last executing test programs: 20m24.376823885s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0xb2020000) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) fsopen(0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000c00)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbtYkZaV/NN22+X6g7HRnnszM7iY8u7Czde/N02rZtcqmKYm0SkJkTbZFcruljpHONuGXU9JrTa5O/vh84c79BzcLxeLcgup8YfFaXlWnL354/vLtpY/Nybvvpt+Py2bu4db3/JfN/zfPbe0shp9eb6rRpXq9aZYcW5crbtVSve3YxrW1UnPtRl992amvrLTV1JanMisN23XV1NpatdvarGuz0Vbz2FRqalmWTmVk2IweOqK0vrBgCgMZDOIwEbWz0SiY0cjK0vpxDAoAAJwsg8j/Rw6Q/z+puFpxtbZf/p8Q8v/B8fP/ncikEWdDcvcGoGAyne9vP/J/AAAAAAAAAAAAAAAAAAAAAABOg23Py3qelw234d+4iKRFJPw/7nFiMI5w/kdiHC7+sZ4X99IizutWqVUKtkF9oSwVccSWmaTIT/966AjK8zeKczPqy8mGs9qJ918SHA/jQ7no+NkgXnviV1ulpGR6+89LVv6Ljs/viU+KSKuUkiuXe+ItycqnR1IXR5b967ob/2pW9fqt4p7+J/x2AAAAAACcBZb+luu//w1Wk7QsDZcN2VMf7Ow+H5DsPs8HVDZS0o0fk/Nj8c0bAAAAAIBh4rZfVI3j2I3TWkh2JnLcvR/10KVE5IQcukMXrHRwrCOq0hLu8TxvdbfR33eaEJGYZvrtz1dU+NDqpJyUwxS+PgvGfpDGcfwaAQAAABikbtIf90gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABheB108LGx/lLXHerob7e998hhnCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMTvVwAAAP//G5URgQ==") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc0500, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x183802, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 20m20.831110898s ago: executing program 4 (id=14): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, 0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 20m17.781140575s ago: executing program 4 (id=19): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000880)="580000001400192340834b80040d8c560a06ffffff7f000000004001000058000b4804ee935f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e0140000452c7", 0x58}], 0x1) 20m11.478216135s ago: executing program 4 (id=33): socket$inet6(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r10, 0x21eae}}, 0x20}}, 0x0) 20m9.278700665s ago: executing program 4 (id=39): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f0000007200)=""/4096, 0x1000}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 20m8.157097111s ago: executing program 4 (id=40): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000005c0), &(0x7f0000000600)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000197, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x100000000000035) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 19m52.842735688s ago: executing program 32 (id=40): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000005c0), &(0x7f0000000600)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000197, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x100000000000035) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 1m55.276013692s ago: executing program 5 (id=2406): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2096088, &(0x7f00000005c0), 0x1, 0x446, &(0x7f0000000d80)="$eJzs281rHOUfAPDv7Cbpr6/Jr9SXvqjRKhZfkiattQcvioIHBUEP9RiTtNRuG0kimBI0itSjFLyLeBL8CzzpRdST4FXvUiiSS6unldmd2exuNmmSbjLY/Xxg2ueZmeV5vjvz3X3mebIB9Kzh9J8kYl9E/B4Rg/Vq6wnD9f9uLy9O/r28OJlEtfrmX0ntvFvLi5P5qfnr9uaVvojSp0kc7dDu3MLVSxOVyvRsVh+dv/ze6NzC1WcvXp64MH1h+sr42bOnT409f2b8ua7EmcZ168iHM8cOv/r29dcnz11/5+dvkzz+tji6ZHi9g09Uq11urlj7m8pJX4EdYVPK9TSN/lr+D0Y5Vi7eYLzySaGdA7ZVtVqt3r9qbykvLFWBe1gSRfcAKEb+RZ8+/+bbDg4/CnfzxfoDUBr37WyrH+lrjIL6255vu2k4Is4t/fNlusX2zEMAALT4Ph3/PNNp/FeK5nmhA9kaylBE/D8iDkbEmYg4FBH3RdTOfSAiHtxk++2LJKvHP6UbWwpsg9Lx3wvZ2lbr+K8xBzZUzmr7a/H3J+cvVqZPZu/JiejfldbH1mnjh5d/+3ytY83jv3RL28/Hglk/bvTtan3N1MT8xN3E3OzmxxFH+jrFnzRWApKIOBwRR7bYxsWnvjm21rE7x7+OLqwzVb+KeLJ2/QeWoi3+XLL++uTo/6IyfXI0vytW++XXa2+s1f5dxd8F6fXf0/H+b8Q/lDSv185tvo1rf3y25jPNVu//geStln0fTMzPz45FDCSv1TvdvH+87bzxlfPT+E8c75z/B2PlnTgaEelN/FBEPBwRj2R9fzQiHouI4+vE/9NLj7+79fi3Vxr/1Aau/0BWmV25ERYGIis09nQulC/9+F1Lo0MrxY1d/9O10olsz0Y+/zbSr63dzQAAAPDfU4qIfZGURhrlUmlkpP43/IdiT6kyMzf/9PmZ969M1X8jMBT9pXyma7BpPnQse6zP6+Nt9VPZvPEX5d21+sjkTGWq6OChx+1dI/9Tf5aL7h2w7fxeC3qX/IfeJf+hd8l/6F0d8n93Ef0Adl6n7/+PCugHsPPa8t+yH/QQz//Qu+Q/9C75Dz1pbnfc+UfyCgqrClHqcGgwIoru2D1Q+PpAPTuL7EbRn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//yXN3pM=") r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) r1 = fsmount(r0, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0xfffffffd}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f00000003c0)=@overlay={0xfffffff7, 0x9, 0x4, 0x80, 0x6, {}, {0x3, 0x0, 0x64, 0x5, 0x4, 0x0, "2be79edd"}, 0x3f61, 0x3, {}, 0xfff, 0x0, r1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x99241, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000140)={0x0, 0xffffffff, 0x10, 0x15, 0x7, &(0x7f0000000880)="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"}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) 1m52.248029557s ago: executing program 5 (id=2417): socket(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r5, 0x40086f52, &(0x7f0000000480)={0x2c, 0x0}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000180)) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a) splice(r6, 0x0, r1, 0x0, 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m42.130446427s ago: executing program 5 (id=2437): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x100000000000, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) 1m38.582196299s ago: executing program 5 (id=2442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r6) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x14, r7, 0x309, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) prlimit64(r0, 0x6, &(0x7f00000000c0)={0x1, 0xf02}, &(0x7f00000001c0)) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 1m33.076294504s ago: executing program 5 (id=2447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40842, 0x0) epoll_create(0x7) socket$xdp(0x2c, 0x3, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) 1m29.99651474s ago: executing program 5 (id=2451): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 1m14.908057107s ago: executing program 33 (id=2451): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 45.302528279s ago: executing program 0 (id=2532): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff00001000000000000000010000840600000000"], 0x0, 0x42}, 0x28) 45.116124234s ago: executing program 0 (id=2534): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2096088, &(0x7f00000005c0), 0x1, 0x446, &(0x7f0000000d80)="$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") r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) r1 = fsmount(r0, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0xfffffffd}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f00000003c0)=@overlay={0xfffffff7, 0x9, 0x4, 0x80, 0x6, {}, {0x3, 0x0, 0x64, 0x5, 0x4, 0x0, "2be79edd"}, 0x3f61, 0x3, {}, 0xfff, 0x0, r1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x99241, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000140)={0x0, 0xffffffff, 0x10, 0x15, 0x7, &(0x7f0000000880)="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"}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) 40.862283939s ago: executing program 0 (id=2540): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x3, 0xff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80801) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8, 0x800) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9d3, 0x100, 0x1000000, 0x35c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x0, 0x146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd289, 0x80, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x1, 0xfffffffd, 0x0, r1}}], 0x1, &(0x7f0000001000)={0x2e, 0xa, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xbcc, 0x0, 0x0}}, 0x0) 35.582286216s ago: executing program 0 (id=2547): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 34.16211085s ago: executing program 0 (id=2549): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2096088, &(0x7f00000005c0), 0x1, 0x446, &(0x7f0000000d80)="$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") r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) r1 = fsmount(r0, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0xfffffffd}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f00000003c0)=@overlay={0xfffffff7, 0x9, 0x4, 0x80, 0x6, {}, {0x3, 0x0, 0x64, 0x5, 0x4, 0x0, "2be79edd"}, 0x3f61, 0x3, {}, 0xfff, 0x0, r1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x99241, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000140)={0x0, 0xffffffff, 0x10, 0x15, 0x7, &(0x7f0000000880)="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"}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) 31.402383867s ago: executing program 0 (id=2556): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 15.784610101s ago: executing program 2 (id=2580): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x8, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 14.018640447s ago: executing program 6 (id=2581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) set_mempolicy(0x4005, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.945836139s ago: executing program 2 (id=2582): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2096088, &(0x7f00000005c0), 0x1, 0x446, &(0x7f0000000d80)="$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") r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) r1 = fsmount(r0, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0xfffffffd}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f00000003c0)=@overlay={0xfffffff7, 0x9, 0x4, 0x80, 0x6, {}, {0x3, 0x0, 0x64, 0x5, 0x4, 0x0, "2be79edd"}, 0x3f61, 0x3, {}, 0xfff, 0x0, r1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x99241, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000140)={0x0, 0xffffffff, 0x10, 0x15, 0x7, &(0x7f0000000880)="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"}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) 13.196130153s ago: executing program 1 (id=2586): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\x00', 0x8, 0x3a, 0x1, @remote={0xfe, 0x7}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x80, 0x2}}}}}}, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) inotify_init() syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r3, &(0x7f0000000200)="89", 0xffe3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 11.07284718s ago: executing program 6 (id=2587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r6) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x14, r7, 0x309, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) prlimit64(r0, 0x6, &(0x7f00000000c0)={0x1, 0xf02}, &(0x7f00000001c0)) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11000000040000000000000000000000000000006b5414c46edd88b9c16b624628920e78750cef1fce37c6b157556327cb4cfdf5ca9059e694b52ce9682df6c59789ca89fe22e4588168253622b03485ea4c1ec891b01f48b680b27fad53541c15010c64d176697fc649eb8e36b14da50beb5abd2ec94fcca2493a6ed6871eb4d7d4249bf879c79f43ee1de927d4079b79aead4ce8d4b36f12e1375e2c6acdb079433337abf954b4a9adcddbde46f20079e4622b8bdfc7221277a413440d2ff5cea909a50ff33418e7866e5edda1e9e13a5e92169ea47c8e5331b05dda94161e50858747a676b476d8fb97c4c9486aaf588af1074dec9e9f82541812f764", @ANYRES32=0x1, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 10.916203534s ago: executing program 1 (id=2588): syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\x00', 0x8, 0x3a, 0x1, @remote={0xfe, 0x7}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x80, 0x2}}}}}}, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) inotify_init() syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) write(r4, &(0x7f0000000200)="89", 0xffe3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 9.994759064s ago: executing program 2 (id=2590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x14, 0x0, 0x309, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 9.991203024s ago: executing program 6 (id=2591): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {0x0}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 7.389535686s ago: executing program 2 (id=2593): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2096088, &(0x7f00000005c0), 0x1, 0x446, &(0x7f0000000d80)="$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") r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0xfffffffd}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f00000003c0)=@overlay={0xfffffff7, 0x9, 0x4, 0x80, 0x6, {}, {0x3, 0x0, 0x64, 0x5, 0x4, 0x0, "2be79edd"}, 0x3f61, 0x3, {}, 0xfff, 0x0, r1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x99241, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000140)={0x0, 0xffffffff, 0x10, 0x15, 