0x0, 0x12800, 0x14) getdents64(r9, 0x0, 0x22) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r5, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000efff00050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80006d0000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m3.626497171s ago: executing program 3 (id=1199): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1m2.206983876s ago: executing program 4 (id=1202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) syz_open_dev$video4linux(0x0, 0x10000005, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x4}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x28, 0x0, 0x9, 0x7df6}, 0x28) pread64(0xffffffffffffffff, 0x0, 0x0, 0x55) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x3000000, 0x50, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 59.748084062s ago: executing program 3 (id=1206): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5355, 0x1, 0x2001, 0x99}, &(0x7f0000000400), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x28, 0xc, 0x31}, 0x2c) socket(0x10, 0x803, 0xfffffffc) 58.003596287s ago: executing program 4 (id=1207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x31}, @fda={0x66646185, 0x3, 0x1, 0x8}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 56.771869568s ago: executing program 3 (id=1209): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0xffffffffffffff9e) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x1002001, 0xde60fe10fea4447b, 0x3ff, 0x7fff, 0x0, 0x40000006, 0x0, 0x0, 0x10, 0x5}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r7 = fsopen(0x0, 0x0) r8 = fsmount(r7, 0x1, 0x5) fchdir(r8) r9 = openat(0xffffffffffffff9c, 0x0, 0x12800, 0x14) getdents64(r9, 0x0, 0x22) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r5, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000efff00050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80006d0000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 53.858217581s ago: executing program 4 (id=1213): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 49.652401559s ago: executing program 4 (id=1219): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5355, 0x1, 0x2001, 0x99}, &(0x7f0000000400), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x28, 0xc, 0x31}, 0x2c) socket(0x10, 0x803, 0xfffffffc) 47.019585203s ago: executing program 4 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) landlock_restrict_self(r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003ec0)={0x2020}, 0x2020) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 43.985209288s ago: executing program 4 (id=1227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x106f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x80000300, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 41.471232978s ago: executing program 39 (id=1209): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0xffffffffffffff9e) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x1002001, 0xde60fe10fea4447b, 0x3ff, 0x7fff, 0x0, 0x40000006, 0x0, 0x0, 0x10, 0x5}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r7 = fsopen(0x0, 0x0) r8 = fsmount(r7, 0x1, 0x5) fchdir(r8) r9 = openat(0xffffffffffffff9c, 0x0, 0x12800, 0x14) getdents64(r9, 0x0, 0x22) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r5, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000efff00050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80006d0000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 28.428166789s ago: executing program 40 (id=1227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x106f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x80000300, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.973870422s ago: executing program 9 (id=1291): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket(0x400000000010, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.760719706s ago: executing program 6 (id=1294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x2c}}, 0x20040040) 7.058421467s ago: executing program 5 (id=1295): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x53}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 6.743447746s ago: executing program 6 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) lseek(r3, 0x851, 0x0) 6.637390381s ago: executing program 9 (id=1297): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') 6.085492199s ago: executing program 5 (id=1298): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 5.060810085s ago: executing program 5 (id=1299): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) 4.367295326s ago: executing program 9 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) lseek(r3, 0x851, 0x0) 4.043966144s ago: executing program 5 (id=1301): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x22) 3.665673465s ago: executing program 6 (id=1302): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 3.121242525s ago: executing program 5 (id=1303): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x800, 0x1, "80"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) 2.638900585s ago: executing program 9 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x2c}}, 0x20040040) 2.481442164s ago: executing program 6 (id=1305): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x31, "e6ce09bbe96c68e71c6b58ffb3215a859efb1b7b61869c41081bc13bfa0fcc16934abdaf49106edbb04feaee3150bbeb37"}, &(0x7f0000000140)=0x39) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20802f4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800008209"], 0x18}}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.418952817s ago: executing program 6 (id=1306): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x53}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.368258835s ago: executing program 9 (id=1307): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 454.547153ms ago: executing program 6 (id=1308): socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x23, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 350.963758ms ago: executing program 5 (id=1309): creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 9 (id=1310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) lseek(r3, 0x851, 0x0) kernel console output (not intermixed with test programs): filter on device team0 [ 942.863574][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.893863][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.130771][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.138298][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.397094][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.404718][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.468572][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.497568][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.320140][ T4877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 946.329785][ T4877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 946.344554][ T4877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 946.376746][ T4877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 946.409934][ T4877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.109866][T10237] overlayfs: failed to clone upperpath [ 948.386265][ T9942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.499749][ T4877] Bluetooth: hci1: command tx timeout [ 949.921988][ T7877] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.116029][ T7877] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.322244][T10249] netlink: 14 bytes leftover after parsing attributes in process `syz.9.661'. [ 950.578310][ T7877] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.594390][ T4877] Bluetooth: hci1: command tx timeout [ 951.276427][ T7877] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.082427][ T7877] bridge_slave_1: left allmulticast mode [ 952.104251][ T7877] bridge_slave_1: left promiscuous mode [ 952.122164][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.202125][ T7877] bridge_slave_0: left allmulticast mode [ 952.224094][ T7877] bridge_slave_0: left promiscuous mode [ 952.241482][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.299188][T10275] program syz.9.665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 952.659253][ T4877] Bluetooth: hci1: command tx timeout [ 954.740616][ T4877] Bluetooth: hci1: command tx timeout [ 955.587288][ T7877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.616544][ T7877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.643898][ T7877] bond0 (unregistering): Released all slaves [ 955.905690][T10275] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.915107][T10275] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.209429][T10275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.246545][T10275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.898075][ T7877] hsr_slave_0: left promiscuous mode [ 956.907127][ T7877] hsr_slave_1: left promiscuous mode [ 956.916412][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.930496][ T7877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.942783][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.950679][ T7877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.976284][ T7877] veth1_macvtap: left promiscuous mode [ 956.984229][ T7877] veth0_macvtap: left promiscuous mode [ 957.026199][ T7877] veth1_vlan: left promiscuous mode [ 957.053909][ T7877] veth0_vlan: left promiscuous mode [ 958.760006][T10322] netlink: 14 bytes leftover after parsing attributes in process `syz.6.670'. [ 959.849887][ T7877] team0 (unregistering): Port device team_slave_1 removed [ 959.930780][ T7877] team0 (unregistering): Port device team_slave_0 removed [ 959.970586][T10326] loop9: detected capacity change from 0 to 512 [ 960.015143][T10326] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.671: bad orphan inode 17 [ 960.043815][T10326] loop9: lost filesystem error report for type 5 error -117 [ 960.048717][T10326] ext4_test_bit(bit=16, block=4) = 1 [ 960.048940][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 960.056498][ C0] EXT4-fs (loop9): initial error at time 1781024882: ext4_orphan_get:1423 [ 960.077188][ C0] EXT4-fs (loop9): last error at time 1781024882: ext4_orphan_get:1423 [ 960.086519][T10326] is_bad_inode(inode)=0 [ 960.097651][T10326] NEXT_ORPHAN(inode)=0 [ 960.109754][T10326] max_ino=32 [ 960.129836][T10326] i_nlink=1 [ 960.137374][T10326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.271838][T10329] EXT4-fs error (device loop9): __ext4_iget:5481: inode #12: block 2: comm syz.9.671: invalid block [ 960.389397][ T5949] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.420404][ T5949] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.773129][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.793527][ T5949] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.836757][ T5949] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.675054][ T9942] veth0_vlan: entered promiscuous mode [ 961.794425][ T9942] veth1_vlan: entered promiscuous mode [ 962.212576][ T9942] veth0_macvtap: entered promiscuous mode [ 962.334762][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.171553][T10355] loop9: detected capacity change from 0 to 512 [ 963.400239][ T9942] veth1_macvtap: entered promiscuous mode [ 963.521685][T10355] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.314046][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.500177][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.792806][ T9942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.974053][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.025464][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.077735][ T9945] veth0_vlan: entered promiscuous mode [ 965.211190][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.259945][ T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.953465][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.002045][T10219] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.048088][T10219] bridge_slave_0: entered allmulticast mode [ 968.113677][T10219] bridge_slave_0: entered promiscuous mode [ 968.192351][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.231085][T10219] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.255011][T10219] bridge_slave_1: entered allmulticast mode [ 968.275358][T10387] netlink: 14 bytes leftover after parsing attributes in process `syz.6.679'. [ 968.294029][T10219] bridge_slave_1: entered promiscuous mode [ 968.372271][ T9945] veth1_vlan: entered promiscuous mode [ 968.776074][T10219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.882818][T10219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.125976][ T5232] 8021q: adding VLAN 0 to HW filter on device eth13 [ 969.195072][T10219] team0: Port device team_slave_0 added [ 969.256547][T10219] team0: Port device team_slave_1 added [ 969.359723][T10219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.376608][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.408367][T10219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.523993][T10219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.532693][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.615954][T10219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.724993][ T9945] veth0_macvtap: entered promiscuous mode [ 972.087593][ T9945] veth1_macvtap: entered promiscuous mode [ 972.224460][T10219] hsr_slave_0: entered promiscuous mode [ 972.265484][T10219] hsr_slave_1: entered promiscuous mode [ 972.334021][T10219] debugfs: 'hsr0' already exists in 'hsr' [ 972.357113][T10219] Cannot create hsr debugfs directory [ 974.258055][ T9945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.556104][ T9945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.828165][ T5900] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.841593][ T5900] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.984023][ T5900] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.019556][ T5900] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.957685][T10219] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 977.999649][T10444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 978.011577][T10444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 978.023134][T10444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 978.044514][T10444] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 978.059376][T10444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 978.105826][T10219] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 978.164582][T10219] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 978.186898][T10219] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 978.200688][T10219] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 978.251604][T10219] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.281729][T10219] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 978.328255][T10219] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 978.715615][ T5900] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.998525][ T5900] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.259107][ T5900] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.340032][T10460] netlink: 14 bytes leftover after parsing attributes in process `syz.9.689'. [ 979.554477][ T5900] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.050582][T10444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 980.099480][T10444] Bluetooth: hci2: command tx timeout [ 980.935635][T10444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 981.019938][T10444] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 981.065303][T10444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 981.144580][T10444] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 982.009601][T10219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.113338][ T5900] bridge_slave_1: left allmulticast mode [ 982.143726][ T5900] bridge_slave_1: left promiscuous mode [ 982.300426][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.839434][ T5900] bridge_slave_0: left allmulticast mode [ 982.881194][ T5900] bridge_slave_0: left promiscuous mode [ 982.888125][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.918735][ T4877] Bluetooth: hci2: command tx timeout [ 983.300948][ T4877] Bluetooth: hci3: command tx timeout [ 984.979393][ T4877] Bluetooth: hci2: command tx timeout [ 985.020852][T10497] loop9: detected capacity change from 0 to 512 [ 985.129354][T10497] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.698: bad orphan inode 17 [ 985.177809][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.197291][T10497] loop9: lost filesystem error report for type 5 error -117 [ 985.198115][T10497] ext4_test_bit(bit=16, block=4) = 1 [ 985.205834][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 985.205929][ C1] EXT4-fs (loop9): initial error at time 1781024907: ext4_orphan_get:1423 [ 985.206045][ C1] EXT4-fs (loop9): last error at time 1781024907: ext4_orphan_get:1423 [ 985.290587][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.322917][T10497] is_bad_inode(inode)=0 [ 985.335636][ T5900] bond0 (unregistering): Released all slaves [ 985.348340][T10497] NEXT_ORPHAN(inode)=0 [ 985.367683][T10497] max_ino=32 [ 985.392005][ T4877] Bluetooth: hci3: command tx timeout [ 985.403762][T10497] i_nlink=1 [ 985.427885][T10497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.567154][T10500] EXT4-fs error (device loop9): __ext4_iget:5481: inode #12: block 2: comm syz.9.698: invalid block [ 986.214200][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.470405][T10219] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.567102][ T5900] hsr_slave_0: left promiscuous mode [ 986.595064][ T5900] hsr_slave_1: left promiscuous mode [ 986.614671][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.623845][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.653597][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.665758][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.690806][ T5900] veth1_macvtap: left promiscuous mode [ 986.696718][ T5900] veth0_macvtap: left promiscuous mode [ 986.707459][ T5900] veth1_vlan: left promiscuous mode [ 986.714159][ T5900] veth0_vlan: left promiscuous mode [ 987.061710][ T4877] Bluetooth: hci2: command tx timeout [ 987.459206][ T4877] Bluetooth: hci3: command tx timeout [ 987.742379][ T5900] team0 (unregistering): Port device team_slave_1 removed [ 987.781678][ T5900] team0 (unregistering): Port device team_slave_0 removed [ 988.633491][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.641061][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.986935][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.994610][ T7899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.415718][ T5900] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.549388][ T4877] Bluetooth: hci3: command tx timeout [ 989.697289][ T5900] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.950729][ T5900] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.328394][ T5900] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.714314][ T5900] bridge_slave_1: left allmulticast mode [ 991.734561][ T5900] bridge_slave_1: left promiscuous mode [ 992.336686][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.516034][ T5900] bridge_slave_0: left allmulticast mode [ 992.530630][ T5900] bridge_slave_0: left promiscuous mode [ 992.542656][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.334473][ T5900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.359363][ T5900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.384805][ T5900] bond0 (unregistering): Released all slaves [ 993.548711][ T5232] 8021q: adding VLAN 0 to HW filter on device eth16 [ 993.761502][T10443] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.835193][T10443] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.917790][T10443] bridge_slave_0: entered allmulticast mode [ 994.032162][T10443] bridge_slave_0: entered promiscuous mode [ 994.542831][ T5900] hsr_slave_0: left promiscuous mode [ 994.557302][ T5900] hsr_slave_1: left promiscuous mode [ 994.567126][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.588338][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.598517][ T5900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.606950][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.630780][ T5900] veth1_macvtap: left promiscuous mode [ 994.636484][ T5900] veth0_macvtap: left promiscuous mode [ 994.642596][ T5900] veth1_vlan: left promiscuous mode [ 994.648073][ T5900] veth0_vlan: left promiscuous mode [ 996.959965][ T5900] team0 (unregistering): Port device team_slave_1 removed [ 997.065916][ T5900] team0 (unregistering): Port device team_slave_0 removed [ 997.520966][T10443] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.528695][T10443] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.547342][T10443] bridge_slave_1: entered allmulticast mode [ 997.567163][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.573281][T10443] bridge_slave_1: entered promiscuous mode [ 997.579917][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.848430][T10443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.920603][T10443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.323760][T10443] team0: Port device team_slave_0 added [ 998.458338][T10443] team0: Port device team_slave_1 added [ 999.618779][T10443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.640903][T10443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.705102][T10443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.755560][T10443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.788503][T10443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.874250][T10443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.256462][T10443] hsr_slave_0: entered promiscuous mode [ 1000.274486][T10443] hsr_slave_1: entered promiscuous mode [ 1000.293036][T10443] debugfs: 'hsr0' already exists in 'hsr' [ 1000.309191][T10443] Cannot create hsr debugfs directory [ 1000.379268][ T808] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1000.410696][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.418588][T10469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.449903][T10469] bridge_slave_0: entered allmulticast mode [ 1000.472411][T10469] bridge_slave_0: entered promiscuous mode [ 1000.532343][T10469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.543503][T10469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.554566][T10469] bridge_slave_1: entered allmulticast mode [ 1000.562180][ T808] usb 10-1: Using ep0 maxpacket: 8 [ 1000.576416][ T808] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.592960][T10469] bridge_slave_1: entered promiscuous mode [ 1000.640103][ T808] usb 10-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1000.652369][ T808] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.675337][ T808] usb 10-1: Product: syz [ 1000.699757][ T808] usb 10-1: Manufacturer: syz [ 1000.706358][ T808] usb 10-1: SerialNumber: syz [ 1000.756432][ T808] usb 10-1: config 0 descriptor?? [ 1000.904909][T10469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.064601][T10219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.196508][ T808] msi2500 10-1:0.0: Registered as swradio24 [ 1001.219413][ T808] msi2500 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1001.271923][ T808] usb 10-1: USB disconnect, device number 2 [ 1001.734418][T10469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.621159][T10469] team0: Port device team_slave_0 added [ 1002.757260][T10469] team0: Port device team_slave_1 added [ 1003.237370][T10469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.270027][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.394599][T10469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.527222][T10469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.552989][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.626160][T10469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.171116][T10469] hsr_slave_0: entered promiscuous mode [ 1004.202857][T10469] hsr_slave_1: entered promiscuous mode [ 1004.234460][T10469] debugfs: 'hsr0' already exists in 'hsr' [ 1004.257910][T10469] Cannot create hsr debugfs directory [ 1006.088690][T10443] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1006.178381][T10443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1006.240441][T10443] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1006.332443][T10443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1006.386149][T10443] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1006.450614][T10444] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1006.461256][T10444] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1006.475246][T10444] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1006.494645][T10444] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1006.515397][T10444] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1006.606683][T10443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1006.760931][T10443] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1006.942713][T10443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.620072][T10444] Bluetooth: hci4: command tx timeout [ 1010.180616][T10444] Bluetooth: hci6: command 0x0406 tx timeout [ 1010.669466][ T4877] Bluetooth: hci4: command tx timeout [ 1011.086631][T10443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.268062][T10443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.369924][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.377579][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.621525][ T7877] bridge_slave_1: left allmulticast mode [ 1012.627778][ T7877] bridge_slave_1: left promiscuous mode [ 1012.636349][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.654712][ T7877] bridge_slave_0: left allmulticast mode [ 1013.592350][ T4877] Bluetooth: hci4: command tx timeout [ 1013.629673][ T7877] bridge_slave_0: left promiscuous mode [ 1013.640570][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.287399][ T7877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.348461][ T7877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.373650][ T7877] bond0 (unregistering): Released all slaves [ 1015.627788][ T4877] Bluetooth: hci4: command tx timeout [ 1015.902797][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.910491][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.261754][ T7877] hsr_slave_0: left promiscuous mode [ 1016.294465][ T7877] hsr_slave_1: left promiscuous mode [ 1016.336135][ T7877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.384272][ T7877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.855653][T10716] loop9: detected capacity change from 0 to 128 [ 1020.419125][ T7877] team0 (unregistering): Port device team_slave_1 removed [ 1020.496547][ T7877] team0 (unregistering): Port device team_slave_0 removed [ 1021.267730][T10469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1021.344053][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.383578][T10469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1021.453289][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1021.528979][T10469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1021.576042][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1021.586165][T10469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1021.660038][T10469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1027.071837][T10469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.516907][T10469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.872948][T10153] IPVS: starting estimator thread 0... [ 1027.992111][T10760] netlink: 48 bytes leftover after parsing attributes in process `syz.6.744'. [ 1028.029673][T10768] IPVS: using max 240 ests per chain, 12000 per kthread [ 1028.658978][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.666632][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.745490][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.753074][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.241033][T10650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.572522][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.617301][T10650] bridge_slave_0: entered allmulticast mode [ 1033.671274][T10650] bridge_slave_0: entered promiscuous mode [ 1033.750879][T10650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.790197][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.857298][T10650] bridge_slave_1: entered allmulticast mode [ 1033.907237][T10650] bridge_slave_1: entered promiscuous mode [ 1034.439567][T10650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.512287][T10650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.899226][T10650] team0: Port device team_slave_0 added [ 1034.939198][T10650] team0: Port device team_slave_1 added [ 1035.590644][T10650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.597753][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.624795][T10650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.669230][T10650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.697025][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.788607][T10650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.164688][T10650] hsr_slave_0: entered promiscuous mode [ 1036.201262][T10650] hsr_slave_1: entered promiscuous mode [ 1036.242796][T10650] debugfs: 'hsr0' already exists in 'hsr' [ 1036.277764][T10650] Cannot create hsr debugfs directory [ 1039.301828][T10444] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1039.324400][T10444] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1039.337192][T10444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1039.369532][T10444] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1039.391362][T10444] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1040.676580][T10650] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1040.793126][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1040.977241][T10650] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1041.061750][ T7475] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1041.083732][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1041.210531][T10650] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1041.249431][ T7475] usb 10-1: Using ep0 maxpacket: 8 [ 1041.277145][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1041.291250][ T7475] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1041.379677][ T7475] usb 10-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1041.421643][ T7475] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.421680][T10650] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1041.460874][ T4877] Bluetooth: hci1: command tx timeout [ 1041.485137][ T7475] usb 10-1: Product: syz [ 1041.501013][ T7475] usb 10-1: Manufacturer: syz [ 1041.510777][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1041.518308][ T7475] usb 10-1: SerialNumber: syz [ 1041.536098][ T1332] bridge_slave_1: left allmulticast mode [ 1041.549050][ T1332] bridge_slave_1: left promiscuous mode [ 1041.581758][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.591825][ T7475] usb 10-1: config 0 descriptor?? [ 1041.619463][T10444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1041.641609][ T1332] bridge_slave_0: left allmulticast mode [ 1041.655052][T10444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1041.664753][T10444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1041.665025][ T1332] bridge_slave_0: left promiscuous mode [ 1041.693137][T10444] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1041.706375][T10444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1041.734692][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.236239][ T7475] msi2500 10-1:0.0: Registered as swradio24 [ 1042.270198][ T7475] msi2500 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1042.364959][ T7475] usb 10-1: USB disconnect, device number 3 [ 1043.218584][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.279196][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.321720][ T1332] bond0 (unregistering): Released all slaves [ 1043.545511][ T4877] Bluetooth: hci1: command tx timeout [ 1043.786708][ T4877] Bluetooth: hci2: command tx timeout [ 1044.680207][ T1332] hsr_slave_0: left promiscuous mode [ 1044.727029][ T1332] hsr_slave_1: left promiscuous mode [ 1044.754672][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.801467][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.569169][T10880] 9pnet_virtio: no channels available for device syz [ 1045.629666][ T4877] Bluetooth: hci1: command tx timeout [ 1045.859377][ T4877] Bluetooth: hci2: command tx timeout [ 1045.991354][T10884] loop9: detected capacity change from 0 to 512 [ 1046.063674][T10884] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.757: bad orphan inode 17 [ 1046.092001][T10884] loop9: lost filesystem error report for type 5 error -117 [ 1046.092881][T10884] ext4_test_bit(bit=16, block=4) = 1 [ 1046.100589][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1046.100685][ C1] EXT4-fs (loop9): initial error at time 1781024968: ext4_orphan_get:1423 [ 1046.100800][ C1] EXT4-fs (loop9): last error at time 1781024968: ext4_orphan_get:1423 [ 1046.158642][T10884] is_bad_inode(inode)=0 [ 1046.173148][T10884] NEXT_ORPHAN(inode)=0 [ 1046.177662][T10884] max_ino=32 [ 1046.207822][T10884] i_nlink=1 [ 1046.253397][T10884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.291035][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 1046.349231][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 1046.450712][T10889] EXT4-fs error (device loop9): __ext4_iget:5481: inode #12: block 2: comm syz.9.757: invalid block [ 1047.413658][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.699375][ T4877] Bluetooth: hci1: command tx timeout [ 1047.939369][ T4877] Bluetooth: hci2: command tx timeout [ 1048.893086][T10901] syzkaller0: entered promiscuous mode [ 1048.911356][T10901] syzkaller0: entered allmulticast mode [ 1050.019828][ T4877] Bluetooth: hci2: command tx timeout [ 1050.380146][T10650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.736572][T10650] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.049684][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.057334][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.681313][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.689015][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.994325][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.019753][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.171806][T10856] bridge_slave_0: entered allmulticast mode [ 1053.181450][T10856] bridge_slave_0: entered promiscuous mode [ 1053.196216][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.204567][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.212665][T10856] bridge_slave_1: entered allmulticast mode [ 1053.221913][T10856] bridge_slave_1: entered promiscuous mode [ 1053.238091][T10832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.261196][T10832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.289615][T10832] bridge_slave_0: entered allmulticast mode [ 1053.303257][T10832] bridge_slave_0: entered promiscuous mode [ 1053.353155][ T5901] bridge_slave_1: left allmulticast mode [ 1053.387021][ T5901] bridge_slave_1: left promiscuous mode [ 1053.420100][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.441951][ T5901] bridge_slave_0: left allmulticast mode [ 1053.460983][ T5901] bridge_slave_0: left promiscuous mode [ 1053.489735][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.967237][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.991014][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.007096][ T5901] bond0 (unregistering): Released all slaves [ 1054.147223][T10832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.167309][T10832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.180892][T10832] bridge_slave_1: entered allmulticast mode [ 1054.191389][T10832] bridge_slave_1: entered promiscuous mode [ 1054.301341][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.330363][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.463243][T10832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.531903][ T5901] hsr_slave_0: left promiscuous mode [ 1054.554267][ T5901] hsr_slave_1: left promiscuous mode [ 1054.571739][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.601351][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.690677][T10934] loop9: detected capacity change from 0 to 512 [ 1054.731064][T10934] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.767: bad orphan inode 17 [ 1054.751147][T10934] loop9: lost filesystem error report for type 5 error -117 [ 1054.753630][T10934] ext4_test_bit(bit=16, block=4) = 1 [ 1054.761364][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1054.761450][ C0] EXT4-fs (loop9): initial error at time 1781024977: ext4_orphan_get:1423 [ 1054.761564][ C0] EXT4-fs (loop9): last error at time 1781024977: ext4_orphan_get:1423 [ 1054.791667][T10934] is_bad_inode(inode)=0 [ 1054.796042][T10934] NEXT_ORPHAN(inode)=0 [ 1054.800527][T10934] max_ino=32 [ 1054.803921][T10934] i_nlink=1 [ 1054.809376][T10934] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.915031][T10937] EXT4-fs error (device loop9): __ext4_iget:5481: inode #12: block 2: comm syz.9.767: invalid block [ 1055.346776][ T5901] team0 (unregistering): Port device team_slave_1 removed [ 1055.417961][ T5901] team0 (unregistering): Port device team_slave_0 removed [ 1055.961978][T10856] team0: Port device team_slave_0 added [ 1055.996866][T10856] team0: Port device team_slave_1 added [ 1056.114335][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.122482][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.151229][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.182075][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.189652][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.226119][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.321008][T10936] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1056.367415][T10832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.738423][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.799279][T10856] hsr_slave_0: entered promiscuous mode [ 1056.824627][T10856] hsr_slave_1: entered promiscuous mode [ 1056.835452][T10856] debugfs: 'hsr0' already exists in 'hsr' [ 1056.843447][T10856] Cannot create hsr debugfs directory [ 1057.025141][T10832] team0: Port device team_slave_0 added [ 1057.165822][T10832] team0: Port device team_slave_1 added [ 1057.755471][T10832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.808425][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.904511][T10832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1058.658475][T10832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1058.669646][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.704585][T10832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.993432][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.001208][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.554654][T10560] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1059.567136][T10832] hsr_slave_0: entered promiscuous mode [ 1059.584163][T10832] hsr_slave_1: entered promiscuous mode [ 1059.611168][T10832] debugfs: 'hsr0' already exists in 'hsr' [ 1059.628076][T10832] Cannot create hsr debugfs directory [ 1059.769334][T10560] usb 10-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1059.795271][T10560] usb 10-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1059.818915][T10560] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1059.846371][T10560] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1059.872842][T10560] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.891728][T10560] usb 10-1: Product: syz [ 1059.897913][T10560] usb 10-1: Manufacturer: syz [ 1059.910558][T10560] usb 10-1: SerialNumber: syz [ 1060.244024][T10560] uvcvideo 10-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1060.254654][T10560] uvcvideo 10-1:220.0: No valid video chain found. [ 1060.276160][T10560] usb 10-1: USB disconnect, device number 4 [ 1061.141635][T10856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1061.182390][T10856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1061.194702][T10856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1061.233431][T10856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1061.275869][T10856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1061.309411][T10856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1061.375099][T10856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1061.437324][T10856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1062.088032][T10832] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1062.206043][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1062.237265][T10832] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1062.304629][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1062.342700][T10832] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1062.385991][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.392910][T10832] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1062.438165][T10832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1062.554838][T10650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.327372][T10856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.585254][T10856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.720642][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.728130][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.854680][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.862220][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.145860][T10832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.482724][T10832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.497768][T11000] loop9: detected capacity change from 0 to 512 [ 1064.606576][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.614265][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.640934][T11000] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.779: bad orphan inode 17 [ 1064.669801][T11000] loop9: lost filesystem error report for type 5 error -117 [ 1064.672670][T11000] ext4_test_bit(bit=16, block=4) = 1 [ 1064.680426][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1064.680517][ C0] EXT4-fs (loop9): initial error at time 1781024987: ext4_orphan_get:1423 [ 1064.680630][ C0] EXT4-fs (loop9): last error at time 1781024987: ext4_orphan_get:1423 [ 1064.710457][T11000] is_bad_inode(inode)=0 [ 1064.731600][T11000] NEXT_ORPHAN(inode)=0 [ 1064.737221][T11000] max_ino=32 [ 1064.744428][T11000] i_nlink=1 [ 1064.753121][T11000] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.815130][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.822839][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.874550][T11004] EXT4-fs error (device loop9): __ext4_iget:5481: inode #12: block 2: comm syz.9.779: invalid block [ 1065.036470][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.541160][T10444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1068.553300][T10444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1068.567095][T10444] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1068.582948][ T8426] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1068.596834][ T8426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1070.659795][ T4877] Bluetooth: hci3: command tx timeout [ 1071.288446][ T7899] bridge_slave_1: left allmulticast mode [ 1071.294786][ T7899] bridge_slave_1: left promiscuous mode [ 1071.340199][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.389251][ T7899] bridge_slave_0: left allmulticast mode [ 1071.407444][ T7899] bridge_slave_0: left promiscuous mode [ 1071.434331][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.037942][ T7899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.093928][ T7899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.108739][ T7899] bond0 (unregistering): Released all slaves [ 1072.145519][T10832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.186926][ T5232] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1072.233658][T10856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.443863][ T7899] hsr_slave_0: left promiscuous mode [ 1072.465370][ T7899] hsr_slave_1: left promiscuous mode [ 1072.488698][ T7899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.546543][ T7899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.740327][ T4877] Bluetooth: hci3: command tx timeout [ 1073.845329][ T7899] team0 (unregistering): Port device team_slave_1 removed [ 1073.975496][ T7899] team0 (unregistering): Port device team_slave_0 removed [ 1074.178663][T11086] loop9: detected capacity change from 0 to 512 [ 1074.699865][T11086] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.787: bad orphan inode 17 [ 1074.743824][T11086] loop9: lost filesystem error report for type 5 error -117 [ 1074.745535][T11086] ext4_test_bit(bit=16, block=4) = 1 [ 1074.753357][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1074.753446][ C0] EXT4-fs (loop9): initial error at time 1781024997: ext4_orphan_get:1423 [ 1074.753542][ C0] EXT4-fs (loop9): last error at time 1781024997: ext4_orphan_get:1423 [ 1074.822208][T11086] is_bad_inode(inode)=0 [ 1074.830360][ T4877] Bluetooth: hci3: command tx timeout [ 1074.848332][T11086] NEXT_ORPHAN(inode)=0 [ 1074.916574][T11086] max_ino=32 [ 1074.942495][T11086] i_nlink=1 [ 1074.997871][T11086] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.188591][T11086] EXT4-fs error (device loop9): __ext4_iget:5481: inode #12: block 2: comm syz.9.787: invalid block [ 1075.300038][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.980017][ T4877] Bluetooth: hci3: command tx timeout [ 1077.236164][ T5232] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1078.947704][T10856] veth0_vlan: entered promiscuous mode [ 1079.623459][T10856] veth1_vlan: entered promiscuous mode [ 1080.094506][T10832] veth0_vlan: entered promiscuous mode [ 1080.362024][T10832] veth1_vlan: entered promiscuous mode [ 1080.412966][T10856] veth0_macvtap: entered promiscuous mode [ 1080.488136][T10856] veth1_macvtap: entered promiscuous mode [ 1080.831660][T11030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.851206][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.867695][T11030] bridge_slave_0: entered allmulticast mode [ 1080.880698][T11030] bridge_slave_0: entered promiscuous mode [ 1080.935516][T11030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.963095][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.982095][T11030] bridge_slave_1: entered allmulticast mode [ 1081.000621][T11030] bridge_slave_1: entered promiscuous mode [ 1081.274986][T11030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.351429][T10856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.467395][T11030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.549417][ T5232] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1081.697574][T10856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.706135][ T8413] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1081.769145][T10832] veth0_macvtap: entered promiscuous mode [ 1081.840436][T11030] team0: Port device team_slave_0 added [ 1081.893522][ T8413] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1081.923044][T11030] team0: Port device team_slave_1 added [ 1081.930331][ T8413] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1081.952099][ T8413] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.985095][ T8413] usb 10-1: config 0 descriptor?? [ 1082.016796][T11142] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1082.074626][ T8413] hub 10-1:0.0: USB hub found [ 1082.285879][ T8413] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1082.296725][ T5949] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.314742][ T5949] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.338155][T10832] veth1_macvtap: entered promiscuous mode [ 1082.377227][T11030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.387334][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.432458][T11030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.453909][ T5949] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.487892][ T5949] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.560199][T11030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.575729][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.604760][T11030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.698221][ T8413] usbhid 10-1:0.0: can't add hid device: -71 [ 1082.708697][ T8413] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1082.783774][ T8413] usb 10-1: USB disconnect, device number 5 [ 1083.078176][T11030] hsr_slave_0: entered promiscuous mode [ 1083.104677][T11030] hsr_slave_1: entered promiscuous mode [ 1083.151109][T11030] debugfs: 'hsr0' already exists in 'hsr' [ 1083.157015][T11030] Cannot create hsr debugfs directory [ 1083.327979][T10832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1083.680865][T10832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.126255][ T1332] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.137077][T11167] loop9: detected capacity change from 0 to 512 [ 1084.155002][ T1332] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.195631][ T5901] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.244132][T11167] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.796: bad orphan inode 17 [ 1084.285388][ T5949] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.325615][T11167] loop9: lost filesystem error report for type 5 error -117 [ 1084.328121][T11167] ext4_test_bit(bit=16, block=4) = 1 [ 1084.335979][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1084.336062][ C0] EXT4-fs (loop9): initial error at time 1781025006: ext4_orphan_get:1423 [ 1084.336176][ C0] EXT4-fs (loop9): last error at time 1781025006: ext4_orphan_get:1423 [ 1084.390741][T11167] is_bad_inode(inode)=0 [ 1084.415470][T11167] NEXT_ORPHAN(inode)=0 [ 1084.439431][T11167] max_ino=32 [ 1084.462579][ T5232] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1084.469525][T11167] i_nlink=1 [ 1084.487032][T11167] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.635293][T11167] EXT4-fs error (device loop9): __ext4_iget:5481: inode #12: block 2: comm syz.9.796: invalid block [ 1084.723147][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.153928][T11030] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1088.197657][T11030] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1088.212099][T11030] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1088.246273][T11030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1088.301943][T11030] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1088.459589][T11030] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1088.492374][T11030] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1088.574625][T11030] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1089.206155][ T4877] block nbd9: Receive control failed (result -32) [ 1089.236440][T10842] block nbd9: shutting down sockets [ 1090.164482][T11030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.418037][T11030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.549375][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.556986][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.737915][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.745542][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.934455][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.975448][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.155864][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.188634][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.888186][ T5949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.925952][ T5949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.220347][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.253932][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.113831][T11251] loop7: detected capacity change from 0 to 1024 [ 1094.243352][T11251] hfsplus: failed to load extents file [ 1094.378595][T11253] loop5: detected capacity change from 0 to 512 [ 1094.498611][T11253] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.804: bad orphan inode 17 [ 1094.569943][T11253] loop5: lost filesystem error report for type 5 error -117 [ 1094.578977][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1094.593217][ C0] EXT4-fs (loop5): initial error at time 1781025016: ext4_orphan_get:1423 [ 1094.602054][ C0] EXT4-fs (loop5): last error at time 1781025016: ext4_orphan_get:1423 [ 1094.613040][T11253] ext4_test_bit(bit=16, block=4) = 1 [ 1094.618584][T11253] is_bad_inode(inode)=0 [ 1094.623390][T11253] NEXT_ORPHAN(inode)=0 [ 1094.638251][T11253] max_ino=32 [ 1094.684914][T11253] i_nlink=1 [ 1094.729481][T11253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.117243][T11257] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1096.249508][T11267] EXT4-fs error (device loop5): __ext4_iget:5481: inode #12: block 2: comm syz.5.804: invalid block [ 1098.267181][T10856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.299915][T11030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.372978][T11271] warning: `syz.9.807' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1102.375757][T11030] veth0_vlan: entered promiscuous mode [ 1102.527035][T11030] veth1_vlan: entered promiscuous mode [ 1102.615310][T11309] loop9: detected capacity change from 0 to 256 [ 1102.659650][T11309] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1102.718175][T11309] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1102.813105][T11309] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 1102.896074][T11309] exFAT-fs (loop9): failed to load alloc-bitmap [ 1102.937759][T11309] exFAT-fs (loop9): failed to recognize exfat type [ 1103.038120][T11030] veth0_macvtap: entered promiscuous mode [ 1103.179688][T11030] veth1_macvtap: entered promiscuous mode [ 1103.317151][T11309] loop9: detected capacity change from 0 to 2048 [ 1103.434846][T11030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.485964][T11309] Alternate GPT is invalid, using primary GPT. [ 1103.541512][T11309] loop9: p2 p3 p7 [ 1103.589079][T11030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.722025][ T1332] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.747387][ T1332] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.805803][ T1332] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.846319][ T88] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.558473][T11324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.871102][T10834] udevd[10834]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1104.883961][T10842] udevd[10842]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1105.039834][ T5682] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 1105.081528][T11328] udevd[11328]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 1105.266621][ T5682] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1105.329640][ T5682] usb 10-1: config 0 has no interface number 0 [ 1105.369556][ T5682] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1105.416388][ T5682] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1105.490419][ T5682] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1105.573254][ T5682] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1105.870700][ T5682] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1106.315337][ T5682] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1106.392875][ T5682] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1106.440689][ T5682] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.524920][ T5682] usb 10-1: config 0 descriptor?? [ 1106.561517][T11327] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1106.592901][T11327] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1106.676403][ T5682] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1106.917768][T11327] ldusb 10-1:0.55: Write buffer overflow, 29 bytes dropped [ 1107.039039][ T5682] usb 10-1: USB disconnect, device number 6 [ 1107.093660][ T5682] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1108.822595][T11365] loop7: detected capacity change from 0 to 256 [ 1108.872921][T11365] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1108.958114][T11365] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1109.038676][T11365] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 1109.106209][T11365] exFAT-fs (loop7): failed to load alloc-bitmap [ 1109.136682][T11365] exFAT-fs (loop7): failed to recognize exfat type [ 1109.588371][T11365] loop7: detected capacity change from 0 to 2048 [ 1109.808153][T11365] Alternate GPT is invalid, using primary GPT. [ 1109.857483][T11365] loop7: p2 p3 p7 [ 1110.226824][T11382] loop9: detected capacity change from 0 to 512 [ 1110.342181][T11382] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.828: bad orphan inode 17 [ 1110.433636][T11382] loop9: lost filesystem error report for type 5 error -117 [ 1110.439165][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1110.453434][ C1] EXT4-fs (loop9): initial error at time 1781025032: ext4_orphan_get:1423 [ 1110.462247][ C1] EXT4-fs (loop9): last error at time 1781025032: ext4_orphan_get:1423 [ 1110.479487][T11382] ext4_test_bit(bit=16, block=4) = 1 [ 1110.511863][T11382] is_bad_inode(inode)=0 [ 1110.541726][T11382] NEXT_ORPHAN(inode)=0 [ 1110.575774][T11382] max_ino=32 [ 1110.593644][T11382] i_nlink=1 [ 1110.634507][T11382] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.798077][T11382] EXT4-fs error (device loop9): __ext4_iget:5481: inode #12: block 2: comm syz.9.828: invalid block [ 1111.175713][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.343574][ T7877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.387013][ T7877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.752936][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.791616][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.485292][T11439] loop5: detected capacity change from 0 to 256 [ 1115.560430][T11439] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1115.616029][T11439] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1115.748168][T11439] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 1115.906480][T11439] exFAT-fs (loop5): failed to load alloc-bitmap [ 1115.929716][T11439] exFAT-fs (loop5): failed to recognize exfat type [ 1116.310371][T11439] loop5: detected capacity change from 0 to 2048 [ 1116.399519][ T5682] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1116.444207][T11439] Alternate GPT is invalid, using primary GPT. [ 1116.460989][T11439] loop5: p2 p3 p7 [ 1116.583881][ T5682] usb 9-1: Using ep0 maxpacket: 8 [ 1116.644164][ T5682] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1116.697731][ T5682] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1116.747233][ T5682] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1116.805257][ T5682] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1116.853594][ T5682] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1116.926314][ T5682] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1116.967350][ T5682] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.312905][ T5682] usb 9-1: usb_control_msg returned -32 [ 1117.356227][ T5682] usbtmc 9-1:16.0: can't read capabilities [ 1119.312792][ T8415] usb 9-1: USB disconnect, device number 2 [ 1120.432998][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.439690][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.173521][T11488] loop5: detected capacity change from 0 to 256 [ 1122.222878][T11488] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1122.276662][T11488] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1122.391890][T11488] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 1122.459181][T11488] exFAT-fs (loop5): failed to load alloc-bitmap [ 1122.501722][T11488] exFAT-fs (loop5): failed to recognize exfat type [ 1122.964305][T11488] loop5: detected capacity change from 0 to 2048 [ 1123.114022][T11497] loop8: detected capacity change from 0 to 512 [ 1123.176719][T11488] Alternate GPT is invalid, using primary GPT. [ 1123.231542][T11488] loop5: p2 p3 p7 [ 1123.329139][T11497] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.855: bad orphan inode 17 [ 1123.471391][T11497] loop8: lost filesystem error report for type 5 error -117 [ 1123.472512][T11497] ext4_test_bit(bit=16, block=4) = 1 [ 1123.480337][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1123.480427][ C0] EXT4-fs (loop8): initial error at time 1781025045: ext4_orphan_get:1423 [ 1123.480540][ C0] EXT4-fs (loop8): last error at time 1781025045: ext4_orphan_get:1423 [ 1123.620135][T11497] is_bad_inode(inode)=0 [ 1123.644911][T11497] NEXT_ORPHAN(inode)=0 [ 1123.673157][T11497] max_ino=32 [ 1123.677926][ T4938] Alternate GPT is invalid, using primary GPT. [ 1123.686289][T11497] i_nlink=1 [ 1123.717150][T11497] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1123.733479][ T4938] loop5: p2 p3 p7 [ 1123.907112][T11506] EXT4-fs error (device loop8): __ext4_iget:5481: inode #12: block 2: comm syz.8.855: invalid block [ 1124.341881][T11030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.505008][T11509] 9pnet_virtio: no channels available for device syz [ 1124.618503][T11412] udevd[11412]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1124.628127][T10840] udevd[10840]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 1124.641693][T10842] udevd[10842]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1125.316049][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.860'. [ 1125.335503][T10842] udevd[10842]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1125.355817][T10836] udevd[10836]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1125.356864][T11328] udevd[11328]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 1125.406858][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.7.860'. [ 1126.920900][T11536] netlink: 14 bytes leftover after parsing attributes in process `syz.6.863'. [ 1128.747753][T11557] loop8: detected capacity change from 0 to 512 [ 1128.947810][T11557] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.868: bad orphan inode 17 [ 1128.958341][T11557] loop8: lost filesystem error report for type 5 error -117 [ 1128.958927][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1128.973115][ C1] EXT4-fs (loop8): initial error at time 1781025051: ext4_orphan_get:1423 [ 1128.981953][ C1] EXT4-fs (loop8): last error at time 1781025051: ext4_orphan_get:1423 [ 1129.005268][T11557] ext4_test_bit(bit=16, block=4) = 1 [ 1129.013708][T11557] is_bad_inode(inode)=0 [ 1129.018492][T11557] NEXT_ORPHAN(inode)=0 [ 1129.025112][T11557] max_ino=32 [ 1129.029796][T11557] i_nlink=1 [ 1129.070388][T11557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1129.280313][T11557] EXT4-fs error (device loop8): __ext4_iget:5481: inode #12: block 2: comm syz.8.868: invalid block [ 1129.476146][T11030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.625249][T11568] 9pnet_virtio: no channels available for device syz [ 1129.765043][T11570] ADFS-fs (nbd9): error: unable to read block 3, try 0 [ 1129.926815][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.9.872'. [ 1130.014797][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.9.872'. [ 1130.217411][ T4877] Bluetooth: hci6: command 0x0406 tx timeout [ 1130.357294][ T55] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1130.448715][ T12] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1130.549039][ T12] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.042465][ T12] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.583427][T11589] netlink: 14 bytes leftover after parsing attributes in process `syz.9.877'. [ 1135.272263][T11620] loop7: detected capacity change from 0 to 512 [ 1135.405852][T11620] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.883: bad orphan inode 17 [ 1135.489060][T11620] loop7: lost filesystem error report for type 5 error -117 [ 1135.492282][T11620] ext4_test_bit(bit=16, block=4) = 1 [ 1135.500001][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1135.500094][ C1] EXT4-fs (loop7): initial error at time 1781025057: ext4_orphan_get:1423 [ 1135.500210][ C1] EXT4-fs (loop7): last error at time 1781025057: ext4_orphan_get:1423 [ 1135.540737][T11625] 9pnet_virtio: no channels available for device syz [ 1135.580619][T11620] is_bad_inode(inode)=0 [ 1135.597837][T11620] NEXT_ORPHAN(inode)=0 [ 1135.619454][T11620] max_ino=32 [ 1135.651327][T11620] i_nlink=1 [ 1135.669696][T11620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.875947][T11627] EXT4-fs error (device loop7): __ext4_iget:5481: inode #12: block 2: comm syz.7.883: invalid block [ 1136.273776][T10832] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.158399][T11638] netlink: 14 bytes leftover after parsing attributes in process `syz.5.889'. [ 1138.861644][ T5682] IPVS: starting estimator thread 0... [ 1139.030276][T11653] IPVS: using max 240 ests per chain, 12000 per kthread [ 1143.603618][T11670] loop7: detected capacity change from 0 to 512 [ 1143.737379][T11670] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.897: bad orphan inode 17 [ 1143.800455][T11670] loop7: lost filesystem error report for type 5 error -117 [ 1143.809149][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1143.823393][ C0] EXT4-fs (loop7): initial error at time 1781025066: ext4_orphan_get:1423 [ 1143.832217][ C0] EXT4-fs (loop7): last error at time 1781025066: ext4_orphan_get:1423 [ 1143.844244][T11670] ext4_test_bit(bit=16, block=4) = 1 [ 1143.852196][T11670] is_bad_inode(inode)=0 [ 1143.856635][T11670] NEXT_ORPHAN(inode)=0 [ 1143.862283][T11670] max_ino=32 [ 1143.865704][T11670] i_nlink=1 [ 1143.870679][T11678] 9pnet_virtio: no channels available for device syz [ 1143.880504][T11670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1143.943902][T11670] EXT4-fs error (device loop7): __ext4_iget:5481: inode #12: block 2: comm syz.7.897: invalid block [ 1145.035988][T10832] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.094304][T11695] netlink: 14 bytes leftover after parsing attributes in process `syz.6.902'. [ 1151.947288][ T8426] block nbd9: Receive control failed (result -32) [ 1151.959232][T11729] block nbd9: shutting down sockets [ 1155.458105][T11745] netlink: 14 bytes leftover after parsing attributes in process `syz.8.918'. [ 1156.295557][ T8415] IPVS: starting estimator thread 0... [ 1156.463138][T11758] IPVS: using max 240 ests per chain, 12000 per kthread [ 1157.434504][T11762] loop9: detected capacity change from 0 to 512 [ 1157.719468][T11762] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.921: bad orphan inode 17 [ 1158.004850][T11762] loop9: lost filesystem error report for type 5 error -117 [ 1158.005817][T11762] ext4_test_bit(bit=16, block=4) = 1 [ 1158.013577][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1158.013670][ C0] EXT4-fs (loop9): initial error at time 1781025080: ext4_orphan_get:1423 [ 1158.013788][ C0] EXT4-fs (loop9): last error at time 1781025080: ext4_orphan_get:1423 [ 1158.354167][T11762] is_bad_inode(inode)=0 [ 1158.393457][T11762] NEXT_ORPHAN(inode)=0 [ 1158.427061][T11762] max_ino=32 [ 1158.460393][T11762] i_nlink=1 [ 1158.543425][T11762] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1158.812430][T11762] EXT4-fs error (device loop9): __ext4_iget:5481: inode #12: block 2: comm syz.9.921: invalid block [ 1159.068215][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.333810][ T8426] block nbd9: Receive control failed (result -32) [ 1160.354319][T11782] block nbd9: shutting down sockets [ 1160.397635][T11789] capability: warning: `syz.8.930' uses deprecated v2 capabilities in a way that may be insecure [ 1161.907061][T11799] netlink: 14 bytes leftover after parsing attributes in process `syz.9.932'. [ 1163.049892][ T7475] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1163.313820][ T7475] usb 9-1: Using ep0 maxpacket: 8 [ 1163.460908][ T4877] Bluetooth: hci1: command 0x0406 tx timeout [ 1163.488645][ T7475] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.620411][ T7475] usb 9-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1163.721235][ T7475] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.796829][ T7475] usb 9-1: Product: syz [ 1163.862661][ T7475] usb 9-1: Manufacturer: syz [ 1163.905245][ T7475] usb 9-1: SerialNumber: syz [ 1164.030951][ T7475] usb 9-1: config 0 descriptor?? [ 1164.335638][T11817] loop9: detected capacity change from 0 to 512 [ 1164.537248][T11817] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.937: bad orphan inode 17 [ 1164.663657][T11817] loop9: lost filesystem error report for type 5 error -117 [ 1164.668941][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1164.683286][ C0] EXT4-fs (loop9): initial error at time 1781025087: ext4_orphan_get:1423 [ 1164.692055][ C0] EXT4-fs (loop9): last error at time 1781025087: ext4_orphan_get:1423 [ 1164.721200][T11817] ext4_test_bit(bit=16, block=4) = 1 [ 1164.797399][T11817] is_bad_inode(inode)=0 [ 1164.844790][T11817] NEXT_ORPHAN(inode)=0 [ 1164.923339][T11817] max_ino=32 [ 1164.962786][T11817] i_nlink=1 [ 1165.009818][T11817] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.281931][T11817] EXT4-fs error (device loop9): __ext4_iget:5481: inode #12: block 2: comm syz.9.937: invalid block [ 1165.658375][ T7475] msi2500 9-1:0.0: Registered as swradio24 [ 1165.689593][ T7475] msi2500 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1165.795917][ T7475] usb 9-1: USB disconnect, device number 3 [ 1165.903964][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.013700][ T4877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1166.064210][ T4877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1166.073427][ T4877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1166.088416][ T4877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1166.113228][ T4877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1167.500503][ T4877] block nbd9: Receive control failed (result -32) [ 1167.542665][T11845] block nbd9: shutting down sockets [ 1168.518655][ T4877] Bluetooth: hci4: command tx timeout [ 1168.579147][ T4877] Bluetooth: hci2: command 0x0406 tx timeout [ 1169.512810][T11856] netlink: 14 bytes leftover after parsing attributes in process `syz.6.946'. [ 1170.281571][ T7475] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1170.511288][ T7475] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1170.572303][ T7475] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1170.587942][ T8426] Bluetooth: hci4: command tx timeout [ 1170.640951][ T7475] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 1170.679350][ T7475] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1170.728227][ T7475] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1170.777762][ T7475] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1170.822819][ T7475] usb 10-1: Product: syz [ 1171.416986][ T7475] usb 10-1: Manufacturer: syz [ 1171.417093][ T7475] usb 10-1: SerialNumber: syz [ 1171.436723][ T7475] usb 10-1: config 0 descriptor?? [ 1171.440442][T11859] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1171.464876][ T7475] usb 10-1: selecting invalid altsetting 0 [ 1172.679698][ T8426] Bluetooth: hci4: command tx timeout [ 1173.651659][ T7475] usb 10-1: USB disconnect, device number 7 [ 1174.311840][T11893] loop9: detected capacity change from 0 to 512 [ 1174.332288][T11328] udevd[11328]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1174.354507][T11893] EXT4-fs: Ignoring removed i_version option [ 1174.621208][T11893] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.740255][ T4877] Bluetooth: hci4: command tx timeout [ 1174.776256][T11893] ext4 filesystem being mounted at /107/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 1174.811352][T11892] block nbd8: shutting down sockets [ 1179.543129][ T9720] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.741901][ T88] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.899532][ T8413] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1181.042669][ T88] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.104548][ T8413] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1181.151487][ T8413] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1181.198589][ T8413] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.227916][ T8413] usb 10-1: config 220 has no interface number 2 [ 1181.235885][ T8413] usb 10-1: config 220 interface 1 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1181.249186][ T8413] usb 10-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1181.323423][ T8413] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1181.359624][ T8413] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1181.380949][ T88] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.385554][ T8413] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1181.461743][ T8413] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1181.501193][ T8413] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.563274][ T8413] usb 10-1: Product: syz [ 1181.582426][ T8413] usb 10-1: Manufacturer: syz [ 1181.613904][ T8413] usb 10-1: SerialNumber: syz [ 1181.627450][ T88] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.877110][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.884201][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.967643][ T8413] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1181.991860][ T8413] uvcvideo 10-1:220.0: No valid video chain found. [ 1182.188006][ T8413] usb 10-1: USB disconnect, device number 8 [ 1182.509369][ T5683] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1182.660786][ T4877] Bluetooth: hci0: command 0x0406 tx timeout [ 1182.777559][ T5683] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1182.831123][ T5683] usb 6-1: config 0 has no interface number 0 [ 1182.878010][ T5683] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1182.911984][T11955] fuse: fd is not a fuse device [ 1183.016008][ T5683] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1183.062317][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.094889][ T88] bridge_slave_1: left promiscuous mode [ 1183.113150][ T5683] usb 6-1: Product: syz [ 1183.147033][ T5683] usb 6-1: Manufacturer: syz [ 1183.162444][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.177196][ T5683] usb 6-1: SerialNumber: syz [ 1183.228250][ T5683] usb 6-1: config 0 descriptor?? [ 1183.230315][ T88] bridge_slave_0: left allmulticast mode [ 1183.327973][ T5683] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1183.343912][ T88] bridge_slave_0: left promiscuous mode [ 1184.026485][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.043828][ T5683] usb 6-1: USB disconnect, device number 2 [ 1184.068251][ T5683] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1186.638228][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.752322][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.864167][ T88] bond0 (unregistering): Released all slaves [ 1187.042666][ T5683] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1187.229601][ T8415] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1187.264075][ T5683] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1187.304668][ T5683] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1187.344189][ T5683] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.369157][ T5683] usb 9-1: config 220 has no interface number 2 [ 1187.410758][ T5683] usb 9-1: config 220 interface 1 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1187.442413][ T8415] usb 6-1: Using ep0 maxpacket: 8 [ 1187.455365][ T5683] usb 9-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1187.476956][ T8415] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1187.506077][T11993] netlink: 48 bytes leftover after parsing attributes in process `syz.6.983'. [ 1187.528469][ T8415] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1187.549140][ T5683] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1187.562432][ T5683] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1187.572102][ T8415] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1187.594077][ T5683] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1187.604545][ T8415] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1187.665670][ T5683] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1187.698184][ T8415] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1187.707860][ T5683] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.732631][ T5683] usb 9-1: Product: syz [ 1187.738994][ T8415] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.766029][ T5683] usb 9-1: Manufacturer: syz [ 1187.786532][ T5683] usb 9-1: SerialNumber: syz [ 1188.074588][ T8415] usb 6-1: GET_CAPABILITIES returned 0 [ 1188.105900][ T8415] usbtmc 6-1:16.0: can't read capabilities [ 1188.153580][ T5683] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1188.196569][T11835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.214423][ T5683] uvcvideo 9-1:220.0: No valid video chain found. [ 1188.228019][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.291821][T11835] bridge_slave_0: entered allmulticast mode [ 1188.309277][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1188.319697][T11992] usbtmc 6-1:16.0: Unable to send data, error -71 [ 1188.336918][T11835] bridge_slave_0: entered promiscuous mode [ 1188.356032][ T5682] usb 6-1: USB disconnect, device number 3 [ 1188.381788][ T5683] usb 9-1: USB disconnect, device number 4 [ 1188.441819][T11835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.497571][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.546587][T11835] bridge_slave_1: entered allmulticast mode [ 1188.575050][T11835] bridge_slave_1: entered promiscuous mode [ 1188.744527][ T88] hsr_slave_0: left promiscuous mode [ 1188.783584][ T88] hsr_slave_1: left promiscuous mode [ 1188.811988][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.845451][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.884933][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.933245][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.080199][ T88] veth1_macvtap: left promiscuous mode [ 1189.085917][ T88] veth0_macvtap: left promiscuous mode [ 1189.146241][ T88] veth1_vlan: left promiscuous mode [ 1189.194592][ T88] veth0_vlan: left promiscuous mode [ 1194.180388][ T4877] Bluetooth: hci3: command 0x0406 tx timeout [ 1194.937784][T12041] loop6: detected capacity change from 0 to 2640 [ 1194.956559][T12041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1195.000191][T12041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1195.080853][T12041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1195.118751][T12041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1195.173071][T12041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1195.220582][T12041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1195.265406][T12041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1195.342708][T12041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1195.382645][ T88] team0 (unregistering): Port device team_slave_1 removed [ 1195.390821][T12041] ldm_validate_partition_table(): Disk read failed. [ 1195.462453][T12041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1195.494214][ T88] team0 (unregistering): Port device team_slave_0 removed [ 1195.551898][T12041] Buffer I/O error on dev loop6, logical block 0, async page read [ 1195.656544][T12041] Dev loop6: unable to read RDB block 0 [ 1195.691862][T12041] loop6: unable to read partition table [ 1195.716884][T12041] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1196.817469][T11835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.956273][T11835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.386892][T11835] team0: Port device team_slave_0 added [ 1197.483425][T11835] team0: Port device team_slave_1 added [ 1197.882348][T11835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.890883][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.986838][T11835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.023019][T11835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.064870][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.162105][T11835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.589865][ T5683] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1198.656767][T11835] hsr_slave_0: entered promiscuous mode [ 1198.657667][T12086] fuse: fd is not a fuse device [ 1198.671981][T11835] hsr_slave_1: entered promiscuous mode [ 1198.685150][T11835] debugfs: 'hsr0' already exists in 'hsr' [ 1198.697941][T11835] Cannot create hsr debugfs directory [ 1198.786425][ T5683] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1198.826519][ T5683] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1198.860953][ T5683] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.912814][ T5683] usb 9-1: config 220 has no interface number 2 [ 1198.938273][ T5683] usb 9-1: config 220 interface 1 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1198.972168][ T5683] usb 9-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1199.034019][ T5683] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1199.058400][ T5683] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1199.079223][ T5683] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1199.133896][ T5683] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1199.173863][ T5683] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.209852][ T5683] usb 9-1: Product: syz [ 1199.238418][ T5683] usb 9-1: Manufacturer: syz [ 1199.261930][ T5683] usb 9-1: SerialNumber: syz [ 1200.380447][ T5683] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1200.433375][ T5683] uvcvideo 9-1:220.0: No valid video chain found. [ 1200.682974][ T5683] usb 9-1: USB disconnect, device number 5 [ 1207.722303][T11835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1207.862796][T11835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1207.917808][T11835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1208.054168][T11835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1208.077856][T11835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1208.136206][T11835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1208.170765][T11835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1208.255526][T11835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1208.840010][ T8415] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1209.029253][ T8415] usb 6-1: Using ep0 maxpacket: 8 [ 1209.075017][ T8415] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1209.133390][ T8415] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1209.169737][ T8415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.666657][T11835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.788397][ T8415] usb 6-1: Product: syz [ 1209.807598][ T8415] usb 6-1: Manufacturer: syz [ 1209.824913][ T8415] usb 6-1: SerialNumber: syz [ 1209.843916][ T8415] usb 6-1: config 0 descriptor?? [ 1210.842511][T11835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.314381][ T8415] msi2500 6-1:0.0: Registered as swradio24 [ 1211.372182][ T8415] msi2500 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1211.523933][ T8415] usb 6-1: USB disconnect, device number 4 [ 1211.906290][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.913903][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.114673][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.122274][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.334887][ T8426] Bluetooth: hci6: unexpected event for opcode 0x0804 [ 1212.446519][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1035'. [ 1212.482157][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1035'. [ 1212.772559][ T14] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.812233][ T14] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.984273][ T14] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.030492][ T14] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1213.967285][ T5232] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1214.413190][ T8426] Bluetooth: hci0: unknown advertising packet type: 0x82 [ 1214.413427][ T8426] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1214.949452][ T7475] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1215.146533][ T7475] usb 6-1: Using ep0 maxpacket: 8 [ 1215.171005][ T7475] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1215.257983][ T7475] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1215.292130][ T7475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.374515][ T7475] usb 6-1: Product: syz [ 1215.406733][ T7475] usb 6-1: Manufacturer: syz [ 1215.433276][ T7475] usb 6-1: SerialNumber: syz [ 1215.562272][ T7475] usb 6-1: config 0 descriptor?? [ 1216.340339][ T8426] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1216.349969][ T8426] Bluetooth: hci6: Injecting HCI hardware error event [ 1216.358105][ T8426] Bluetooth: hci6: hardware error 0x00 [ 1217.262956][T12229] ADFS-fs (nbd9): error: unable to read block 3, try 0 [ 1217.501532][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1046'. [ 1217.554545][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1046'. [ 1217.601112][ T7475] msi2500 6-1:0.0: Registered as swradio24 [ 1217.645691][ T7475] msi2500 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1217.761322][ T7475] usb 6-1: USB disconnect, device number 5 [ 1218.440959][ T8426] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1221.294605][T11835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.717888][ T4877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1221.732541][T12271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1221.749211][T12271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1221.771237][T12271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1221.787585][T12271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1222.215397][T12278] ADFS-fs (nbd9): error: unable to read block 3, try 0 [ 1222.352216][ T5232] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1222.353214][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1058'. [ 1222.471009][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1058'. [ 1223.860769][T12271] Bluetooth: hci1: command tx timeout [ 1224.825730][ T5949] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.150149][ T5949] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.281111][ T8426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1225.293464][ T8426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1225.306007][ T8426] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1225.328137][ T8426] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1225.345891][ T8426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1225.522959][ T5949] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.941462][ T8426] Bluetooth: hci1: command tx timeout [ 1226.070793][ T5949] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.459327][ T8426] Bluetooth: hci3: command tx timeout [ 1227.739727][ T7475] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1227.846235][ T5949] bridge_slave_1: left allmulticast mode [ 1227.887561][ T5949] bridge_slave_1: left promiscuous mode [ 1227.930871][ T7475] usb 10-1: Using ep0 maxpacket: 8 [ 1227.963670][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.029471][ T8426] Bluetooth: hci1: command tx timeout [ 1228.043586][ T7475] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.106803][ T5949] bridge_slave_0: left allmulticast mode [ 1228.133117][ T7475] usb 10-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1228.147227][ T5949] bridge_slave_0: left promiscuous mode [ 1228.164579][T12342] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 1228.170699][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.195619][ T7475] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.209345][ T7475] usb 10-1: Product: syz [ 1228.214352][ T7475] usb 10-1: Manufacturer: syz [ 1228.223200][ T7475] usb 10-1: SerialNumber: syz [ 1228.251664][ T7475] usb 10-1: config 0 descriptor?? [ 1228.259307][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1068'. [ 1228.294416][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1068'. [ 1228.631226][ T7475] msi2500 10-1:0.0: Registered as swradio24 [ 1228.652995][ T7475] msi2500 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1228.715989][ T7475] usb 10-1: USB disconnect, device number 9 [ 1229.145347][ T5949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.229203][ T5949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.297813][ T5949] bond0 (unregistering): Released all slaves [ 1229.388372][ T5232] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1229.540696][ T8426] Bluetooth: hci3: command tx timeout [ 1229.612994][ T5777] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.654758][ T5777] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.899549][ T5777] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.963059][ T5777] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.100030][ T8426] Bluetooth: hci1: command tx timeout [ 1231.008959][ T5949] hsr_slave_0: left promiscuous mode [ 1231.030918][ T5949] hsr_slave_1: left promiscuous mode [ 1231.056548][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.092548][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.125924][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.161041][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.261171][ T5949] veth1_macvtap: left promiscuous mode [ 1231.280127][ T5949] veth0_macvtap: left promiscuous mode [ 1231.301640][ T5949] veth1_vlan: left promiscuous mode [ 1231.326272][ T5949] veth0_vlan: left promiscuous mode [ 1231.619887][ T8426] Bluetooth: hci3: command tx timeout [ 1232.759152][ T5949] team0 (unregistering): Port device team_slave_1 removed [ 1232.828569][ T5949] team0 (unregistering): Port device team_slave_0 removed [ 1233.699568][ T8426] Bluetooth: hci3: command tx timeout [ 1233.917901][ T5949] IPVS: stop unused estimator thread 0... [ 1234.360838][T12268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.386884][T12268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.411189][T12268] bridge_slave_0: entered allmulticast mode [ 1234.432692][T12268] bridge_slave_0: entered promiscuous mode [ 