last executing test programs: 3m7.595699588s ago: executing program 3 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x1000}) 2m58.732361281s ago: executing program 3 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x242d3c50, 0x2, 0x0, 0x8}}) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001040), 0x109540, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x7fffffff, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) write$uinput_user_dev(r3, 0x0, 0xfffffffffffffd7b) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) 2m49.724449114s ago: executing program 3 (id=407): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prlimit64(r2, 0x6, &(0x7f0000000080)={0x3, 0x209}, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xd19e, 0x30}, &(0x7f0000000140)=0xc) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2m48.031516148s ago: executing program 3 (id=410): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3200002, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$eJzs3c9vG1UeAPDv2EmaNNUmjVa72z1sI61WrbTbpEnbVYQ4tFdUReWHuMCB0KSlNG2jJghSkJpK5YKEuCCExIkD5b+Ail57ghMHLpxQpQhQuSFhZHsmiRM7P5zEU3U+H8n1zHuevO80+Xpmnt8bB1BYw9V/ShFHImIuiRhIllbquiKtHK6/7vGv712sPpKoVF78eSiStCx7fZI+96cb90bEt98kMVTe2O784q2rU7OzMzfT9dGFa3Oj84u3Tly5NnV55vLM9fH/j0+cOX1mYuxkW/t1e2PRb+fvvvn2wAeTr3zx2e/J2Jc/TCZxNp5LX7h2P/bKcAzX/k+SjVX9E3vdWE7K6d9JpVKpZGVJV74xsX3Z7687Iv4eA1GO1V/eQLz/fK7BAfuqktTfu4EiStrK/769DwTosOw8ILu2X38dXMrlrATohOVz9Q6AjfnfVe8bjN5a38DBx0ms7dZJIqK9nrlGhyLi4YPJu5ceTN6NfeqHA5pbuhMR/2iW/0kt/wejNwZr+V9qyP/qecGF9Lla/kKb7a/vKpb/0Dn1/O/dNP+jRf6/Vn2+Xc/h19tqvXftyht9Dfnf1+4uAQAAAAAAQGHdPxcR/1v5/L9n9fO30sr4n2gy/qc/Is7uQfvD69Y3fv5ferQHzQBNLJ+LeLbp+N9SNvp3sLxmCutgdCeXrszOnIyIv0TE8eg+UF0f26SNEx8Ofdqqbjgd/5c9qu0/TMcCpnE86jrQuM301MLULnYZSC3fifI/m47/TVaO/0mT43/1nWFum20M/efehVZ1W+c/sF8qn0cca3r8X71rRbL5/TlGa+cDo9lZwUb/evejr1q1327+u8UE7N7ynYiDm+f/YLL2fj3zO2/j1GJXpVVdu+f/PclLtbsK9aRl70wtLNwci+hJzperpQ3l4zuPGZ5GWT5k+VLN/+P/Xs3/cpP+v2bn/30RsbTuZye/NM4pzvztj/4fW8Xj/B/yU83/6R0d/3e+MH5v8OtW7W/v+H+6dqw/npbo/4O6T7I07eluKG+Sjl3NqjoeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BUoRcSiS0sjKcqk0MhLRHxF/jYOl2RvzC/+9dOOt69PVutr3/5eyb/odqK8n2ff/D65ZH1+3fioiDkfEx+W+2vrIxRuz03nvPAAAAAAAAAAAAAAAAAAAADwh+lvM/6/6qZx3dMC+68o7ACA3TfL/uzziADrP8R+KS/5Dccl/KC75D8Ul/6G4Ns//Vyc6FgjQcY7/UFzyHwAAAAAAniqHj97/PomIpWf6ao+qnrSuO9fIgP1WyjsAIDdu8QPFZegPFJdrfCDZor635UZbbbmZuYu72BgAAAAAAAAAAAAACufYEfP/oajM/4fiMv8fiiub/3805ziAznOND8QWM/mbzv/fcqs1XGgAAAAAAAAAAAAAwK7NL966OjU7O3PTwsttbJWNas49+PYWKpXK7Wr4T0o8e7+QpCPUO9JoNhS+83vas50dzOb6be8nb3yvONCh9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDRnwEAAP//4Fgg0g==") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000100)={0x9f0902, 0x7, @name="ea8dd03fa72836ba95935cd834c7b2bb431da1f2462e78a208e78fe608a462a8"}) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f00000004c0), 0x8, 0x28, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m43.852053617s ago: executing program 3 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x64) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = socket(0x10, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000000), &(0x7f00000002c0)=ANY=[@ANYBLOB="0412"], 0x2, 0x1) modify_ldt$write2(0x11, &(0x7f0000000040)={0x400, 0x100000, 0x4000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000580)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000014000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b"], 0x0, 0x80}, 0x28) 2m38.655250679s ago: executing program 3 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) io_destroy(0x0) io_setup(0x2278, &(0x7f0000000180)) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x28f3b026f783dd18, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0) write$UHID_INPUT(r5, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@sysvgroups}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r6, 0x0) 2m21.814016473s ago: executing program 32 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) io_destroy(0x0) io_setup(0x2278, &(0x7f0000000180)) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x28f3b026f783dd18, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0) write$UHID_INPUT(r5, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@sysvgroups}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r6, 0x0) 27.564646615s ago: executing program 2 (id=564): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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") fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) creat(&(0x7f0000000580)='./bus\x00', 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f0007012bbd70cc00000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000001640)=0xe) ioctl$TCSETSF2(r4, 0x402c542d, 0x0) 26.729992688s ago: executing program 4 (id=565): r0 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) fchmod(r0, 0xd2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) syz_open_dev$loop(0x0, 0x6, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x23, 0x5, 0x0) close(0x3) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) migrate_pages(0x0, 0x5, &(0x7f0000004e40)=0xbf3, &(0x7f0000004e80)=0xc3) socket$inet_sctp(0x2, 0x5, 0x84) 25.398356843s ago: executing program 2 (id=566): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x286, &(0x7f00000009c0)="$eJzs2k1rXFUYB/DnxqSdSUkn4hstiAddqJuhyVqhRSKIAUWNUAXprZnomOtMyB0CI2Ky0q0fQXAhiEt3gnTpJhs/gQt32WRZQRyZt5rE0iodMxJ+v8Xl5OT87z3nnuHyzGUOXvjy482Nsr6Rd2Imy2LmauzF7SwWYybG9uL5Z6//9OSb19959drqamXUu5xSuvjUj+9++t3TtzoX3v7+4g/nY3/xvYPD5V/3H9+/dPDHWx82y9QsU6vdSXm62W538ptFI603y816Sq8XjbxspGarbGwf+/9G0d7a6qa8tb4wv7XdKMuUt7pps9FNnXbqbHdT/kHebKV6vZ4W5oMHsfbt7V4vDntzN6LX61W/igu3YuGXqEX2cMoeuZo9diN7Yi+7dNjr1U5Gq9OZMZM13P9z8a/3nzNh9FBfeSOlSsz2Hwk7axHFF/1jRCWubUQzimjElajG74OPyciw/fIrqytX0sBifF7s7gzzuztrDw3Ofye/lGX9v++WXxrm0zh/PiL6x/mj+eWoxaN3zc+NlpKOX78Szz1zJF+PWvz8frSjiPXBPGJ3lFv5bCmll15bPZG/PBgHAHDW1Iel11wM67d+0XasfquPBvy9vhvmj9SHtfvUhyfqq9m4PDvdtRNRdj/ZzIuisd3/gjdo3OmZQGNcmk/shP9B47eTPdXxbakevT/3aIxfhUx2YuP3bP2emWN7Nu07prF3uhf9+twUVhrx0ak+iZiGvzb9vkMrpzIhAAAAAAAAAAAA/pEH/KngNy8OT3PPwdNeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P/2ZwAAAP//1a6yjQ==") ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x460400, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 22.644943646s ago: executing program 1 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4b) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)="719089bbe10c5c9b9ca4d2b606003d6831896da05fa6b6c8448123714abb4f5fc4ed5e185551a678577a51ad1e43d315aef4a2ca5003ab862f744407693658fa6a23bf9f2973f646c6bd398a169521cc6ec59c4931617765f9674d0454e39b28aee5e71cf139fd152eac64ef74020b8bf100640a32eb739b93947b83", 0x7c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0xfffffffffffffdaf) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0x7fffffff}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0x10003) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0xfffffffc, 0x1000, 0x8000}) bind$bt_rfcomm(r7, &(0x7f0000000180)={0x1f, @any, 0xd}, 0xa) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.102312359s ago: executing program 1 (id=570): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) ioctl(r3, 0x4048aec9, &(0x7f0000000600)="010000000000000001") ioctl(r4, 0x4048aecb, &(0x7f0000000700)="000000002efcaff8f01ecc") ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0x3d13, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r5, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) 20.045126746s ago: executing program 2 (id=571): r0 = mq_open(&(0x7f00000002c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x850\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xa4\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96n\x17|\xc9xR\\0\xd5\x8c=J\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd3\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfc\xa7\x14t\x9feN*\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0xd8, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mq_getsetattr(r0, 0x0, 0xfffffffffffffffe) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r2 = socket(0xa, 0x3, 0x87) fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000a40)={'broute\x00', 0x0, 0x0, 0x0, [0x100000001, 0x7, 0x80, 0x6, 0x8, 0x80], 0x2, &(0x7f0000000980), 0x0, [{}, {}]}, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) lseek(r0, 0x60000, 0x4) socket$netlink(0x10, 0x3, 0x8000000004) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x3000cc0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x308, &(0x7f0000000400)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mount$nfs4(&(0x7f0000000040)='-}^\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x81, &(0x7f0000000100)={[{'1\x00'}, {'\\'}, {'/-+.#%$}+('}, {'!..)-,*\x83'}, {'][\'.'}, {'1\x00'}]}) write$binfmt_format(r6, &(0x7f0000000000)='1\x00', 0x2400) 19.003618014s ago: executing program 4 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4040850}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10000, &(0x7f0000000500)={[], [{@measure}, {@pcr={'pcr', 0x3d, 0x1e}}, {@uid_lt={'uid<', r7}}, {@smackfsdef={'smackfsdef', 0x3d, '\\\xaf'}}, {@subj_user={'subj_user', 0x3d, '/proc/self/make-it-fail\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r7}}]}, 0x6, 0x632, &(0x7f0000000c80)="$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") syz_usb_connect(0x5, 0x63, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x0, 0x82, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/make-it-fail\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000000c0)={0x10}) 16.464387427s ago: executing program 0 (id=575): unshare(0x6c060a80) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x7, &(0x7f0000000380)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x191}}}, &(0x7f0000000200)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xffffffee, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x93}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x20, 0x3, 0x1f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x282f, 0x40, 0x40000003, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x20000001, 0xffffffff}}], 0x1, 0x0, 0x0) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271f, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x7cb8, 0x4000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2204000, &(0x7f0000000080)={[{@nobh}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x575, &(0x7f0000000d40)="$eJzs3d9rW1UcAPDvTZOt3abrQAb6IIU9OJlLt9YfE3yYj6LDgb7P0GZlNF1Gk461Dtwe9MUXGYKIA/EP8N3H4T/gXzHQwZBR9MGXym1uum5N0rRNm2g+H7jbOffc5txzz/2entObkACG1kT6Ty7i5Yj4Jok4vqksH1nhROO41Se3Z9ItibW1T/5MIsn2NY9Psv+PNjP5iF+/jDiT21pvbXllvlSplBez/GR94cZkbXnl7LWF0lx5rnx9anr6wlvTU+++83bP2vr65b+///jBBxe+PrX63c+PTtxL4mIcy8o2t2MP7mzOTMREdk0KcfG5A8/3oLJBkvT7BNiVkSzOC5GOAcdjJIt64P/vi4hYA4bSWCTiH4ZUcx7QXNs/XQeP9nFWcnAev99YAG1tf77xt5EYXV8bHVlNnlkZpevd8R7Un9bxyx/376Vb9O7vEADbunM3Is7l81vHvyQb/3bvXBfHPF+H8Q8OzoN0/vNGq/lPbmP+Ey3mP0dbxO5ubB//uUc9qKatdP73Xsv578ZDq/GRLPdCxNh4FJKr1yrldGx7MSJOR+Fwmu/0POfC6sO1dmWb53/pltbfnAs2rn3uUf7wsz8zW6qX9trupsd3I15pOf9NNvo/adH/6fW43GUdJ8v3X21X1rn9+2/tp4jXWvb/0ydaSefnk5Pr98Nk867Y6q+vTv7Wrv5+tz/t/yOd2z+ebH5eW9t5HT+O/lNuV7Z9+1vf/4eST9fTh7J9t0r1+uL5iEPJR1v3Tz392Wa+eXza/tOnOo9/re7/sYj4rMv2d1pJD0L/z+6o/3eeePjh5z+0qz9rfyE69v+b66nT2Z5uxr9uT3Av1w4AAAAAAAAGTS4ijkWSK26kc7lisfH+jpfiSK5SrdXPXK0uXZ+N9c/Kjkch13zSfbyRT5rvfxjflJ96Lj8dESci4tuRsfV8caZame134wEAAAAAAAAAAAAAAAAAAGBAHG3z+f/U7yP9Pjtg3/nKbxhe28Z/L77pCRhIu/39v9jj8wAOnvk/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50Kd3WVp/cnknzszeXl+arN8/OlmvzxYWlmeJMdfFGca5anauUizPVhe1er1Kt3jg/FUu3JuvlWn2ytrxyZaG6dL1+5dpCaa58pVw4kFYBAAAAAAAAAAAAAAAAAADAf0tteWW+VKmUFyUGOTG6T698Z++vk29TlCSNO6zfl26/E6NZJA3K+XSbSKLzMf0clQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWf8GAAD//2LSLFM=") rmdir(&(0x7f0000000380)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="0160000010010000240012800900010069706970"], 0x44}}, 0x84000) sendmsg$nl_route(r6, 0x0, 0x4c8c0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000) getsockname$netlink(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x5) 16.396025133s ago: executing program 2 (id=576): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x6b4e1c1017bef5ac, 0x0, &(0x7f0000000500)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000700)={&(0x7f00000003c0)="120eb51c09523d85223b584dd4b8b51f5fae9c4f92c3ebf188846516fd2d224eb16784acefd27bd99a0b73b5190b1602b7b7e418fcc007f1df8de7633d8c336ac3a4928b4dd76ff6bd3c15ba3f462dc6016a467d0d5ffe3d3fb39728e921b43f1726f1e43c9cace17cb79359581dce9dcbf51a10f969bacc426a48cba644c44ec49f657ef468c8b079b1bb07dfe22b44172ea1881f5d859ea334bc0255e23cf26879f55715df8cfaf4a15c3ae90169e0aa66069a46a88e6615d0635bfccfbce61d721c225f33ab3d60cbe77b6f29b63d556cdab48a47410a8cfba41e70043bba23762b9e558c9729d288", 0xea}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x0, 0xff, 0x3}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f0000000000)={[{@mode={'mode', 0x3d, 0x80000000}}]}) 14.886507224s ago: executing program 1 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) write$tcp_congestion(r3, &(0x7f0000000080)='dctcp\x00', 0x6) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) sendfile(r4, r4, 0x0, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="06ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r8, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x0) poll(&(0x7f0000000380)=[{r9, 0x10}], 0x1, 0x5) 13.297448087s ago: executing program 2 (id=578): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x148, 0x111, 0x4b4, 0x0, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0xffffff00], [], 'ip6tnl0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x33) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) syz_emit_ethernet(0x9a, &(0x7f0000000200)={@link_local, @random=' u\b\x00', @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@broadcast, 0x6a9d2469}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2a5b}]}]}}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "fff522a45d565fd1bef2bde4487648f5ba27bbe6628c1000836849b5e92bda7c", "146a317637af5c94b1e2cab23b8908c4", {"1440048630554f6e84da74a7f80e383e", "2585ff3e812ec53f2f0d7d41bea87c5c"}}}}}}}, 0x0) recvmmsg(r7, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0xd, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x33, 0x20, 0x0, @in={0x2, 0x4e21, @empty}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}, 0xf}, @in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}]}, 0x68}}, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 13.118130726s ago: executing program 4 (id=579): socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r2, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008, 0x804, 0xfffffffe, 0x100000, 0x8, 0x1}) socket(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x20, 0x80, 0x2, 0x7, {{0x5, 0x4, 0x1, 0x32, 0x14, 0x64, 0x0, 0x7, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x30}}}}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4091) ioctl$TCFLSH(r1, 0x400455c8, 0x4) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) request_key(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd']) syz_open_dev$dri(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003c3b6f640fd0b12019e9d01020301090224"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) 12.129032269s ago: executing program 0 (id=580): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f000000a400)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xffff, 0x3}, 0x80, 0x0}}], 0x1, 0x10) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) shutdown(r2, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/67) write(r6, &(0x7f0000000040)='add syz0 ::1', 0xc) 10.153096031s ago: executing program 0 (id=581): openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r2, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r4, 0x1) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x3}, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) 9.910507932s ago: executing program 4 (id=582): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x100000001, 0x10200) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x40) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x50) ioctl$TCSETAF(r0, 0x5408, 0x0) r2 = openat$mice(0xffffffffffffff9c, 0x0, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x2, 0x2, 0x8, 0x1, 0x4}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 8.786555053s ago: executing program 1 (id=583): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16], 0x0, 0x20000000, 0xfffffc3e, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_emit_ethernet(0x30, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x1018042, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1f3) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x0) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xfffb}, 0x6) 7.019207862s ago: executing program 4 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='tes', 0x3) sched_setaffinity(r2, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60f81fcb00383a00fc000000000000000000000000000000ff020000000000000000"], 0x0) capget(&(0x7f0000002680)={0x20080522}, &(0x7f00000026c0)={0x3ff, 0x0, 0x4, 0x100, 0x5, 0x2}) rename(0x0, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0xf00000000000000}, 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xe20, 0x3040002, @mcast2, 0x2}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) 6.909269391s ago: executing program 0 (id=585): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x8000) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r4 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r4, 0x8800000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1000084, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) fsopen(&(0x7f0000000240)='adfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.962973663s ago: executing program 4 (id=586): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfbdfe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x84) fsopen(0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020400) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0) r6 = syz_io_uring_setup(0x3158, &(0x7f0000000040)={0x0, 0x986, 0x42, 0x0, 0x17e}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x2000000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000001c0)={0xc}) 3.549201929s ago: executing program 1 