0x7, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c4eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7f804bb4713019a83353dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a58847440f064b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e10a1fd515380aae83c5eaeed338701574b64200216032811fadcf1e0f49a5102f529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c9802542ff20a9b2193f265f93a250200000000000000d23d324205000000000000000a617f22133b6cb5087f4c6057942ad995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f56c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8841416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedcbefc5990d7fed29a002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d559b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756d732533c2722e03002293e37966611602f297de6ff5408777d7a93c5c56e8a3e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f6579ef62866a3c2733d45f176937dff5ef2ba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9095147d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c0600072ae54c2ca0d5962cc562507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f8000000000000170000000000000000000000000005000000020000000000000000002000"}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0x0, 0x8ffff) 7.380959206s ago: executing program 1 (id=2594): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_aout(r4, 0x0, 0xffffffdb) 7.360302557s ago: executing program 3 (id=2595): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x8, 0x1, 0x0, "69c0161723fc3c13ca662342702d1a459380d13257a4bb97ce001c869ee8c942"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f000059b000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0xd6fff000) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r5, &(0x7f0000003080), 0x0, 0x40080a0) setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3}, 0x2000000}], 0x2, 0x101, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 7.331317958s ago: executing program 6 (id=2596): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x3, 0xff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80801) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x8, 0x800) socket(0x400000000010, 0x3, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9d3, 0x100, 0x1000000, 0x35c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x0, 0x146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd289, 0x80, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x1, 0xfffffffd, 0x0, r1}}], 0x1, &(0x7f0000001000)={0x2e, 0xa, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xbcc, 0x0, 0x0}}, 0x0) 6.174777154s ago: executing program 3 (id=2597): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000780)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@debug}, {@noblock_validity}, {@discard}, {@quota}, {@errors_remount}, {@nomblk_io_submit}, {@dioread_nolock}, {@mb_optimize_scan}]}, 0x4, 0x5b5, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) mkdir(0x0, 0x1df) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800e00010069703665727370616e00000034000280060002003000000014000600fc02000000000000000000000000000014000700fc010000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x40187014, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xe, &(0x7f0000000500)={@local, @multicast, @void, {@generic={0x6558}}}, 0x0) 4.169731598s ago: executing program 3 (id=2598): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(0x0, 0x8001420, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 4.09309801s ago: executing program 2 (id=2599): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2096088, &(0x7f00000005c0), 0x1, 0x446, &(0x7f0000000d80)="$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") r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) r1 = fsmount(r0, 0x0, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0xfffffffd}], 0x1c) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f00000003c0)=@overlay={0xfffffff7, 0x9, 0x4, 0x80, 0x6, {}, {0x3, 0x0, 0x64, 0x5, 0x4, 0x0, "2be79edd"}, 0x3f61, 0x3, {}, 0xfff, 0x0, r1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x99241, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x100013, 0xffffffffffffffff, 0x7f571000) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000140)={0x0, 0xffffffff, 0x10, 0x15, 0x7, &(0x7f0000000880)="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"}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) 4.026747332s ago: executing program 1 (id=2600): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x3, 0x1000) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x0, 0x810400, 0x40, 0x4000, 0x80000002, 0xfffffffd, 0x0, 0x0, 0x1, 0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.025064643s ago: executing program 6 (id=2601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r6) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x14, r7, 0x309, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11000000040000000000000000000000000000006b5414c46edd88b9c16b624628920e78750cef1fce37c6b157556327cb4cfdf5ca9059e694b52ce9682df6c59789ca89fe22e4588168253622b03485ea4c1ec891b01f48b680b27fad53541c15010c64d176697fc649eb8e36b14da50beb5abd2ec94fcca2493a6ed6871eb4d7d4249bf879c79f43ee1de927d4079b79aead4ce8d4b36f12e1375e2c6acdb079433337abf954b4a9adcddbde46f20079e4622b8bdfc7221277a413440d2ff5cea909a50ff33418e7866e5edda1e9e13a5e92169ea47c8e5331b05dda94161e50858747a676b476d8fb97c4c9486aaf588af1074dec9e9f82541812f764", @ANYRES32=0x1, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 1.930113058s ago: executing program 1 (id=2602): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000001100)='./file1\x00', 0x1000040, &(0x7f0000001140)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp855,errors=remount-ro,utf8,fmask=00000000000000000000004,iocharset=koi8-ru,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303430302c646d61736b3d30303030303030303030303034303030303030303030302c616c6c6f775f7574696d653d3030303030303030303030303030303030521e303030312c00b5efd5a5c49860e6033d86a1062aa410763a35d6358f3ec56140261c6ce5becee4b76d651a129b77d4e52b37ca8fdc9a7a3d08e55f6bfc2fdd3440ba22085c942503c30e11081ad5fa75126938c97d581a5cce2f6488388f66fa7e0e33b5b36d"], 0x1, 0x1531, &(0x7f00000014c0)="$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") add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f00000001c0)="fd32ad486607aa0b47af9825d769c40c4ceac439d361391dc339a366ea50a15ab5c8e364d877420c3f8b264dea8322c5ff2770de1dd8aa233061f6", &(0x7f0000000280)=""/52) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(&(0x7f0000000140)={0x10000008, 0x4000000000000002}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r3}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 1.655076797s ago: executing program 6 (id=2603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r6) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x14, r7, 0x309, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) prlimit64(r0, 0x6, &(0x7f00000000c0)={0x1, 0xf02}, &(0x7f00000001c0)) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 1.654644537s ago: executing program 3 (id=2604): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x8, 0x1, 0x0, "69c0161723fc3c13ca662342702d1a459380d13257a4bb97ce001c869ee8c942"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f000059b000/0x2000)=nil, 0x2000, 0x0, 0x20010, 0xffffffffffffffff, 0xd6fff000) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r5, &(0x7f0000003080), 0x0, 0x40080a0) setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3}, 0x2000000}], 0x2, 0x101, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 433.138446ms ago: executing program 3 (id=2605): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000008580)=[{0x2, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x5, 0x4000005, 0x8]}, {0x2, 0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000002cc0)=""/4, 0x4}, {&(0x7f0000002d80)=""/4096, 0x1000}], &(0x7f0000002d40)=[0x9, 0x400]}, {0x3, 0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/249, 0xf9}, {&(0x7f0000003e80)=""/162, 0xa2}, {&(0x7f0000003f40)=""/120, 0x78}], &(0x7f00000001c0)=[0x1, 0xe, 0x3baf, 0x5, 0x3]}, {0x5, 0x1, 0x0, &(0x7f0000005300)=[{&(0x7f0000004040)=""/243, 0xf3}, {&(0x7f0000004140)=""/110, 0x6e}, {&(0x7f00000041c0)=""/227, 0xe3}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x4, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {0x0}, {&(0x7f0000000880)=""/213, 0xd5}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x8, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000067c0)=""/178, 0xb2}, {&(0x7f00000069c0)=""/23, 0x17}, {&(0x7f0000000640)=""/262, 0x106}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000006f40)=""/250, 0xfa}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000000780)=""/175, 0xaf}, {0x0}, {0x0}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008340)=""/61, 0x3d}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 206.684433ms ago: executing program 1 (id=2606): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 73.436408ms ago: executing program 3 (id=2607): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 0s ago: executing program 2 (id=2608): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000001480), 0xfc, 0x56f, &(0x7f0000003780)="$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") fallocate(0xffffffffffffffff, 0x10, 0x20c01, 0x8000) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x5c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ptrace(0x11, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0xfffffd12}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000020000100fcffffff002000000200000000000000120000000c0014408000000000000001050016002f000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): [ 912.001211][ T5958] usb 6-1: Manufacturer: syz [ 912.005824][ T5958] usb 6-1: SerialNumber: syz [ 912.010811][ T4359] usb 1-1: SerialNumber: syz [ 912.014653][T11800] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 912.020750][ T4359] usb 1-1: config 0 descriptor?? [ 912.031621][ T5958] usb 6-1: config 0 descriptor?? [ 912.041559][ T5958] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 912.050359][ T4359] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 912.098729][T11800] ext4 filesystem being mounted at /360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 912.143389][T11804] loop1: detected capacity change from 0 to 512 [ 912.329090][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 912.374380][ T14] libceph: connect (1)[c::]:6789 error -101 [ 912.393403][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 912.676537][ T14] libceph: connect (1)[c::]:6789 error -101 [ 912.684927][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 912.901141][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 913.240676][ T14] libceph: connect (1)[c::]:6789 error -101 [ 913.284990][ T4359] gspca_topro: reg_w err -71 [ 913.338769][ T4359] gspca_topro: Sensor soi763a [ 913.475725][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 915.471502][T11804] ceph: No mds server is up or the cluster is laggy [ 915.516174][ T4359] usb 1-1: USB disconnect, device number 10 [ 915.721320][ T5958] gspca_sonixj: i2c_w8 err -71 [ 915.818953][ T5958] sonixj: probe of 6-1:0.0 failed with error -71 [ 915.828171][ T5958] usb 6-1: USB disconnect, device number 9 [ 915.928709][ T5477] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 916.158634][ T5477] usb 4-1: Using ep0 maxpacket: 32 [ 916.970990][ T5477] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 916.980175][ T5477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.988217][ T5477] usb 4-1: Product: syz [ 916.992983][ T5477] usb 4-1: Manufacturer: syz [ 916.997602][ T5477] usb 4-1: SerialNumber: syz [ 917.004346][ T5477] usb 4-1: config 0 descriptor?? [ 917.012321][ T5477] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 917.052162][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 917.080437][T11837] loop1: detected capacity change from 0 to 512 [ 917.149043][ T4361] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 917.153675][T11842] loop0: detected capacity change from 0 to 128 [ 917.224982][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 917.234828][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 917.249633][T11842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 917.508931][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 917.515066][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 917.541597][T11842] ext4 filesystem being mounted at /440/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 918.081327][T11837] ceph: No mds server is up or the cluster is laggy [ 918.501719][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1828'. [ 918.535710][ T5477] gspca_topro: reg_r err -71 [ 918.540727][ T5477] gspca_topro: Sensor soi763a [ 918.561583][ T5477] usb 4-1: USB disconnect, device number 11 [ 919.494590][ T5958] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 