last executing test programs: 41.398444221s ago: executing program 0 (id=436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x800000}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, 0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r4, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0x6, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 40.042066705s ago: executing program 0 (id=439): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4000, &(0x7f0000000200), 0x1, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x5, 0x0, &(0x7f0000003100)=[{&(0x7f0000000480)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x2004, 0xfffffffd, 0x9, 0x0, 0x0) 39.083879183s ago: executing program 0 (id=441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e6572000000580002800800024000000084080003400000000708000440"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 38.011727569s ago: executing program 0 (id=448): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}}, 0x0) 37.727176122s ago: executing program 0 (id=449): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r0 = syz_open_dev$loop(0x0, 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4004040) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000018c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) 34.136115935s ago: executing program 0 (id=461): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}}, 0x0) 18.616044736s ago: executing program 32 (id=461): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}}, 0x0) 16.089915107s ago: executing program 5 (id=501): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) 15.640498534s ago: executing program 5 (id=502): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x4084) 15.005374267s ago: executing program 5 (id=506): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008"], 0xa4}}, 0x40810) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x8080) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000600)={"1de6316459744f69f7856048c365c0ce", r1, 0x0, {0x3, 0x81}, {0xfff, 0x101}, 0x8, [0x1, 0x6, 0x6, 0x7c4, 0x8, 0xfffffffffffffff7, 0x6d2, 0x4b2, 0xd8, 0x1, 0x5, 0x800, 0x8, 0xff, 0x907, 0xfffffffffffffe01]}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 14.933912494s ago: executing program 2 (id=508): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000180)={@id={0x2, 0x0, @a}}) 14.671925422s ago: executing program 4 (id=510): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x17e, &(0x7f0000000340)="$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") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc20776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1a0600a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda481c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695f6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2d4e6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826a35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c9731fedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8ab74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x26) 13.409157142s ago: executing program 2 (id=511): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) read$sequencer(r0, &(0x7f0000000500)=""/189, 0xbd) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, 0x1410, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20001051}, 0x40040c0) 13.38886895s ago: executing program 5 (id=512): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r2, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x20000054) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0x0) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}}, 0x0) 11.574477018s ago: executing program 4 (id=514): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) 8.793004528s ago: executing program 1 (id=515): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r0 = syz_open_dev$loop(0x0, 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4004040) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000018c0)={0x2c, &(0x7f0000000540)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0}) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) 7.719578642s ago: executing program 5 (id=517): socket$packet(0x11, 0x2, 0x300) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1000004, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d752c6e6f696e746567726974792c696f636861727365743d69736f383835392d31342c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f71756f74612c696e746567726974792c6572726f72733d636f6e74696e75652c67727071756f74612c00cef10ddd2aadfb7750b4c40e11a3323235d4e234e9fb972e6ddad1"], 0x24, 0x628f, &(0x7f00000065c0)="$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") setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200)={0x43, 0x3, 0x2}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0xc4842, 0x1ff) syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x2000804, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x1, 0xa02, &(0x7f0000001ec0)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000004c0)="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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) ioctl$FS_IOC_SETFLAGS(r5, 0x41009432, &(0x7f00000001c0)=0x800) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r1, r6, 0x0, 0x20fffe82) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000003f00)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd2372404ea0b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e722f5d78742d622d4ccbc1a7bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8ebe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c53e8afceede4caf8850d585d4134559a6abbee463da46f316c3faeffa30fec0b35fff3f320b99e805fa2d3d179fe0d9a40e8b5a3df3d5fea5e743163c8a21eb10b84046c95b735e5c727336666c9922041490702d1e17c8b", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000)) 7.48550519s ago: executing program 2 (id=518): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="aabb", 0x2}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000200)=@ethtool_coalesce={0xe, 0xff, 0xff, 0x7, 0x7f, 0x77, 0x1, 0xc, 0x7, 0x0, 0x7, 0x7, 0xa, 0x8, 0xc806, 0xa, 0xe, 0x7fff, 0x4, 0x10002, 0x0, 0xb28, 0x1}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000180002"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') read$eventfd(r8, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0xad60fae2641cd17}}}, &(0x7f0000000480)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xe, 0x8, 0x40}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, r5, r5], &(0x7f00000005c0)=[{0x4, 0x5, 0x9, 0x5}, {0x0, 0x4, 0xd, 0x5}]}, 0x94) 7.259965884s ago: executing program 4 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x254b068, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0x1a1c08, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0x2125099, 0x0) 7.110615274s ago: executing program 4 (id=520): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) timer_create(0x0, 0x0, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x400455c8, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 6.96293033s ago: executing program 2 (id=522): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001300)=""/4100, 0x1004}], 0x2, 0x8c0, 0x2bd6) 6.546487117s ago: executing program 3 (id=523): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x7e78, &(0x7f0000000300)={0x0, 0xf20f, 0x1, 0x2, 0x1b, 0x0, r0}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) socket$kcm(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 5.713291408s ago: executing program 3 (id=524): mount(0x0, 0x0, 0x0, 0xc804, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x810\x8f\x91\x8aP}I\xc6\x0e\xd9\v\xdam\r\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\x96\x1a\xe9\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x20000054) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, 0x0) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}}, 0x0) 4.142638648s ago: executing program 1 (id=529): ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000300"], 0x50) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) set_mempolicy(0x6005, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80002, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000040)=0x1) 3.774109007s ago: executing program 2 (id=530): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) 1.643702511s ago: executing program 3 (id=531): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r0, 0x81, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x1015, 0xc, "fee8a2ab78fc979f0000e60080b8785d96000100080000000000ffffffffff0000000000000000000000000100", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x10]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, 0x0) socket$unix(0x1, 0x1, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 1.378268215s ago: executing program 1 (id=532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.154347553s ago: executing program 1 (id=533): socket$unix(0x1, 0x1, 0x0) unshare(0x2c060000) unshare(0x2a060400) 421.846525ms ago: executing program 3 (id=534): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r1, 0x0, 0x0, 0x10100, 0x0) 406.838425ms ago: executing program 1 (id=535): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008"], 0xa4}}, 0x40810) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x8080) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000600)={"1de6316459744f69f7856048c365c0ce", r1, 0x0, {0x3, 0x81}, {0xfff, 0x101}, 0x8, [0x1, 0x6, 0x6, 0x7c4, 0x8, 0xfffffffffffffff7, 0x6d2, 0x4b2, 0xd8, 0x1, 0x5, 0x800, 0x8, 0xff, 0x907, 0xfffffffffffffe01]}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) 258.410255ms ago: executing program 3 (id=536): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000), 0x10}}, 0x20) 226.880986ms ago: executing program 3 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ITER_CREATE(0x1d, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x220c) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000040)=@mmap={0x10001, 0x1, 0x4, 0x70000, 0x2, {0x77359400}, {0x2, 0xc, 0x2, 0x4, 0xfd, 0x4, "7365981f"}, 0xb24, 0x1, {}, 0x7}) 0s ago: executing program 4 (id=538): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 83.523337][ T5612] cgroup: Unknown subsys name 'net' [ 83.645361][ T5612] cgroup: Unknown subsys name 'cpuset' [ 83.655506][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.316805][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.514784][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.523796][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.535804][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.544191][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.545964][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.557064][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.566269][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.576622][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.584290][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.585483][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.598029][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.603680][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.613842][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.614771][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.622721][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.632497][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.643384][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.653356][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.660001][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.669304][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.677429][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.687991][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.688394][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.696147][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.704082][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.713808][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.717894][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.724340][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.739927][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.748501][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.228196][ T11] cfg80211: failed to load regulatory.db [ 91.710801][ T50] Bluetooth: hci0: command tx timeout [ 91.781343][ T50] Bluetooth: hci3: command tx timeout [ 91.781379][ T5639] Bluetooth: hci4: command tx timeout [ 91.781513][ T5631] Bluetooth: hci5: command tx timeout [ 91.787372][ T5639] Bluetooth: hci2: command tx timeout [ 91.793760][ T5637] Bluetooth: hci1: command tx timeout [ 92.478490][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.486500][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.493855][ T5625] bridge_slave_0: entered allmulticast mode [ 92.502209][ T5625] bridge_slave_0: entered promiscuous mode [ 92.559346][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.566634][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.573963][ T5625] bridge_slave_1: entered allmulticast mode [ 92.582048][ T5625] bridge_slave_1: entered promiscuous mode [ 92.673728][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.680948][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.688421][ T5628] bridge_slave_0: entered allmulticast mode [ 92.696270][ T5628] bridge_slave_0: entered promiscuous mode [ 92.757793][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.765142][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.772780][ T5628] bridge_slave_1: entered allmulticast mode [ 92.780769][ T5628] bridge_slave_1: entered promiscuous mode [ 92.819872][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.876624][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.885004][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.892299][ T5630] bridge_slave_0: entered allmulticast mode [ 92.899889][ T5630] bridge_slave_0: entered promiscuous mode [ 92.911029][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.920253][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.928356][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.935828][ T5629] bridge_slave_0: entered allmulticast mode [ 92.943713][ T5629] bridge_slave_0: entered promiscuous mode [ 92.990705][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.997908][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.005645][ T5630] bridge_slave_1: entered allmulticast mode [ 93.013339][ T5630] bridge_slave_1: entered promiscuous mode [ 93.045521][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.052949][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.060148][ T5629] bridge_slave_1: entered allmulticast mode [ 93.068445][ T5629] bridge_slave_1: entered promiscuous mode [ 93.079296][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.101470][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.108619][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.115915][ T5626] bridge_slave_0: entered allmulticast mode [ 93.123828][ T5626] bridge_slave_0: entered promiscuous mode [ 93.174198][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.183551][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.190999][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.198239][ T5627] bridge_slave_0: entered allmulticast mode [ 93.206294][ T5627] bridge_slave_0: entered promiscuous mode [ 93.214635][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.222159][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.229551][ T5626] bridge_slave_1: entered allmulticast mode [ 93.237513][ T5626] bridge_slave_1: entered promiscuous mode [ 93.247977][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.259712][ T5625] team0: Port device team_slave_0 added [ 93.292932][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.300259][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.307709][ T5627] bridge_slave_1: entered allmulticast mode [ 93.322570][ T5627] bridge_slave_1: entered promiscuous mode [ 93.344644][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.356481][ T5625] team0: Port device team_slave_1 added [ 93.365361][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.441039][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.452586][ T5628] team0: Port device team_slave_0 added [ 93.475280][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.526367][ T5628] team0: Port device team_slave_1 added [ 93.535276][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.549054][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.561424][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.586482][ T5630] team0: Port device team_slave_0 added [ 93.593269][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.600452][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.626428][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.692654][ T5630] team0: Port device team_slave_1 added [ 93.699232][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.708330][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.734851][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.749986][ T5629] team0: Port device team_slave_0 added [ 93.781117][ T5631] Bluetooth: hci0: command tx timeout [ 93.786295][ T5627] team0: Port device team_slave_0 added [ 93.794476][ T5626] team0: Port device team_slave_0 added [ 93.825796][ T5629] team0: Port device team_slave_1 added [ 93.844774][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.851960][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.878785][ T5631] Bluetooth: hci1: command tx timeout [ 93.884288][ T5631] Bluetooth: hci5: command tx timeout [ 93.889709][ T5631] Bluetooth: hci3: command tx timeout [ 93.895285][ T5631] Bluetooth: hci2: command tx timeout [ 93.895624][ T50] Bluetooth: hci4: command tx timeout [ 93.901320][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.920146][ T5627] team0: Port device team_slave_1 added [ 93.928063][ T5626] team0: Port device team_slave_1 added [ 93.948360][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.955677][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.981800][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.023019][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.030018][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.056745][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.109637][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.116851][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.143341][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.155996][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.163370][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.189502][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.235747][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.242909][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.269231][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.291059][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.298062][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.324240][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.336371][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.344128][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.371082][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.387629][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.395542][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.423344][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.479044][ T5625] hsr_slave_0: entered promiscuous mode [ 94.489651][ T5625] hsr_slave_1: entered promiscuous mode [ 94.518147][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.525502][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.551760][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.619815][ T5630] hsr_slave_0: entered promiscuous mode [ 94.626379][ T5630] hsr_slave_1: entered promiscuous mode [ 94.632975][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 94.638797][ T5630] Cannot create hsr debugfs directory [ 94.721202][ T5626] hsr_slave_0: entered promiscuous mode [ 94.727669][ T5626] hsr_slave_1: entered promiscuous mode [ 94.734030][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 94.739795][ T5626] Cannot create hsr debugfs directory [ 94.753374][ T5628] hsr_slave_0: entered promiscuous mode [ 94.759848][ T5628] hsr_slave_1: entered promiscuous mode [ 94.766406][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 94.772595][ T5628] Cannot create hsr debugfs directory [ 94.852797][ T5629] hsr_slave_0: entered promiscuous mode [ 94.859356][ T5629] hsr_slave_1: entered promiscuous mode [ 94.866710][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 94.872758][ T5629] Cannot create hsr debugfs directory [ 94.941217][ T5627] hsr_slave_0: entered promiscuous mode [ 94.947785][ T5627] hsr_slave_1: entered promiscuous mode [ 94.954131][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 94.959856][ T5627] Cannot create hsr debugfs directory [ 95.694796][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.721916][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.730110][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.741138][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.750759][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.761352][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.769632][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.780877][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.851903][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.860698][ T5637] Bluetooth: hci0: command tx timeout [ 95.869447][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.877743][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.888315][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.908821][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.919875][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.928300][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.938974][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.946125][ T50] Bluetooth: hci3: command tx timeout [ 95.946174][ T50] Bluetooth: hci5: command tx timeout [ 95.951567][ T5631] Bluetooth: hci1: command tx timeout [ 95.951696][ T5631] Bluetooth: hci4: command tx timeout [ 95.957165][ T5637] Bluetooth: hci2: command tx timeout [ 96.073714][ T5628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.085799][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.096093][ T5628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.106298][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.119859][ T5628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.131225][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.149796][ T5628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.161352][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.281600][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.294336][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.302610][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.312642][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.329947][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.342967][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.359688][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.372083][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.422621][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.507331][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.515056][ T5626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.525358][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.547620][ T5626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.561685][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.569822][ T5626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.580041][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.597435][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.610412][ T5626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.622227][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.677327][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.684789][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.719295][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.772480][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.780164][ T3265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.790062][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.797253][ T3265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.814334][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.825075][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.845379][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.856546][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.866540][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.873721][ T3265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.901060][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.911843][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.934426][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.945194][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.043129][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.143091][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.226989][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.234196][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.288391][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.295678][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.371547][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.414678][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.517283][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.593200][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.600792][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.648610][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.669429][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.676735][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.740144][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.747373][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.759668][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.766926][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.784437][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.868944][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.945593][ T5637] Bluetooth: hci0: command tx timeout [ 97.947872][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.958356][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.022182][ T5637] Bluetooth: hci5: command tx timeout [ 98.022676][ T50] Bluetooth: hci4: command tx timeout [ 98.027637][ T5637] Bluetooth: hci1: command tx timeout [ 98.036804][ T5631] Bluetooth: hci3: command tx timeout [ 98.043409][ T5637] Bluetooth: hci2: command tx timeout [ 98.115740][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.122983][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.701316][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.047067][ T5630] veth0_vlan: entered promiscuous mode [ 99.089211][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.155346][ T5630] veth1_vlan: entered promiscuous mode [ 99.404845][ T5630] veth0_macvtap: entered promiscuous mode [ 99.429370][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.475408][ T5630] veth1_macvtap: entered promiscuous mode [ 99.564958][ T5625] veth0_vlan: entered promiscuous mode [ 99.600134][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.648294][ T5625] veth1_vlan: entered promiscuous mode [ 99.668031][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.729841][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.765785][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.791121][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.811216][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.915031][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.039459][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.138114][ T5625] veth0_macvtap: entered promiscuous mode [ 100.196307][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.234668][ T5625] veth1_macvtap: entered promiscuous mode [ 100.258340][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.284975][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.388526][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.425853][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.438617][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.447144][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.519122][ T5629] veth0_vlan: entered promiscuous mode [ 100.567982][ T3371] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.572590][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.577953][ T3371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.604260][ T3371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.631385][ T5627] veth0_vlan: entered promiscuous mode [ 100.638455][ T5628] veth0_vlan: entered promiscuous mode [ 100.647395][ T3371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.676167][ T5628] veth1_vlan: entered promiscuous mode [ 100.697011][ T5629] veth1_vlan: entered promiscuous mode [ 100.768900][ T5627] veth1_vlan: entered promiscuous mode [ 100.884410][ T5865] loop3: detected capacity change from 0 to 8192 [ 100.968845][ T3265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.989227][ T3265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.097393][ T5626] veth0_vlan: entered promiscuous mode [ 101.115893][ T5628] veth0_macvtap: entered promiscuous mode [ 101.136320][ T5629] veth0_macvtap: entered promiscuous mode [ 101.193470][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.198614][ T5629] veth1_macvtap: entered promiscuous mode [ 101.205239][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.249032][ T5628] veth1_macvtap: entered promiscuous mode [ 101.264904][ T5627] veth0_macvtap: entered promiscuous mode [ 101.307629][ T5626] veth1_vlan: entered promiscuous mode [ 101.346748][ T5627] veth1_macvtap: entered promiscuous mode [ 101.383455][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.395610][ T5871] loop3: detected capacity change from 0 to 256 [ 101.447982][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.515721][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.558323][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.566768][ T5873] fuse: Bad value for 'fd' [ 101.866990][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.391413][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.412539][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.463684][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.482002][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.493120][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.537131][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.571808][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.708302][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.717364][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.730816][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.796205][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.844678][ T5626] veth0_macvtap: entered promiscuous mode [ 102.918092][ T5886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 102.956685][ T3265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.959728][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.976629][ T3265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.998569][ T5626] veth1_macvtap: entered promiscuous mode [ 103.018131][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.033343][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.052725][ T5889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13'. [ 103.166954][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.185577][ T5889] ip6tnl0: entered promiscuous mode [ 103.200424][ T5889] ip6tnl0: entered allmulticast mode [ 103.262146][ T5891] loop3: detected capacity change from 0 to 8192 [ 103.287816][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.298260][ T5891] vfat: Unknown parameter '0xffffffffffffffff' [ 103.324409][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.335133][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.483119][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.503904][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.521947][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.610132][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.654423][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.697611][ T5906] loop2: detected capacity change from 0 to 256 [ 104.720416][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.750872][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.838815][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.882888][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.091612][ T5891] syz_tun: refused to change device tx_queue_len [ 105.168624][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.206759][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.217263][ T5915] process 'syz.2.19' launched '/dev/fd/3' with NULL argv: empty string added [ 105.534285][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.556448][ T5919] fuse: Bad value for 'fd' [ 105.575402][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.879190][ T5921] loop2: detected capacity change from 0 to 7 [ 106.393389][ T5921] Dev loop2: unable to read RDB block 7 [ 106.416228][ T5921] loop2: AHDI p1 p2 p3 [ 106.421304][ T5921] loop2: partition table partially beyond EOD, truncated [ 106.435819][ T5921] loop2: p1 start 1601398130 is beyond EOD, truncated [ 106.497093][ T5921] loop2: p2 start 1702059890 is beyond EOD, truncated [ 106.637602][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.669305][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.228803][ T5939] ======================================================= [ 107.228803][ T5939] WARNING: The mand mount option has been deprecated and [ 107.228803][ T5939] and is ignored by this kernel. Remove the mand [ 107.228803][ T5939] option from the mount to silence this warning. [ 107.228803][ T5939] ======================================================= [ 107.285553][ T5790] kernel write not supported for file /uhid (pid: 5790 comm: kworker/0:5) [ 107.678788][ T5945] loop2: detected capacity change from 0 to 256 [ 107.993405][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.30'. [ 108.032050][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.30'. [ 108.083377][ T5951] netlink: 'syz.5.30': attribute type 6 has an invalid length. [ 108.179390][ T5955] loop4: detected capacity change from 0 to 256 [ 108.775874][ T5960] loop2: detected capacity change from 0 to 512 [ 108.791666][ T5960] EXT4-fs: inline encryption not supported [ 109.353352][ T5960] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 109.365050][ T5960] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.32: invalid indirect mapped block 2683928664 (level 1) [ 109.379941][ T5960] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 109.381426][ C0] EXT4-fs (loop2): initial error at time 1782843957: ext4_free_branches:1020: inode 13 [ 109.401423][ C0] EXT4-fs (loop2): last error at time 1782843957: ext4_free_branches:1020: inode 13 [ 109.426695][ T5960] EXT4-fs (loop2): 1 truncate cleaned up [ 109.436184][ T5960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.810461][ T30] audit: type=1800 audit(1782843957.725:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.32" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 110.138452][ T5968] fuse: Bad value for 'fd' [ 111.301965][ T5963] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 111.346792][ T5963] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 111.415319][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 114.060989][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.099874][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 114.147214][ T5996] bond0: option arp_all_targets: invalid value (18446744071564623876) [ 114.647359][ T6000] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 114.861318][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.971763][ T5981] Set syz1 is full, maxelem 65536 reached [ 117.336645][ T6016] loop0: detected capacity change from 0 to 128 [ 117.395410][ T6018] loop1: detected capacity change from 0 to 1024 [ 117.542494][ T6016] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.574598][ T6018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.655585][ T6016] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.026210][ T5627] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.584242][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.960452][ T6043] loop5: detected capacity change from 0 to 512 [ 120.160511][ T6043] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff07) [ 120.230626][ T6043] FAT-fs (loop5): Filesystem has been set read-only [ 120.801283][ T6062] loop2: detected capacity change from 0 to 7 [ 120.834694][ T6062] Dev loop2: unable to read RDB block 7 [ 120.864580][ T6062] loop2: AHDI p1 p2 p3 [ 120.880390][ T6062] loop2: partition table partially beyond EOD, truncated [ 120.898046][ T6061] loop3: detected capacity change from 0 to 512 [ 120.900579][ T6062] loop2: p1 start 1601398130 is beyond EOD, truncated [ 120.940445][ T6062] loop2: p2 start 1702059890 is beyond EOD, truncated [ 125.671425][ T6102] loop4: detected capacity change from 0 to 4096 [ 126.005772][ T6102] EXT4-fs (loop4): Test dummy encryption mode enabled [ 126.285603][ T6102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.930404][ T6100] : renamed from bond0 (while UP) [ 129.057621][ T6110] loop0: detected capacity change from 0 to 128 [ 129.366518][ T6110] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.388180][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.462140][ T6110] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.853316][ T6119] loop2: detected capacity change from 0 to 256 [ 130.274507][ T6110] syzkaller0: entered promiscuous mode [ 130.304499][ T6136] netlink: 128 bytes leftover after parsing attributes in process `syz.4.86'. [ 130.314461][ T6110] syzkaller0: entered allmulticast mode [ 130.337060][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 130.358591][ T6138] loop2: detected capacity change from 0 to 512 [ 130.378741][ T6138] EXT4-fs (loop2): invalid first ino: 1 [ 130.474315][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 132.203408][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.211832][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.282328][ T6162] loop4: detected capacity change from 0 to 512 [ 132.294252][ T6162] EXT4-fs: Ignoring removed i_version option [ 132.373301][ T6162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.414735][ T6162] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.477365][ T6162] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.95: iget: bad i_size value: 2533274857506816 [ 132.509188][ T6162] EXT4-fs (loop4): Remounting filesystem read-only [ 132.607456][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.403188][ T6138] bond0: option arp_interval: invalid value (18446744071840436799) [ 134.411458][ T6138] bond0: option arp_interval: allowed values 0 - 2147483647 [ 134.886565][ T6193] loop1: detected capacity change from 0 to 256 [ 134.900871][ T5627] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.901865][ T6197] loop4: detected capacity change from 0 to 512 [ 134.977209][ T6197] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.005833][ T6197] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.066934][ T6197] EXT4-fs (loop4): 1 truncate cleaned up [ 135.111266][ T6197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.335594][ T6206] loop3: detected capacity change from 0 to 512 [ 135.540073][ T6206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.592837][ T6206] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.738278][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.886340][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.543244][ T6242] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 136.572070][ T6237] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 137.700160][ T6259] loop1: detected capacity change from 0 to 512 [ 137.855472][ T6259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.889849][ T6259] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.130212][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.137507][ T6292] loop3: detected capacity change from 0 to 4096 [ 139.164357][ T6292] EXT4-fs: inline encryption not supported [ 139.215137][ T6292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.270800][ T6292] EXT4-fs (loop3): Test dummy encryption mode enabled [ 139.330157][ T6292] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 139.341704][ T6292] System zones: 0-5 [ 139.415901][ T6292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.625749][ T6292] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 139.679847][ T6308] loop1: detected capacity change from 0 to 256 [ 139.853506][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.030560][ T5775] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.221123][ T6318] capability: warning: `syz.4.157' uses deprecated v2 capabilities in a way that may be insecure [ 140.250443][ T5775] usb 3-1: Using ep0 maxpacket: 32 [ 140.275360][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.275472][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.275534][ T5775] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.275575][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.583167][ T5775] usb 3-1: config 0 descriptor?? [ 140.599278][ T5775] hub 3-1:0.0: USB hub found [ 140.804168][ T5775] hub 3-1:0.0: 1 port detected [ 140.864276][ T6326] Bluetooth: MGMT ver 1.23 [ 140.962331][ T6332] loop5: detected capacity change from 0 to 256 [ 141.013555][ T6332] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.512083][ T5775] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 141.693636][ T6348] binder: BINDER_SET_CONTEXT_MGR already set [ 141.702126][ T6348] binder: 6341:6348 ioctl 4018620d 200000004a80 returned -16 [ 141.750517][ T6347] loop3: detected capacity change from 0 to 512 [ 141.769223][ T6347] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.814912][ T6347] EXT4-fs (loop3): 1 truncate cleaned up [ 141.833035][ T6347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.982713][ T6356] loop4: detected capacity change from 0 to 256 [ 142.032317][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.453692][ T6362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.485663][ T6362] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.485437][ T6362] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.742586][ T24] usb 3-1: USB disconnect, device number 2 [ 143.901347][ T6362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.960813][ T6362] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.991641][ T6378] Zero length message leads to an empty skb [ 144.027708][ T6362] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 144.153591][ T6362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.195557][ T6362] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.306621][ T6362] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 144.341482][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.465439][ T6362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.531186][ T6362] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 144.634380][ T6362] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 145.000787][ T6362] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 145.022168][ T6362] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 145.173485][ T6362] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 145.327822][ T6399] loop0: detected capacity change from 0 to 256 [ 145.450256][ T6401] loop2: detected capacity change from 0 to 512 [ 145.483256][ T6401] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.689578][ T6401] EXT4-fs (loop2): 1 truncate cleaned up [ 145.783769][ T6401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.940386][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.181663][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.420420][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.510914][ T5637] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.902217][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.062376][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout [ 147.548402][ T6431] warning: `syz.4.196' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.111033][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.260438][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.501336][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.580444][ T5637] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.140568][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout [ 150.221115][ T5801] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.270724][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.340572][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.665442][ T5637] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.674248][ T5801] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.702689][ T5801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.115406][ T5801] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.128556][ T5801] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 151.150336][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.159980][ T5801] usb 3-1: Product: syz [ 151.170352][ T5801] usb 3-1: Manufacturer: syz [ 151.177354][ T5801] usb 3-1: SerialNumber: syz [ 151.260465][ T5637] Bluetooth: hci5: command 0x0c1a tx timeout [ 151.366966][ T5801] usb 3-1: selecting invalid altsetting 1 [ 151.414395][ T5801] usb 3-1: unit 6 not found! [ 151.521129][ T5637] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 151.628491][ T6479] loop1: detected capacity change from 0 to 256 [ 152.012274][ T6484] loop5: detected capacity change from 0 to 2048 [ 152.282421][ T5801] usb 3-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 152.284034][ T6484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.300976][ T5801] usb 3-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 152.449341][ T6493] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 152.893699][ T6457] tipc: Trying to set illegal importance in message [ 153.382532][ T6510] loop0: detected capacity change from 0 to 512 [ 154.390484][ T5637] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 154.407173][ T6510] EXT4-fs (loop0): invalid first ino: 1 [ 157.067603][ T5801] usb 3-1: USB disconnect, device number 3 [ 157.212884][ T862] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 157.238584][ T862] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.238584][ T862] [ 157.249636][ T862] EXT4-fs (loop5): Total free blocks count 0 [ 157.255781][ T862] EXT4-fs (loop5): Free/Dirty block details [ 157.262824][ T862] EXT4-fs (loop5): free_blocks=4096 [ 157.268059][ T862] EXT4-fs (loop5): dirty_blocks=16 [ 157.274654][ T862] EXT4-fs (loop5): Block reservation details [ 157.280795][ T862] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 157.289250][ T5626] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 157.872880][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.913180][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.000449][ T6527] loop4: detected capacity change from 0 to 256 [ 158.175875][ T6529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.229'. [ 158.502995][ T6534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.229'. [ 158.615102][ T6534] nbd: device at index 64 is going down [ 158.940854][ T6558] loop0: detected capacity change from 0 to 512 [ 158.983784][ T6558] EXT4-fs (loop0): invalid first ino: 1 [ 159.021188][ T5748] udevd[5748]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 159.765521][ T5748] udevd[5748]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 159.820907][ T6550] ip6tnl0: left promiscuous mode [ 159.864559][ T6550] ip6tnl0: left allmulticast mode [ 160.040237][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.049666][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.642223][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.659339][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.754366][ T5801] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 160.989526][ T5801] usb 4-1: unable to get BOS descriptor or descriptor too short [ 161.002652][ T5801] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.015569][ T5801] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.031601][ T5801] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 161.116527][ T1122] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.138698][ T1122] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.169465][ T1122] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.203214][ T1122] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.462444][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.471082][ T5801] usb 4-1: Product: syz [ 161.475391][ T5801] usb 4-1: Manufacturer: syz [ 161.480013][ T5801] usb 4-1: SerialNumber: syz [ 161.751485][ T6576] loop5: detected capacity change from 0 to 512 [ 161.919626][ T6576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.028541][ T6576] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.164990][ T5801] usb 4-1: can't set config #1, error -71 [ 162.172727][ T5801] usb 4-1: USB disconnect, device number 2 [ 162.459218][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.896544][ T6561] Set syz1 is full, maxelem 65536 reached [ 162.906500][ T6597] loop3: detected capacity change from 0 to 256 [ 162.982749][ T6599] loop2: detected capacity change from 0 to 512 [ 163.025059][ T6599] EXT4-fs: Ignoring removed bh option [ 163.049655][ T6599] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.079223][ T6599] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 163.142074][ T6599] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 163.165907][ T6599] EXT4-fs (loop2): orphan cleanup on readonly fs [ 163.289242][ T6599] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 163.322192][ T6599] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 163.367601][ T6599] EXT4-fs error (device loop2): ext4_acquire_dquot:7039: comm syz.2.256: Failed to acquire dquot type 1 [ 163.414716][ T6599] loop2: lost filesystem error report for type 5 error -5 [ 163.420313][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 163.433987][ C0] EXT4-fs (loop2): last error at time 1782844011: ext4_acquire_dquot:7039 [ 163.447301][ T6599] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.256: Invalid block bitmap block 0 in block_group 0 [ 163.515155][ T6599] loop2: lost filesystem error report for type 5 error -117 [ 163.523679][ T6599] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.256: Invalid block bitmap block 0 in block_group 0 [ 163.604868][ T6599] loop2: lost filesystem error report for type 5 error -117 [ 163.623899][ T6599] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.256: Invalid block bitmap block 0 in block_group 0 [ 163.677696][ T6599] loop2: lost filesystem error report for type 5 error -117 [ 163.678523][ T6599] Quota error (device loop2): write_blk: dquota write failed [ 163.748333][ T6599] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 163.772136][ T6599] EXT4-fs error (device loop2): ext4_acquire_dquot:7039: comm syz.2.256: Failed to acquire dquot type 1 [ 163.805981][ T6599] loop2: lost filesystem error report for type 5 error -28 [ 163.807875][ T6599] Quota error (device loop2): write_blk: dquota write failed [ 163.892936][ T6599] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 163.940802][ T6599] EXT4-fs error (device loop2): ext4_acquire_dquot:7039: comm syz.2.256: Failed to acquire dquot type 1 [ 163.950429][ T5801] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.011342][ T6599] loop2: lost filesystem error report for type 5 error -28 [ 164.028187][ T6599] EXT4-fs (loop2): 1 orphan inode deleted [ 164.099306][ T6599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.124127][ T5801] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.147249][ T5801] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.193169][ T5801] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.235146][ T5801] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 164.259095][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.287076][ T5801] usb 5-1: Product: syz [ 164.297205][ T5801] usb 5-1: Manufacturer: syz [ 164.390863][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.552675][ T5801] usb 5-1: SerialNumber: syz [ 164.582571][ T5801] usb 5-1: selecting invalid altsetting 1 [ 164.595212][ T6627] loop1: detected capacity change from 0 to 512 [ 164.601043][ T5801] usb 5-1: unit 6 not found! [ 165.560717][ T5637] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 165.852699][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.929789][ T6636] loop2: detected capacity change from 0 to 128 [ 165.961863][ T6627] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.996642][ T6636] ext4: Unknown parameter 'fsmagic' [ 167.118968][ T5801] usb 5-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 167.173163][ T30] audit: type=1800 audit(1782844015.175:3): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.265" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 167.202529][ T5801] usb 5-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 167.213104][ T6613] tipc: Trying to set illegal importance in message [ 167.379954][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.645497][ T5801] usb 5-1: USB disconnect, device number 3 [ 167.824685][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.174619][ T6665] FAULT_FLAG_ALLOW_RETRY missing 801 [ 169.194553][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.2.276 Not tainted syzkaller #0 PREEMPT(full) [ 169.194602][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.194625][ T6665] Call Trace: [ 169.194637][ T6665] [ 169.194651][ T6665] dump_stack_lvl+0x100/0x190 [ 169.194709][ T6665] handle_userfault.cold+0x54/0x65 [ 169.194763][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.194810][ T6665] ? do_raw_spin_unlock+0x145/0x1e0 [ 169.194866][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.194917][ T6665] ? _raw_spin_unlock+0x28/0x50 [ 169.194976][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.195023][ T6665] ? __free_frozen_pages+0x751/0x1090 [ 169.195077][ T6665] ? __pfx_handle_userfault+0x10/0x10 [ 169.195149][ T6665] ? rcu_read_unlock+0x2d/0xb0 [ 169.195202][ T6665] ? rcu_read_unlock+0x2d/0xb0 [ 169.195254][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.195313][ T6665] do_anonymous_page+0x1a56/0x2080 [ 169.195381][ T6665] __handle_mm_fault+0x1d2c/0x2a00 [ 169.195439][ T6665] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 169.195493][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.195547][ T6665] ? __pfx___handle_mm_fault+0x10/0x10 [ 169.195603][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.195650][ T6665] ? pte_offset_map_lock+0x174/0x320 [ 169.195715][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.195766][ T6665] ? find_held_lock+0x2b/0x80 [ 169.195840][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.195885][ T6665] ? follow_page_pte+0x4d0/0x13f0 [ 169.195942][ T6665] handle_mm_fault+0x37b/0xa30 [ 169.196004][ T6665] __get_user_pages+0x1178/0x32a0 [ 169.196066][ T6665] ? __pfx___get_user_pages+0x10/0x10 [ 169.196112][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.196168][ T6665] populate_vma_page_range+0x267/0x3f0 [ 169.196217][ T6665] ? __pfx_populate_vma_page_range+0x10/0x10 [ 169.196269][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.196317][ T6665] ? vma_set_page_prot+0xb1/0x120 [ 169.196362][ T6665] mprotect_fixup+0x955/0xe30 [ 169.196425][ T6665] ? __pfx_mprotect_fixup+0x10/0x10 [ 169.196509][ T6665] ? __pfx_mas_prev+0x10/0x10 [ 169.196554][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.196614][ T6665] do_mprotect_pkey+0xa4b/0xef0 [ 169.196683][ T6665] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 169.196758][ T6665] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.196844][ T6665] __x64_sys_mprotect+0x78/0xc0 [ 169.196901][ T6665] ? lockdep_hardirqs_on+0x78/0x100 [ 169.196968][ T6665] do_syscall_64+0x115/0x870 [ 169.197012][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.197053][ T6665] RIP: 0033:0x7f1569d9ce59 [ 169.197084][ T6665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.197122][ T6665] RSP: 002b:00007f156ac3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 169.197159][ T6665] RAX: ffffffffffffffda RBX: 00007f156a015fa0 RCX: 00007f1569d9ce59 [ 169.197186][ T6665] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 169.197210][ T6665] RBP: 00007f1569e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 169.197235][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.197258][ T6665] R13: 00007f156a016038 R14: 00007f156a015fa0 R15: 00007ffebc41e608 [ 169.197310][ T6665] [ 169.710030][ T6671] loop2: detected capacity change from 0 to 1024 [ 169.746236][ T6671] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.212783][ T6677] netlink: 88 bytes leftover after parsing attributes in process `syz.4.279'. [ 171.235334][ T6671] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 171.270841][ T6671] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.836324][ T6671] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.280: Invalid inode table block 0 in block_group 0 [ 172.290515][ T6671] loop2: lost filesystem error report for type 5 error -117 [ 172.301585][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 172.315379][ C0] EXT4-fs (loop2): initial error at time 1782844020: __ext4_get_inode_loc:4885 [ 172.324405][ C0] EXT4-fs (loop2): last error at time 1782844020: __ext4_get_inode_loc:4885 [ 172.352490][ T6671] EXT4-fs (loop2): Remounting filesystem read-only [ 172.384762][ T6671] Quota error (device loop2): write_blk: dquota write failed [ 172.392866][ T6671] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 172.408779][ T6671] EXT4-fs (loop2): 1 truncate cleaned up [ 172.556361][ T6682] loop0: detected capacity change from 0 to 512 [ 172.578125][ T6671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.673342][ T6682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.765849][ T6682] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.262716][ T6696] loop1: detected capacity change from 0 to 256 [ 174.100524][ T6688] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 175.220484][ T50] Bluetooth: hci6: command 0x1003 tx timeout [ 175.221745][ T5637] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 175.437839][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.451110][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.918283][ T6730] loop1: detected capacity change from 0 to 512 [ 179.830148][ T6730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.205262][ T6730] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.844878][ T6748] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 181.854460][ T6748] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 181.865551][ T6748] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 182.014562][ T30] audit: type=1800 audit(1782844029.855:4): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.303" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 182.109797][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.656777][ T6765] loop2: detected capacity change from 0 to 256 [ 183.765402][ T6767] loop1: detected capacity change from 0 to 2048 [ 183.869866][ T6767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.209829][ T862] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 184.276846][ T6776] netlink: 592 bytes leftover after parsing attributes in process `syz.0.313'. [ 184.331375][ T862] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 184.353579][ T862] EXT4-fs (loop1): This should not happen!! Data will be lost [ 184.353579][ T862] [ 184.364033][ T862] EXT4-fs (loop1): Total free blocks count 0 [ 184.370337][ T862] EXT4-fs (loop1): Free/Dirty block details [ 184.376779][ T862] EXT4-fs (loop1): free_blocks=4096 [ 184.382120][ T862] EXT4-fs (loop1): dirty_blocks=0 [ 184.387332][ T862] EXT4-fs (loop1): Block reservation details [ 184.394593][ T862] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 184.406920][ T5625] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 184.563469][ T5637] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 184.978022][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.471305][ T6779] loop3: detected capacity change from 0 to 8192 [ 187.842710][ T6796] loop0: detected capacity change from 0 to 8192 [ 187.899796][ T6796] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.347085][ T6824] syz.2.322 (6824) used greatest stack depth: 19592 bytes left [ 189.576804][ T6817] loop5: detected capacity change from 0 to 8192 [ 191.395578][ T6834] loop4: detected capacity change from 0 to 1024 [ 191.885774][ T6834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.912237][ T6834] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.093058][ T6845] loop0: detected capacity change from 0 to 512 [ 192.157704][ T6845] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.206062][ T6845] EXT4-fs (loop0): 1 truncate cleaned up [ 192.222508][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.233819][ T6845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.296499][ T6852] loop1: detected capacity change from 0 to 512 [ 192.367012][ T6852] EXT4-fs warning (device loop1): dx_probe:800: inode #2: comm syz.1.337: Unrecognised inode hash code 4 [ 192.402818][ T6852] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.337: Corrupt directory, running e2fsck is recommended [ 192.548552][ T6852] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 192.619160][ T6852] EXT4-fs error (device loop1): ext4_iget_extra_inode:5179: inode #15: comm syz.1.337: corrupted in-inode xattr: invalid ea_ino [ 192.661809][ T6852] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.670295][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 192.686001][ C1] EXT4-fs (loop1): initial error at time 1782844040: ext4_iget_extra_inode:5179: inode 15 [ 192.695998][ C1] EXT4-fs (loop1): last error at time 1782844040: ext4_iget_extra_inode:5179: inode 15 [ 192.742909][ T6852] EXT4-fs (loop1): Remounting filesystem read-only [ 193.703337][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.709725][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.741053][ T6852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.762557][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.934293][ T6852] EXT4-fs warning (device loop1): dx_probe:800: inode #2: comm syz.1.337: Unrecognised inode hash code 4 [ 193.974641][ T6852] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.337: Corrupt directory, running e2fsck is recommended [ 194.096906][ T6852] EXT4-fs warning (device loop1): dx_probe:800: inode #2: comm syz.1.337: Unrecognised inode hash code 4 [ 194.163055][ T6852] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.337: Corrupt directory, running e2fsck is recommended [ 194.221680][ T6874] EXT4-fs warning (device loop1): dx_probe:800: inode #2: comm syz.1.337: Unrecognised inode hash code 4 [ 194.278233][ T6874] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.337: Corrupt directory, running e2fsck is recommended [ 194.362384][ T6875] EXT4-fs warning (device loop1): dx_probe:800: inode #2: comm syz.1.337: Unrecognised inode hash code 4 [ 194.436827][ T6875] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.337: Corrupt directory, running e2fsck is recommended [ 195.375601][ T6852] EXT4-fs warning (device loop1): dx_probe:800: inode #2: comm syz.1.337: Unrecognised inode hash code 4 [ 195.501862][ T6875] EXT4-fs warning (device loop1): dx_probe:800: inode #2: comm syz.1.337: Unrecognised inode hash code 4 [ 197.023088][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.947859][ T6893] binder: 6892:6893 unknown command 0 [ 197.999024][ T6893] binder: 6892:6893 ioctl c0306201 200000000140 returned -22 [ 198.566464][ T6899] loop1: detected capacity change from 0 to 512 [ 198.650394][ T6899] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.783796][ T6899] EXT4-fs (loop1): 1 truncate cleaned up [ 198.854988][ T6899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.036937][ T6906] loop0: detected capacity change from 0 to 512 [ 199.108610][ T6906] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.211674][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.243257][ T6906] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 199.331128][ T6906] EXT4-fs (loop0): 1 truncate cleaned up [ 199.356804][ T6906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.941966][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.905098][ T6938] loop2: detected capacity change from 0 to 256 [ 205.010812][ T6950] loop1: detected capacity change from 0 to 512 [ 205.104231][ T6954] loop0: detected capacity change from 0 to 512 [ 205.161353][ T6954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.193820][ T6950] loop1: detected capacity change from 0 to 128 [ 205.387299][ T6954] EXT4-fs (loop0): 1 truncate cleaned up [ 205.485209][ T6954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.145691][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.274224][ T6967] loop4: detected capacity change from 0 to 512 [ 206.476386][ T6967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.606140][ T6967] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.581176][ T6982] loop2: detected capacity change from 0 to 128 [ 207.703302][ T6982] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.735727][ T6982] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.055071][ T5629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.077222][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.850408][ T187] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 209.937807][ T7031] loop5: detected capacity change from 0 to 128 [ 209.976019][ T7031] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.992820][ T7031] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.034956][ T187] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.076108][ T187] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.143697][ T187] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.189309][ T187] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 210.221253][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.238648][ T5626] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.270832][ T187] usb 1-1: Product: syz [ 210.276809][ T187] usb 1-1: Manufacturer: syz [ 210.282361][ T187] usb 1-1: SerialNumber: syz [ 210.331560][ T187] usb 1-1: selecting invalid altsetting 1 [ 210.347861][ T187] usb 1-1: unit 6 not found! [ 210.700790][ T7050] loop5: detected capacity change from 0 to 512 [ 210.712493][ T7050] EXT4-fs: quotafile must be on filesystem root [ 211.424909][ T7054] futex_wake_op: syz.5.400 tries to shift op by 32; fix this program [ 212.761226][ T187] usb 1-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 212.807942][ T7019] tipc: Trying to set illegal importance in message [ 213.316205][ T187] usb 1-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 215.954006][ T7069] binder: 7067:7069 ioctl 4018620d 0 returned -22 [ 216.703510][ T7089] loop5: detected capacity change from 0 to 256 [ 216.791825][ T7088] loop3: detected capacity change from 0 to 4096 [ 216.865617][ T7088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.052245][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.971804][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.121056][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 220.285519][ T802] usb 1-1: USB disconnect, device number 2 [ 221.139621][ T7115] loop5: detected capacity change from 0 to 256 [ 222.277863][ T7120] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 223.150034][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.424'. [ 223.211693][ T7128] loop1: detected capacity change from 0 to 4096 [ 223.297189][ T7128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.615092][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.096109][ T7138] binder: 7137:7138 ioctl c0306201 200000000540 returned -22 [ 225.355397][ T5637] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 226.578026][ T7154] loop1: detected capacity change from 0 to 512 [ 227.056439][ T7154] EXT4-fs: Ignoring removed bh option [ 227.095894][ T7154] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.903496][ T7154] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 228.222337][ T7161] loop5: detected capacity change from 0 to 256 [ 228.246398][ T7154] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 228.286443][ T7154] EXT4-fs (loop1): orphan cleanup on readonly fs [ 228.355458][ T7154] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 228.373493][ T187] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 228.403546][ T7154] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 228.414312][ T7154] EXT4-fs error (device loop1): ext4_acquire_dquot:7039: comm syz.1.432: Failed to acquire dquot type 1 [ 228.428809][ T7154] loop1: lost filesystem error report for type 5 error -5 [ 228.429693][ T7154] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:482: comm syz.1.432: Invalid block bitmap block 0 in block_group 0 [ 228.436990][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 228.437036][ C0] EXT4-fs (loop1): last error at time 1782844076: ext4_acquire_dquot:7039 [ 228.474419][ T7154] loop1: lost filesystem error report for type 5 error -117 [ 228.535232][ T7165] binder: BINDER_SET_CONTEXT_MGR already set [ 228.567969][ T7154] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:482: comm syz.1.432: Invalid block bitmap block 0 in block_group 0 [ 228.644150][ T187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.655760][ T7154] loop1: lost filesystem error report for type 5 error -117 [ 228.658003][ T7154] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:482: comm syz.1.432: Invalid block bitmap block 0 in block_group 0 [ 228.674919][ T7165] binder: 7163:7165 ioctl 4018620d 200000004a80 returned -16 [ 228.715620][ T187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.770034][ T187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.857446][ T7154] loop1: lost filesystem error report for type 5 error -117 [ 228.858890][ T187] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 228.889451][ T7154] Quota error (device loop1): write_blk: dquota write failed [ 228.967289][ T7154] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 229.015884][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.054407][ T7154] EXT4-fs error (device loop1): ext4_acquire_dquot:7039: comm syz.1.432: Failed to acquire dquot type 1 [ 229.081727][ T187] usb 5-1: Product: syz [ 229.114831][ T187] usb 5-1: Manufacturer: syz [ 229.144548][ T7154] loop1: lost filesystem error report for type 5 error -28 [ 229.153129][ T187] usb 5-1: SerialNumber: syz [ 229.191447][ T7154] Quota error (device loop1): write_blk: dquota write failed [ 229.268883][ T7154] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 229.343552][ T7154] EXT4-fs error (device loop1): ext4_acquire_dquot:7039: comm syz.1.432: Failed to acquire dquot type 1 [ 229.386753][ T187] usb 5-1: selecting invalid altsetting 1 [ 229.418341][ T187] usb 5-1: unit 6 not found! [ 229.428721][ T7154] loop1: lost filesystem error report for type 5 error -28 [ 229.429492][ T7154] EXT4-fs (loop1): 1 orphan inode deleted [ 229.537761][ T7154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.775849][ T7181] loop0: detected capacity change from 0 to 4096 [ 229.831779][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.886511][ T7181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.175106][ T5627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.367770][ T187] usb 5-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 230.394441][ T187] usb 5-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 230.596674][ T7159] tipc: Trying to set illegal importance in message [ 230.658828][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 230.980389][ T7196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.441'. [ 231.177008][ T187] usb 5-1: USB disconnect, device number 4 [ 231.383051][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.993854][ T7212] loop4: detected capacity change from 0 to 256 [ 232.110670][ T5776] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 232.332079][ T5776] usb 1-1: Using ep0 maxpacket: 32 [ 232.353616][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.389147][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.428623][ T5776] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 232.435295][ T7226] fuse: Bad value for 'fd' [ 