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@setlink={0x48, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x34702, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x48}}, 0x20040850) iopl(0xe) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x480501, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x100, 0x2, 0x2, 0x10, 0x9, 0x5, 0x0, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfffffffd, 0xfffffffe, 0x7, 0x100003, 0x80000003, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0x1, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.847874086s ago: executing program 0 (id=588): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc04, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@test_dummy_encryption_v1}, {@errors_remount}, {@nogrpid}]}, 0x1, 0x43f, &(0x7f0000001d80)="$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") fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) creat(&(0x7f0000000580)='./bus\x00', 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x1, 0x6}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f0007012bbd70cc00000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000001640)=0xe) ioctl$TCSETSF2(r4, 0x402c542d, 0x0) 372.741971ms ago: executing program 0 (id=589): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x9, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @port=0x4e23}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x17, @remote, @broadcast, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0x0}}}}, 0x380) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r2, &(0x7f0000000880)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{0x1, 0x7, 0x6, "abeb06406726"}, {0x6, 0x3, 0x3, 0x3, 0x8, 0x752a}}}, 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x100, 0x111, 0x4b4, 0x100, 0xd4feffff, 0x20c, 0x20a, 0x278, 0x20c, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0x0, 0xff0001fe], 0x4e21, 0x4e20, 0x4e24, 0x4e21, 0x2d90b2e5, 0x4, 0xfffffffc, 0x7, 0x1}}}, {{@ipv6={@loopback, @loopback, [], [0xffffffff, 0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0x850003d1) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4048004) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r7, &(0x7f0000000100)='10000', 0x5) 144.343154ms ago: executing program 2 (id=590): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006e80)=@deltfilter={0xfc4, 0x2d, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffe0, 0xf}, {0xc, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x94}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_matchall={{0xd}, {0xd8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xba12663a254f322, 0x5}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0xb4, 0x2, [@m_ct={0xb0, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x85, 0x6, "dd3250e9d8432596ffa806169243b5dfe25427cbdbe18508f2ad470a5b6c0b71c137f772aa8423a557742b206087e8514a63a0f700200b52b82056e8c1b5057dc3d5994713b2516988d23ecad8a7d74a9b1436f2ea1596f239e7e6f9d16c5a2e0f99e7b1bd8daf2e388dac30320c5af530516c72effd0be9804ac555ea94a7af91"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe88, 0x2, [@TCA_CGROUP_ACT={0xe84, 0x1, [@m_pedit={0xe80, 0xb, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x2, 0x97c, 0x1, 0x6, 0x200}, 0x8a, 0x80, [{0x8, 0x5875f981, 0x6, 0x4, 0xa, 0x8}, {0x6, 0xec4a, 0xff, 0xfffffffe, 0x7}]}, [{0x8, 0xac1f, 0x100, 0xfffffff0, 0x2, 0x7}, {0xfffff000, 0x7, 0x80000000, 0x7, 0x200, 0x8}, {0x1800, 0x9, 0x6, 0xfffffff7, 0xffff, 0x7}, {0x4, 0xd5, 0x8, 0x0, 0x4447, 0x5}, {0x4, 0xc63f, 0x1, 0x1, 0xed1, 0x2}, {0xffffffff, 0xe8, 0x800, 0x83b, 0x8, 0x6}, {0xc, 0xffff7fff, 0x3, 0x5, 0x7f, 0xfffffffb}, {0xb, 0x9, 0x408, 0x80, 0x6, 0x768}, {0xffff8bff, 0x8, 0x3c27, 0x3, 0xc, 0x75ef2317}, {0x5, 0x8, 0x1, 0x4, 0x5, 0x3}, {0x8, 0x8, 0x80000000, 0x7, 0x0, 0x10}, {0xfff, 0x8, 0x80000000, 0x80, 0x6, 0x5}, {0xa0, 0x101, 0x6, 0x3, 0x0, 0xdf}, {0x4, 0x5, 0x2, 0x3, 0xfffff000, 0xaa6}, {0x7, 0x80000000, 0x8, 0xfffffff4, 0xfe6, 0x75}, {0x3, 0xa6, 0x0, 0x2, 0x40, 0x8}, {0x4, 0x9d3, 0x6, 0x5, 0xd, 0x4}, {0xfd3afc0, 0x3, 0x5, 0x2, 0xff, 0xfffffabf}, {0x5, 0x2, 0xfff, 0x2, 0x2, 0x81}, {0xcb09, 0xb, 0x3ff, 0x6, 0xa, 0x3}, {0x1000, 0x1, 0x200, 0x2, 0x5, 0xff}, {0x4a6, 0xd3, 0x0, 0x8, 0x4, 0x9}, {0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0xe921}, {0x6, 0x4, 0x7fff, 0xc16, 0x9, 0x8}, {0xffff, 0x7, 0x7, 0x10000, 0xffffffff, 0xffff8001}, {0x6, 0xb, 0x28dc, 0x6, 0x7fff, 0x9}, {0x4, 0x8001, 0x1000, 0x60d1, 0x1, 0x1}, {0x5, 0x1, 0x4, 0xffff7fff, 0xe4c, 0x7cc28a0b}, {0x9, 0x8, 0x200020, 0xdb78, 0x4, 0x7}, {0x80, 0xffffffff, 0x4, 0x400, 0xffff5956, 0x8}, {0x1, 0x1000, 0x4, 0x4, 0xffffffff}, {0x6, 0x7fff, 0x3, 0x27a8, 0x9a3, 0x7}, {0x4, 0x80, 0x1ff, 0xffffffff, 0x5, 0x5}, {0x2, 0x62, 0x6e, 0x1000, 0x3, 0xff}, {0x7, 0x8, 0x2, 0xffffffff, 0x400, 0x10001}, {0x0, 0x7ff, 0x8, 0x7, 0xff, 0x69c}, {0x7, 0x7, 0x3, 0x2, 0x1, 0x2}, {0xd1b4, 0x2, 0x0, 0x2, 0x3ff, 0x6}, {0x636cf16a, 0x7fffffff, 0x80000000, 0x3, 0x7f, 0x660b}, {0x4, 0xb3, 0xc2c, 0x2, 0x5, 0x4}, {0xffff3de5, 0x5, 0x3, 0x6, 0x4b7, 0x7fffffff}, {0x10c3, 0x4, 0x4, 0xfffff1ce, 0x800, 0x4}, {0x750, 0x0, 0x7, 0x7, 0x6, 0x3}, {0x7, 0xff, 0x1bdf, 0x5, 0x7ff, 0x5}, {0xff, 0x1206f6e2, 0x0, 0x800, 0x2, 0x200}, {0x5, 0x1a, 0x400, 0x3, 0x608b, 0x9}, {0x4, 0x2, 0x2, 0x4, 0x9, 0x2}, {0x200, 0x8, 0x1, 0x6, 0x11f7, 0x7}, {0xffff, 0x2, 0x200, 0x9, 0xffff, 0x100}, {0x0, 0xffff8000, 0x6, 0xfff, 0xb1e, 0xc33}, {0x8, 0x76f, 0x5, 0x7, 0xffffffff, 0x9}, {0x80000001, 0x9, 0x3, 0x7, 0x80, 0xd}, {0x5, 0x80000001, 0x9, 0x3, 0xb5f, 0x3}, {0x4, 0xcfb, 0x7, 0x1, 0x2, 0x80000000}, {0x7fff, 0x8, 0x165, 0xb59c, 0x7, 0x2}, {0x14, 0x4, 0x527, 0x8, 0x10000}, {0xac1, 0x5, 0x2, 0x7, 0x4, 0xd3}, {0x1, 0xc7, 0x15, 0xb, 0x9, 0x4}, {0x9, 0x0, 0x8, 0x7, 0x5, 0x7fffffff}, {0x2, 0x5, 0x2, 0x1, 0x1a3f9ae0, 0xc}, {0x9, 0x8, 0x6, 0xd1, 0x9, 0x7}, {0x6, 0x334, 0xe7cf, 0x8000, 0x3a0, 0x9}, {0x67, 0x0, 0xc, 0x4, 0x400, 0x86c}, {0x3, 0x0, 0xfffffff6, 0x80000000, 0x3}, {0x0, 0xb6, 0x2, 0x6e52, 0x2, 0x3}, {0x4, 0x4, 0x81, 0x8, 0x8, 0x7}, {0xfffffffc, 0x9, 0x2, 0x0, 0x1, 0x7fff}, {0x1, 0x7fffffff, 0xffffffff, 0xe5d, 0x5, 0x7de7}, {0x1, 0x5a, 0x0, 0xfffffff9, 0x3, 0x7b}, {0x369f, 0x0, 0x1c18, 0x401, 0x3, 0x931}, {0xfff, 0x12fc, 0x7, 0x67d, 0x8001, 0x10}, {0x4, 0x7f, 0x9, 0x81, 0x101, 0x5}, {0x2, 0x8001, 0x925, 0x8, 0x7, 0xfffffff8}, {0xf2d, 0x7ee, 0x80000000, 0x988, 0x9, 0x6}, {0x0, 0x2, 0x5, 0x120000, 0x0, 0x9a}, {0x100, 0xfffffffe, 0x1ff, 0x5, 0x8, 0xfffffffb}, {0xfffffff8, 0x9, 0x7ff, 0x70, 0x9, 0x1}, {0x5, 0x3, 0x0, 0x8, 0x1, 0x80}, {0x81, 0x8, 0x5, 0x5, 0x1000, 0x800}, {0xd, 0x3, 0x3, 0x3, 0x21, 0x728e357b}, {0x0, 0x1, 0x9, 0x4, 0x2, 0xb}, {0xfffffffa, 0x80, 0x7, 0x10001, 0x6, 0x4}, {0x5afba23, 0xfffff43e, 0x9, 0xfffffff9, 0x3, 0x4}, {0x5, 0x40, 0x81, 0x6, 0x400, 0x2c000000}, {0x0, 0x1, 0x9, 0x200, 0x4, 0x100000}, {0x1, 0x400, 0xf, 0x9, 0x0, 0x40}, {0x5, 0x4361, 0x7, 0x5f, 0x3, 0x8}, {0x1, 0xcb46, 0x7f, 0x4, 0x7f, 0x2}, {0x401, 0x10000, 0x2, 0x2, 0x2, 0xfffff74e}, {0x8000, 0x1, 0x0, 0xfffffffd, 0x2, 0x6}, {0x9, 0x10, 0x2, 0x1, 0x3, 0xfc}, {0x7, 0x7, 0x5, 0x1, 0x8ca4, 0x6}, {0x5, 0x9a9, 0xffffffff, 0x8, 0xffffffbd, 0xfffffff9}, {0x1, 0x2, 0x452111f6, 0xfffffffb, 0x6, 0x9}, {0x5, 0x4, 0x7, 0x2, 0x9, 0x9}, {0x4, 0x8000, 0x9, 0xf, 0xd3be, 0xffffffff}, {0x5, 0x6, 0x8, 0x2, 0x3, 0x2}, {0x5, 0x8, 0x10000, 0x10001, 0xfffffffe, 0x6}, {0x7, 0x90, 0x1, 0x2, 0x6, 0x9}, {0x0, 0x6, 0xfff, 0x2, 0x1, 0x80000001}, {0x5, 0x9, 0xc, 0x6, 0x964, 0xffffffff}, {0xb, 0x4, 0x8, 0x81, 0xf513, 0x343}, {0x0, 0x1, 0xfffff801, 0x319, 0x2800000, 0x40}, {0x6, 0x8, 0x40, 0x7, 0x0, 0x5}, {0x3, 0x3, 0xd, 0x8, 0x10001, 0x2}, {0x2, 0x4, 0x7, 0x8, 0x400, 0x2}, {0x100, 0x8, 0x7fffffff, 0x0, 0x6, 0x9}, {0x8, 0x10, 0x7afb, 0x6, 0x1923f85c, 0x5}, {0x3, 0x9, 0x2, 0x3, 0x6, 0x7}, {0x6, 0x3, 0x7fffffff, 0x1, 0x4, 0x1c000000}, {0x1, 0xfffffffe, 0x3ff, 0x7fffffff, 0x1ff, 0x6}, {0x8000, 0xffff73df, 0xb, 0x66f3, 0x8001, 0x2}, {0x80, 0x521b6b31, 0x7, 0x3, 0x3, 0x6}, {0x6, 0x3, 0x0, 0x7, 0xfffffff7, 0x8}, {0x401, 0xe, 0xc, 0x7, 0x5f51, 0xbee}, {0x6, 0xb, 0x6, 0x3800, 0x8, 0x9}, {0x3, 0x4, 0x8, 0x6, 0x3, 0x4}, {0x1a70, 0x2, 0x8, 0x400, 0xe05, 0x7}, {0xffff, 0xc4, 0x684e, 0x9, 0x81, 0x93c}, {0x2, 0x3, 0x2, 0xffff, 0x80000001, 0x101}, {0x4, 0x12ef, 0x8001, 0x1b, 0x2, 0xf1d00}, {0xfffffff2, 0xb82, 0x101, 0x6, 0x3, 0xff}, {0x4, 0x816f, 0xbee, 0x4, 0x0, 0x3}, {0xb, 0x10, 0x0, 0x3, 0x9, 0x2}, {0x5, 0x9, 0x3, 0x81, 0x9}, {0xfff, 0x1, 0x6, 0x7, 0x4, 0x4a}, {0xb8b, 0x1, 0xb, 0xc, 0x40}, {0x4, 0xf1e0, 0x6ba2, 0x8001, 0x7, 0x416d}], [{0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0xa46238420b1f4f47}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x2}, {0x1, 0x1}, {0x4}, {}, {0x2}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x7, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x42b87ee76b9da29f}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x1}, {0x4}, {0x5}, {0x1}, {0x4}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xfc4}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r4, &(0x7f0000000640)="3132f52c", 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) 0s ago: executing program 1 (id=591): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r3, 0x1) setsockopt(r2, 0x84, 0x7f, &(0x7f00000001c0)="02000000", 0x4) r4 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x1, 0x0) writev(r4, &(0x7f0000000240)=[{}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x9, 0x9, 0x9, 0x4}}) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000), 0x0) r5 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) acct(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000010) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$DVB_DVR_DMX_QUERYBUF(r7, 0xc0186f3d, &(0x7f0000000140)={0xc, 0x3, 0x1, 0x3, 0x11, 0x6b8}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 79.229611][ T5603] cgroup: Unknown subsys name 'net' [ 79.346493][ T5603] cgroup: Unknown subsys name 'cpuset' [ 79.355088][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.995105][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.470929][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.481595][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.491792][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.492642][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.493984][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.495397][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.503220][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.512132][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.512670][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.520390][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.521521][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.522120][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.529844][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.545504][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.596334][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.600046][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.620202][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.627914][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.635443][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.644229][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.645925][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.649878][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.660327][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.674488][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.684035][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.655163][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.655319][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.659020][ T5615] bridge_slave_0: entered allmulticast mode [ 87.663691][ T52] Bluetooth: hci0: command tx timeout [ 87.664793][ T5621] Bluetooth: hci1: command tx timeout [ 87.665692][ T5617] Bluetooth: hci2: command tx timeout [ 87.668977][ T5615] bridge_slave_0: entered promiscuous mode [ 87.732223][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.733360][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.733826][ T5632] bridge_slave_0: entered allmulticast mode [ 87.738882][ T5632] bridge_slave_0: entered promiscuous mode [ 87.745872][ T5621] Bluetooth: hci3: command tx timeout [ 87.746376][ T5617] Bluetooth: hci4: command tx timeout [ 87.748740][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.748998][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.749389][ T5615] bridge_slave_1: entered allmulticast mode [ 87.757961][ T5615] bridge_slave_1: entered promiscuous mode [ 87.842545][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.842784][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.846939][ T5632] bridge_slave_1: entered allmulticast mode [ 87.852160][ T5632] bridge_slave_1: entered promiscuous mode [ 87.915971][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.916193][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.916577][ T5616] bridge_slave_0: entered allmulticast mode [ 87.921586][ T5616] bridge_slave_0: entered promiscuous mode [ 87.943989][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.970218][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.970637][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.971022][ T5616] bridge_slave_1: entered allmulticast mode [ 87.977424][ T5616] bridge_slave_1: entered promiscuous mode [ 88.006465][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.049130][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.092757][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.111899][ T5615] team0: Port device team_slave_0 added [ 88.136233][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.156537][ T5615] team0: Port device team_slave_1 added [ 88.197327][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.206540][ T5632] team0: Port device team_slave_0 added [ 88.221962][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.229452][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.229791][ T5614] bridge_slave_0: entered allmulticast mode [ 88.239256][ T5614] bridge_slave_0: entered promiscuous mode [ 88.271239][ T5632] team0: Port device team_slave_1 added [ 88.287655][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.287692][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.287719][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.294771][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.295120][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.295586][ T5614] bridge_slave_1: entered allmulticast mode [ 88.305450][ T5614] bridge_slave_1: entered promiscuous mode [ 88.311287][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.311542][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.311928][ T5618] bridge_slave_0: entered allmulticast mode [ 88.317288][ T5618] bridge_slave_0: entered promiscuous mode [ 88.366886][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.366903][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.366986][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.438610][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.438992][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.439330][ T5618] bridge_slave_1: entered allmulticast mode [ 88.448745][ T5618] bridge_slave_1: entered promiscuous mode [ 88.481427][ T5616] team0: Port device team_slave_0 added [ 88.516587][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.516628][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.516656][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.536435][ T5616] team0: Port device team_slave_1 added [ 88.584220][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.587863][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.587920][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.588001][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.637938][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.637976][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.638019][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.650717][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.694787][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.702104][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.702151][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.702270][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.771499][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.815728][ T5615] hsr_slave_0: entered promiscuous mode [ 88.818707][ T5615] hsr_slave_1: entered promiscuous mode [ 88.850759][ T5614] team0: Port device team_slave_0 added [ 88.875108][ T5632] hsr_slave_0: entered promiscuous mode [ 88.878044][ T5632] hsr_slave_1: entered promiscuous mode [ 88.880183][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 88.880427][ T5632] Cannot create hsr debugfs directory [ 88.907486][ T5618] team0: Port device team_slave_0 added [ 88.914645][ T5614] team0: Port device team_slave_1 added [ 88.952838][ T5618] team0: Port device team_slave_1 added [ 88.985485][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.985627][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.985730][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.016246][ T5616] hsr_slave_0: entered promiscuous mode [ 89.019343][ T5616] hsr_slave_1: entered promiscuous mode [ 89.023257][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 89.023308][ T5616] Cannot create hsr debugfs directory [ 89.080918][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.080958][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.080986][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.119703][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.119789][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.119876][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.185129][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.185170][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.185974][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.330666][ T5614] hsr_slave_0: entered promiscuous mode [ 89.336349][ T5614] hsr_slave_1: entered promiscuous mode [ 89.338777][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 89.338837][ T5614] Cannot create hsr debugfs directory [ 89.475035][ T5618] hsr_slave_0: entered promiscuous mode [ 89.477705][ T5618] hsr_slave_1: entered