1234.697566][T12268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.731063][T12268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.753898][T12268] bridge_slave_1: entered allmulticast mode [ 1234.768715][T12268] bridge_slave_1: entered promiscuous mode [ 1235.299604][T12268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.458016][T12268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.867813][T12268] team0: Port device team_slave_0 added [ 1236.021063][T12268] team0: Port device team_slave_1 added [ 1237.444828][T12268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.493396][T12268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1237.656027][T12268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.164092][T12268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.209837][T12268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.253398][T12268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.617283][ T5232] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1238.643637][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.677471][T12313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.709783][T12313] bridge_slave_0: entered allmulticast mode [ 1238.746469][T12313] bridge_slave_0: entered promiscuous mode [ 1238.899162][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.943197][T12313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.983626][T12313] bridge_slave_1: entered allmulticast mode [ 1239.020696][T12313] bridge_slave_1: entered promiscuous mode [ 1239.152645][ T5949] bridge_slave_1: left allmulticast mode [ 1239.172953][ T5949] bridge_slave_1: left promiscuous mode [ 1239.194198][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.266868][ T5949] bridge_slave_0: left allmulticast mode [ 1239.284489][ T5949] bridge_slave_0: left promiscuous mode [ 1239.303521][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.292570][ T5949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.375600][ T5949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.457000][ T5949] bond0 (unregistering): Released all slaves [ 1240.491560][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 1241.499707][T12313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.529901][T12449] overlayfs: failed to clone upperpath [ 1241.740380][ T5949] hsr_slave_0: left promiscuous mode [ 1241.768246][ T5949] hsr_slave_1: left promiscuous mode [ 1241.797232][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.839563][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.360269][ T8335] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1242.559666][ T8335] usb 6-1: Using ep0 maxpacket: 8 [ 1242.614506][ T8335] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1242.669959][ T8335] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1242.719722][ T8335] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1242.746887][ T8335] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1242.794976][ T8335] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.846233][ T8335] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1242.898703][ T8335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.217711][ T8335] usb 6-1: GET_CAPABILITIES returned 2f [ 1243.240710][ T8335] usbtmc 6-1:16.0: can't read capabilities [ 1243.312457][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.322554][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.434416][ T8413] usb 6-1: USB disconnect, device number 6 [ 1243.454625][ T5949] team0 (unregistering): Port device team_slave_1 removed [ 1243.598140][ T5949] team0 (unregistering): Port device team_slave_0 removed [ 1243.700482][T12271] Bluetooth: hci2: command 0x0406 tx timeout [ 1244.803324][T12313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.917479][T12268] hsr_slave_0: entered promiscuous mode [ 1245.309247][T12268] hsr_slave_1: entered promiscuous mode [ 1245.318304][T12268] debugfs: 'hsr0' already exists in 'hsr' [ 1245.327462][T12268] Cannot create hsr debugfs directory [ 1245.963116][T12313] team0: Port device team_slave_0 added [ 1246.027571][T12313] team0: Port device team_slave_1 added [ 1246.775217][T12313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.825883][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.918347][T12313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.061944][T12313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.079252][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.162724][T12313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.647557][T12512] loop5: detected capacity change from 0 to 512 [ 1247.718006][T12512] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1109: bad orphan inode 17 [ 1247.747393][T12512] loop5: lost filesystem error report for type 5 error -117 [ 1247.748934][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1247.764375][ C1] EXT4-fs (loop5): initial error at time 1781025170: ext4_orphan_get:1423 [ 1247.774021][ C1] EXT4-fs (loop5): last error at time 1781025170: ext4_orphan_get:1423 [ 1247.791776][T12512] ext4_test_bit(bit=16, block=4) = 1 [ 1247.816234][T12512] is_bad_inode(inode)=0 [ 1247.845613][T12512] NEXT_ORPHAN(inode)=0 [ 1247.887930][T12512] max_ino=32 [ 1247.920201][T12512] i_nlink=1 [ 1247.933040][T12512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1247.979946][T12313] hsr_slave_0: entered promiscuous mode [ 1248.021523][T12313] hsr_slave_1: entered promiscuous mode [ 1248.049860][T12512] EXT4-fs error (device loop5): __ext4_iget:5481: inode #12: block 2: comm syz.5.1109: invalid block [ 1248.144385][T12313] debugfs: 'hsr0' already exists in 'hsr' [ 1248.177637][T10856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.191280][T12313] Cannot create hsr debugfs directory [ 1248.389374][T12523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1250.043639][T12268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1250.082456][T12268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1250.179735][T12268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1250.201541][ T8335] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1250.258645][T12268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1250.398045][ T8335] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1250.427527][ T8335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.457915][T12268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1250.467437][ T8335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.490917][ T8335] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1250.535495][T12268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1250.550244][ T8335] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1250.571655][ T8335] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1250.586235][T12268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1250.613194][ T8335] usb 6-1: Manufacturer: syz [ 1250.654193][ T8335] usb 6-1: config 0 descriptor?? [ 1250.682379][T12268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1251.429085][T12547] overlayfs: failed to clone upperpath [ 1251.466690][ T8335] hid_parser_main: 30 callbacks suppressed [ 1251.467023][ T8335] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 1251.976925][ T8335] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1252.097359][ T8335] usb 6-1: USB disconnect, device number 7 [ 1253.232169][T12313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1253.276722][T12558] fido_id[12558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1253.306088][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1253.335678][T12570] overlayfs: failed lookup in lower (newroot/84, name='file0', err=-40): overlapping layers [ 1253.338125][T12313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1253.456759][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1253.517685][T12313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1253.613330][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1253.643190][T12313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1253.718036][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1253.991622][T12268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.274997][T12268] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.325951][T12585] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1123'. [ 1254.474347][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.482792][ T5900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.586076][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.594546][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.474816][T12592] overlayfs: failed to clone upperpath [ 1256.343430][T12313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.677771][T12313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.858032][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.866574][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.069638][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.077901][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.697429][T12268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.513501][T12268] veth0_vlan: entered promiscuous mode [ 1261.652228][T12268] veth1_vlan: entered promiscuous mode [ 1261.697416][T12665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.812113][T12313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.078117][T12268] veth0_macvtap: entered promiscuous mode [ 1262.164971][T12268] veth1_macvtap: entered promiscuous mode [ 1262.367872][T12268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.535585][T12268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.781033][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.793367][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.865887][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.877679][T12681] comedi: No check for data length of config insn id 1949724777 is implemented [ 1262.890779][T12681] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1262.898713][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.928488][T12681] comedi: Assuming n=65536 is correct [ 1263.260354][ T29] audit: type=1800 audit(1781025185.609:6): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1146" name="nullb0" dev="tmpfs" ino=1354 res=0 errno=0 [ 1264.717540][T12313] veth0_vlan: entered promiscuous mode [ 1264.853226][T12313] veth1_vlan: entered promiscuous mode [ 1265.098278][ T8426] block nbd5: Receive control failed (result -32) [ 1265.099764][T12702] block nbd5: shutting down sockets [ 1265.286592][T12313] veth0_macvtap: entered promiscuous mode [ 1265.396890][T12313] veth1_macvtap: entered promiscuous mode [ 1265.681819][T12313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.887287][T12313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.075544][ T5949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.096850][ T5949] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.163409][ T5949] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.400530][T12725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1266.764284][ T5949] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.598414][T12735] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1267.672796][T12735] block device autoloading is deprecated and will be removed. [ 1272.322180][ T5682] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1272.359343][T12771] 9p: Bad value for 'rfdno' [ 1272.453756][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.473191][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.509097][ T5682] usb 10-1: Using ep0 maxpacket: 8 [ 1272.575202][ T5682] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1272.618632][ T5682] usb 10-1: config 0 has no interface number 0 [ 1272.640773][ T5682] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1272.695338][ T5682] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1272.759632][ T5682] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1272.811451][ T5682] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1272.880124][ T5682] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1272.913393][ T5682] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.969448][ T5682] usb 10-1: config 0 descriptor?? [ 1273.097498][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.114686][ T5682] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1273.167104][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.485542][ T5682] usb 10-1: USB disconnect, device number 10 [ 1273.540461][ T5682] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1273.980673][T12790] 9pnet_virtio: no channels available for device syz [ 1274.208638][T12793] syzkaller0: entered promiscuous mode [ 1274.224560][T12793] syzkaller0: entered allmulticast mode [ 1274.300156][T12793] tipc: Started in network mode [ 1274.313622][T12793] tipc: Node identity 2ad0d0ecafa3, cluster identity 4711 [ 1274.342255][T12793] tipc: Enabled bearer , priority 0 [ 1274.476201][T12795] tipc: Resetting bearer [ 1274.537175][T12792] tipc: Resetting bearer [ 1274.617281][T12792] tipc: Disabling bearer [ 1275.912110][T12814] 9p: Bad value for 'rfdno' [ 1276.149835][ T8426] block nbd9: Receive control failed (result -32) [ 1276.174781][T12811] block nbd9: shutting down sockets [ 1277.335832][T12830] 9pnet_virtio: no channels available for device syz [ 1278.013728][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1179'. [ 1278.049684][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1179'. [ 1280.308029][ T5900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.361173][ T5900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.839743][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.914829][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.103099][T12865] 9p: Bad value for 'rfdno' [ 1282.402690][ T8426] block nbd3: Receive control failed (result -32) [ 1282.441215][T12866] block nbd3: shutting down sockets [ 1286.754751][T12901] loop5: detected capacity change from 0 to 256 [ 1286.870044][T12901] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1286.891293][T12901] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1286.969230][T12901] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 1286.993311][T12901] exFAT-fs (loop5): failed to load alloc-bitmap [ 1287.000659][T12901] exFAT-fs (loop5): failed to recognize exfat type [ 1287.922873][T12906] 9p: Bad value for 'rfdno' [ 1290.139076][ T8426] block nbd3: Receive control failed (result -32) [ 1290.144639][T12920] block nbd3: shutting down sockets [ 1292.729234][ T5682] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1293.872925][ T3096] IPVS: starting estimator thread 0... [ 1294.319673][T12943] IPVS: using max 240 ests per chain, 12000 per kthread [ 1294.439047][ T5682] usb 10-1: Using ep0 maxpacket: 8 [ 1294.453034][ T5682] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.466141][ T5682] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.477740][ T5682] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1294.485708][ T5682] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1295.339432][ T5682] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.353639][ T5682] usb 10-1: config 0 descriptor?? [ 1296.528542][ T5682] usb 10-1: can't set config #0, error -71 [ 1296.552667][ T5682] usb 10-1: USB disconnect, device number 11 [ 1298.953892][T12967] 9p: Bad value for 'rfdno' [ 1305.024625][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.045272][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.117408][ T5682] IPVS: starting estimator thread 0... [ 1305.343259][T13001] IPVS: using max 240 ests per chain, 12000 per kthread [ 1308.268645][T13018] 9p: Bad value for 'rfdno' [ 1309.235554][ T8426] block nbd5: Receive control failed (result -32) [ 1309.244278][T13020] block nbd5: shutting down sockets [ 1310.571050][T13043] fuse: fd is not a fuse device [ 1315.923571][T13068] 9p: Bad value for 'rfdno' [ 1316.072770][T12271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1316.460400][T12271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1316.481617][T12271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1316.504645][T12271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1316.539787][T12271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1318.659625][ T8426] Bluetooth: hci4: command tx timeout [ 1320.740574][ T8426] Bluetooth: hci4: command tx timeout [ 1322.819680][ T8426] Bluetooth: hci4: command tx timeout [ 1322.865701][T13119] 9p: Bad value for 'rfdno' [ 1324.901080][ T8426] Bluetooth: hci4: command tx timeout [ 1325.191399][T12271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1325.202433][T12271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1325.214459][T12271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1325.253212][T12271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1325.268620][T12271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1325.358707][T13139] loop9: detected capacity change from 0 to 256 [ 1325.536905][T13139] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1325.704650][T13139] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1326.170521][T13139] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 1326.367611][T13139] exFAT-fs (loop9): failed to load alloc-bitmap [ 1326.416626][T13139] exFAT-fs (loop9): failed to recognize exfat type [ 1326.933115][T13139] loop9: detected capacity change from 0 to 2048 [ 1326.989626][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1260'. [ 1327.037975][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1260'. [ 1327.166959][T13139] Alternate GPT is invalid, using primary GPT. [ 1327.212392][T13139] loop9: p2 p3 p7 [ 1327.379297][ T8426] Bluetooth: hci5: command tx timeout [ 1328.607454][T13167] 9p: Bad value for 'rfdno' [ 1329.480783][ T8426] Bluetooth: hci5: command tx timeout [ 1329.747717][ T5901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.337830][ T5901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.647085][T12863] udevd[12863]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 1330.672327][ T5901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.686837][T12626] udevd[12626]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1330.729697][T12922] udevd[12922]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1330.977603][ T5901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.540920][ T8426] Bluetooth: hci5: command tx timeout [ 1332.641649][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1270'. [ 1332.711639][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1270'. [ 1333.171687][ T5901] bridge_slave_1: left allmulticast mode [ 1333.201144][ T5901] bridge_slave_1: left promiscuous mode [ 1333.220349][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.283219][ T5901] bridge_slave_0: left allmulticast mode [ 1333.297485][ T5901] bridge_slave_0: left promiscuous mode [ 1333.315364][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.625444][ T8426] Bluetooth: hci5: command tx timeout [ 1335.111017][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.202245][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.266651][ T5901] bond0 (unregistering): Released all slaves [ 1335.373756][T13070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.402310][T13070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.429414][T13070] bridge_slave_0: entered allmulticast mode [ 1335.546723][T13070] bridge_slave_0: entered promiscuous mode [ 1335.567065][T13070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.575333][T13070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.583804][T13070] bridge_slave_1: entered allmulticast mode [ 1335.600912][T13070] bridge_slave_1: entered promiscuous mode [ 1337.315961][T13070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.394017][T13070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.875601][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1285'. [ 1338.986916][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1285'. [ 1339.647793][T13070] team0: Port device team_slave_0 added [ 1339.976969][ T5901] hsr_slave_0: left promiscuous mode [ 1340.057852][ T5901] hsr_slave_1: left promiscuous mode [ 1340.104104][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1340.133318][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.176745][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.217785][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.972049][ T5901] veth1_macvtap: left promiscuous mode [ 1340.991696][ T5901] veth0_macvtap: left promiscuous mode [ 1340.998245][ T5901] veth1_vlan: left promiscuous mode [ 1341.010322][ T5901] veth0_vlan: left promiscuous mode [ 1342.271582][ T5901] team0 (unregistering): Port device team_slave_1 removed [ 1342.387474][ T5901] team0 (unregistering): Port device team_slave_0 removed [ 1343.744587][T13070] team0: Port device team_slave_1 added [ 1344.162494][T13070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.208213][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.381394][T13070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.494690][T13070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.543663][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.704320][T13070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.825039][ T5901] IPVS: stop unused estimator thread 0... [ 1345.606388][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1295'. [ 1345.688035][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1295'. [ 1345.944804][ T29] audit: type=1326 audit(1781025268.299:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13294 comm="syz.9.1297" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4c1d9ce59 code=0x0 [ 1346.021084][T13070] hsr_slave_0: entered promiscuous mode [ 1346.053383][T13070] hsr_slave_1: entered promiscuous mode [ 1346.078537][T13070] debugfs: 'hsr0' already exists in 'hsr' [ 1346.094361][T13070] Cannot create hsr debugfs directory [ 1349.274591][ T5901] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.287677][ T5901] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.717861][ T5901] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.114650][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1306'. [ 1351.156157][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1306'. [ 1351.276935][ T5901] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.856090][T13141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.864657][T13141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.873418][T13141] bridge_slave_0: entered allmulticast mode [ 1351.883738][T13141] bridge_slave_0: entered promiscuous mode [ 1351.903509][T13141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.927841][T13141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.976035][T13141] bridge_slave_1: entered allmulticast mode [ 1352.015798][T13141] bridge_slave_1: entered promiscuous mode [ 1352.273582][T13342] ===================================================== [ 1352.282224][T13342] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 1352.290451][T13342] batadv_get_vid+0x2ce/0x3b0 [ 1352.295828][T13342] batadv_interface_tx+0x2e8/0x1dc0 [ 1352.302042][T13342] dev_hard_start_xmit+0x22f/0xa80 [ 1352.307999][T13342] __dev_queue_xmit+0x2990/0x5a00 [ 1352.313869][T13342] __bpf_redirect+0x162e/0x1760 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1352.319686][T13342] bpf_clone_redirect+0x4a6/0x6c0 [ 1352.325612][T13342] ___bpf_prog_run+0x13e8/0xeab0 [ 1352.331476][T13342] __bpf_prog_run32+0xc2/0xf0 [ 1352.336801][T13342] bpf_test_run+0x846/0xdf0 [ 1352.342197][T13342] bpf_prog_test_run_skb+0x2988/0x35f0 [ 1352.348385][T13342] bpf_prog_test_run+0x5bb/0x9f0 [ 1352.354270][T13342] __sys_bpf+0x925/0xee0 [ 1352.359246][T13342] __x64_sys_bpf+0xa4/0xf0 [ 1352.364296][T13342] x64_sys_call+0x13d0/0x3ea0 [ 1352.365224][T13141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.369824][T13342] do_syscall_64+0x15d/0x3c0 [ 1352.369924][T13342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.370035][T13342] [ 1352.370059][T13342] Uninit was created at: [ 1352.370282][T13342] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 1352.370444][T13342] pskb_expand_head+0x2f3/0x1a40 [ 1352.370649][T13342] skb_ensure_writable+0x44e/0x510 [ 1352.370801][T13342] bpf_clone_redirect+0x301/0x6c0 [ 1352.370947][T13342] ___bpf_prog_run+0x13e8/0xeab0 [ 1352.429769][T13342] __bpf_prog_run32+0xc2/0xf0 [ 1352.435110][T13342] bpf_test_run+0x846/0xdf0 [ 1352.440403][T13342] bpf_prog_test_run_skb+0x2988/0x35f0 [ 1352.446564][T13342] bpf_prog_test_run+0x5bb/0x9f0 [ 1352.452397][T13342] __sys_bpf+0x925/0xee0 [ 1352.457256][T13342] __x64_sys_bpf+0xa4/0xf0 [ 1352.462479][T13342] x64_sys_call+0x13d0/0x3ea0 [ 1352.467792][T13342] do_syscall_64+0x15d/0x3c0 [ 1352.473263][T13342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.480036][T13342] [ 1352.482697][T13342] CPU: 0 UID: 0 PID: 13342 Comm: syz.6.1308 Not tainted syzkaller #0 PREEMPT(lazy) [ 1352.493357][T13342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1352.501234][T13141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.504682][T13342] ===================================================== [ 1352.522570][T13342] Disabling lock debugging due to kernel taint [ 1352.529555][T13342] Kernel panic - not syncing: kmsan.panic set ... [ 1352.536729][T13342] CPU: 0 UID: 0 PID: 13342 Comm: syz.6.1308 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 1352.548937][T13342] Tainted: [B]=BAD_PAGE [ 1352.553597][T13342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1352.564785][T13342] Call Trace: [ 1352.568476][T13342] [ 1352.571781][T13342] __dump_stack+0x26/0x30 [ 1352.576703][T13342] dump_stack_lvl+0x50/0x1c0 [ 1352.581906][T13342] ? dump_stack+0x12/0x25 [ 1352.586802][T13342] dump_stack+0x1e/0x25 [ 1352.591529][T13342] vpanic+0x7b4/0x1430 [ 1352.596179][T13342] panic+0x15d/0x160 [ 1352.600645][T13342] kmsan_report+0x31a/0x320 [ 1352.605761][T13342] ? __msan_warning+0x1b/0x30 [ 1352.611043][T13342] ? batadv_get_vid+0x2ce/0x3b0 [ 1352.616535][T13342] ? batadv_interface_tx+0x2e8/0x1dc0 [ 1352.622634][T13342] ? dev_hard_start_xmit+0x22f/0xa80 [ 1352.628604][T13342] ? __dev_queue_xmit+0x2990/0x5a00 [ 1352.634475][T13342] ? __bpf_redirect+0x162e/0x1760 [ 1352.640170][T13342] ? bpf_clone_redirect+0x4a6/0x6c0 [ 1352.646065][T13342] ? ___bpf_prog_run+0x13e8/0xeab0 [ 1352.651847][T13342] ? __bpf_prog_run32+0xc2/0xf0 [ 1352.657334][T13342] ? bpf_test_run+0x846/0xdf0 [ 1352.662590][T13342] ? bpf_prog_test_run_skb+0x2988/0x35f0 [ 1352.668905][T13342] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1352.674685][T13342] ? __sys_bpf+0x925/0xee0 [ 1352.679686][T13342] ? __x64_sys_bpf+0xa4/0xf0 [ 1352.684880][T13342] ? x64_sys_call+0x13d0/0x3ea0 [ 1352.690359][T13342] ? do_syscall_64+0x15d/0x3c0 [ 1352.695711][T13342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.702527][T13342] ? kmsan_get_metadata+0xf1/0x160 [ 1352.708314][T13342] ? kmsan_get_metadata+0xf1/0x160 [ 1352.714098][T13342] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1352.720677][T13342] ? batadv_interface_tx+0xa1/0x1dc0 [ 1352.726654][T13342] ? filter_irq_stacks+0x49/0x190 [ 1352.732343][T13342] ? kmsan_get_metadata+0xf1/0x160 [ 1352.738134][T13342] __msan_warning+0x1b/0x30 [ 1352.743276][T13342] batadv_get_vid+0x2ce/0x3b0 [ 1352.748579][T13342] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1352.755158][T13342] batadv_interface_tx+0x2e8/0x1dc0 [ 1352.761061][T13342] ? kmsan_report+0x310/0x320 [ 1352.766380][T13342] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1352.773522][T13342] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1352.779894][T13342] dev_hard_start_xmit+0x22f/0xa80 [ 1352.785746][T13342] __dev_queue_xmit+0x2990/0x5a00 [ 1352.791434][T13342] ? skb_release_data+0x1071/0x1120 [ 1352.797310][T13342] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1352.804339][T13342] ? kmsan_get_metadata+0xf1/0x160 [ 1352.810129][T13342] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1352.816704][T13342] ? __dev_queue_xmit+0x2d4/0x5a00 [ 1352.822494][T13342] ? pskb_expand_head+0x164b/0x1a40 [ 1352.828428][T13342] __bpf_redirect+0x162e/0x1760 [ 1352.833940][T13342] ? kmsan_get_metadata+0xf1/0x160 [ 1352.839762][T13342] bpf_clone_redirect+0x4a6/0x6c0 [ 1352.845487][T13342] ___bpf_prog_run+0x13e8/0xeab0 [ 1352.851119][T13342] __bpf_prog_run32+0xc2/0xf0 [ 1352.856410][T13342] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1352.863549][T13342] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1352.870108][T13342] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1352.876175][T13342] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1352.882237][T13342] bpf_test_run+0x846/0xdf0 [ 1352.887322][T13342] ? csum_partial+0x424/0x480 [ 1352.892619][T13342] ? kmsan_get_metadata+0xf1/0x160 [ 1352.898433][T13342] ? bpf_test_run+0x2f4/0xdf0 [ 1352.903734][T13342] bpf_prog_test_run_skb+0x2988/0x35f0 [ 1352.909860][T13342] ? futex_unqueue+0x22d/0x2c0 [ 1352.915413][T13342] ? kmsan_get_metadata+0xf1/0x160 [ 1352.921206][T13342] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1352.927791][T13342] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1352.934937][T13342] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1352.941455][T13342] bpf_prog_test_run+0x5bb/0x9f0 [ 1352.947099][T13342] __sys_bpf+0x925/0xee0 [ 1352.951961][T13342] __x64_sys_bpf+0xa4/0xf0 [ 1352.956967][T13342] x64_sys_call+0x13d0/0x3ea0 [ 1352.962263][T13342] do_syscall_64+0x15d/0x3c0 [ 1352.967428][T13342] ? clear_bhb_loop+0x50/0xa0 [ 1352.972699][T13342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.979331][T13342] RIP: 0033:0x7f10b979ce59 [ 1352.984773][T13342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.006474][T13342] RSP: 002b:00007f10ba6cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1353.015878][T13342] RAX: ffffffffffffffda RBX: 00007f10b9a15fa0 RCX: 00007f10b979ce59 [ 1353.024750][T13342] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1353.033609][T13342] RBP: 00007f10b9832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1353.042477][T13342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.051330][T13342] R13: 00007f10b9a16038 R14: 00007f10b9a15fa0 R15: 00007ffffb564848 [ 1353.060227][T13342] [ 1353.064003][T13342] Kernel Offset: disabled [ 1353.068821][T13342] Rebooting in 86400 seconds..