232.480976][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.526156][ T5776] usb 1-1: config 0 descriptor?? [ 232.568342][ T5776] hub 1-1:0.0: USB hub found [ 232.759084][ T5776] hub 1-1:0.0: 1 port detected [ 233.549091][ T5776] hub 1-1:0.0: activate --> -90 [ 233.571270][ T7238] loop3: detected capacity change from 0 to 2048 [ 233.597772][ T7234] loop1: detected capacity change from 0 to 4096 [ 233.666144][ T7234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.755446][ T5801] usb 1-1: USB disconnect, device number 3 [ 233.767032][ T7243] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.905610][ T30] audit: type=1800 audit(1782844081.895:5): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.457" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 234.040966][ T30] audit: type=1800 audit(1782844081.905:6): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.457" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 234.110038][ T7243] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 234.129102][ T7243] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 234.154017][ T7243] Remounting filesystem read-only [ 234.267339][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.128232][ T5630] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 236.031457][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 236.262998][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 236.297448][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.337043][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.393483][ T29] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 236.459956][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.490826][ T29] usb 6-1: Product: syz [ 236.506625][ T29] usb 6-1: Manufacturer: syz [ 236.521988][ T29] usb 6-1: SerialNumber: syz [ 236.563423][ T29] usb 6-1: selecting invalid altsetting 1 [ 236.571537][ T29] usb 6-1: unit 6 not found! [ 237.816259][ T7278] loop2: detected capacity change from 0 to 512 [ 238.581244][ T7293] netlink: 'syz.3.470': attribute type 2 has an invalid length. [ 238.971553][ T29] usb 6-1: 2:0: sticky mixer values (0/123/1 => 0), disabling [ 239.018889][ T7258] tipc: Trying to set illegal importance in message [ 239.058570][ T29] usb 6-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky [ 241.158780][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.463'. [ 241.438574][ T7302] gfs2: error -5 reading superblock [ 242.301703][ T29] usb 6-1: USB disconnect, device number 2 [ 243.439273][ T5637] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 243.447459][ T5642] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.508823][ T6054] udevd[6054]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.620345][ T5642] usb 2-1: Using ep0 maxpacket: 32 [ 243.627506][ T5642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.616208][ T5642] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.472083][ T5642] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.481955][ T5642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.509830][ T5642] usb 2-1: config 0 descriptor?? [ 245.592909][ T5642] usb 2-1: can't set config #0, error -71 [ 245.639049][ T5642] usb 2-1: USB disconnect, device number 2 [ 246.161837][ T7336] loop1: detected capacity change from 0 to 512 [ 246.204961][ T7336] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 246.294652][ T7340] loop3: detected capacity change from 0 to 164 [ 246.337457][ T7336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.445361][ T7336] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.560757][ T7342] rock: directory entry would overflow storage [ 246.568150][ T7342] rock: sig=0x4f50, size=4, remaining=3 [ 246.574424][ T7342] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 247.209037][ T7327] loop2: detected capacity change from 0 to 32768 [ 247.307807][ T7341] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 247.338480][ T7327] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.480 (7327) [ 247.883802][ T7341] EXT4-fs (loop1): Remounting filesystem read-only [ 247.970633][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.251403][ T7327] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 248.306269][ T7327] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 248.457407][ T7327] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 248.467017][ T7327] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 248.572542][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 249.450206][ T7327] BTRFS error (device loop2): open_ctree failed: -12 [ 249.546713][ T7373] loop1: detected capacity change from 0 to 128 [ 249.619218][ T7373] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.647741][ T7373] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.710809][ T5642] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 249.865274][ T5625] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.902227][ T5642] usb 6-1: Using ep0 maxpacket: 32 [ 249.924257][ T5642] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 249.958656][ T5642] usb 6-1: config 0 has no interface number 0 [ 249.987257][ T5642] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.038957][ T5642] usb 6-1: config 0 interface 89 has no altsetting 0 [ 250.078353][ T5642] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 250.109515][ T5642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.148836][ T5642] usb 6-1: Product: syz [ 250.167653][ T5642] usb 6-1: Manufacturer: syz [ 250.193200][ T5642] usb 6-1: SerialNumber: syz [ 250.241748][ T5642] usb 6-1: config 0 descriptor?? [ 250.280890][ T5642] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 250.298653][ T7349] loop4: detected capacity change from 0 to 32768 [ 250.312007][ T5642] em28xx 6-1:0.89: Video interface 89 found: [ 250.342908][ T5637] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 250.481385][ T187] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 250.608581][ T7349] JBD2: Ignoring recovery information on journal [ 250.685849][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 250.742903][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.797865][ T7349] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 250.817529][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.871647][ T5642] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 250.877981][ T187] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 250.893915][ T862] (kworker/u8:6,862,1):ocfs2_read_blocks_sync:110 ERROR: status = -12 [ 250.932807][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.940417][ T862] (kworker/u8:6,862,1):ocfs2_read_locked_inode:633 ERROR: status = -12 [ 250.995077][ T862] (kworker/u8:6,862,1):ocfs2_check_dir_entry:334 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0 [ 250.996530][ T187] usb 2-1: config 0 descriptor?? [ 251.132816][ T187] hub 2-1:0.0: USB hub found [ 251.143387][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.159425][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 251.171644][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 251.188633][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 251.197546][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.329357][ T187] hub 2-1:0.0: 1 port detected [ 251.448151][ T5628] ocfs2: Unmounting device (7,4) on (node local) [ 251.837615][ T5642] em28xx 6-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 251.874497][ T5642] em28xx 6-1:0.89: board has no eeprom [ 252.122228][ T5642] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 252.323367][ T187] hub 2-1:0.0: activate --> -90 [ 252.639278][ T187] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 252.970308][ T5642] em28xx 6-1:0.89: analog set to bulk mode. [ 252.999190][ T24] em28xx 6-1:0.89: Registering V4L2 extension [ 253.043891][ T5642] usb 6-1: USB disconnect, device number 3 [ 253.065108][ T5642] em28xx 6-1:0.89: Disconnecting em28xx [ 253.146305][ T187] usb 2-1: USB disconnect, device number 3 [ 253.302557][ T50] Bluetooth: hci6: command tx timeout [ 253.387116][ T24] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 253.439098][ T24] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 253.483603][ T24] em28xx 6-1:0.89: No AC97 audio processor [ 253.590180][ T24] usb 6-1: Decoder not found [ 253.612654][ T24] em28xx 6-1:0.89: failed to create media graph [ 253.638848][ T24] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 253.806307][ T24] em28xx 6-1:0.89: Registering snapshot button... [ 254.147873][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input7 [ 254.170140][ T24] em28xx 6-1:0.89: Remote control support is not available for this card. [ 254.179814][ T5642] em28xx 6-1:0.89: Closing input extension [ 254.219000][ T5642] em28xx 6-1:0.89: Deregistering snapshot button [ 254.536928][ T7437] loop2: detected capacity change from 0 to 128 [ 254.846911][ T7437] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.864104][ T7447] loop4: detected capacity change from 0 to 128 [ 254.893192][ T7437] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.072696][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.084648][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.488647][ T50] Bluetooth: hci6: command tx timeout [ 255.528175][ T5642] em28xx 6-1:0.89: Freeing device [ 255.774535][ T7450] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 256.640387][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.505'. [ 256.872874][ T5629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.976860][ T7450] bridge0: port 3(veth1_macvtap) entered blocking state [ 257.065609][ T7450] bridge0: port 3(veth1_macvtap) entered disabled state [ 257.366402][ T7450] veth1_macvtap: entered allmulticast mode [ 257.579541][ T50] Bluetooth: hci6: command tx timeout [ 259.620516][ T50] Bluetooth: hci6: command tx timeout [ 260.719160][ T7450] veth1_macvtap: left allmulticast mode [ 260.847395][ T7450] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 261.274358][ T3327] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.286295][ T187] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 261.353243][ T7456] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 261.364825][ T7456] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 261.374520][ T7456] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 261.451675][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 261.574466][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.604568][ T5286] veth0_vlan: left promiscuous mode [ 261.605838][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.645448][ T187] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 261.667417][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.698927][ T187] usb 2-1: config 0 descriptor?? [ 261.701180][ T802] veth0_vlan: entered promiscuous mode [ 261.730457][ T187] hub 2-1:0.0: USB hub found [ 261.858535][ T7480] loop3: detected capacity change from 0 to 4096 [ 261.876709][ T7485] capability: warning: `syz.2.518' uses 32-bit capabilities (legacy support in use) [ 261.930818][ T187] hub 2-1:0.0: 1 port detected [ 261.936180][ T7480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.993292][ T3327] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.235012][ T5630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.422030][ T3327] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.522584][ T7482] loop5: detected capacity change from 0 to 32768 [ 262.551013][ T187] hub 2-1:0.0: activate --> -90 [ 262.680421][ T802] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 262.692214][ T30] audit: type=1800 audit(1782844110.685:7): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.517" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 262.753565][ T3327] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.771033][ T187] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 262.863546][ T802] usb 3-1: Using ep0 maxpacket: 8 [ 262.884783][ T802] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.915266][ T802] usb 3-1: config 4 interface 0 has no altsetting 0 [ 262.937407][ T802] usb 3-1: string descriptor 0 read error: -22 [ 262.949076][ T802] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 263.008281][ T802] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 263.019706][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 263.080643][ T24] usb 2-1: USB disconnect, device number 4 [ 263.174935][ T802] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 263.261292][ T7482] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 263.261292][ T7482] [ 263.278824][ T7499] loop5: detected capacity change from 32768 to 0 [ 263.313640][ T802] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.356057][ T6447] lbmIODone: I/O error in JFS log [ 263.363475][ T6447] lbmIODone: I/O error in JFS log [ 263.372026][ T7507] metapage_write_end_io: I/O error [ 263.417305][ T802] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 263.435592][ T7495] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 263.467438][ T7495] usb 3-1: dvb_usb_au6610: wlen=4100, aborting [ 263.481714][ T802] usb 3-1: media controller created [ 263.524163][ T7507] metapage_write_end_io: I/O error [ 263.581512][ T7507] metapage_write_end_io: I/O error [ 263.606323][ T802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.675606][ T7507] lbmIODone: I/O error in JFS log [ 263.729086][ T7507] metapage_write_end_io: I/O error [ 263.964536][ T802] zl10353_read_register: readreg error (reg=127, ret==0) [ 264.291020][ T7515] loop1: detected capacity change from 0 to 128 [ 264.498982][ T7515] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 264.511103][ T50] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 264.511173][ T5637] Bluetooth: hci2: command 0x1003 tx timeout [ 264.679787][ T5626] Read error 10 at 0x24000 [ 264.687013][ T7511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.711377][ T3327] bridge_slave_1: left allmulticast mode [ 264.726501][ T5626] read_mapping_page failed! [ 264.761851][ T802] usb 3-1: USB disconnect, device number 4 [ 264.769966][ T5626] diRead: read_metapage failed [ 264.771658][ T3327] bridge_slave_1: left promiscuous mode [ 264.783090][ T5626] jfs_lookup: iget failed on inum 32 [ 264.814345][ T5626] Read error 10 at 0x24000 [ 264.817884][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.843976][ T5626] read_mapping_page failed! [ 264.872749][ T5626] diRead: read_metapage failed [ 264.905284][ T5626] jfs_lookup: iget failed on inum 32 [ 264.927284][ T3327] bridge_slave_0: left allmulticast mode [ 264.959651][ T3327] bridge_slave_0: left promiscuous mode [ 264.991956][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.061016][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.078272][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.089772][ T3327] bond0 (unregistering): Released all slaves [ 269.159273][ T7527] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 269.170401][ T7527] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 269.180346][ T7527] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 269.278663][ T7558] netlink: 'syz.4.538': attribute type 10 has an invalid length. [ 269.330503][ T146] lbmIODone: I/O error in JFS log [ 269.352457][ T7559] netlink: 'syz.4.538': attribute type 10 has an invalid length. [ 269.369019][ T116] ------------[ cut here ]------------ [ 269.375179][ T116] lp >= size || lp < 0 [ 269.375198][ T116] WARNING: fs/jfs/jfs_dmap.c:2962 at dbAdjTree+0x2fa/0x3f0, CPU#0: jfsCommit/116 [ 269.380505][ T3281] metapage_write_end_io: I/O error [ 269.389022][ T116] Modules linked in: [ 269.399005][ T116] CPU: 0 UID: 0 PID: 116 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 269.408677][ T116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.420179][ T116] RIP: 0010:dbAdjTree+0x2fa/0x3f0 [ 269.422927][ T3281] metapage_write_end_io: I/O error [ 269.425324][ T116] Code: 00 00 0f 82 8c fe ff ff 48 89 d6 48 c7 c7 00 86 05 8f 48 89 14 24 e8 e5 48 8c fd 48 8b 14 24 e9 70 fe ff ff e8 b7 69 5e fe 90 <0f> 0b 90 e8 ae 69 5e fe 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 269.451190][ T116] RSP: 0018:ffffc90002d9f568 EFLAGS: 00010293 [ 269.457470][ T116] RAX: 0000000000000000 RBX: 0000000000000155 RCX: ffffffff83aaf2c9 [ 269.457652][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.467156][ T116] RDX: ffff88801f7f3e00 RSI: ffffffff83aaf549 RDI: ffff88801f7f3e00 [ 269.473588][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.481066][ T116] RBP: ffff88802a09a010 R08: 0000000000000004 R09: 0000000000000155 [ 269.496215][ T116] R10: 0000000004000001 R11: 0000000000000000 R12: 0000000004000001 [ 269.504663][ T116] R13: 0000000000000003 R14: ffff88802a09a010 R15: 0000000000000001 [ 269.512984][ T116] FS: 0000000000000000(0000) GS:ffff8881240e1000(0000) knlGS:0000000000000000 [ 269.522061][ T116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.528676][ T116] CR2: 00007ffe44b7dc0c CR3: 00000000752bc000 CR4: 0000000000350ef0 [ 269.538542][ T116] Call Trace: [ 269.542185][ T116] [ 269.548100][ T116] dbJoin+0x24b/0x2b0 [ 269.552749][ T116] dbFreeBits+0x170/0x8d0 [ 269.557137][ T116] dbFreeDmap+0x62/0x1c0 [ 269.561478][ T116] dbFree+0x266/0x550 [ 269.565509][ T116] txFreeMap+0x2d3/0xe10 [ 269.569879][ T116] ? _raw_spin_unlock+0x28/0x50 [ 269.574996][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.580733][ T116] xtTruncate+0x24fe/0x2e20 [ 269.585320][ T116] ? __pfx_xtTruncate+0x10/0x10 [ 269.590322][ T116] jfs_free_zero_link+0x262/0x4c0 [ 269.595407][ T116] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 269.601225][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.606900][ T116] ? find_held_lock+0x2b/0x80 [ 269.611680][ T116] ? evict+0x37e/0xad0 [ 269.615791][ T116] ? __pfx_jfs_evict_inode+0x10/0x10 [ 269.621323][ T116] jfs_evict_inode+0x40a/0x4a0 [ 269.626143][ T116] ? __pfx_jfs_evict_inode+0x10/0x10 [ 269.631582][ T116] evict+0x3c2/0xad0 [ 269.635515][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.641260][ T116] ? __pfx_evict+0x10/0x10 [ 269.645800][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.652670][ T116] ? iput.part.0+0x981/0x1050 [ 269.657388][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.663798][ T116] iput.part.0+0x989/0x1050 [ 269.668352][ T116] iput+0x35/0x40 [ 269.672179][ T116] txUpdateMap+0x8bc/0xb00 [ 269.676644][ T116] ? __pfx_txUpdateMap+0x10/0x10 [ 269.681734][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.687446][ T116] ? rcu_is_watching+0x12/0xc0 [ 269.692337][ T116] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 269.698202][ T116] jfs_lazycommit+0x5be/0xab0 [ 269.703070][ T116] ? __pfx_jfs_lazycommit+0x10/0x10 [ 269.708303][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.714065][ T116] ? rcu_is_watching+0x12/0xc0 [ 269.718882][ T116] ? __pfx_default_wake_function+0x10/0x10 [ 269.724880][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.730611][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.736846][ T116] ? __kthread_parkme+0x18c/0x230 [ 269.742004][ T116] ? kthread+0x13a/0x450 [ 269.746268][ T116] ? __pfx_jfs_lazycommit+0x10/0x10 [ 269.751571][ T116] kthread+0x370/0x450 [ 269.756661][ T116] ? __pfx_kthread+0x10/0x10 [ 269.761894][ T116] ret_from_fork+0x72b/0xd50 [ 269.766534][ T116] ? __pfx_ret_from_fork+0x10/0x10 [ 269.771765][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.777440][ T116] ? __switch_to+0x800/0x10f0 [ 269.782615][ T116] ? __switch_to_asm+0x39/0x70 [ 269.787436][ T116] ? __pfx_kthread+0x10/0x10 [ 269.792620][ T116] ret_from_fork_asm+0x1a/0x30 [ 269.797466][ T116] [ 269.800539][ T116] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 269.807839][ T116] CPU: 0 UID: 0 PID: 116 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 269.817041][ T116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.827120][ T116] Call Trace: [ 269.830410][ T116] [ 269.833348][ T116] dump_stack_lvl+0x100/0x190 [ 269.838055][ T116] vpanic+0x552/0x970 [ 269.842054][ T116] ? __pfx_vpanic+0x10/0x10 [ 269.846673][ T116] panic+0xd1/0xe0 [ 269.850423][ T116] ? __pfx_panic+0x10/0x10 [ 269.854955][ T116] ? check_panic_on_warn+0x1f/0x90 [ 269.860118][ T116] check_panic_on_warn.cold+0x19/0x34 [ 269.865526][ T116] ? dbAdjTree+0x2fa/0x3f0 [ 269.870005][ T116] __warn.cold+0x191/0x318 [ 269.874484][ T116] __report_bug+0x30f/0x440 [ 269.879043][ T116] ? dbAdjTree+0x2fa/0x3f0 [ 269.883488][ T116] ? __pfx___report_bug+0x10/0x10 [ 269.888553][ T116] ? __lock_acquire+0x49f/0x1a40 [ 269.893586][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.899261][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.905051][ T116] ? dbAdjTree+0x2fa/0x3f0 [ 269.909509][ T116] report_bug+0xb2/0x220 [ 269.913882][ T116] ? dbAdjTree+0x2fa/0x3f0 [ 269.918317][ T116] handle_bug+0x16a/0x2a0 [ 269.922664][ T116] exc_invalid_op+0x17/0x50 [ 269.927272][ T116] asm_exc_invalid_op+0x1a/0x20 [ 269.932169][ T116] RIP: 0010:dbAdjTree+0x2fa/0x3f0 [ 269.937236][ T116] Code: 00 00 0f 82 8c fe ff ff 48 89 d6 48 c7 c7 00 86 05 8f 48 89 14 24 e8 e5 48 8c fd 48 8b 14 24 e9 70 fe ff ff e8 b7 69 5e fe 90 <0f> 0b 90 e8 ae 69 5e fe 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f [ 269.956954][ T116] RSP: 0018:ffffc90002d9f568 EFLAGS: 00010293 [ 269.963052][ T116] RAX: 0000000000000000 RBX: 0000000000000155 RCX: ffffffff83aaf2c9 [ 269.971037][ T116] RDX: ffff88801f7f3e00 RSI: ffffffff83aaf549 RDI: ffff88801f7f3e00 [ 269.979044][ T116] RBP: ffff88802a09a010 R08: 0000000000000004 R09: 0000000000000155 [ 269.987202][ T116] R10: 0000000004000001 R11: 0000000000000000 R12: 0000000004000001 [ 269.995182][ T116] R13: 0000000000000003 R14: ffff88802a09a010 R15: 0000000000000001 [ 270.003172][ T116] ? dbAdjTree+0x79/0x3f0 [ 270.007605][ T116] ? dbAdjTree+0x2f9/0x3f0 [ 270.012043][ T116] ? dbAdjTree+0x2f9/0x3f0 [ 270.016517][ T116] dbJoin+0x24b/0x2b0 [ 270.020784][ T116] dbFreeBits+0x170/0x8d0 [ 270.025137][ T116] dbFreeDmap+0x62/0x1c0 [ 270.029398][ T116] dbFree+0x266/0x550 [ 270.033494][ T116] txFreeMap+0x2d3/0xe10 [ 270.037752][ T116] ? _raw_spin_unlock+0x28/0x50 [ 270.042706][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.048371][ T116] xtTruncate+0x24fe/0x2e20 [ 270.052940][ T116] ? __pfx_xtTruncate+0x10/0x10 [ 270.057973][ T116] jfs_free_zero_link+0x262/0x4c0 [ 270.063043][ T116] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 270.068624][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.074278][ T116] ? find_held_lock+0x2b/0x80 [ 270.078990][ T116] ? evict+0x37e/0xad0 [ 270.083079][ T116] ? __pfx_jfs_evict_inode+0x10/0x10 [ 270.088401][ T116] jfs_evict_inode+0x40a/0x4a0 [ 270.093204][ T116] ? __pfx_jfs_evict_inode+0x10/0x10 [ 270.098517][ T116] evict+0x3c2/0xad0 [ 270.102426][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.108085][ T116] ? __pfx_evict+0x10/0x10 [ 270.112631][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.118294][ T116] ? iput.part.0+0x981/0x1050 [ 270.122988][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.128654][ T116] iput.part.0+0x989/0x1050 [ 270.133186][ T116] iput+0x35/0x40 [ 270.137208][ T116] txUpdateMap+0x8bc/0xb00 [ 270.141652][ T116] ? __pfx_txUpdateMap+0x10/0x10 [ 270.146690][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.152355][ T116] ? rcu_is_watching+0x12/0xc0 [ 270.157171][ T116] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 270.163022][ T116] jfs_lazycommit+0x5be/0xab0 [ 270.167733][ T116] ? __pfx_jfs_lazycommit+0x10/0x10 [ 270.172956][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.178625][ T116] ? rcu_is_watching+0x12/0xc0 [ 270.183432][ T116] ? __pfx_default_wake_function+0x10/0x10 [ 270.189282][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.194941][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.200611][ T116] ? __kthread_parkme+0x18c/0x230 [ 270.205670][ T116] ? kthread+0x13a/0x450 [ 270.209921][ T116] ? __pfx_jfs_lazycommit+0x10/0x10 [ 270.215173][ T116] kthread+0x370/0x450 [ 270.219257][ T116] ? __pfx_kthread+0x10/0x10 [ 270.223862][ T116] ret_from_fork+0x72b/0xd50 [ 270.228482][ T116] ? __pfx_ret_from_fork+0x10/0x10 [ 270.233624][ T116] ? srso_alias_return_thunk+0x5/0xfbef5 [ 270.239277][ T116] ? __switch_to+0x800/0x10f0 [ 270.244052][ T116] ? __switch_to_asm+0x39/0x70 [ 270.248848][ T116] ? __pfx_kthread+0x10/0x10 [ 270.253452][ T116] ret_from_fork_asm+0x1a/0x30 [ 270.258272][ T116] [ 270.261513][ T116] Kernel Offset: disabled [ 270.265920][ T116] Rebooting in 86400 seconds..