919.688830][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 919.729065][ T5958] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 919.740918][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.749539][ T5958] usb 3-1: Product: syz [ 919.753724][ T5958] usb 3-1: Manufacturer: syz [ 919.758329][ T5958] usb 3-1: SerialNumber: syz [ 919.765299][ T5958] usb 3-1: config 0 descriptor?? [ 920.560263][ T5958] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 921.249488][T11886] loop1: detected capacity change from 0 to 8192 [ 921.296593][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 921.318328][T11886] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 921.498597][ T4573] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 921.754673][ T4573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.765251][ T5958] gspca_topro: reg_w err -71 [ 921.765988][ T4573] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 921.779770][ T4573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.829476][ T5958] gspca_topro: Sensor soi763a [ 921.930433][ T5958] usb 3-1: USB disconnect, device number 9 [ 922.704782][ T4573] usb 4-1: config 0 descriptor?? [ 922.712695][ T4573] pwc: Askey VC010 type 2 USB webcam detected. [ 924.158569][ T4573] pwc: recv_control_msg error -32 req 02 val 2b00 [ 924.181958][ T4573] pwc: recv_control_msg error -32 req 02 val 2700 [ 924.282970][ T4573] pwc: recv_control_msg error -71 req 02 val 2c00 [ 924.294435][ T4573] pwc: recv_control_msg error -71 req 04 val 1000 [ 924.363373][ T4573] pwc: recv_control_msg error -71 req 04 val 1300 [ 924.410917][ T4573] pwc: recv_control_msg error -71 req 04 val 1400 [ 924.478763][ T4573] pwc: recv_control_msg error -71 req 02 val 2000 [ 924.544727][ T4573] pwc: recv_control_msg error -71 req 02 val 2100 [ 924.631009][ T4573] pwc: recv_control_msg error -71 req 04 val 1500 [ 924.693762][ T4573] pwc: recv_control_msg error -71 req 02 val 2500 [ 924.751443][ T4573] pwc: recv_control_msg error -71 req 02 val 2400 [ 924.795864][ T4573] pwc: recv_control_msg error -71 req 02 val 2600 [ 924.838421][ T4573] pwc: recv_control_msg error -71 req 02 val 2900 [ 924.877745][ T4573] pwc: recv_control_msg error -71 req 02 val 2800 [ 924.920185][ T4573] pwc: recv_control_msg error -71 req 04 val 1100 [ 924.962721][ T4573] pwc: recv_control_msg error -71 req 04 val 1200 [ 925.013323][ T4573] pwc: Registered as video103. [ 925.072884][ T4573] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 925.116456][T11918] loop5: detected capacity change from 0 to 512 [ 925.185199][ T4573] usb 4-1: USB disconnect, device number 12 [ 925.494124][T11926] loop1: detected capacity change from 0 to 8192 [ 925.526744][T11932] loop2: detected capacity change from 0 to 128 [ 926.248692][T10980] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 926.367789][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 926.428881][T11926] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 926.456660][ T4573] libceph: connect (1)[c::]:6789 error -101 [ 926.463758][T11932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 926.536245][ T4573] libceph: mon0 (1)[c::]:6789 connect error [ 926.792948][T11918] ceph: No mds server is up or the cluster is laggy [ 926.868167][T11932] ext4 filesystem being mounted at /365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 926.913271][T10767] libceph: connect (1)[c::]:6789 error -101 [ 926.934749][T10767] libceph: mon0 (1)[c::]:6789 connect error [ 929.784891][T11972] siw: device registration error -23 [ 930.717287][T11976] loop5: detected capacity change from 0 to 512 [ 930.768709][T11976] EXT4-fs: Ignoring removed bh option [ 930.794702][T11976] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 930.828810][ T5477] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 930.889400][T11976] EXT4-fs (loop5): 1 truncate cleaned up [ 930.895106][T11976] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 931.095785][T11976] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1857: bg 0: block 465: padding at end of block bitmap is not set [ 931.148593][ T5477] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.179803][ T5477] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 931.189652][T11976] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 931.194945][ T5477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.320268][ T5477] usb 2-1: config 0 descriptor?? [ 931.413771][ T5477] pwc: Askey VC010 type 2 USB webcam detected. [ 931.462125][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.469007][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.674211][T11976] EXT4-fs (loop5): This should not happen!! Data will be lost [ 931.674211][T11976] [ 931.774141][T11976] EXT4-fs (loop5): Total free blocks count 0 [ 931.792223][T11976] EXT4-fs (loop5): Free/Dirty block details [ 931.798190][T11976] EXT4-fs (loop5): free_blocks=0 [ 931.803205][T11976] EXT4-fs (loop5): dirty_blocks=1 [ 931.808254][T11976] EXT4-fs (loop5): Block reservation details [ 931.814348][T11976] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 931.987134][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 932.055580][ T5477] pwc: recv_control_msg error -32 req 02 val 2b00 [ 932.073405][ T5477] pwc: recv_control_msg error -32 req 02 val 2700 [ 932.086341][ T5477] pwc: recv_control_msg error -32 req 02 val 2c00 [ 932.107555][ T5477] pwc: recv_control_msg error -32 req 04 val 1000 [ 932.115458][ T5477] pwc: recv_control_msg error -32 req 04 val 1300 [ 932.136472][ T5477] pwc: recv_control_msg error -32 req 04 val 1400 [ 932.155319][ T4658] EXT4-fs (loop5): unmounting filesystem. [ 932.165843][ T5477] pwc: recv_control_msg error -32 req 02 val 2000 [ 932.181168][ T5477] pwc: recv_control_msg error -32 req 02 val 2100 [ 932.192908][ T5477] pwc: recv_control_msg error -32 req 04 val 1500 [ 932.206265][ T5477] pwc: recv_control_msg error -32 req 02 val 2500 [ 932.463450][ T5477] pwc: recv_control_msg error -71 req 02 val 2600 [ 932.505451][ T5477] pwc: recv_control_msg error -71 req 02 val 2900 [ 932.580626][ T5477] pwc: recv_control_msg error -71 req 02 val 2800 [ 932.660769][ T5477] pwc: recv_control_msg error -71 req 04 val 1100 [ 932.726199][ T5477] pwc: recv_control_msg error -71 req 04 val 1200 [ 932.789194][ T5477] pwc: Registered as video103. [ 932.857004][ T5477] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input58 [ 933.013261][ T5477] usb 2-1: USB disconnect, device number 10 [ 933.165962][T11993] loop3: detected capacity change from 0 to 512 [ 933.314339][ T127] libceph: connect (1)[c::]:6789 error -101 [ 933.321355][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 933.329195][ T127] libceph: connect (1)[c::]:6789 error -101 [ 933.335508][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 934.278611][ T127] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 934.444204][T11993] ceph: No mds server is up or the cluster is laggy [ 934.449465][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 934.457387][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 934.640620][ T127] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.651050][ T127] usb 6-1: config 0 has no interfaces? [ 934.656549][ T127] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 934.668169][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.786115][ T5958] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 934.818205][ T127] usb 6-1: config 0 descriptor?? [ 935.604677][T12018] loop3: detected capacity change from 0 to 512 [ 935.628991][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 935.648400][ T5958] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 935.652769][T11415] libceph: connect (1)[c::]:6789 error -101 [ 935.674524][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.682990][ T5958] usb 1-1: Product: syz [ 935.683102][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 935.687206][ T5958] usb 1-1: Manufacturer: syz [ 935.703157][ T5958] usb 1-1: SerialNumber: syz [ 935.709734][ T5958] usb 1-1: config 0 descriptor?? [ 935.727718][ T5958] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 935.756803][ T5477] usb 6-1: USB disconnect, device number 10 [ 936.259072][ T5958] gspca_sonixj: reg_w1 err -110 [ 936.264025][ T5958] sonixj: probe of 1-1:0.0 failed with error -110 [ 936.540303][T12018] ceph: No mds server is up or the cluster is laggy [ 936.571716][T11415] libceph: connect (1)[c::]:6789 error -101 [ 936.577699][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 937.718619][ T5477] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 938.110342][ T5958] usb 1-1: USB disconnect, device number 11 [ 938.311491][T12037] loop2: detected capacity change from 0 to 128 [ 938.731027][T12037] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 938.741862][T12037] ext4 filesystem being mounted at /369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 939.272255][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 939.368600][ T5477] usb 2-1: Using ep0 maxpacket: 32 [ 939.410530][ T5477] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 939.424072][ T5477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.442397][ T5477] usb 2-1: Product: syz [ 939.446595][ T5477] usb 2-1: Manufacturer: syz [ 939.451258][ T5477] usb 2-1: SerialNumber: syz [ 939.459482][ T5477] usb 2-1: config 0 descriptor?? [ 939.469374][ T5477] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 939.963140][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 939.963154][ T27] audit: type=1326 audit(1780783646.913:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.3.1878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479299ce59 code=0x7ffc0000 [ 940.023382][ T27] audit: type=1326 audit(1780783646.953:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.3.1878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479299ce59 code=0x7ffc0000 [ 940.130518][ T27] audit: type=1326 audit(1780783646.953:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.3.1878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f479299ce59 code=0x7ffc0000 [ 940.177561][T12060] loop3: detected capacity change from 0 to 512 [ 940.207333][T12063] loop0: detected capacity change from 0 to 512 [ 940.212795][ T27] audit: type=1326 audit(1780783647.123:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.3.1878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479299ce59 code=0x7ffc0000 [ 940.283981][ T27] audit: type=1326 audit(1780783647.123:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.3.1878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479299ce59 code=0x7ffc0000 [ 940.284674][ T4361] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 940.323707][ T27] audit: type=1326 audit(1780783647.143:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.3.1878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f479295d68e code=0x7ffc0000 [ 940.384015][T12060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 940.399073][ T4368] libceph: connect (1)[c::]:6789 error -101 [ 940.405149][ T4368] libceph: mon0 (1)[c::]:6789 connect error [ 940.446732][ T27] audit: type=1326 audit(1780783647.303:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.3.1878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f479299ce59 code=0x7ffc0000 [ 940.678977][T12060] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.619421][ T5477] gspca_topro: reg_w err -110 [ 941.641121][ T4368] libceph: connect (1)[c::]:6789 error -101 [ 941.649627][ T4368] libceph: mon0 (1)[c::]:6789 connect error [ 941.678752][ T5477] gspca_topro: Sensor soi763a [ 941.722796][ T27] audit: type=1326 audit(1780783648.673:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.3.1878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f479299ce59 code=0x7ffc0000 [ 941.747432][ T27] audit: type=1326 audit(1780783648.673:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.3.1878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479299ce59 code=0x7ffc0000 [ 941.776071][ T27] audit: type=1326 audit(1780783648.673:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.3.1878" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479299ce59 code=0x7ffc0000 [ 941.966283][T12063] ceph: No mds server is up or the cluster is laggy [ 942.146971][ T4352] usb 2-1: USB disconnect, device number 11 [ 942.169310][T11415] libceph: connect (1)[c::]:6789 error -101 [ 942.175347][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 942.289850][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 942.372551][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 943.368731][T12082] loop1: detected capacity change from 0 to 512 [ 943.445019][T12082] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 