promiscuous mode [ 89.479545][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 89.479596][ T5618] Cannot create hsr debugfs directory [ 89.743122][ T52] Bluetooth: hci0: command tx timeout [ 89.743328][ T5621] Bluetooth: hci1: command tx timeout [ 89.743542][ T5617] Bluetooth: hci2: command tx timeout [ 89.823123][ T5621] Bluetooth: hci3: command tx timeout [ 89.824425][ T5617] Bluetooth: hci4: command tx timeout [ 89.853622][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.866375][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.887179][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.898692][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.913986][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.924002][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.941596][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.953611][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.007261][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.020699][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.028453][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.040179][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.048027][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.059398][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.072297][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.083361][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.173718][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.186509][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.203876][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.215737][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.219656][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.233993][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.253034][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.264277][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.369247][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.380676][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.388080][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.399197][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.418863][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.429998][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.436257][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.446240][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.510494][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.549741][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.597506][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.607733][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.620844][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.630069][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.640082][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.647309][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.658139][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.672725][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.681225][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.713277][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.713703][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.734504][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.745182][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.745745][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.785471][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.785700][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.816491][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.816741][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.894605][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.022288][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.062766][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.110476][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.110708][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.158812][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.158938][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.199106][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.206327][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.231363][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.231501][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.287486][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.287603][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.379939][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.430656][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.430909][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.474373][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.474627][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.827069][ T5617] Bluetooth: hci2: command tx timeout [ 91.827128][ T5617] Bluetooth: hci1: command tx timeout [ 91.827195][ T5617] Bluetooth: hci0: command tx timeout [ 91.859598][ T988] cfg80211: failed to load regulatory.db [ 91.906128][ T5621] Bluetooth: hci4: command tx timeout [ 91.906151][ T5617] Bluetooth: hci3: command tx timeout [ 92.135314][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.394625][ T5632] veth0_vlan: entered promiscuous mode [ 92.438382][ T5632] veth1_vlan: entered promiscuous mode [ 92.513801][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.621606][ T5632] veth0_macvtap: entered promiscuous mode [ 92.669917][ T5632] veth1_macvtap: entered promiscuous mode [ 92.692257][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.773663][ T5615] veth0_vlan: entered promiscuous mode [ 92.790626][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.814901][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.829309][ T5615] veth1_vlan: entered promiscuous mode [ 92.903252][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.935529][ T1160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.937594][ T1160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.938363][ T1160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.000654][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.015728][ T5614] veth0_vlan: entered promiscuous mode [ 93.045321][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.139688][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.139740][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.147331][ T5614] veth1_vlan: entered promiscuous mode [ 93.162203][ T5615] veth0_macvtap: entered promiscuous mode [ 93.205536][ T5615] veth1_macvtap: entered promiscuous mode [ 93.286281][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.286325][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.316905][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.374925][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.394131][ T5616] veth0_vlan: entered promiscuous mode [ 93.433996][ T5614] veth0_macvtap: entered promiscuous mode [ 93.461647][ T5632] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.491939][ T5614] veth1_macvtap: entered promiscuous mode [ 93.507019][ T5616] veth1_vlan: entered promiscuous mode [ 93.594736][ T78] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.594828][ T78] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.595954][ T78] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.596059][ T78] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.660135][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.671448][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.775159][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.779179][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.794856][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.794933][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.795017][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.879227][ T5616] veth0_macvtap: entered promiscuous mode [ 93.890831][ T5618] veth0_vlan: entered promiscuous mode [ 93.905773][ T5616] veth1_macvtap: entered promiscuous mode [ 93.912508][ T5617] Bluetooth: hci0: command tx timeout [ 93.912549][ T5617] Bluetooth: hci1: command tx timeout [ 93.912579][ T5617] Bluetooth: hci2: command tx timeout [ 93.962734][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.984308][ T5621] Bluetooth: hci4: command tx timeout [ 93.992744][ T5621] Bluetooth: hci3: command tx timeout [ 94.072840][ T5618] veth1_vlan: entered promiscuous mode [ 94.099424][ T644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.099463][ T644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.165740][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.175916][ T644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.175958][ T644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.768118][ T5618] veth0_macvtap: entered promiscuous mode [ 94.775215][ T5618] veth1_macvtap: entered promiscuous mode [ 94.791221][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.796377][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.845339][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.964112][ T1041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.964542][ T1041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.964654][ T1041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.964742][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.964852][ T1041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.964949][ T1041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.965041][ T1041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.970952][ T1041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.009517][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.009579][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.027669][ T5818] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.558719][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.567912][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.829255][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.829301][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.901229][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.901276][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.168879][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.180541][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.234878][ T5841] loop2: detected capacity change from 0 to 32768 [ 97.246350][ T5841] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11 (5841) [ 97.290472][ T5841] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.290542][ T5841] BTRFS info (device loop2): using sha256 checksum algorithm [ 97.416155][ T5841] BTRFS info (device loop2): enabling ssd optimizations [ 97.416217][ T5841] BTRFS info (device loop2): turning on sync discard [ 97.416238][ T5841] BTRFS info (device loop2): enabling free space tree [ 97.416336][ T5841] BTRFS info (device loop2): use zlib compression, level 3 [ 98.788266][ T5614] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.244870][ T5843] loop1: detected capacity change from 0 to 32768 [ 99.344655][ T5843] xfs: Deprecated parameter 'ikeep' [ 99.351848][ T5843] XFS: ikeep mount option is deprecated. [ 99.358396][ T5843] xfs: Deprecated parameter 'ikeep' [ 99.365093][ T5843] XFS: ikeep mount option is deprecated. [ 99.475154][ T988] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 99.602274][ T5870] loop0: detected capacity change from 0 to 512 [ 99.719247][ T988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.720404][ T5870] EXT4-fs: Ignoring removed i_version option [ 99.737182][ T988] usb 5-1: not running at top speed; connect to a high speed hub [ 99.749358][ T988] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 99.762929][ T5870] EXT4-fs (loop0): Test dummy encryption mode enabled [ 99.773644][ T988] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.773687][ T988] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.797486][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.797531][ T988] usb 5-1: Product: syz [ 99.797564][ T988] usb 5-1: Manufacturer: syz [ 99.797585][ T988] usb 5-1: SerialNumber: syz [ 99.845566][ T5870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 99.845785][ T5870] System zones: 1-2, 4-12, 8-8 [ 99.983186][ T5870] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.15: iget: bad i_size value: 38620345925642 [ 99.984243][ T5870] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.997670][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 99.997695][ C0] EXT4-fs (loop0): initial error at time 1787662895: ext4_orphan_get:1403: inode 15 [ 99.997727][ C0] EXT4-fs (loop0): last error at time 1787662895: ext4_orphan_get:1403: inode 15 [ 100.027667][ T5870] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.15: couldn't read orphan inode 15 (err -117) [ 100.028221][ T5870] loop0: lost filesystem error report for type 5 error -117 [ 100.060010][ T5843] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.302435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.364311][ T5870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.972782][ T5843] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 100.973474][ T5843] XFS (loop1): log mount failed [ 101.572534][ T5887] workqueue: Failed to create a rescuer kthread for wq "blk_crypto_wq": -EINTR [ 101.684420][ T5887] fscrypt (loop0): Error -12 starting to use blk-crypto [ 101.960243][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.844623][ T5912] loop2: detected capacity change from 0 to 1024 [ 107.365254][ T5912] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 107.365624][ T5912] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 107.376977][ T5912] EXT4-fs (loop2): invalid journal inode [ 107.377393][ T5912] EXT4-fs (loop2): can't get journal size [ 107.513092][ T5912] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 107.513489][ T5912] EXT4-fs (loop2): mount failed [ 107.852690][ T988] usb 5-1: USB disconnect, device number 2 [ 108.130469][ T5921] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.303404][ T5939] loop4: detected capacity change from 0 to 32768 [ 111.304306][ T5939] ======================================================= [ 111.304306][ T5939] WARNING: The mand mount option has been deprecated and [ 111.304306][ T5939] and is ignored by this kernel. Remove the mand [ 111.304306][ T5939] option from the mount to silence this warning. [ 111.304306][ T5939] ======================================================= [ 111.467088][ T5939] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.26 (5939) [ 111.501838][ T5939] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 111.501991][ T5939] BTRFS info (device loop4): using blake2b checksum algorithm [ 111.699784][ T5956] loop2: detected capacity change from 0 to 512 [ 111.714310][ T5956] EXT4-fs: Ignoring removed i_version option [ 111.734245][ T5939] BTRFS info (device loop4): enabling ssd optimizations [ 111.734292][ T5939] BTRFS info (device loop4): turning on async discard [ 111.734325][ T5939] BTRFS info (device loop4): enabling free space tree [ 111.734349][ T5939] BTRFS info (device loop4): use zstd compression, level 3 [ 111.760291][ T5956] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.797108][ T5956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 111.797233][ T5956] System zones: 1-2, 4-12, 8-8 [ 111.831940][ T31] audit: type=1800 audit(1787662906.970:2): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.26" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 111.841434][ T31] audit: type=1800 audit(1787662906.980:3): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.26" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 111.877191][ T5956] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.29: iget: bad i_size value: 38620345925642 [ 111.877229][ T5956] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.890384][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 111.890411][ C1] EXT4-fs (loop2): initial error at time 1787662907: ext4_orphan_get:1403: inode 15 [ 111.890471][ C1] EXT4-fs (loop2): last error at time 1787662907: ext4_orphan_get:1403: inode 15 [ 111.897247][ T5956] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.29: couldn't read orphan inode 15 (err -117) [ 111.897340][ T5956] loop2: lost filesystem error report for type 5 error -117 [ 112.045278][ T5956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.349026][ T5968] fscrypt: AES-256-XTS using blk-crypto-fallback [ 113.550552][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.618937][ T5945] loop3: detected capacity change from 0 to 32768 [ 115.338211][ T5618] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 115.359967][ T5945] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 115.366527][ T5945] (syz.3.28,5945,1):ocfs2_initialize_super:2225 ERROR: status = -12 [ 115.400089][ T5945] (syz.3.28,5945,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 115.758445][ T5979] loop0: detected capacity change from 0 to 1024 [ 118.044613][ T5986] loop4: detected capacity change from 0 to 512 [ 119.674535][ T5986] EXT4-fs (loop4): Test dummy encryption mode enabled [ 120.782407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 121.218446][ T5986] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.218496][ T5986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.242735][ T5986] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 121.242819][ T5986] EXT4-fs: failed to create workqueue [ 121.242848][ T5986] EXT4-fs (loop4): mount failed [ 122.131704][ T6005] jffs2: notice: (6005) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.927004][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.42'. [ 123.342435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 125.246373][ T6018] loop4: detected capacity change from 0 to 512 [ 125.253737][ T6018] EXT4-fs: Ignoring removed i_version option [ 125.269088][ T6018] EXT4-fs (loop4): Test dummy encryption mode enabled [ 126.737763][ T6018] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 126.737901][ T6018] System zones: 1-2, 4-12, 8-8 [ 126.765026][ T6018] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.43: iget: bad i_size value: 38620345925642 [ 126.765106][ T6018] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.777827][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 126.777855][ C1] EXT4-fs (loop4): initial error at time 1787662921: ext4_orphan_get:1403: inode 15 [ 126.777889][ C1] EXT4-fs (loop4): last error at time 1787662921: ext4_orphan_get:1403: inode 15 [ 126.778631][ T6018] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.43: couldn't read orphan inode 15 (err -117) [ 126.778664][ T6018] loop4: lost filesystem error report for type 5 error -117 [ 126.830233][ T6018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.180178][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.126887][ T6039] tipc: Started in network mode [ 129.126945][ T6039] tipc: Node identity f6560b9ed804, cluster identity 4711 [ 129.127644][ T6039] tipc: Enabled bearer , priority 0 [ 129.150671][ T6039] syzkaller0: entered promiscuous mode [ 129.150721][ T6039] syzkaller0: entered allmulticast mode [ 129.170947][ T6040] loop2: detected capacity change from 0 to 256 [ 129.180709][ T6040] exfat: Deprecated parameter 'namecase' [ 129.287871][ T6040] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 129.329433][ T6039] tipc: Resetting bearer [ 129.535696][ T6038] tipc: Resetting bearer [ 129.776537][ T6046] loop0: detected capacity change from 0 to 2048 [ 129.823851][ T6045] loop3: detected capacity change from 0 to 32768 [ 130.062593][ T6046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.135102][ T6045] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 130.135137][ T6045] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 130.534216][ T6045] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 4ms [ 130.728069][ T6038] tipc: Disabling bearer [ 130.804799][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 130.804854][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 130.870006][ T5724] tipc: Node number set to 777128862 [ 131.263414][ T6053] loop0: detected capacity change from 0 to 16 [ 131.321038][ T6053] erofs (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 131.325747][ T6053] erofs (device loop0): mounted with root inode @ nid 36. [ 131.393176][ T6053] erofs (device loop0): corrupted dir block 1490945 @ nid 36 [ 132.090801][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1285ms [ 132.091353][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 132.092126][ T6045] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 132.377059][ T6063] loop2: detected capacity change from 0 to 32768 [ 132.396695][ T6063] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.52 (6063) [ 132.585330][ T6063] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.585378][ T6063] BTRFS info (device loop2): using sha256 checksum algorithm [ 132.794788][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794998][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.436738][ T6063] BTRFS info (device loop2): enabling ssd optimizations [ 133.436796][ T6063] BTRFS info (device loop2): turning on sync discard [ 133.436834][ T6063] BTRFS info (device loop2): enabling free space tree [ 133.436915][ T6063] BTRFS info (device loop2): use zlib compression, level 3 [ 134.629369][ T31] audit: type=1800 audit(1787662929.240:4): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.52" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 134.667087][ T6083] jffs2: notice: (6083) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.988424][ T5614] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.142464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 137.116872][ T6097] loop1: detected capacity change from 0 to 128 [ 137.456033][ T6098] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 137.456532][ T6098] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 137.512462][ T6097] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 137.527060][ T6097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.151885][ T6104] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 138.151923][ T6104] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 138.151964][ T6104] CIFS mount error: No usable UNC path provided in device string! [ 138.151964][ T6104] [ 138.152149][ T6104] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 138.285420][ T6106] bridge_slave_0: left allmulticast mode [ 138.285484][ T6106] bridge_slave_0: left promiscuous mode [ 138.291212][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.387134][ T6106] bridge_slave_1: left allmulticast mode [ 138.387178][ T6106] bridge_slave_1: left promiscuous mode [ 138.393295][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.481022][ T6106] bond0: (slave bond_slave_0): Releasing backup interface [ 138.618315][ T6106] bond0: (slave bond_slave_1): Releasing backup interface [ 138.753890][ T6106] team0: Port device team_slave_0 removed [ 140.524191][ T6106] team0: Port device team_slave_1 removed [ 140.526699][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.526769][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.164655][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.164707][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.187767][ T6106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 141.465572][ T6119] Bluetooth: ISO socket layer initialized [ 142.828471][ T6134] loop3: detected capacity change from 0 to 16 [ 142.879025][ T6134] erofs (device loop3): mounted with root inode @ nid 36. [ 143.159085][ T6135] syz.3.68: attempt to access beyond end of device [ 143.159085][ T6135] loop3: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 143.164022][ T6135] syz.3.68: attempt to access beyond end of device [ 143.164022][ T6135] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 143.179927][ T6135] syz.3.68: attempt to access beyond end of device [ 143.179927][ T6135] loop3: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 143.184726][ T6135] erofs (device loop3): read error -5 @ 0 of nid 89 [ 143.227848][ T31] audit: type=1800 audit(1787662938.330:5): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.68" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 143.939756][ T6141] evm: overlay not supported [ 152.664628][ T5731] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 152.859006][ T5731] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.932232][ T5731] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.932289][ T5731] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.013151][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.013209][ T5731] usb 5-1: SerialNumber: syz [ 153.335778][ T6189] Bluetooth: MGMT ver 1.23 [ 153.390598][ T5731] usb 5-1: 0:2 : does not exist [ 154.472797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.025959][ T59] wlan1: Trigger new scan to find an IBSS to join [ 155.201209][ T5731] usb 5-1: USB disconnect, device number 3 [ 155.435248][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.605743][ T6203] zram0: detected capacity change from 0 to 24 [ 155.810917][ T6201] overlayfs: conflicting lowerdir path [ 157.822752][ T6212] comedi comedi1: Minor 4 specified more than once! [ 157.830524][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.325548][ T6205] loop1: detected capacity change from 0 to 8192 [ 158.403531][ T6205] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.496719][ T6205] capability: warning: `syz.1.77' uses 32-bit capabilities (legacy support in use) [ 160.317839][ T6221] loop3: detected capacity change from 0 to 2048 [ 160.375675][ T6221] NILFS (loop3): invalid segment: Magic number mismatch [ 160.385291][ T6221] NILFS (loop3): trying rollback from an earlier position [ 160.537274][ T6221] NILFS (loop3): recovery complete [ 160.587414][ T6224] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.948915][ T6230] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 161.235250][ T6232] loop1: detected capacity change from 0 to 2048 [ 161.369036][ T6232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.760840][ T6234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.768168][ T6234] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.941680][ T6234] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 163.003938][ T6234] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.018716][ T6234] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 163.076448][ T6234] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 163.130730][ T6234] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.136094][ T6234] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 163.247138][ T6234] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 163.477395][ T6234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.548763][ T6246] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 163.548845][ T6246] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 164.065183][ T6234] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.248458][ T6234] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.280779][ T6234] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.287187][ T6234] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.310914][ T6234] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.648161][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 164.702456][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.022500][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.207415][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.472629][ T6265] Zero length message leads to an empty skb [ 165.502516][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.260560][ T6266] loop4: detected capacity change from 0 to 8 [ 166.302572][ T988] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 166.314249][ T5621] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.473497][ T988] usb 1-1: Using ep0 maxpacket: 8 [ 166.484234][ T988] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 166.548093][ T988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.559417][ T988] usb 1-1: config 0 has no interfaces? [ 166.683810][ T988] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 166.693272][ T988] usb 1-1: Product: syz [ 166.693337][ T988] usb 1-1: Manufacturer: syz [ 166.693396][ T988] usb 1-1: SerialNumber: syz [ 166.759083][ T5745] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 166.794272][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.808023][ T6266] unable to read xattr id index table [ 166.838250][ T988] usb 1-1: config 0 descriptor?? [ 166.949956][ T5745] usb 4-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.00 [ 166.976446][ T5745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.976515][ T5745] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 166.976614][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.039601][ T5745] usb 4-1: config 0 descriptor?? [ 167.073061][ T6275] loop2: detected capacity change from 0 to 512 [ 167.102413][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.146026][ T988] usb 1-1: USB disconnect, device number 2 [ 167.184909][ T6275] EXT4-fs (loop2): Test dummy encryption mode enabled [ 167.198763][ T6275] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.263329][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.327886][ T6275] EXT4-fs (loop2): 1 truncate cleaned up [ 167.348245][ T6255] warning: `syz.3.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 167.360509][ T6275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.467835][ T6286] netlink: 'syz.4.106': attribute type 10 has an invalid length. [ 167.583028][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.727310][ T6287] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 168.395528][ T5621] Bluetooth: hci4: command 0x0c1a tx timeout [ 168.668291][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.870659][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.182469][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.345379][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.461028][ T5745] usbhid 4-1:0.0: can't add hid device: -71 [ 169.461165][ T5745] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 169.467238][ T5745] usb 4-1: USB disconnect, device number 2 [ 169.672421][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.462485][ T5621] Bluetooth: hci4: command 0x0c1a tx timeout [ 171.163477][ T6291] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.163519][ T6291] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 171.190099][ T6291] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.190127][ T6291] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 171.222420][ T6291] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.222471][ T6291] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 171.242048][ T6291] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.242097][ T6291] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 171.280224][ T6291] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.280262][ T6291] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 171.428251][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 172.102435][ T5723] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 172.975724][ T5723] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 172.992449][ T5723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.016203][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 173.016248][ T5723] usb 1-1: Product: syz [ 173.016281][ T5723] usb 1-1: Manufacturer: syz [ 173.016300][ T5723] usb 1-1: SerialNumber: syz [ 173.189760][ T5723] usb 1-1: config 0 descriptor?? [ 173.230406][ T5723] usb 1-1: no audio or video endpoints found [ 174.104887][ T5731] usb 1-1: USB disconnect, device number 3 [ 177.693115][ T6354] syz_tun: entered allmulticast mode [ 177.766026][ T6353] syz_tun: left allmulticast mode [ 177.874128][ T5731] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 178.040237][ T5731] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 178.053640][ T5731] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 178.053673][ T5731] usb 3-1: config 0 has no interface number 0 [ 178.053746][ T5731] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 178.053782][ T5731] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 178.053810][ T5731] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 178.053840][ T5731] usb 3-1: config 0 interface 2 has no altsetting 0 [ 178.123182][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.123228][ T5731] usb 3-1: Product: syz [ 178.123262][ T5731] usb 3-1: Manufacturer: syz [ 178.123282][ T5731] usb 3-1: SerialNumber: syz [ 178.155232][ T5731] usb 3-1: config 0 descriptor?? [ 178.164275][ T6352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.164447][ T6352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.193994][ T5731] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.559972][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.593100][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.013530][ T6377] mmap: syz.0.126 (6377) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.151625][ T5619] usb 3-1: USB disconnect, device number 2 [ 183.442634][ T6406] loop1: detected capacity change from 0 to 32768 [ 183.454302][ T6406] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.122 (6406) [ 183.474914][ T6406] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.474972][ T6406] BTRFS info (device loop1): using sha256 checksum algorithm [ 183.587733][ T6406] BTRFS info (device loop1): enabling ssd optimizations [ 183.588296][ T6406] BTRFS info (device loop1): turning on sync discard [ 183.588340][ T6406] BTRFS info (device loop1): enabling free space tree [ 183.588435][ T6406] BTRFS info (device loop1): use zlib compression, level 3 [ 185.426943][ T6404] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 185.723856][ T6438] syzkaller0: entered promiscuous mode [ 185.723900][ T6438] syzkaller0: entered allmulticast mode [ 185.758495][ T6438] tipc: Started in network mode [ 185.771901][ T6438] tipc: Node identity 8625c2e2a842, cluster identity 4711 [ 185.772229][ T6438] tipc: Enabled bearer , priority 0 [ 186.077559][ T6438] tipc: Resetting bearer [ 186.101545][ T6436] tipc: Resetting bearer [ 186.183062][ T5619] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 186.447430][ T6436] tipc: Disabling bearer [ 186.470912][ T5632] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.484341][ T5619] usb 5-1: Using ep0 maxpacket: 32 [ 186.490539][ T5619] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 186.504157][ T5619] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 186.521507][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.521553][ T5619] usb 5-1: Product: syz [ 186.521589][ T5619] usb 5-1: Manufacturer: syz [ 186.521610][ T5619] usb 5-1: SerialNumber: syz [ 186.585621][ T5619] snd-ua101 5-1:1.1: sample format descriptor not found [ 186.593484][ T5619] snd-ua101 5-1:1.0: invalid num_altsetting [ 186.949855][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.968123][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.818003][ T6465] syz.0.138 (6465) used greatest stack depth: 17648 bytes left [ 189.885124][ T5723] usb 5-1: USB disconnect, device number 4 [ 191.599216][ T6492] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 194.260865][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.260997][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.914116][ T6507] tipc: Enabling of bearer rejected, failed to enable media [ 195.328142][ T6517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.593570][ T6547] loop1: detected capacity change from 0 to 40427 [ 200.429846][ T6547] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 200.430788][ T6547] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 200.526473][ T6547] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 200.547163][ T6547] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 200.547447][ T6547] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 200.591533][ T31] audit: type=1804 audit(1787662995.730:6): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.153" name="/newroot/30/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 200.885785][ T6558] syz.1.153: attempt to access beyond end of device [ 200.885785][ T6558] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.669595][ T6576] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_ does not exist! [ 206.253266][ T6606] overlayfs: failed to clone upperpath [ 206.694761][ T6591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 210.021073][ T6620] loop1: detected capacity change from 0 to 32768 [ 210.037820][ T6620] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.168 (6620) [ 210.067482][ T6620] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 210.067551][ T6620] BTRFS info (device loop1): using crc32c checksum algorithm [ 210.209297][ T6620] BTRFS info (device loop1): rebuilding free space tree [ 210.272168][ T6620] BTRFS info (device loop1): enabling ssd optimizations [ 210.272229][ T6620] BTRFS info (device loop1): turning on async discard [ 210.272248][ T6620] BTRFS info (device loop1): enabling free space tree [ 210.272265][ T6620] BTRFS info (device loop1): force clearing of disk cache [ 210.272470][ T6620] BTRFS info (device loop1): use lzo compression, level 1 [ 211.305456][ T5632] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 216.646096][ T6681] syzkaller0: entered promiscuous mode [ 216.646139][ T6681] syzkaller0: entered allmulticast mode [ 217.453878][ T6681] tipc: Started in network mode [ 217.453934][ T6681] tipc: Node identity c238fdaa2fab, cluster identity 4711 [ 217.454270][ T6681] tipc: Enabled bearer , priority 0 [ 217.522520][ T6679] tipc: Resetting bearer [ 220.141116][ T6679] tipc: Disabling bearer [ 220.286728][ T5724] tipc: Node number set to 3985898922 [ 220.325016][ T6704] tipc: Enabling of bearer rejected, failed to enable media [ 228.283948][ T6782] fuse: Bad value for 'fd' [ 229.170889][ T6799] loop2: detected capacity change from 0 to 512 [ 229.179028][ T6799] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.894374][ T6799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.894499][ T6799] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.630538][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.697109][ T6810] loop4: detected capacity change from 0 to 512 [ 237.039348][ T6838] overlayfs: missing 'lowerdir' [ 239.641770][ T5724] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 239.703621][ T6857] tipc: Started in network mode [ 239.703680][ T6857] tipc: Node identity 0e1421b0fc64, cluster identity 4711 [ 239.704141][ T6857] tipc: Enabled bearer , priority 0 [ 239.718542][ T6857] syzkaller0: entered promiscuous mode [ 239.718603][ T6857] syzkaller0: entered allmulticast mode [ 239.760925][ T6857] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 239.784136][ T5724] usb 1-1: device descriptor read/64, error -71 [ 239.910429][ T6864] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 240.133278][ T6857] tipc: Resetting bearer [ 240.187716][ T6848] tipc: Resetting bearer [ 241.137321][ T6848] tipc: Disabling bearer [ 241.242609][ T9] tipc: Node number set to 4067434928 [ 245.068501][ T6897] loop0: detected capacity change from 0 to 1024 [ 245.139357][ T6903] loop1: detected capacity change from 0 to 256 [ 245.139386][ T6897] hfsplus: invalid catalog btree flag [ 245.161710][ T6903] FAT-fs (loop1): Directory bread(block 1285) failed [ 245.172820][ T6903] FAT-fs (loop1): Directory bread(block 1286) failed [ 245.179651][ T6903] FAT-fs (loop1): Directory bread(block 1287) failed [ 245.179862][ T6903] FAT-fs (loop1): Directory bread(block 1288) failed [ 245.353416][ T6897] hfsplus: failed to load catalog file [ 245.467028][ T6908] FAT-fs (loop1): Directory bread(block 1285) failed [ 245.467599][ T6908] FAT-fs (loop1): Directory bread(block 1286) failed [ 245.467733][ T6908] FAT-fs (loop1): Directory bread(block 1287) failed [ 245.467848][ T6908] FAT-fs (loop1): Directory bread(block 1288) failed [ 245.471487][ T6908] FAT-fs (loop1): Directory bread(block 1285) failed [ 245.472002][ T6908] FAT-fs (loop1): Directory bread(block 1286) failed [ 246.132702][ T6904] netlink: 'syz.3.219': attribute type 10 has an invalid length. [ 246.132744][ T6904] netlink: 52 bytes leftover after parsing attributes in process `syz.3.219'. [ 249.693547][ T5745] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 249.856288][ T5745] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 249.867690][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.867747][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.867831][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.955548][ T5745] usb 3-1: config 0 descriptor?? [ 252.202155][ T5745] usbhid 3-1:0.0: can't add hid device: -71 [ 252.207531][ T5745] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 252.303821][ T5745] usb 3-1: USB disconnect, device number 3 [ 254.087012][ T6955] loop2: detected capacity change from 0 to 32768 [ 254.138321][ T31] audit: type=1800 audit(1787663049.280:7): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.231" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 254.244130][ T31] audit: type=1800 audit(1787663049.380:8): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.231" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 254.910649][ T6971] loop1: detected capacity change from 0 to 32768 [ 255.379257][ T6971] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 255.663862][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.663946][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.723138][ T6981] loop2: detected capacity change from 0 to 32768 [ 256.751787][ T6981] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 256.837245][ T6981] XFS (loop2): Ending clean mount [ 256.856216][ T6988] fuse: Bad value for 'fd' [ 256.908597][ T5278] veth1_vlan: left promiscuous mode [ 258.082474][ T5614] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 258.229147][ T7000] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 258.229147][ T7000] program syz.0.238 not setting count and/or reply_len properly [ 259.460863][ T7013] loop0: detected capacity change from 0 to 16 [ 259.976610][ T7013] erofs (device loop0): mounted with root inode @ nid 36. [ 260.056813][ T7012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.103097][ T5632] ocfs2: Unmounting device (7,1) on (node local) [ 265.624953][ T5278] veth1_vlan: entered promiscuous mode [ 271.367890][ T7101] overlayfs: failed to clone upperpath [ 271.371917][ T7097] loop2: detected capacity change from 0 to 256 [ 271.886563][ T7107] CacheFiles: Failed to register: -95 [ 275.923658][ T7127] xt_CONNSECMARK: invalid mode: 0 [ 276.572436][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 276.572732][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 276.705196][ T25] usb 3-1: device descriptor read/64, error -32 [ 278.793279][ T7152] loop0: detected capacity change from 0 to 164 [ 283.162219][ T7179] loop0: detected capacity change from 0 to 64 [ 284.343344][ T7179] MINIX-fs: mounting file system with errors, running fsck is recommended [ 284.519513][ T7185] loop2: detected capacity change from 0 to 32768 [ 284.908402][ T7179] syz.0.271: attempt to access beyond end of device [ 284.908402][ T7179] loop0: rw=8388608, sector=8192, nr_sectors = 2 limit=64 [ 284.940699][ T7179] Buffer I/O error on dev loop0, logical block 4096, async page read [ 285.050641][ T7179] syz.0.271: attempt to access beyond end of device [ 285.050641][ T7179] loop0: rw=8388608, sector=8192, nr_sectors = 2 limit=64 [ 285.065675][ T7179] Buffer I/O error on dev loop0, logical block 4096, async page read [ 285.121890][ T31] audit: type=1800 audit(1787663080.260:9): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.271" name="file2" dev="loop0" ino=6 res=0 errno=0 [ 285.914924][ T7193] loop0: detected capacity change from 0 to 1024 [ 288.366072][ T7226] loop0: detected capacity change from 0 to 32768 [ 288.397823][ T7226] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 288.408221][ T7210] ovs-system: entered promiscuous mode [ 288.517663][ T7226] XFS (loop0): Ending clean mount [ 288.940325][ T7246] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 289.032101][ T7250] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 290.575211][ T7264] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 291.423772][ T5616] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 293.692527][ T7280] netlink: 14 bytes leftover after parsing attributes in process `syz.2.290'. [ 293.989890][ T7280] bond0 (unregistering): Released all slaves [ 294.729324][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 295.687748][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 303.682380][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 303.746131][ T3374] IPVS: starting estimator thread 0... [ 303.858594][ T7361] IPVS: using max 25 ests per chain, 60000 per kthread [ 303.866529][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 303.873273][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 303.888729][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.888773][ T9] usb 5-1: Product: syz [ 303.888812][ T9] usb 5-1: Manufacturer: syz [ 303.888832][ T9] usb 5-1: SerialNumber: syz [ 303.915939][ T9] usb 5-1: config 0 descriptor?? [ 303.925734][ T9] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 303.936563][ T7359] kvm: vcpu 0: requested 13008 ns lapic timer period limited to 200000 ns [ 304.142771][ T9] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 304.142967][ T9] visor 5-1:0.0: probe with driver visor failed with error -5 [ 304.384437][ T9] usb 5-1: USB disconnect, device number 5 [ 305.732410][ T7380] loop1: detected capacity change from 0 to 32768 [ 305.747702][ T7380] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 305.747730][ T7380] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 305.985467][ T7380] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 305.995649][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 305.995667][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 307.861368][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1865ms [ 307.874526][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 307.879914][ T7380] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 309.242562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 310.357056][ T7422] loop0: detected capacity change from 0 to 64 [ 310.377462][ T7422] hfs: Unknown parameter 'dir_uM¼HÊ7mask' [ 313.965314][ T7448] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 317.148709][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.163143][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.359727][ T7467] binder: 7465:7467 ioctl c0306201 0 returned -14 [ 319.002959][ T7479] binder: 7465:7479 ioctl c0306201 0 returned -14 [ 320.317247][ T7488] loop0: detected capacity change from 0 to 256 [ 321.629048][ T7487] nvme_rdma: malformed address passed: 127.:4420 [ 325.682716][ T7536] loop2: detected capacity change from 0 to 2048 [ 325.814068][ T7536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.843127][ T31] audit: type=1800 audit(1787663120.980:10): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.332" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 327.974455][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.194489][ T7550] pim6reg: entered allmulticast mode [ 329.791939][ T7558] loop2: detected capacity change from 0 to 512 [ 330.675900][ T7558] EXT4-fs: Mount option(s) incompatible with ext2 [ 343.742769][ T5752] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 343.764974][ T7627] loop1: detected capacity change from 0 to 1764 [ 343.806030][ T7627] ISOFS: unable to read i-node block [ 343.806122][ T7627] isofs_fill_super: get root inode failed [ 343.921735][ T5752] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 343.934043][ T5752] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 343.934089][ T5752] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 343.934115][ T5752] usb 3-1: config 220 has no interface number 2 [ 343.934182][ T5752] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 343.934217][ T5752] usb 3-1: config 220 interface 0 has no altsetting 0 [ 343.934241][ T5752] usb 3-1: config 220 interface 76 has no altsetting 0 [ 343.934264][ T5752] usb 3-1: config 220 interface 1 has no altsetting 0 [ 345.279631][ T7632] netlink: 56 bytes leftover after parsing attributes in process `syz.1.354'. [ 345.432433][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.445510][ T5752] usb 3-1: can't set config #220, error -71 [ 345.456558][ T5752] usb 3-1: USB disconnect, device number 6 [ 347.197315][ T7656] loop1: detected capacity change from 0 to 1024 [ 350.481350][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 350.742489][ T7666] loop1: detected capacity change from 0 to 32768 [ 350.776544][ T7666] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.883755][ T7666] XFS (loop1): Ending clean mount [ 352.613521][ T5632] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 352.966738][ T7694] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 354.526978][ T3374] IPVS: starting estimator thread 0... [ 354.622585][ T7696] IPVS: using max 24 ests per chain, 57600 per kthread [ 355.409586][ T7701] veth1_macvtap: left promiscuous mode [ 355.409668][ T7701] macsec0: entered allmulticast mode [ 355.504029][ T7701] veth1_macvtap: entered promiscuous mode [ 355.504053][ T7701] veth1_macvtap: entered allmulticast mode [ 355.504109][ T7701] macsec0: left allmulticast mode [ 355.504121][ T7701] veth1_macvtap: left allmulticast mode [ 356.223659][ T7701] overlayfs: failed to resolve './file1': -2 [ 356.605687][ T7712] loop1: detected capacity change from 0 to 1024 [ 357.535795][ T7729] loop1: detected capacity change from 0 to 256 [ 357.567400][ T7729] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 358.514820][ T7737] loop1: detected capacity change from 0 to 32768 [ 358.525885][ T7737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.370 (7737) [ 358.547476][ T7737] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.547567][ T7737] BTRFS info (device loop1): using sha256 checksum algorithm [ 358.623035][ T7735] kAFS: unable to lookup cell '/,c¾ûL' [ 358.749866][ T7737] BTRFS info (device loop1): setting nodatasum [ 358.749912][ T7737] BTRFS info (device loop1): enabling ssd optimizations [ 358.749980][ T7737] BTRFS info (device loop1): turning on async discard [ 358.750003][ T7737] BTRFS info (device loop1): enabling free space tree [ 359.060704][ T5632] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.003913][ T7762] loop4: detected capacity change from 0 to 8 [ 361.628436][ T7767] SQUASHFS error: zlib decompression failed, data probably corrupt [ 361.628537][ T7767] SQUASHFS error: Failed to read block 0x4e8: -5 [ 361.651651][ T31] audit: type=1800 audit(1787663156.790:11): pid=7767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.374" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 361.692633][ T7767] SQUASHFS error: Unable to read inode 0xe3 [ 362.069404][ T7763] loop2: detected capacity change from 0 to 128 [ 362.139829][ T7763] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 362.296674][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 366.364460][ T7799] vhci_hcd: not connected 4 [ 369.461587][ T7817] can0: slcan on ptm0. [ 369.680638][ T7815] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 369.928470][ T7811] can0 (unregistered): slcan off ptm0. [ 373.477341][ T7835] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 375.759920][ T7848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.396'. [ 377.192330][ T7851] 9pnet_virtio: no channels available for device syz [ 377.290262][ T7853] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 377.618776][ T7853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.557365][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.564128][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.881295][ T7877] loop0: detected capacity change from 0 to 1024 [ 381.985595][ T7877] hfsplus: invalid btree flag [ 381.986202][ T7877] hfsplus: failed to load catalog file [ 382.630581][ T7883] sctp: [Deprecated]: syz.4.404 (pid 7883) Use of int in max_burst socket option deprecated. [ 382.630581][ T7883] Use struct sctp_assoc_value instead [ 384.483122][ T5617] Bluetooth: hci5: command 0x1003 tx timeout [ 384.555677][ T5621] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 391.554093][ T7911] gadgetfs: bound to dummy_udc driver [ 391.872385][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 391.880487][ C1] gadgetfs: connected [ 391.885486][ T25] gadgetfs: disconnected [ 392.797126][ T7911] gadgetfs: suspended from state 2 [ 392.807523][ T25] usb 1-1: device descriptor read/all, error -71 [ 393.251139][ T7924] loop0: detected capacity change from 0 to 32768 [ 393.341000][ T7924] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 393.470834][ T7924] XFS (loop0): Ending clean mount [ 394.404198][ T5616] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 394.876445][ T7936] loop0: detected capacity change from 0 to 736 [ 395.100048][ T7936] rock: directory entry would overflow storage [ 395.106584][ T7936] rock: sig=0x3b10, size=4, remaining=3 [ 395.142095][ T7936] capability: warning: `syz.0.418' uses deprecated v2 capabilities in a way that may be insecure [ 395.825825][ T7941] loop2: detected capacity change from 0 to 512 [ 396.084425][ T7941] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.411: inode has both inline data and extents flags [ 396.084535][ T7941] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 396.097774][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 396.097799][ C1] EXT4-fs (loop2): initial error at time 1787663191: ext4_orphan_get:1403: inode 15 [ 396.097833][ C1] EXT4-fs (loop2): last error at time 1787663191: ext4_orphan_get:1403: inode 15 [ 396.244707][ T7941] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.411: couldn't read orphan inode 15 (err -117) [ 396.244814][ T7941] loop2: lost filesystem error report for type 5 error -117 [ 396.308046][ T7941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.371665][ T7941] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.567405][ T7959] loop0: detected capacity change from 0 to 256 [ 400.312613][ T988] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 400.522544][ T988] usb 1-1: Using ep0 maxpacket: 8 [ 400.569802][ T988] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 400.609719][ T988] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 400.624696][ T988] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 400.646186][ T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.207798][ T988] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 401.296928][ T988] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 