943.461336][T12082] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.521182][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 943.635069][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 943.668695][ T4368] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 943.731780][T12114] fuse: Unknown parameter '0x0000000000000003' [ 943.781433][T12116] loop0: detected capacity change from 0 to 512 [ 943.839663][ T9950] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 943.850400][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 943.854166][ T4368] usb 6-1: Using ep0 maxpacket: 8 [ 943.856461][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 943.880656][ T4368] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 943.898510][ T4368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.906651][ T4368] usb 6-1: Product: syz [ 943.911696][ T4368] usb 6-1: Manufacturer: syz [ 943.916312][ T4368] usb 6-1: SerialNumber: syz [ 943.923293][ T4368] usb 6-1: config 0 descriptor?? [ 943.933279][ T4368] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 943.989353][ T4320] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 944.121124][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 944.133883][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 944.660276][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 944.668643][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 944.716426][T12116] ceph: No mds server is up or the cluster is laggy [ 945.795021][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.800142][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 945.811896][ T4320] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 945.829246][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 945.941626][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.979416][ T4320] usb 2-1: config 0 descriptor?? [ 945.995373][ T4320] pwc: Askey VC010 type 2 USB webcam detected. [ 946.430834][ T4320] pwc: recv_control_msg error -32 req 02 val 2b00 [ 946.464110][ T4320] pwc: recv_control_msg error -32 req 02 val 2700 [ 946.507506][ T4320] pwc: recv_control_msg error -32 req 02 val 2c00 [ 946.572259][ T4320] pwc: recv_control_msg error -32 req 04 val 1000 [ 946.606381][ T4368] gspca_sonixj: reg_r err -71 [ 946.663370][ T4320] pwc: recv_control_msg error -32 req 04 val 1300 [ 946.688899][ T4368] sonixj: probe of 6-1:0.0 failed with error -71 [ 946.744901][ T4368] usb 6-1: USB disconnect, device number 11 [ 946.763965][ T4320] pwc: recv_control_msg error -32 req 04 val 1400 [ 946.856085][ T4320] pwc: recv_control_msg error -32 req 02 val 2000 [ 946.944906][ T4320] pwc: recv_control_msg error -32 req 02 val 2100 [ 947.006404][ T4320] pwc: recv_control_msg error -32 req 04 val 1500 [ 947.042540][ T4320] pwc: recv_control_msg error -32 req 02 val 2500 [ 947.109754][T12139] loop2: detected capacity change from 0 to 128 [ 947.222052][T12139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 947.234818][T12139] ext4 filesystem being mounted at /372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 947.494066][ T4320] pwc: recv_control_msg error -71 req 02 val 2600 [ 947.517107][ T4320] pwc: recv_control_msg error -71 req 02 val 2900 [ 947.559775][T12147] siw: device registration error -23 [ 947.598218][ T4320] pwc: recv_control_msg error -71 req 02 val 2800 [ 947.691961][ T4320] pwc: recv_control_msg error -71 req 04 val 1100 [ 947.858031][ T4320] pwc: recv_control_msg error -71 req 04 val 1200 [ 947.975660][ T4320] pwc: Registered as video103. [ 948.077534][ T4320] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 948.186446][ T4320] usb 2-1: USB disconnect, device number 12 [ 948.430247][T12154] fuse: Unknown parameter '0x0000000000000003' [ 948.433056][T12152] loop3: detected capacity change from 0 to 512 [ 948.519097][T12158] loop1: detected capacity change from 0 to 512 [ 948.562244][ T9950] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 948.608189][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 948.614968][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 948.633936][T10767] libceph: connect (1)[c::]:6789 error -101 [ 948.641029][T10767] libceph: mon0 (1)[c::]:6789 connect error [ 948.768714][ T4320] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 948.888828][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 948.920259][T10767] libceph: connect (1)[c::]:6789 error -101 [ 948.974628][ T4320] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.252605][T12152] ceph: No mds server is up or the cluster is laggy [ 949.260927][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 949.268098][T12166] loop0: detected capacity change from 0 to 512 [ 949.277164][T10767] libceph: mon0 (1)[c::]:6789 connect error [ 949.561875][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 949.582957][T12158] ceph: No mds server is up or the cluster is laggy [ 949.590186][ T4320] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 949.599712][ T4320] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 949.609425][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.609546][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 949.629183][ T4320] usb 6-1: config 0 descriptor?? [ 949.923330][T12166] ceph: No mds server is up or the cluster is laggy [ 949.931325][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 949.937716][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 949.944149][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 949.950224][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 950.451439][T12181] siw: device registration error -23 [ 951.290086][T12179] siw: device registration error -23 [ 951.426625][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 951.518401][ T14] usb 6-1: USB disconnect, device number 12 [ 955.196684][T12212] siw: device registration error -23 [ 955.299469][T12214] fuse: Unknown parameter '0x0000000000000003' [ 955.612121][T12223] 9pnet_fd: Insufficient options for proto=fd [ 956.346229][T12225] loop1: detected capacity change from 0 to 512 [ 956.412455][T12225] EXT4-fs: Ignoring removed bh option [ 956.459773][T12225] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 956.566169][T12225] EXT4-fs (loop1): 1 truncate cleaned up [ 956.666060][T12225] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 956.699765][T12225] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1914: bg 0: block 465: padding at end of block bitmap is not set [ 956.737787][T12225] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 956.758542][T12225] EXT4-fs (loop1): This should not happen!! Data will be lost [ 956.758542][T12225] [ 957.468778][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1915'. [ 957.957418][T12225] EXT4-fs (loop1): shut down requested (1) [ 958.116073][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 958.616232][T12263] fuse: Unknown parameter 'fd0x0000000000000003' [ 959.058682][ T4352] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 959.228278][T12272] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1925'. [ 959.247880][ T4352] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 959.264652][ T4352] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 959.278075][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.889054][ T5958] usb 4-1: USB disconnect, device number 13 [ 963.848296][T12324] loop1: detected capacity change from 0 to 512 [ 963.892423][ T4573] libceph: connect (1)[c::]:6789 error -101 [ 963.898922][ T4573] libceph: mon0 (1)[c::]:6789 connect error [ 964.161563][ T4573] libceph: connect (1)[c::]:6789 error -101 [ 964.184838][ T4573] libceph: mon0 (1)[c::]:6789 connect error [ 964.277096][T12330] loop2: detected capacity change from 0 to 128 [ 964.430050][ T4573] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 964.632731][ T4573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.681921][ T4573] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 964.721364][T12330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 964.756383][ T4573] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 964.826461][ T4573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.871752][T12324] ceph: No mds server is up or the cluster is laggy [ 964.883305][T12330] ext4 filesystem being mounted at /378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 964.907963][ T26] libceph: connect (1)[c::]:6789 error -101 [ 964.933074][ T4573] usb 4-1: config 0 descriptor?? [ 964.986486][ T4573] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 965.007870][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 965.015994][ T4573] dvb-usb: bulk message failed: -22 (3/0) [ 965.139052][ T4573] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 965.161196][ T4573] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 965.173296][ T4573] usb 4-1: media controller created [ 965.183830][ T4573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 965.203398][ T4573] dvb-usb: bulk message failed: -22 (6/0) [ 965.209523][ T4573] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 965.220341][ T4573] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input60 [ 965.440660][ T4573] dvb-usb: schedule remote query interval to 150 msecs. [ 965.447649][ T4573] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 965.463831][ T4573] usb 4-1: USB disconnect, device number 14 [ 965.513639][ T4573] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 965.837997][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 965.918703][T10767] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 966.175811][T12353] loop3: detected capacity change from 0 to 128 [ 966.358422][T12353] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 966.746045][T12353] hpfs: filesystem error: improperly stopped [ 966.809733][T10767] usb 2-1: Using ep0 maxpacket: 32 [ 966.815849][T12353] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 966.828991][T10767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.847788][T10767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.878878][T10767] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 966.887959][T10767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.896539][T12353] hpfs: You really don't want any checks? You are crazy... [ 966.923143][T12353] hpfs: hpfs_map_sector(): read error [ 966.941670][T10767] usb 2-1: config 0 descriptor?? [ 966.941949][T12353] hpfs: code page support is disabled [ 966.954233][T12353] hpfs: hpfs_map_4sectors(): unaligned read [ 966.971069][T12353] hpfs: hpfs_map_4sectors(): unaligned read [ 966.971477][T10767] hub 2-1:0.0: USB hub found [ 966.976986][T12353] hpfs: filesystem error: unable to find root dir [ 968.109506][T10767] hub 2-1:0.0: 1 port detected [ 968.719740][T12370] siw: device registration error -23 [ 968.962325][T10767] usb 2-1: USB disconnect, device number 13 [ 969.478639][T11415] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 969.704649][T11415] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.736354][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 969.753999][T11415] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 969.763220][T11415] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 969.773318][T11415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.804334][T11415] usb 4-1: config 0 descriptor?? [ 969.864584][T11415] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 969.917735][T11415] dvb-usb: bulk message failed: -22 (3/0) [ 970.108349][T11415] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 970.186891][T11415] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 970.238173][T11415] usb 4-1: media controller created [ 970.291618][T11415] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 970.494552][T11415] dvb-usb: bulk message failed: -22 (6/0) [ 970.547808][T11415] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 970.701252][T11415] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61 [ 970.810978][T11415] dvb-usb: schedule remote query interval to 150 msecs. [ 970.870920][T11415] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 970.991643][T11415] usb 4-1: USB disconnect, device number 15 [ 971.064699][ T4368] dvb-usb: bulk message failed: -22 (1/0) [ 971.137100][ T4368] dvb-usb: error while querying for an remote control event. [ 971.195616][T12390] loop2: detected capacity change from 0 to 128 [ 971.257386][T12390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 971.275903][T11415] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 971.399786][T12398] siw: device registration error -23 [ 971.557400][T12390] ext4 filesystem being mounted at /382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 972.529923][T11415] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 972.599364][T12405] loop5: detected capacity change from 0 to 8192 [ 