401.325885][ T7959] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 402.205567][ T7969] loop0: detected capacity change from 0 to 32768 [ 402.226915][ T7969] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.423 (7969) [ 402.234987][ T7969] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 402.235072][ T7969] BTRFS info (device loop0): using sha256 checksum algorithm [ 402.338200][ T7969] BTRFS info (device loop0): setting nodatasum [ 402.338257][ T7969] BTRFS info (device loop0): enabling ssd optimizations [ 402.338298][ T7969] BTRFS info (device loop0): turning on async discard [ 402.338377][ T7969] BTRFS info (device loop0): enabling free space tree [ 404.214127][ T7987] syz.1.425 (7987): drop_caches: 2 [ 404.265937][ T988] usb 1-1: USB disconnect, device number 8 [ 404.343376][ T5616] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 404.476596][ T988] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 404.487286][ T988] kobil_sct 1-1:1.0: device disconnected [ 405.287163][ T31] audit: type=1326 audit(1787663200.410:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.4.426" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a359e0d9 code=0x7fc00000 [ 405.636491][ T7998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.681739][ T31] audit: type=1326 audit(1787663202.820:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7988 comm="syz.4.426" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa2a353f459 code=0x7fc00000 [ 413.146418][ T8021] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.165508][ T8021] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.175341][ T8021] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.186348][ T8021] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.195247][ T8021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.374099][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.382887][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.392875][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.408390][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.462585][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.766594][ T8026] loop4: detected capacity change from 0 to 512 [ 414.671181][ T1041] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.222019][ T5621] Bluetooth: hci1: command tx timeout [ 416.626515][ T1041] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.946749][ T8043] syzkaller0: entered promiscuous mode [ 416.958744][ T8043] syzkaller0: entered allmulticast mode [ 417.086173][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.086238][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.328075][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.328130][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.328176][ T8035] tipc: Enabled bearer , priority 0 [ 417.412454][ T8035] tipc: Resetting bearer [ 417.423423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.423475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.506782][ T8031] tipc: Resetting bearer [ 417.615657][ T8031] tipc: Disabling bearer [ 418.301591][ T1041] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.304057][ T5621] Bluetooth: hci1: command tx timeout [ 420.017832][ T1041] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.382427][ T5621] Bluetooth: hci1: command tx timeout [ 421.326270][ T5724] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 421.326326][ T5724] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 421.326374][ T5724] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 421.326416][ T5724] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 421.326446][ T5724] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 421.326476][ T5724] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 421.326506][ T5724] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 421.326536][ T5724] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 421.326565][ T5724] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 421.326595][ T5724] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 421.473534][ T5724] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz0] on syz0 [ 421.579903][ T1041] bridge_slave_1: left allmulticast mode [ 421.579987][ T1041] bridge_slave_1: left promiscuous mode [ 421.588738][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.605675][ T8066] loop2: detected capacity change from 0 to 128 [ 421.649212][ T8066] EXT4-fs (loop2): Test dummy encryption mode enabled [ 421.674709][ T8069] sctp: [Deprecated]: syz.0.444 (pid 8069) Use of int in max_burst socket option deprecated. [ 421.674709][ T8069] Use struct sctp_assoc_value instead [ 421.734042][ T8066] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.778212][ T1041] bridge_slave_0: left allmulticast mode [ 421.778264][ T1041] bridge_slave_0: left promiscuous mode [ 421.796356][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.798851][ T8066] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 422.705304][ T5621] Bluetooth: hci1: command tx timeout [ 422.892821][ T8081] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 423.757117][ T8070] fido_id[8070]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 423.899697][ T8086] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 424.109145][ T8094] loop0: detected capacity change from 0 to 128 [ 424.124113][ T8094] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 424.422731][ T6775] udevd[6775]: incorrect ext4 checksum on /dev/loop0 [ 428.496816][ T8118] loop0: detected capacity change from 0 to 512 [ 428.649915][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.686420][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.715639][ T1041] bond0 (unregistering): Released all slaves [ 428.803358][ T8120] loop4: detected capacity change from 0 to 256 [ 429.489268][ T8120] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 429.547985][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 429.894893][ T8126] overlay: ./file0 is not a directory [ 430.516223][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'. [ 430.908892][ T5614] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.305377][ T8147] sctp: [Deprecated]: syz.1.452 (pid 8147) Use of int in max_burst socket option deprecated. [ 433.305377][ T8147] Use struct sctp_assoc_value instead [ 433.351447][ T31] audit: type=1800 audit(1787663227.870:14): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.456" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 434.692149][ T8161] overlayfs: failed to resolve './file1/file0': -2 [ 435.591201][ T8168] loop1: detected capacity change from 0 to 32768 [ 435.994939][ T8173] comedi comedi0: ni_at_a2150: a I/O base address must be specified [ 437.046104][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 437.571248][ T8181] kAFS: unable to lookup cell '/,c¾ûL' [ 437.579002][ T8181] binder: 8180:8181 ioctl c0306201 0 returned -14 [ 437.586291][ T8181] binder: 8180:8181 ioctl c0506107 200000000180 returned -22 [ 438.486845][ T1041] hsr_slave_0: left promiscuous mode [ 438.494281][ T31] audit: type=1326 audit(1787663233.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.466" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551659e0d9 code=0x7ffc0000 [ 438.520100][ T31] audit: type=1326 audit(1787663233.640:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.466" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551659e0d9 code=0x7ffc0000 [ 438.555719][ T1041] hsr_slave_1: left promiscuous mode [ 438.562603][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.562660][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.581959][ T31] audit: type=1326 audit(1787663233.720:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.466" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551659e0d9 code=0x7ffc0000 [ 438.591538][ T31] audit: type=1326 audit(1787663233.730:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.466" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551659e0d9 code=0x7ffc0000 [ 438.609578][ T31] audit: type=1326 audit(1787663233.750:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.466" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f551659e0d9 code=0x7ffc0000 [ 438.609711][ T31] audit: type=1326 audit(1787663233.750:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.466" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551659e0d9 code=0x7ffc0000 [ 438.617381][ T31] audit: type=1326 audit(1787663233.760:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.466" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551659e0d9 code=0x7ffc0000 [ 438.619022][ T31] audit: type=1326 audit(1787663233.760:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.466" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f551659e0d9 code=0x7ffc0000 [ 438.624299][ T31] audit: type=1326 audit(1787663233.760:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.466" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551659e0d9 code=0x7ffc0000 [ 438.637784][ T31] audit: type=1326 audit(1787663233.770:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.2.466" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551659e0d9 code=0x7ffc0000 [ 438.654050][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.654110][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.805705][ T5724] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 439.382326][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 439.388063][ T5724] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 439.402521][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.402554][ T5724] usb 2-1: Product: syz [ 439.402569][ T5724] usb 2-1: Manufacturer: syz [ 439.402582][ T5724] usb 2-1: SerialNumber: syz [ 439.404833][ T5724] usb 2-1: config 0 descriptor?? [ 439.417579][ T5724] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 439.677366][ T1041] veth1_macvtap: left promiscuous mode [ 439.684632][ T1041] veth0_macvtap: left promiscuous mode [ 439.730232][ T5724] gspca_sonixj: reg_w1 err -71 [ 439.730375][ T5724] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 439.747900][ T5724] usb 2-1: USB disconnect, device number 2 [ 439.791614][ T1041] veth1_vlan: left promiscuous mode [ 439.833433][ T8193] loop2: detected capacity change from 0 to 4096 [ 439.859734][ T1041] veth0_vlan: left promiscuous mode [ 439.879822][ T8193] ntfs3(loop2): ino=8, mi_enum_attr [ 439.880064][ T8193] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 439.887860][ T8193] ntfs3(loop2): Failed to load $BadClus (-22). [ 439.987021][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.987126][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.593286][ T8215] loop2: detected capacity change from 0 to 512 [ 440.632137][ T8215] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 440.633740][ T8215] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 440.633821][ T8215] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 441.419240][ T8225] loop2: detected capacity change from 0 to 256 [ 441.451787][ T8225] vfat: Deprecated parameter 'posix' [ 441.451842][ T8225] FAT-fs: "posix" option is obsolete, not supported now [ 442.540003][ T8237] process 'syz.2.471' launched './file2' with NULL argv: empty string added [ 446.695265][ T8254] loop1: detected capacity change from 0 to 32768 [ 447.015139][ T8265] overlayfs: overlapping lowerdir path [ 447.745369][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 447.792860][ T8254] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 447.839599][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 449.656943][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 449.756373][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.761824][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.767823][ T8018] bridge_slave_0: entered allmulticast mode [ 449.789347][ T8018] bridge_slave_0: entered promiscuous mode [ 449.821838][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.822089][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.858589][ T8018] bridge_slave_1: entered allmulticast mode [ 449.900102][ T8018] bridge_slave_1: entered promiscuous mode [ 450.265574][ T8283] futex_wake_op: syz.2.483 tries to shift op by 144; fix this program [ 451.033942][ T8018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.717962][ T8296] loop0: detected capacity change from 0 to 32768 [ 451.718720][ T8296] ocfs2: Unknown parameter 'hea“tbeat' [ 451.983619][ T8018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.151507][ T8018] team0: Port device team_slave_0 added [ 452.265898][ T8018] team0: Port device team_slave_1 added [ 452.310401][ T5632] ocfs2: Unmounting device (7,1) on (node local) [ 452.327439][ T8298] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 452.426757][ T8300] kAFS: Can only specify source 'none' with -o dyn [ 452.960861][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.960902][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.960930][ T8018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.009106][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.009145][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.009174][ T8018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.320644][ T8304] loop2: detected capacity change from 0 to 8192 [ 453.491626][ T8018] hsr_slave_0: entered promiscuous mode [ 453.573418][ T8310] PKCS7: Unknown OID: [4] 0.0 [ 453.574794][ T8310] PKCS7: Only support pkcs7_signedData type [ 453.632589][ T8310] xt_policy: output policy not valid in PREROUTING and INPUT [ 453.670090][ T8018] hsr_slave_1: entered promiscuous mode [ 455.407180][ T8325] xt_hashlimit: max too large, truncated to 1048576 [ 455.581206][ T8327] xt_hashlimit: max too large, truncated to 1048576 [ 457.075991][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 460.293029][ T8368] loop0: detected capacity change from 0 to 1024 [ 460.321430][ T8356] netlink: 76 bytes leftover after parsing attributes in process `syz.4.495'. [ 460.373459][ T8018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 460.407402][ T8368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 460.407698][ T8368] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.101947][ T8018] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.133575][ T8018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 461.189525][ T8018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.204917][ T8018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 461.239085][ T8018] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.246774][ T8018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 461.285924][ T8018] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.486332][ T8389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.499'. [ 462.038265][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 462.231362][ T8393] syz.2.499 uses obsolete (PF_INET,SOCK_PACKET) [ 462.480193][ T8018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.574508][ T8018] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.597420][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.597759][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.643829][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.644078][ T4395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.926378][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 464.153068][ T8423] loop1: detected capacity change from 0 to 512 [ 464.156063][ T8423] journal_path: Non-blockdev passed as './dev' [ 464.156145][ T8423] EXT4-fs: error: could not find journal device path [ 464.953823][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 465.292968][ T5872] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 465.303565][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 465.315172][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 465.326829][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 465.336760][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.355432][ T5872] usb 2-1: config 0 descriptor?? [ 465.365978][ T5872] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 467.331409][ T5872] usb 2-1: USB disconnect, device number 3 [ 468.799351][ T8018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.230002][ T8462] netlink: 32 bytes leftover after parsing attributes in process `syz.1.508'. [ 472.235336][ T8475] loop2: detected capacity change from 0 to 8192 [ 472.264088][ T8475] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 472.479175][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 472.530005][ T8481] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 473.318713][ T8475] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 473.318759][ T8475] FAT-fs (loop2): Filesystem has been set read-only [ 473.319421][ T8475] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 473.319590][ T8475] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 473.528455][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.544280][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.554733][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.556972][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.567931][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 474.622413][ T5752] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 474.976593][ T5752] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 474.987133][ T5752] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 474.995894][ T5752] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 475.006441][ T5752] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 475.006500][ T5752] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 475.006526][ T5752] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 475.045059][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 475.053227][ T5752] usb 2-1: Product: syz [ 475.053247][ T5752] usb 2-1: Manufacturer: syz [ 475.072016][ T5752] cdc_wdm 2-1:1.0: skipping garbage [ 475.082657][ T5752] cdc_wdm 2-1:1.0: skipping garbage [ 475.092491][ T5752] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 475.329592][ T8502] binder: 8499:8502 ioctl c0306201 200000000040 returned -14 [ 475.666540][ T5621] Bluetooth: hci5: command tx timeout [ 476.017353][ T8496] loop1: detected capacity change from 0 to 512 [ 476.362510][ T8496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.362633][ T8496] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.400601][ T8496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.411053][ T8496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.540924][ T5752] usb 2-1: USB disconnect, device number 4 [ 477.315599][ T8516] overlayfs: overlapping lowerdir path [ 477.446022][ T8517] overlayfs: overlapping lowerdir path [ 477.998336][ T5621] Bluetooth: hci5: command tx timeout [ 478.289944][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.859310][ T5621] Bluetooth: hci5: command tx timeout [ 482.862763][ T5621] Bluetooth: hci5: command tx timeout [ 483.700673][ T50] bridge_slave_1: left allmulticast mode [ 483.700717][ T50] bridge_slave_1: left promiscuous mode [ 483.700950][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.941350][ T50] bridge_slave_0: left allmulticast mode [ 483.951622][ T50] bridge_slave_0: left promiscuous mode [ 483.954230][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.221747][ T8568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 489.702007][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.786528][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.819068][ T50] bond0 (unregistering): Released all slaves [ 490.479313][ T8593] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 491.672431][ T50] hsr_slave_0: left promiscuous mode [ 491.695937][ T50] hsr_slave_1: left promiscuous mode [ 491.698555][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.704453][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.247753][ T50] team0 (unregistering): Port device team_slave_1 removed [ 495.285855][ T50] team0 (unregistering): Port device team_slave_0 removed [ 496.429941][ T8611] nbd0: detected capacity change from 0 to 127 [ 496.489405][ T8021] block nbd0: Receive control failed (result -32) [ 496.546392][ T8077] block nbd0: Dead connection, failed to find a fallback [ 496.557735][ T8077] block nbd0: shutting down sockets [ 496.557992][ T8077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.558103][ T8077] Buffer I/O error on dev nbd0, logical block 0, async page read [ 496.621731][ T8077] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 496.641775][ T8077] Buffer I/O error on dev nbd0, logical block 1, async page read [ 496.641878][ T8077] Buffer I/O error on dev nbd0, logical block 2, async page read [ 496.641935][ T8077] Buffer I/O error on dev nbd0, logical block 3, async page read [ 496.656086][ T8077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 496.656131][ T8077] Buffer I/O error on dev nbd0, logical block 0, async page read [ 496.656183][ T8077] Buffer I/O error on dev nbd0, logical block 1, async page read [ 496.656233][ T8077] Buffer I/O error on dev nbd0, logical block 2, async page read [ 496.656289][ T8077] Buffer I/O error on dev nbd0, logical block 3, async page read [ 496.656861][ T8077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 496.656903][ T8077] Buffer I/O error on dev nbd0, logical block 0, async page read [ 496.657412][ T8077] Buffer I/O error on dev nbd0, logical block 1, async page read [ 496.663091][ T8077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 496.684021][ T8077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 496.713132][ T8077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.713645][ T8077] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 496.714028][ T8077] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.769848][ T8077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 496.849695][ T6775] ldm_validate_partition_table(): Disk read failed. [ 496.868944][ T6775] Dev nbd0: unable to read RDB block 0 [ 496.927322][ T6775] nbd0: unable to read partition table [ 498.247020][ T6775] ldm_validate_partition_table(): Disk read failed. [ 498.256533][ T6775] Dev nbd0: unable to read RDB block 0 [ 498.266347][ T6775] nbd0: unable to read partition table [ 498.710725][ T8618] ubi0: attaching mtd0 [ 498.714170][ T8618] ubi0: scanning is finished [ 498.714306][ T8618] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 498.970043][ T8625] loop0: detected capacity change from 0 to 8 [ 499.891760][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 499.892925][ T8625] SQUASHFS error: Failed to read block 0x4de: -5 [ 499.894956][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 499.895270][ T8625] SQUASHFS error: Failed to read block 0x4df: -5 [ 499.896294][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 499.896477][ T8625] SQUASHFS error: Failed to read block 0x4e0: -5 [ 499.898188][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 499.898358][ T8625] SQUASHFS error: Failed to read block 0x4de: -5 [ 500.842290][ T31] kauditd_printk_skb: 130 callbacks suppressed [ 500.848786][ T31] audit: type=1800 audit(1787663295.040:155): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.536" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 501.455974][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.456052][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.588872][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 501.589614][ T8625] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.592018][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 501.592199][ T8625] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.596702][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 501.597424][ T8625] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.670872][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 501.671067][ T8625] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.672075][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 501.672234][ T8625] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.672466][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 501.672500][ T8625] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.673220][ T8625] SQUASHFS error: zlib decompression failed, data probably corrupt [ 501.673383][ T8625] SQUASHFS error: Failed to read block 0x4de: -5 [ 502.318179][ T8618] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 502.595444][ T8606] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 504.085704][ T8652] loop0: detected capacity change from 0 to 128 [ 504.132766][ T8652] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 504.147269][ T8652] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 504.770167][ T8662] syz.0.542 (pid 8662) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 505.780480][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.780736][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.781171][ T8484] bridge_slave_0: entered allmulticast mode [ 505.801566][ T8484] bridge_slave_0: entered promiscuous mode [ 505.825127][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.825434][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.825811][ T8484] bridge_slave_1: entered allmulticast mode [ 505.846275][ T8484] bridge_slave_1: entered promiscuous mode [ 505.997991][ T8665] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 506.086244][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 506.472980][ T25] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 506.595137][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.817346][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.817398][ T25] usb 2-1: Product: syz [ 506.817434][ T25] usb 2-1: Manufacturer: syz [ 506.817454][ T25] usb 2-1: SerialNumber: syz [ 507.180881][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.206039][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.299840][ T25] usb 2-1: Cannot retrieve CPort count: -71 [ 507.299916][ T25] usb 2-1: Cannot retrieve CPort count: -71 [ 507.300009][ T25] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 507.327729][ T25] usb 2-1: USB disconnect, device number 5 [ 507.495235][ T8484] team0: Port device team_slave_0 added [ 507.518827][ T8484] team0: Port device team_slave_1 added [ 510.528830][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.528875][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.528903][ T8484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.575766][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.575805][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.575835][ T8484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.736865][ T8484] hsr_slave_0: entered promiscuous mode [ 510.752719][ T8484] hsr_slave_1: entered promiscuous mode [ 512.216086][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 512.285679][ T8703] loop4: detected capacity change from 0 to 128 [ 512.289728][ T8703] EXT4-fs (loop4): Test dummy encryption mode enabled [ 512.318869][ T8703] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 512.370756][ T8703] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 513.772716][ T8719] futex_wake_op: syz.1.552 tries to shift op by 144; fix this program [ 513.829465][ T8719] loop1: detected capacity change from 0 to 256 [ 513.903190][ T8719] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 513.955329][ T8719] exFAT-fs (loop1): valid_size(562949953421322) is greater than size(10) [ 514.348346][ T8721] loop0: detected capacity change from 0 to 512 [ 514.662312][ T8721] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 515.337637][ T8721] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 515.395507][ T8721] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.544: bg 0: block 248: padding at end of block bitmap is not set [ 515.395657][ T8721] loop0: lost filesystem error report for type 5 error -117 [ 515.402230][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 515.402257][ C0] EXT4-fs (loop0): last error at time 1787663310: ext4_validate_block_bitmap:445 [ 515.403181][ T8721] Quota error (device loop0): write_blk: dquota write failed [ 515.404693][ T8721] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 515.405007][ T8721] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.544: Failed to acquire dquot type 1 [ 515.405045][ T8721] loop0: lost filesystem error report for type 5 error -28 [ 515.566318][ T8721] EXT4-fs (loop0): 1 truncate cleaned up [ 515.625779][ T8721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 516.422946][ T5618] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 516.452300][ T5723] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 518.182999][ T5723] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 518.202787][ T5723] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 518.210999][ T5723] usb 3-1: config 0 has no interface number 0 [ 518.217265][ T5723] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.251744][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.251791][ T5723] usb 3-1: Product: syz [ 518.251824][ T5723] usb 3-1: Manufacturer: syz [ 518.251845][ T5723] usb 3-1: SerialNumber: syz [ 518.294375][ T5723] usb 3-1: config 0 descriptor?? [ 518.329515][ T1041] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 518.329670][ T1041] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:7: Failed to release dquot type 1 [ 518.329725][ T1041] loop0: lost filesystem error report for type 5 error -117 [ 518.339376][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 518.592196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 520.237966][ T5723] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 520.333353][ T5807] usb 3-1: USB disconnect, device number 7 [ 520.425347][ T5807] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 520.575838][ T8742] comedi comedi0: comedi_config --init_data is deprecated [ 522.654192][ T8484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 523.419558][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.437866][ T8484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 523.467710][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.475291][ T8484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 523.508378][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.509341][ T8484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 523.545393][ T8484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.165252][ T8760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.269719][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.304331][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.323836][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.324095][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.353503][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.353623][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.439498][ T8484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.765069][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 525.842006][ T8780] loop2: detected capacity change from 0 to 512 [ 525.892531][ T8780] EXT4-fs (loop2): Test dummy encryption mode enabled [ 525.892628][ T8780] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 526.452965][ T9] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 526.463514][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.473980][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 526.482968][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.491073][ T9] usb 2-1: Product: syz [ 526.491093][ T9] usb 2-1: Manufacturer: syz [ 526.491109][ T9] usb 2-1: SerialNumber: syz [ 526.567508][ T8780] EXT4-fs (loop2): 1 truncate cleaned up [ 526.595529][ T8780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.618723][ T9] usb 2-1: config 0 descriptor?? [ 526.682918][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 527.076915][ T8792] netlink: 'syz.2.564': attribute type 2 has an invalid length. [ 527.254702][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 527.601435][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 527.601552][ T9] usb 2-1: media controller created [ 527.964492][ T5614] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.001567][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.191531][ T9] DVB: Unable to find symbol tda10046_attach() [ 528.198012][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 528.208383][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 528.259339][ T8801] loop2: detected capacity change from 0 to 4096 [ 528.463211][ T9] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 528.584799][ T8807] netlink: 64 bytes leftover after parsing attributes in process `syz.0.562'. [ 528.596205][ T8807] netlink: 64 bytes leftover after parsing attributes in process `syz.0.562'. [ 528.596278][ T8807] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 529.639295][ T9] usb 2-1: USB disconnect, device number 6 [ 529.652948][ T8810] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 529.969305][ T8816] loop1: detected capacity change from 0 to 512 [ 529.974640][ T8816] EXT4-fs: Ignoring removed oldalloc option [ 529.974934][ T8816] EXT4-fs: Invalid want_extra_isize 46201 [ 530.635684][ T8820] loop0: detected capacity change from 0 to 128 [ 530.717090][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.865532][ T8820] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 530.899917][ T8820] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.317686][ T8820] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.568: No space for directory leaf checksum. Please run e2fsck -D. [ 533.317748][ T8820] EXT4-fs error (device loop0): __ext4_find_entry:1628: inode #2: comm syz.0.568: checksumming directory block 0 [ 533.357140][ T8820] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.568: No space for directory leaf checksum. Please run e2fsck -D. [ 533.357206][ T8820] EXT4-fs error (device loop0): __ext4_find_entry:1628: inode #2: comm syz.0.568: checksumming directory block 0 [ 533.461420][ T8820] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 533.517269][ T8820] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.568: No space for directory leaf checksum. Please run e2fsck -D. [ 533.517333][ T8820] EXT4-fs error (device loop0): __ext4_find_entry:1628: inode #2: comm syz.0.568: checksumming directory block 0 [ 533.600588][ T8826] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.568: No space for directory leaf checksum. Please run e2fsck -D. [ 533.600666][ T8826] EXT4-fs error (device loop0): __ext4_find_entry:1628: inode #2: comm syz.0.568: checksumming directory block 0 [ 533.649748][ T8819] [U] J"—e:ÀÆ" [ 534.014536][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 534.097052][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 534.111201][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 534.120718][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 534.139608][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 534.148907][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.513929][ T8842] loop2: detected capacity change from 0 to 64 [ 535.526728][ T8842] hfs: unable to locate alternate MDB [ 535.526749][ T8842] hfs: continuing without an alternate MDB [ 535.545653][ T8842] nfs4: Unknown parameter '1' [ 536.290346][ T8021] Bluetooth: hci1: command tx timeout [ 536.402095][ T31] audit: type=1800 audit(1787663330.690:156): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.571" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 536.404510][ T8853] loop0: detected capacity change from 0 to 256 [ 536.481860][ T8853] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 536.533019][ T8853] exFAT-fs (loop0): valid_size(562949953421322) is greater than size(10) [ 538.312242][ T8021] Bluetooth: hci1: command tx timeout [ 540.321577][ T8873] loop0: detected capacity change from 0 to 1024 [ 540.330036][ T8873] EXT4-fs: Ignoring removed nobh option [ 540.373470][ T8875] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 540.373519][ T8875] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 540.392445][ T8021] Bluetooth: hci1: command tx timeout [ 540.499121][ T8873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.566760][ T8873] EXT4-fs error (device loop0): empty_inline_dir:1796: inode #12: block 7: comm syz.0.575: bad entry in directory: inode out of bounds - offset=4, inode=150994957, rec_len=16, size=60 fake=0 [ 540.607828][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.575'. [ 540.698250][ T8873] EXT4-fs (loop0): Remounting filesystem read-only [ 540.698298][ T8873] EXT4-fs warning (device loop0): empty_inline_dir:1803: bad inline directory (dir #12) - inode 150994957, rec_len 16, name_len 