972.633236][T12405] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 972.670243][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 972.670257][ T27] audit: type=1800 audit(1780783679.623:1466): pid=12405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1957" name="file2" dev="loop5" ino=1048652 res=0 errno=0 [ 972.728759][T11415] usb 4-1: Using ep0 maxpacket: 8 [ 972.751343][T11415] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 972.777721][T11415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.190627][T11415] usb 4-1: Product: syz [ 973.194847][T11415] usb 4-1: Manufacturer: syz [ 973.199620][T11415] usb 4-1: SerialNumber: syz [ 973.205890][T11415] usb 4-1: config 0 descriptor?? [ 973.220920][T11415] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 975.171268][T11415] gspca_sonixj: reg_w1 err -110 [ 975.288804][T11415] sonixj: probe of 4-1:0.0 failed with error -110 [ 975.360539][T12423] loop1: detected capacity change from 0 to 256 [ 975.552986][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 975.562299][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 975.823380][T11415] libceph: connect (1)[c::]:6789 error -101 [ 976.064640][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 976.364897][ T9000] usb 4-1: USB disconnect, device number 16 [ 976.541355][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 976.609081][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 976.609187][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 976.686841][T12427] ceph: No mds server is up or the cluster is laggy [ 978.116505][T12456] 9pnet_fd: Insufficient options for proto=fd [ 978.946051][T12452] loop1: detected capacity change from 0 to 8192 [ 978.966457][T12452] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 978.989053][ T27] audit: type=1800 audit(1780783685.943:1467): pid=12452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1968" name="file2" dev="loop1" ino=1048653 res=0 errno=0 [ 979.075220][T12452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 979.139335][T12452] FAT-fs (loop1): Filesystem has been set read-only [ 979.146182][T12452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 979.179758][T12452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 979.188780][T12452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 979.198019][T12452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 979.206985][T12452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 979.223375][T12452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 979.268167][T12452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 980.181065][T12452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 980.190475][T12452] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 981.065253][T12479] loop1: detected capacity change from 0 to 128 [ 981.179126][T12479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 981.248922][T12479] ext4 filesystem being mounted at /367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 981.280873][ C0] vkms_vblank_simulate: vblank timer overrun [ 981.376019][T12486] loop3: detected capacity change from 0 to 512 [ 981.570907][ T4361] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 981.598541][ T4321] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 981.880662][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 981.890687][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 982.221969][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 983.325308][T12486] ceph: No mds server is up or the cluster is laggy [ 983.368097][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 983.672268][ T4321] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.723623][ T4321] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 983.732818][ T4321] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 983.749928][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.766805][ T4321] usb 6-1: config 0 descriptor?? [ 983.775367][ T4321] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 983.793340][ T4321] dvb-usb: bulk message failed: -22 (3/0) [ 983.813987][ T4321] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 983.825914][ T4321] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 983.835895][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'. [ 983.845065][ T4321] usb 6-1: media controller created [ 983.851970][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 983.864379][ T4321] dvb-usb: bulk message failed: -22 (6/0) [ 983.870666][ T4321] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 983.882842][T12502] siw: device registration error -23 [ 983.898958][ T4321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input62 [ 983.915229][ T4321] dvb-usb: schedule remote query interval to 150 msecs. [ 983.923037][ T4321] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 984.044872][ T4321] usb 6-1: USB disconnect, device number 13 [ 984.086089][ T4321] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 985.379754][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 986.663530][T12532] loop3: detected capacity change from 0 to 512 [ 986.670837][T12532] EXT4-fs: Ignoring removed bh option [ 986.698993][T12532] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 986.762092][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 986.788025][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 986.792107][T12537] loop2: detected capacity change from 0 to 512 [ 986.832365][T12532] EXT4-fs (loop3): 1 truncate cleaned up [ 986.862070][ T4361] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 986.891840][T12532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 986.902177][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 986.908244][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 987.005820][T12528] ceph: No mds server is up or the cluster is laggy [ 987.692435][T12537] ceph: No mds server is up or the cluster is laggy [ 987.700513][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 987.706496][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 987.712885][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 987.719015][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 987.742583][T12532] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1991: bg 0: block 465: padding at end of block bitmap is not set [ 987.783523][T12545] loop1: detected capacity change from 0 to 512 [ 987.800461][T12532] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 987.828398][T12532] EXT4-fs (loop3): This should not happen!! Data will be lost [ 987.828398][T12532] [ 987.831637][ T46] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 987.839209][T12532] EXT4-fs (loop3): Total free blocks count 0 [ 987.877557][T12532] EXT4-fs (loop3): Free/Dirty block details [ 987.917617][ T46] EXT4-fs (loop3): This should not happen!! Data will be lost [ 987.917617][ T46] [ 987.942685][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 987.948806][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 987.948844][T12532] EXT4-fs (loop3): free_blocks=0 [ 987.965697][ T46] EXT4-fs (loop3): Total free blocks count 0 [ 987.974896][ T46] EXT4-fs (loop3): Free/Dirty block details [ 988.008548][ T9534] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 988.168775][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1995'. [ 988.237252][ T9534] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.284612][ T9534] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 988.351785][T12545] ceph: No mds server is up or the cluster is laggy [ 988.383594][ T9534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.416934][ T4359] libceph: connect (1)[c::]:6789 error -101 [ 988.438759][ T4359] libceph: mon0 (1)[c::]:6789 connect error [ 988.446800][ T9534] usb 6-1: config 0 descriptor?? [ 988.475695][ T9534] pwc: Askey VC010 type 2 USB webcam detected. [ 989.822126][ T9534] pwc: recv_control_msg error -32 req 02 val 2b00 [ 989.839469][ T9534] pwc: recv_control_msg error -32 req 02 val 2700 [ 989.848660][ T9534] pwc: recv_control_msg error -32 req 02 val 2c00 [ 989.858701][ T9534] pwc: recv_control_msg error -32 req 04 val 1000 [ 990.516094][ T9534] pwc: recv_control_msg error -32 req 04 val 1300 [ 990.554618][ T9534] pwc: recv_control_msg error -32 req 04 val 1400 [ 990.589761][ T9534] pwc: recv_control_msg error -32 req 02 val 2000 [ 990.618358][ T9534] pwc: recv_control_msg error -32 req 02 val 2100 [ 990.665767][ T9534] pwc: recv_control_msg error -32 req 04 val 1500 [ 990.686528][ T9534] pwc: recv_control_msg error -32 req 02 val 2500 [ 990.913218][ T9534] pwc: recv_control_msg error -71 req 02 val 2600 [ 990.958105][ T9534] pwc: recv_control_msg error -71 req 02 val 2900 [ 991.026616][ T9534] pwc: recv_control_msg error -71 req 02 val 2800 [ 991.066242][ T9534] pwc: recv_control_msg error -71 req 04 val 1100 [ 991.111114][ T9534] pwc: recv_control_msg error -71 req 04 val 1200 [ 991.183748][ T9534] pwc: Registered as video103. [ 991.275539][ T9534] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input63 [ 991.459700][ T9534] usb 6-1: USB disconnect, device number 14 [ 991.771865][T12594] siw: device registration error -23 [ 992.912672][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.920991][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.848659][ T4359] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 993.866236][T12620] siw: device registration error -23 [ 994.038642][ T4359] usb 6-1: Using ep0 maxpacket: 8 [ 994.066269][ T4359] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 994.102894][ T4359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.150182][ T4359] usb 6-1: Product: syz [ 994.171915][ T4359] usb 6-1: Manufacturer: syz [ 994.210210][ T4359] usb 6-1: SerialNumber: syz [ 994.290385][ T4359] usb 6-1: config 0 descriptor?? [ 994.350334][ T4359] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 995.858773][ T4359] gspca_sonixj: reg_w1 err -110 [ 996.009217][ T4359] sonixj: probe of 6-1:0.0 failed with error -110 [ 996.441608][T12631] siw: device registration error -23 [ 997.725257][ T4359] usb 6-1: USB disconnect, device number 15 [ 998.968857][ T9534] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 999.175580][ T9534] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.211596][ T9534] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 999.262147][ T9534] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 999.316222][ T9534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.402076][ T9534] usb 2-1: config 0 descriptor?? [ 999.491146][ T9534] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 999.537322][ T9534] dvb-usb: bulk message failed: -22 (3/0) [ 999.634458][ T9534] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 999.714029][ T9534] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 999.778236][ T9534] usb 2-1: media controller created [ 999.867390][ T9534] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 999.886471][T12660] dvb-usb: bulk message failed: -22 (2/0) [ 1000.098810][ T9534] dvb-usb: bulk message failed: -22 (6/0) [ 1000.104646][ T9534] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1000.162104][ T9534] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input64 [ 1000.185262][ T9534] dvb-usb: schedule remote query interval to 150 msecs. [ 1000.195258][ T9534] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1000.230161][ T9534] usb 2-1: USB disconnect, device number 14 [ 1000.285691][T12679] loop5: detected capacity change from 0 to 512 [ 1000.465195][ T9534] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1000.533560][ T4361] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1000.919678][ T3655] libceph: connect (1)[c::]:6789 error -101 [ 1000.934891][ T3655] libceph: mon0 (1)[c::]:6789 connect error [ 1001.057961][ T3655] libceph: connect (1)[c::]:6789 error -101 [ 1001.420058][ T3655] libceph: mon0 (1)[c::]:6789 connect error [ 1001.601706][ T9534] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 1001.826280][ T3655] libceph: connect (1)[c::]:6789 error -101 [ 1001.833073][ T3655] libceph: mon0 (1)[c::]:6789 connect error [ 1002.210208][ T9534] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.694060][ T3655] libceph: connect (1)[c::]:6789 error -101 [ 1002.700283][ T3655] libceph: mon0 (1)[c::]:6789 connect error [ 1002.852550][ T9534] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1002.865556][ T9534] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1002.874809][ T9534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.890826][ T9534] usb 4-1: config 0 descriptor?? [ 1002.901699][ T9534] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1002.959285][T12679] ceph: No mds server is up or the cluster is laggy [ 1003.123857][T12708] siw: device registration error -23 [ 1006.450130][ T6560] usb 4-1: USB disconnect, device number 17 [ 1006.888291][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'. [ 1007.048558][T10767] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1007.788505][T10767] usb 6-1: Using ep0 maxpacket: 32 [ 1007.803875][T10767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.912596][T10767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.029511][T10767] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1008.100772][T10767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.197648][T10767] usb 6-1: config 0 descriptor?? [ 1008.266445][T10767] hub 6-1:0.0: USB hub found [ 1008.679286][T10767] hub 6-1:0.0: 1 port detected [ 1008.832031][T12765] siw: device registration error -23 [ 1010.624120][ T4319] hub 6-1:0.0: activate --> -90 [ 1012.588800][T10767] usb 6-1: USB disconnect, device number 16 [ 1015.428700][ T9000] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1015.632687][ T9000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.686534][ T9000] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1015.721530][ T9000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.798197][ T9000] usb 3-1: config 0 descriptor?? [ 1015.846602][ T9000] pwc: Askey VC010 type 2 USB webcam detected. [ 1016.121610][T12820] siw: device registration error -23 [ 1017.102840][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 1017.142500][ T9000] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1017.156334][ T9000] pwc: recv_control_msg error -32 req 02 val 2700 [ 1017.240937][ T9000] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1017.328607][ T6560] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 1017.524400][ T6560] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1017.569148][ T6560] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1017.629435][ T6560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.735442][ T6560] usb 2-1: config 0 descriptor?? [ 1017.869566][ T9000] pwc: recv_control_msg error -32 req 04 val 1000 [ 1017.869847][ T6560] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1017.876582][ T9000] pwc: recv_control_msg error -32 req 04 val 1300 [ 1017.895299][ T9000] pwc: recv_control_msg error -32 req 04 val 1400 [ 1017.902849][ T9000] pwc: recv_control_msg error -32 req 02 val 2000 [ 1017.909564][ T14] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1017.917989][ T9000] pwc: recv_control_msg error -32 req 02 val 2100 [ 1017.960201][ T9000] pwc: recv_control_msg error -32 req 04 val 1500 [ 1018.029161][ T9000] pwc: recv_control_msg error -32 req 02 val 2500 [ 1018.124645][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.165465][ T14] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1018.180635][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.240833][ T9000] pwc: recv_control_msg error -71 req 02 val 2600 [ 1018.274996][ T9000] pwc: recv_control_msg error -71 req 02 val 2900 [ 1018.333921][ T14] usb 6-1: config 0 descriptor?? [ 1018.395926][ T9000] pwc: recv_control_msg error -71 req 02 val 2800 [ 1018.466387][ T14] pwc: Askey VC010 type 2 USB webcam detected. [ 1018.484793][ T9000] pwc: recv_control_msg error -71 req 04 val 1100 [ 1018.531812][ T9000] pwc: recv_control_msg error -71 req 04 val 1200 [ 1018.654763][ T9000] pwc: Registered as video103. [ 1018.782947][ T9000] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input65 [ 1018.994490][ T9000] usb 3-1: USB disconnect, device number 10 [ 1019.273437][ T4276] libceph: connect (1)[c::]:6789 error -101 [ 1019.287828][ T4276] libceph: mon0 (1)[c::]:6789 connect error [ 1019.377778][ T14] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1020.272513][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1020.280190][ T14] pwc: recv_control_msg error -32 req 02 val 2700 [ 1020.292739][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1020.311254][ T14] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1020.339442][ T14] pwc: recv_control_msg error -32 req 04 val 1000 [ 1020.354524][ T6560] usb 2-1: USB disconnect, device number 15 [ 1020.390562][ T14] pwc: recv_control_msg error -32 req 04 val 1300 [ 1020.398407][ T14] pwc: recv_control_msg error -32 req 04 val 1400 [ 1020.413058][ T14] pwc: recv_control_msg error -32 req 02 val 2000 [ 1020.425137][ T14] pwc: recv_control_msg error -32 req 02 val 2100 [ 1020.439413][T12839] ceph: No mds server is up or the cluster is laggy [ 1020.448129][ T14] pwc: recv_control_msg error -32 req 04 val 1500 [ 1021.293263][ T4276] libceph: connect (1)[c::]:6789 error -101 [ 1021.300661][ T14] pwc: recv_control_msg error -32 req 02 val 2500 [ 1021.307733][ T4276] libceph: mon0 (1)[c::]:6789 connect error [ 1021.576005][ T14] pwc: recv_control_msg error -71 req 02 val 2600 [ 1021.599696][ T14] pwc: recv_control_msg error -71 req 02 val 2900 [ 1021.635609][ T14] pwc: recv_control_msg error -71 req 02 val 2800 [ 1021.643331][ T14] pwc: recv_control_msg error -71 req 04 val 1100 [ 1021.658419][ T14] pwc: recv_control_msg error -71 req 04 val 1200 [ 1021.666277][ T14] pwc: Registered as video103. [ 1021.684297][ T14] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input66 [ 1021.714341][ T27] audit: type=1326 audit(1780783728.663:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.2.2075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d399ce59 code=0x7ffc0000 [ 1021.735347][ T14] usb 6-1: USB disconnect, device number 17 [ 1021.760174][ T27] audit: type=1326 audit(1780783728.693:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.2.2075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d399ce59 code=0x7ffc0000 [ 1021.818059][ T27] audit: type=1326 audit(1780783728.693:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.2.2075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f73d399ce59 code=0x7ffc0000 [ 1021.853683][ T27] audit: type=1326 audit(1780783728.803:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.2.2075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d399ce59 code=0x7ffc0000 [ 1021.887413][ T27] audit: type=1326 audit(1780783728.803:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.2.2075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d399ce59 code=0x7ffc0000 [ 1021.919443][T12865] loop2: detected capacity change from 0 to 512 [ 1021.921614][ T3655] libceph: connect (1)[c::]:6789 error -101 [ 1021.933069][ T3655] libceph: mon0 (1)[c::]:6789 connect error [ 1021.953932][ T27] audit: type=1326 audit(1780783728.853:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.2.2075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f73d395d68e code=0x7ffc0000 [ 1022.291321][ T3655] libceph: connect (1)[c::]:6789 error -101 [ 1022.336637][ T27] audit: type=1326 audit(1780783729.043:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.2.2075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f73d399ce59 code=0x7ffc0000 [ 1022.455316][ T3655] libceph: mon0 (1)[c::]:6789 connect error [ 1022.824588][T12865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1022.842267][T12865] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1022.884442][ T27] audit: type=1326 audit(1780783729.833:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.2.2075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73d399ce59 code=0x7ffc0000 [ 1022.910016][ T27] audit: type=1326 audit(1780783729.833:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.2.2075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d399ce59 code=0x7ffc0000 [ 1022.935529][T12864] ceph: No mds server is up or the cluster is laggy [ 1022.942554][ T27] audit: type=1326 audit(1780783729.833:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.2.2075" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d399ce59 code=0x7ffc0000 [ 1023.024320][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1023.316797][ T4276] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1024.046459][T12886] loop2: detected capacity change from 0 to 512 [ 1024.103688][ T14] libceph: connect (1)[c::]:6789 error -101 [ 1024.110220][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 1024.242948][ T4276] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.103401][ T4276] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1025.129106][ T4276] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1025.456724][T12886] ceph: No mds server is up or the cluster is laggy [ 1025.463957][ T4276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.482681][ T4276] usb 4-1: config 0 descriptor?? [ 1025.489386][ T14] libceph: connect (1)[c::]:6789 error -101 [ 1025.499880][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 1025.506377][ T4276] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1025.513996][ T4276] dvb-usb: bulk message failed: -22 (3/0) [ 1025.533316][ T4276] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1025.565153][ T4276] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1025.573711][ T4276] usb 4-1: media controller created [ 1025.580780][ T4276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1025.592950][ T4276] dvb-usb: bulk message failed: -22 (6/0) [ 1025.605855][ T4276] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1025.621045][ T4276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67 [ 1025.637516][ T4276] dvb-usb: schedule remote query interval to 150 msecs. [ 1025.644722][ T4276] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1025.842406][ T4276] dvb-usb: bulk message failed: -22 (1/0) [ 1025.848203][ T4276] dvb-usb: error while querying for an remote control event. [ 1025.889024][T12881] dvb-usb: bulk message failed: -22 (2/0) [ 1025.897477][ T14] usb 4-1: USB disconnect, device number 18 [ 1025.916825][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1026.038543][ T4276] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1026.211437][T12840] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1026.221020][ T4276] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1026.231345][ T4276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.240967][ T4276] usb 6-1: config 0 descriptor?? [ 1026.247826][ T4276] cp210x 6-1:0.0: cp210x converter detected [ 1026.400941][T12840] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1026.410291][T12840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.421202][T12840] usb 3-1: config 0 descriptor?? [ 1026.428616][T12840] cp210x 3-1:0.0: cp210x converter detected [ 1026.466750][ T4276] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1026.642939][T12918] siw: device registration error -23 [ 1026.895176][T12840] usb 3-1: cp210x converter now attached to ttyUSB1 [ 1027.420804][T12920] loop1: detected capacity change from 0 to 512 [ 1027.442855][T12920] EXT4-fs: Ignoring removed bh option [ 1027.638611][T12920] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1027.921939][T12920] EXT4-fs (loop1): 1 truncate cleaned up [ 1028.033226][T12920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1028.475463][T12920] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2091: bg 0: block 465: padding at end of block bitmap is not set [ 1028.523487][T12920] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 1028.561128][T12920] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1028.561128][T12920] [ 1028.574069][T12920] EXT4-fs (loop1): Total free blocks count 0 [ 1028.580686][T12920] EXT4-fs (loop1): Free/Dirty block details [ 1028.586875][T12920] EXT4-fs (loop1): free_blocks=0 [ 1028.596684][T12920] EXT4-fs (loop1): dirty_blocks=65 [ 1028.602043][T12920] EXT4-fs (loop1): Block reservation details [ 1028.608133][T12920] EXT4-fs (loop1): i_reserved_data_blocks=65 [ 1031.933395][ T4319] usb 6-1: USB disconnect, device number 18 [ 1031.943854][ T4319] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1031.953560][ T4319] cp210x 6-1:0.0: device disconnected [ 1032.183116][ T4276] usb 3-1: USB disconnect, device number 11 [ 1032.206828][ T4276] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1032.227477][ T4276] cp210x 3-1:0.0: device disconnected [ 1032.468736][ T32] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1035.084005][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1035.084020][ T27] audit: type=1326 audit(1780783742.033:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12972 comm="syz.1.2105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed959ce59 code=0x7ffc0000 [ 1035.114304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.126751][ T27] audit: type=1326 audit(1780783742.033:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12972 comm="syz.1.2105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed959ce59 code=0x7ffc0000 [ 1035.153493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.165340][ T27] audit: type=1326 