5inline size 60 [ 541.216091][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.312617][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 541.480072][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 541.480262][ T44] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=9d.9e [ 541.487309][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.487378][ T44] usb 5-1: config 0 has no interfaces? [ 541.515900][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.515974][ T44] usb 5-1: Product: syz [ 541.515991][ T44] usb 5-1: Manufacturer: syz [ 541.516052][ T44] usb 5-1: SerialNumber: syz [ 541.583730][ T8903] dummy0: entered promiscuous mode [ 541.583787][ T8903] dummy0: entered allmulticast mode [ 541.820844][ T44] usb 5-1: config 0 descriptor?? [ 542.568656][ T5872] usb 5-1: USB disconnect, device number 6 [ 545.587765][ T31] audit: type=1800 audit(1787663340.330:157): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.582" name="file0" dev="overlay" ino=686 res=0 errno=0 [ 548.845236][ T6263] bridge_slave_1: left allmulticast mode [ 548.845364][ T6263] bridge_slave_1: left promiscuous mode [ 548.845954][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.284937][ T6263] bridge_slave_0: left allmulticast mode [ 549.284999][ T6263] bridge_slave_0: left promiscuous mode [ 549.285685][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.539045][ T8960] loop0: detected capacity change from 0 to 512 [ 551.557511][ T8960] EXT4-fs (loop0): Test dummy encryption mode enabled [ 551.564499][ T8960] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 551.597797][ T8960] EXT4-fs (loop0): 1 truncate cleaned up [ 551.605744][ T8960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.039280][ T8964] netlink: 'syz.0.588': attribute type 2 has an invalid length. [ 552.974318][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.173304][ T6263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.204611][ T6263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.227791][ T6263] bond0 (unregistering): Released all slaves [ 555.293861][ T8978] [ 555.296229][ T8978] ====================================================== [ 555.303242][ T8978] WARNING: possible circular locking dependency detected [ 555.310276][ T8978] syzkaller #0 Tainted: G L [ 555.316285][ T8978] ------------------------------------------------------ [ 555.323304][ T8978] syz.2.590/8978 is trying to acquire lock: [ 555.329259][ T8978] ffffffff8fc0ff88 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 555.340155][ T8978] [ 555.340155][ T8978] but task is already holding lock: [ 555.347525][ T8978] ffff8880749e1870 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x1cc/0x620 [ 555.356809][ T8978] [ 555.356809][ T8978] which lock already depends on the new lock. [ 555.356809][ T8978] [ 555.367229][ T8978] [ 555.367229][ T8978] the existing dependency chain (in reverse order) is: [ 555.376242][ T8978] [ 555.376242][ T8978] -> #4 (&p->frag_sem){++++}-{4:4}: [ 555.383631][ T8978] down_write_killable+0xa6/0x240 [ 555.389181][ T8978] configfs_rmdir+0x3b0/0x950 [ 555.394409][ T8978] vfs_rmdir+0x3e6/0x6a0 [ 555.399198][ T8978] filename_rmdir+0x292/0x520 [ 555.404399][ T8978] __se_sys_rmdir+0x2e/0x140 [ 555.409513][ T8978] do_syscall_64+0x166/0x520 [ 555.414636][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.421056][ T8978] [ 555.421056][ T8978] -> #3 (&sb->s_type->i_mutex_key#31){++++}-{4:4}: [ 555.429749][ T8978] down_write+0x96/0x200 [ 555.434514][ T8978] configfs_depend_item_unlocked+0x153/0x420 [ 555.441018][ T8978] usbg_make_tpg+0x1e0/0x550 [ 555.446155][ T8978] target_fabric_make_tpg+0xa8/0x6d0 [ 555.451978][ T8978] configfs_mkdir+0x4f6/0x9e0 [ 555.457213][ T8978] vfs_mkdir+0x40c/0x620 [ 555.461975][ T8978] filename_mkdirat+0x285/0x510 [ 555.467348][ T8978] __se_sys_mkdir+0x34/0x150 [ 555.472474][ T8978] do_syscall_64+0x166/0x520 [ 555.477598][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.484011][ T8978] [ 555.484011][ T8978] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 555.491919][ T8978] __mutex_lock+0x19d/0x1550 [ 555.497040][ T8978] tcm_alloc_inst+0x65/0x1a0 [ 555.502172][ T8978] usb_get_function_instance+0xe3/0x2f0 [ 555.508270][ T8978] function_make+0x127/0x360 [ 555.513390][ T8978] configfs_mkdir+0x4f6/0x9e0 [ 555.518595][ T8978] vfs_mkdir+0x40c/0x620 [ 555.523363][ T8978] filename_mkdirat+0x285/0x510 [ 555.528740][ T8978] __se_sys_mkdir+0x34/0x150 [ 555.533855][ T8978] do_syscall_64+0x166/0x520 [ 555.538978][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.545391][ T8978] [ 555.545391][ T8978] -> #1 (func_lock){+.+.}-{4:4}: [ 555.552520][ T8978] __mutex_lock+0x19d/0x1550 [ 555.557638][ T8978] usb_get_function_instance+0x2e/0x2f0 [ 555.563709][ T8978] function_make+0x127/0x360 [ 555.568826][ T8978] configfs_mkdir+0x4f6/0x9e0 [ 555.574028][ T8978] vfs_mkdir+0x40c/0x620 [ 555.578792][ T8978] filename_mkdirat+0x285/0x510 [ 555.584163][ T8978] __se_sys_mkdir+0x34/0x150 [ 555.589300][ T8978] do_syscall_64+0x166/0x520 [ 555.594422][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.600840][ T8978] [ 555.600840][ T8978] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 555.609094][ T8978] __lock_acquire+0x15ff/0x2e50 [ 555.614471][ T8978] lock_acquire+0x115/0x350 [ 555.619495][ T8978] __mutex_lock+0x19d/0x1550 [ 555.624613][ T8978] uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 555.630946][ T8978] configfs_read_iter+0x2b7/0x620 [ 555.636490][ T8978] __kernel_read+0x4ca/0x960 [ 555.641607][ T8978] integrity_kernel_read+0x89/0xd0 [ 555.647332][ T8978] ima_calc_file_hash+0x451/0x890 [ 555.652882][ T8978] ima_collect_measurement+0x51b/0xa00 [ 555.658867][ T8978] process_measurement+0x1272/0x1c10 [ 555.664676][ T8978] ima_file_check+0xe1/0x130 [ 555.669790][ T8978] security_file_post_open+0xb3/0x260 [ 555.675691][ T8978] path_openat+0x1485/0x1d60 [ 555.680800][ T8978] do_file_open+0x23e/0x4a0 [ 555.685821][ T8978] do_sys_openat2+0x115/0x200 [ 555.691048][ T8978] __x64_sys_openat+0x138/0x170 [ 555.696425][ T8978] do_syscall_64+0x166/0x520 [ 555.701564][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.707976][ T8978] [ 555.707976][ T8978] other info that might help us debug this: [ 555.707976][ T8978] [ 555.718217][ T8978] Chain exists of: [ 555.718217][ T8978] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#31 --> &p->frag_sem [ 555.718217][ T8978] [ 555.732658][ T8978] Possible unsafe locking scenario: [ 555.732658][ T8978] [ 555.740112][ T8978] CPU0 CPU1 [ 555.745480][ T8978] ---- ---- [ 555.750844][ T8978] rlock(&p->frag_sem); [ 555.755089][ T8978] lock(&sb->s_type->i_mutex_key#31); [ 555.763076][ T8978] lock(&p->frag_sem); [ 555.769756][ T8978] lock(gadget_subsys.su_mutex); [ 555.774780][ T8978] [ 555.774780][ T8978] *** DEADLOCK *** [ 555.774780][ T8978] [ 555.782921][ T8978] locks held by syz.2.590/8978: 3, last CPU#0: [ 555.789069][ T8978] #0: ffff88806f99c588 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 555.800126][ T8978] #1: ffff888077397c80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x70/0x620 [ 555.809977][ T8978] #2: ffff8880749e1870 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x1cc/0x620 [ 555.819636][ T8978] [ 555.819636][ T8978] stack backtrace: [ 555.825539][ T8978] CPU: 0 UID: 0 PID: 8978 Comm: syz.2.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.836418][ T8978] Tainted: [L]=SOFTLOCKUP [ 555.840744][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.850818][ T8978] Call Trace: [ 555.854113][ T8978] [ 555.857053][ T8978] dump_stack_lvl+0xe8/0x150 [ 555.861655][ T8978] print_circular_bug+0x2e2/0x300 [ 555.866692][ T8978] check_noncircular+0x12f/0x150 [ 555.871643][ T8978] __lock_acquire+0x15ff/0x2e50 [ 555.876501][ T8978] ? rcu_is_watching+0x16/0xb0 [ 555.881272][ T8978] ? trace_sched_exit_tp+0x3a/0x130 [ 555.886500][ T8978] ? __schedule+0x17ea/0x5820 [ 555.891193][ T8978] lock_acquire+0x115/0x350 [ 555.895697][ T8978] ? uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 555.901694][ T8978] __mutex_lock+0x19d/0x1550 [ 555.906307][ T8978] ? uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 555.912312][ T8978] ? uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 555.918324][ T8978] ? irqentry_exit+0x218/0x910 [ 555.923095][ T8978] ? __pfx___mutex_lock+0x10/0x10 [ 555.928134][ T8978] ? irqentry_exit+0x218/0x910 [ 555.932948][ T8978] ? __pfx_uvcg_mjpeg_bma_controls_show+0x10/0x10 [ 555.939374][ T8978] uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 555.945191][ T8978] ? __pfx_uvcg_mjpeg_bma_controls_show+0x10/0x10 [ 555.951618][ T8978] configfs_read_iter+0x2b7/0x620 [ 555.956647][ T8978] __kernel_read+0x4ca/0x960 [ 555.961255][ T8978] ? __pfx___kernel_read+0x10/0x10 [ 555.966384][ T8978] ? rcu_is_watching+0x16/0xb0 [ 555.971156][ T8978] integrity_kernel_read+0x89/0xd0 [ 555.976282][ T8978] ? __pfx_integrity_kernel_read+0x10/0x10 [ 555.982108][ T8978] ? __kmalloc_cache_noprof+0x14d/0x600 [ 555.987690][ T8978] ? ima_calc_file_hash+0x40f/0x890 [ 555.992897][ T8978] ? ima_calc_file_hash+0x40f/0x890 [ 555.998127][ T8978] ima_calc_file_hash+0x451/0x890 [ 556.003190][ T8978] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 556.008757][ T8978] ? generic_fillattr+0x575/0x840 [ 556.013794][ T8978] ima_collect_measurement+0x51b/0xa00 [ 556.019270][ T8978] ? __pfx_ima_collect_measurement+0x10/0x10 [ 556.025261][ T8978] ? trace_contention_end+0x3d/0x140 [ 556.030569][ T8978] ? lockdep_hardirqs_on+0x7b/0x110 [ 556.035774][ T8978] ? irqentry_exit+0x218/0x910 [ 556.040553][ T8978] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 556.046019][ T8978] process_measurement+0x1272/0x1c10 [ 556.051317][ T8978] ? __pfx_process_measurement+0x10/0x10 [ 556.056970][ T8978] ? __pfx___up_read+0x10/0x10 [ 556.061753][ T8978] ima_file_check+0xe1/0x130 [ 556.066349][ T8978] ? __pfx_ima_file_check+0x10/0x10 [ 556.071558][ T8978] security_file_post_open+0xb3/0x260 [ 556.076938][ T8978] path_openat+0x1485/0x1d60 [ 556.081536][ T8978] do_file_open+0x23e/0x4a0 [ 556.086040][ T8978] ? __pfx___schedule+0x10/0x10 [ 556.090899][ T8978] ? __pfx_do_file_open+0x10/0x10 [ 556.095949][ T8978] ? _raw_spin_unlock+0x41/0x50 [ 556.100825][ T8978] ? alloc_fd+0x651/0x6c0 [ 556.105168][ T8978] do_sys_openat2+0x115/0x200 [ 556.109850][ T8978] ? __se_sys_futex+0x3a8/0x450 [ 556.114710][ T8978] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.119936][ T8978] ? rcu_is_watching+0x16/0xb0 [ 556.124738][ T8978] __x64_sys_openat+0x138/0x170 [ 556.129596][ T8978] do_syscall_64+0x166/0x520 [ 556.134203][ T8978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.140290][ T8978] ? clear_bhb_loop+0x70/0xc0 [ 556.144993][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.150909][ T8978] RIP: 0033:0x7f551659e0d9 [ 556.155344][ T8978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.174954][ T8978] RSP: 002b:00007f55174b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.183369][ T8978] RAX: ffffffffffffffda RBX: 00007f5516826180 RCX: 00007f551659e0d9 [ 556.191341][ T8978] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 556.199313][ T8978] RBP: 00007f5516635024 R08: 0000000000000000 R09: 0000000000000000 [ 556.207289][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.215259][ T8978] R13: 00007f5516826218 R14: 00007f5516826180 R15: 00007fffb102cf38 [ 556.223238][ T8978] [ 556.244628][ T31] audit: type=1800 audit(1787663351.380:158): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.590" name="bmaControls" dev="configfs" ino=20386 res=0 errno=0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 556.989434][ T31] audit: type=1326 audit(1787663352.080:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8974 comm="syz.2.590" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551659e0d9 code=0x7fc00000 [ 557.025320][ T6263] hsr_slave_0: left promiscuous mode [ 557.122677][ T6263] hsr_slave_1: left promiscuous mode [ 557.128759][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.162703][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.484881][ T6263] team0 (unregistering): Port device team_slave_1 removed [ 557.518173][ T6263] team0 (unregistering): Port device team_slave_0 removed [ 557.797367][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 558.210542][ T6263] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.285079][ T6263] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.355579][ T6263] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.426927][ T6263] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.593583][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 558.617156][ T6263] bridge_slave_1: left allmulticast mode [ 558.617196][ T6263] bridge_slave_1: left promiscuous mode [ 558.617646][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.624988][ T6263] bridge_slave_0: left allmulticast mode [ 558.625006][ T6263] bridge_slave_0: left promiscuous mode [ 558.625124][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.637546][ T6263] pim6reg: left allmulticast mode [ 558.780394][ T6263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.799176][ T6263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.811043][ T6263] bond0 (unregistering): Released all slaves [ 558.902712][ T6263] tipc: Left network mode [ 559.049126][ T6263] hsr_slave_0: left promiscuous mode [ 559.055207][ T6263] hsr_slave_1: left promiscuous mode [ 559.063616][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.063651][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.073268][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.073311][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.088798][ T6263] veth1_macvtap: left promiscuous mode [ 559.088881][ T6263] veth0_macvtap: left promiscuous mode [ 559.089050][ T6263] veth1_vlan: left promiscuous mode [ 559.089168][ T6263] veth0_vlan: left promiscuous mode [ 559.255375][ T6263] team0 (unregistering): Port device team_slave_1 removed [ 559.268768][ T6263] team0 (unregistering): Port device team_slave_0 removed [ 559.375213][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 559.576425][ T6263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.684683][ T6263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.745294][ T6263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.757627][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 559.846734][ T6263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.929102][ T6263] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.959416][ T6263] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.020324][ T6263] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.086995][ T6263] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.168412][ T6263] bridge_slave_1: left allmulticast mode [ 560.168452][ T6263] bridge_slave_1: left promiscuous mode [ 560.168935][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.178221][ T6263] bridge_slave_0: left allmulticast mode [ 560.178291][ T6263] bridge_slave_0: left promiscuous mode [ 560.178770][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.212621][ T6263] bridge_slave_1: left allmulticast mode [ 560.212664][ T6263] bridge_slave_1: left promiscuous mode [ 560.213024][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.234204][ T6263] bridge_slave_0: left allmulticast mode [ 560.234252][ T6263] bridge_slave_0: left promiscuous mode [ 560.234642][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.325092][ T6263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.341999][ T6263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.352768][ T6263] bond0 (unregistering): Released all slaves [ 560.393903][ T6263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.407762][ T6263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.417588][ T6263] bond0 (unregistering): Released all slaves [ 560.439578][ T6263] bond0 (unregistering): Released all slaves [ 560.447668][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 560.528267][ T6263] tipc: Left network mode [ 560.544037][ T6263] tipc: Left network mode [ 560.815933][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 560.944288][ T6263] hsr_slave_0: left promiscuous mode [ 560.949797][ T6263] hsr_slave_1: left promiscuous mode [ 560.950875][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.950925][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.967541][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.967601][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.986518][ T6263] hsr_slave_0: left promiscuous mode [ 560.991979][ T6263] hsr_slave_1: left promiscuous mode [ 560.997336][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.997356][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.998617][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.998660][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.029609][ T6263] veth1_macvtap: left promiscuous mode [ 561.029661][ T6263] veth0_macvtap: left promiscuous mode [ 561.029823][ T6263] veth1_vlan: left promiscuous mode [ 561.029954][ T6263] veth0_vlan: left promiscuous mode [ 561.051530][ T6263] veth1_vlan: left promiscuous mode [ 561.051637][ T6263] veth0_vlan: left promiscuous mode [ 561.249187][ T6263] team0 (unregistering): Port device team_slave_1 removed [ 561.261720][ T6263] team0 (unregistering): Port device team_slave_0 removed [ 561.387623][ T6263] team0 (unregistering): Port device team_slave_1 removed [ 561.397285][ T6263] team0 (unregistering): Port device team_slave_0 removed [ 561.487717][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 561.840737][ T6263] IPVS: stop unused estimator thread 0... [ 561.876853][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 562.153131][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13 [ 562.445324][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14 [ 562.711966][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15 [ 562.864000][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.864086][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.992388][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16 [ 563.300208][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 563.575941][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18 [ 563.873144][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19 [ 564.139757][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20