audit(1780783742.033:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12972 comm="syz.1.2105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7ed959ce59 code=0x7ffc0000 [ 1035.910937][ T27] audit: type=1326 audit(1780783742.863:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12972 comm="syz.1.2105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed959ce59 code=0x7ffc0000 [ 1036.017351][ T27] audit: type=1326 audit(1780783742.943:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12972 comm="syz.1.2105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed959ce59 code=0x7ffc0000 [ 1036.079267][ T27] audit: type=1326 audit(1780783742.963:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.2105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ed955d68e code=0x7ffc0000 [ 1036.136172][T12974] loop1: detected capacity change from 0 to 512 [ 1036.148660][ T27] audit: type=1326 audit(1780783742.963:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12972 comm="syz.1.2105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7ed959ce59 code=0x7ffc0000 [ 1036.212397][ T27] audit: type=1326 audit(1780783742.963:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12972 comm="syz.1.2105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed959ce59 code=0x7ffc0000 [ 1036.261092][T12974] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1036.277196][ T27] audit: type=1326 audit(1780783742.963:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12972 comm="syz.1.2105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed959ce59 code=0x7ffc0000 [ 1036.291696][T12985] loop5: detected capacity change from 0 to 512 [ 1036.301718][ C0] vkms_vblank_simulate: vblank timer overrun [ 1036.307253][ T27] audit: type=1326 audit(1780783742.963:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12972 comm="syz.1.2105" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ed959ce59 code=0x7ffc0000 [ 1036.349615][T12974] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.407627][T12985] EXT4-fs: Ignoring removed bh option [ 1036.491401][T12985] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1036.593560][T12985] EXT4-fs (loop5): 1 truncate cleaned up [ 1036.604351][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1036.617555][T12985] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1036.744135][T12985] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2108: bg 0: block 465: padding at end of block bitmap is not set [ 1036.811226][T12985] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 1036.825199][T12985] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1036.825199][T12985] [ 1036.835518][T12985] EXT4-fs (loop5): Total free blocks count 0 [ 1036.843290][ T4332] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1036.856305][ T4332] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1036.856305][ T4332] [ 1036.875809][T12985] EXT4-fs (loop5): Free/Dirty block details [ 1036.882335][ T4332] EXT4-fs (loop5): Total free blocks count 0 [ 1036.882353][ T4332] EXT4-fs (loop5): Free/Dirty block details [ 1036.882365][ T4332] EXT4-fs (loop5): free_blocks=0 [ 1039.207855][T13017] loop2: detected capacity change from 0 to 128 [ 1039.234887][T13017] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1039.273354][T13017] hpfs: filesystem error: improperly stopped [ 1039.298056][T13017] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1039.351583][T13017] hpfs: You really don't want any checks? You are crazy... [ 1039.445243][T13017] hpfs: hpfs_map_sector(): read error [ 1039.476683][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2117'. [ 1039.489629][T13017] hpfs: code page support is disabled [ 1039.510171][T13017] hpfs: hpfs_map_4sectors(): unaligned read [ 1039.765202][T13017] hpfs: hpfs_map_4sectors(): unaligned read [ 1040.332355][T13017] hpfs: filesystem error: unable to find root dir [ 1041.535117][T13037] loop3: detected capacity change from 0 to 512 [ 1041.894346][ T6560] libceph: connect (1)[c::]:6789 error -101 [ 1041.912056][ T6560] libceph: mon0 (1)[c::]:6789 connect error [ 1041.941768][T13045] loop2: detected capacity change from 0 to 512 [ 1042.188777][ T6560] libceph: connect (1)[c::]:6789 error -101 [ 1042.315803][T13037] ceph: No mds server is up or the cluster is laggy [ 1042.318929][ T6560] libceph: mon0 (1)[c::]:6789 connect error [ 1043.059508][ T6560] libceph: connect (1)[c::]:6789 error -101 [ 1043.066041][ T6560] libceph: mon0 (1)[c::]:6789 connect error [ 1043.135859][T13045] EXT4-fs: Ignoring removed bh option [ 1043.241183][T13057] siw: device registration error -23 [ 1043.266989][T13045] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1043.419577][T13061] siw: device registration error -23 [ 1044.336908][T13045] EXT4-fs (loop2): 1 truncate cleaned up [ 1044.343600][T12840] libceph: connect (1)[c::]:6789 error -101 [ 1044.358785][T12840] libceph: mon0 (1)[c::]:6789 connect error [ 1044.558982][T13045] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1045.063962][T13045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2123: bg 0: block 465: padding at end of block bitmap is not set [ 1045.273404][T13065] ceph: No mds server is up or the cluster is laggy [ 1045.294379][ T14] libceph: connect (1)[c::]:6789 error -101 [ 1045.294455][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 1045.308288][T13045] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 64 with error 28 [ 1045.308322][T13045] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1045.308322][T13045] [ 1045.308338][T13045] EXT4-fs (loop2): Total free blocks count 0 [ 1045.308351][T13045] EXT4-fs (loop2): Free/Dirty block details [ 1045.308362][T13045] EXT4-fs (loop2): free_blocks=0 [ 1045.308376][T13045] EXT4-fs (loop2): dirty_blocks=65 [ 1045.308388][T13045] EXT4-fs (loop2): Block reservation details [ 1045.308399][T13045] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 1045.313851][T13079] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1045.809434][T12840] libceph: connect (1)[c::]:6789 error -101 [ 1045.809936][T12840] libceph: mon0 (1)[c::]:6789 connect error [ 1046.587345][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2133'. [ 1047.447915][T13096] siw: device registration error -23 [ 1047.788985][T13110] siw: device registration error -23 [ 1049.221401][T12840] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1050.176680][T13130] loop2: detected capacity change from 0 to 512 [ 1050.188808][T12840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.218012][T12840] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1050.235774][T12840] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1050.245498][T12840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.291800][T12840] usb 2-1: config 0 descriptor?? [ 1050.325059][ T14] libceph: connect (1)[c::]:6789 error -101 [ 1050.335242][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 1050.344694][T12840] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1050.357911][T12840] dvb-usb: bulk message failed: -22 (3/0) [ 1050.400533][T12840] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1050.424071][T12840] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1050.443085][T12840] usb 2-1: media controller created [ 1050.456857][T12840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1050.497953][T12840] dvb-usb: bulk message failed: -22 (6/0) [ 1050.505159][T12840] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1051.378839][T12840] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68 [ 1051.410310][T12840] dvb-usb: schedule remote query interval to 150 msecs. [ 1051.417497][T12840] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1051.500164][T12840] libceph: connect (1)[c::]:6789 error -101 [ 1051.556891][T12840] libceph: mon0 (1)[c::]:6789 connect error [ 1051.610035][ T5958] dvb-usb: bulk message failed: -22 (1/0) [ 1051.616426][ T5958] dvb-usb: error while querying for an remote control event. [ 1051.656255][T13130] ceph: No mds server is up or the cluster is laggy [ 1051.683202][T11415] usb 2-1: USB disconnect, device number 16 [ 1051.766007][T11415] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1051.966882][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'. [ 1052.650126][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1052.656211][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1052.887571][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1052.896633][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1053.810398][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1053.816500][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1054.007889][T13155] ceph: No mds server is up or the cluster is laggy [ 1054.342255][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.348938][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.416025][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1054.832253][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1055.017584][T13180] siw: device registration error -23 [ 1056.247035][T13191] tipc: Cannot configure node identity twice [ 1057.048526][ T4276] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1058.027828][T13210] loop5: detected capacity change from 0 to 512 [ 1058.044217][ T4276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.088320][ T4276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1058.120688][ T4276] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1058.131749][ T4276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.150184][ T4276] usb 2-1: config 0 descriptor?? [ 1058.156699][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1058.179464][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1058.186250][ T4276] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1058.192327][T13217] loop2: detected capacity change from 0 to 512 [ 1058.216158][ T4276] dvb-usb: bulk message failed: -22 (3/0) [ 1058.240761][ T4276] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1058.256501][T12937] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1058.295779][ T4276] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1058.311567][ T4276] usb 2-1: media controller created [ 1058.352799][ T4276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1058.557435][ T4276] dvb-usb: bulk message failed: -22 (6/0) [ 1058.613459][ T4276] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1058.993612][T13210] ceph: No mds server is up or the cluster is laggy [ 1059.038163][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1059.046210][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1059.063957][ T4276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69 [ 1059.160510][ T4276] dvb-usb: schedule remote query interval to 150 msecs. [ 1059.181445][ T4276] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1059.217458][ T4276] usb 2-1: USB disconnect, device number 17 [ 1059.224754][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1059.243055][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1059.272271][T13217] ceph: No mds server is up or the cluster is laggy [ 1059.295401][ T4276] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1059.557111][T11415] libceph: connect (1)[c::]:6789 error -101 [ 1059.567128][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 1059.714416][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2175'. [ 1059.839581][T11415] libceph: connect (1)[c::]:6789 error -101 [ 1059.847821][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 1061.257955][T11415] libceph: connect (1)[c::]:6789 error -101 [ 1061.299146][T13228] ceph: No mds server is up or the cluster is laggy [ 1061.309159][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 1062.628947][T13270] siw: device registration error -23 [ 1063.153604][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1063.160547][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1064.391611][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1064.397686][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1064.403898][ T5958] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1064.502290][T13296] siw: device registration error -23 [ 1064.537727][T13275] ceph: No mds server is up or the cluster is laggy [ 1064.612692][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.633233][ T5958] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1064.649208][ T5958] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1064.660496][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.686760][ T5958] usb 3-1: config 0 descriptor?? [ 1064.696114][ T5958] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1064.708990][ T5958] dvb-usb: bulk message failed: -22 (3/0) [ 1064.726578][ T5958] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1064.739118][ T5958] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1064.747913][ T5958] usb 3-1: media controller created [ 1064.763305][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1064.794512][ T5958] dvb-usb: bulk message failed: -22 (6/0) [ 1064.804550][ T5958] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1064.838176][ T5958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input70 [ 1064.860287][ T5958] dvb-usb: schedule remote query interval to 150 msecs. [ 1064.867268][ T5958] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1064.927314][T12840] usb 3-1: USB disconnect, device number 12 [ 1064.961606][T12840] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1065.598604][T12840] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1065.808523][T12840] usb 2-1: Using ep0 maxpacket: 32 [ 1065.828988][T12840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.848569][T12840] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1065.868997][T12840] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1065.891768][T12840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.915243][T12840] usb 2-1: config 0 descriptor?? [ 1068.391320][ T5958] usb 2-1: USB disconnect, device number 18 [ 1072.957071][T13378] loop1: detected capacity change from 0 to 512 [ 1073.090684][T12937] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1073.152979][ T4573] libceph: connect (1)[c::]:6789 error -101 [ 1073.168717][ T4573] libceph: mon0 (1)[c::]:6789 connect error [ 1073.763824][T13378] ceph: No mds server is up or the cluster is laggy [ 1073.781545][ T4573] libceph: connect (1)[c::]:6789 error -101 [ 1073.801009][ T4573] libceph: mon0 (1)[c::]:6789 connect error [ 1074.021521][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2216'. [ 1075.438171][T13417] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2223'. [ 1076.579950][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2225'. [ 1076.842972][T13439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2228'. [ 1078.840536][T13462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2235'. [ 1081.311648][T13494] xt_hashlimit: size too large, truncated to 1048576 [ 1084.679832][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2249'. [ 1085.445205][T13518] loop5: detected capacity change from 0 to 1024 [ 1085.453248][T13518] EXT4-fs: Ignoring removed bh option [ 1085.530276][T13522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2251'. [ 1086.189057][T13518] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1086.455467][T13535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2252'. [ 1088.095379][ T4658] EXT4-fs (loop5): unmounting filesystem. [ 1089.383739][T13559] loop5: detected capacity change from 0 to 1024 [ 1090.200491][T13559] EXT4-fs: Ignoring removed nobh option [ 1090.219990][T13559] EXT4-fs: Ignoring removed bh option [ 1090.394000][T13559] EXT4-fs: Invalid want_extra_isize 130 [ 1091.138295][T13592] xt_hashlimit: size too large, truncated to 1048576 [ 1094.238303][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 1096.375625][T13629] loop1: detected capacity change from 0 to 2048 [ 1096.850966][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2274'. [ 1098.646902][T13648] loop2: detected capacity change from 0 to 1024 [ 1098.654187][T13648] EXT4-fs: Ignoring removed nobh option [ 1098.659937][T13648] EXT4-fs: Ignoring removed bh option [ 1098.680313][T13648] EXT4-fs: Invalid want_extra_isize 130 [ 1098.948541][T13654] xt_hashlimit: size too large, truncated to 1048576 [ 1103.125621][T13657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2277'. [ 1103.481332][T13661] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2279'. [ 1104.026299][T13682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2281'. [ 1106.392687][T13700] loop1: detected capacity change from 0 to 1024 [ 1106.419810][T13700] EXT4-fs: Ignoring removed bh option [ 1106.481766][T13700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1107.485044][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1107.979897][T13717] loop1: detected capacity change from 0 to 128 [ 1108.168884][T13717] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1108.474925][T13717] hpfs: filesystem error: improperly stopped [ 1108.588287][T13717] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1108.601843][T13717] hpfs: You really don't want any checks? You are crazy... [ 1108.655243][T13717] hpfs: hpfs_map_sector(): read error [ 1108.736068][T13717] hpfs: code page support is disabled [ 1108.779267][T13717] hpfs: hpfs_map_4sectors(): unaligned read [ 1108.798547][T13717] hpfs: hpfs_map_4sectors(): unaligned read [ 1108.815606][T13717] hpfs: filesystem error: unable to find root dir [ 1108.924320][T13729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2293'. [ 1111.380916][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2294'. [ 1112.786494][T13747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2297'. [ 1114.039393][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 1114.188727][ T22] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1114.401965][ T22] usb 3-1: config 220 has an invalid interface number: 142 but max is 0 [ 1114.431414][ T22] usb 3-1: config 220 has no interface number 0 [ 1114.480738][ T22] usb 3-1: config 220 interface 142 has no altsetting 0 [ 1114.548667][ T22] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e [ 1114.784464][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.836196][ T22] usb 3-1: Product: syz [ 1114.886479][ T22] usb 3-1: Manufacturer: syz [ 1114.938371][ T22] usb 3-1: SerialNumber: syz [ 1115.195080][T13757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.264491][T13757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.781874][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.788526][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.088284][T13781] loop1: detected capacity change from 0 to 1024 [ 1116.109476][T13781] EXT4-fs: Ignoring removed bh option [ 1117.100990][T13781] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1117.165322][ T22] ttusb_dec_send_command: command bulk message failed: error -22 [ 1117.208716][ T22] ttusb-dec: probe of 3-1:220.142 failed with error -22 [ 1117.250066][ T22] usb 3-1: USB disconnect, device number 13 [ 1119.100463][ T22] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1119.277659][T13807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2311'. [ 1119.371737][ T22] usb 6-1: config 220 has an invalid interface number: 142 but max is 0 [ 1119.420712][ T22] usb 6-1: config 220 has no interface number 0 [ 1119.600251][ T22] usb 6-1: config 220 interface 142 has no altsetting 0 [ 1119.612665][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1119.630280][ T22] usb 6-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e [ 1119.640354][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.648468][ T22] usb 6-1: Product: syz [ 1119.652637][ T22] usb 6-1: Manufacturer: syz [ 1119.657401][ T22] usb 6-1: SerialNumber: syz [ 1119.917753][T13801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.935819][T13801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.005148][ T22] ttusb_dec_send_command: command bulk message failed: error -22 [ 1122.040602][ T22] ttusb-dec: probe of 6-1:220.142 failed with error -22 [ 1122.080302][T13828] loop5: detected capacity change from 0 to 1024 [ 1122.081791][ T22] usb 6-1: USB disconnect, device number 19 [ 1122.087475][T13828] EXT4-fs: Ignoring removed nobh option [ 1122.098518][T13828] EXT4-fs: Ignoring removed bh option [ 1122.104570][T13828] EXT4-fs: Invalid want_extra_isize 130 [ 1122.800999][ T9000] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1123.218806][ T9000] usb 3-1: Using ep0 maxpacket: 8 [ 1123.229988][ T9000] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1123.342664][ T9000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.350994][ T9000] usb 3-1: Product: syz [ 1123.355319][ T9000] usb 3-1: Manufacturer: syz [ 1123.360293][ T9000] usb 3-1: SerialNumber: syz [ 1123.382419][ T9000] usb 3-1: config 0 descriptor?? [ 1123.404146][ T9000] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1123.447316][T13841] xt_hashlimit: size too large, truncated to 1048576 [ 1125.213698][ T9000] gspca_sonixj: reg_r err -110 [ 1125.538566][ T9000] sonixj: probe of 3-1:0.0 failed with error -110 [ 1126.343052][T12840] usb 3-1: USB disconnect, device number 14 [ 1127.363398][T13856] loop2: detected capacity change from 0 to 1024 [ 1127.400147][T13856] EXT4-fs: Ignoring removed bh option [ 1129.273715][T13856] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1129.640328][T13890] loop1: detected capacity change from 0 to 2048 [ 1131.332882][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1134.679913][T13934] loop2: detected capacity change from 0 to 2048 [ 1135.215289][T13936] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2339'. [ 1135.993224][T13944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2342'. [ 1137.166763][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'. [ 1138.918894][T13954] loop2: detected capacity change from 0 to 512 [ 1139.413240][T13957] loop5: detected capacity change from 0 to 1024 [ 1139.420268][T13957] EXT4-fs: Ignoring removed nobh option [ 1139.425883][T13957] EXT4-fs: Ignoring removed bh option [ 1139.495460][T13957] EXT4-fs: Invalid want_extra_isize 130 [ 1140.057695][T13961] xt_hashlimit: size too large, truncated to 1048576 [ 1144.146298][T13976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2349'. [ 1145.807335][T13990] fuse: Unknown parameter 'user_i00000000000000000000' [ 1146.664305][T13997] siw: device registration error -23 [ 1147.548652][T12383] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1147.693987][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2355'. [ 1147.805869][T12383] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.883444][T12383] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1147.956292][T12383] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.066333][T12383] usb 6-1: config 0 descriptor?? [ 1148.175547][T12383] pwc: Askey VC010 type 2 USB webcam detected. [ 1148.217245][T14007] loop1: detected capacity change from 0 to 1024 [ 1148.339799][T14007] EXT4-fs: Ignoring removed bh option [ 1148.530711][T14007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1148.593806][T12383] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1148.610380][T12383] pwc: recv_control_msg error -32 req 02 val 2700 [ 1148.626550][T12383] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1148.649533][T12383] pwc: recv_control_msg error -32 req 04 val 1000 [ 1148.667981][T12383] pwc: recv_control_msg error -32 req 04 val 1300 [ 1148.698081][T12383] pwc: recv_control_msg error -32 req 04 val 1400 [ 1148.713133][T12383] pwc: recv_control_msg error -32 req 02 val 2000 [ 1148.866951][T12383] pwc: recv_control_msg error -32 req 02 val 2100 [ 1148.874122][T12383] pwc: recv_control_msg error -32 req 04 val 1500 [ 1148.904299][T12383] pwc: recv_control_msg error -32 req 02 val 2500 [ 1148.913123][T12383] pwc: recv_control_msg error -32 req 02 val 2400 [ 1149.155827][T12383] pwc: recv_control_msg error -71 req 02 val 2900 [ 1149.522715][T12383] pwc: recv_control_msg error -71 req 02 val 2800 [ 1149.560192][T12383] pwc: recv_control_msg error -71 req 04 val 1100 [ 1149.577346][T12383] pwc: recv_control_msg error -71 req 04 val 1200 [ 1149.660400][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1149.694449][T12383] pwc: Registered as video103. [ 1149.701122][T12383] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input71 [ 1149.747175][T12383] usb 6-1: USB disconnect, device number 20 [ 1149.843228][T14024] loop2: detected capacity change from 0 to 1024 [ 1149.850597][T14024] EXT4-fs: Ignoring removed nobh option [ 1149.856330][T14024] EXT4-fs: Ignoring removed bh option [ 1149.872443][T14024] EXT4-fs: Invalid want_extra_isize 130 [ 1150.462493][T14031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2361'. [ 1150.643037][T14034] xt_hashlimit: size too large, truncated to 1048576 [ 1155.188949][T14050] loop2: detected capacity change from 0 to 1024 [ 1155.269534][T14052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2362'. [ 1155.893088][T14050] EXT4-fs: Ignoring removed bh option [ 1156.741144][T14050] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1157.891220][T14068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2366'. [ 1158.308232][T14073] siw: device registration error -23 [ 1158.543849][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1158.802029][T14080] loop1: detected capacity change from 0 to 1024 [ 1158.810011][T14080] EXT4-fs: Ignoring removed nobh option [ 1158.815649][T14080] EXT4-fs: Ignoring removed bh option [ 1158.856299][T14080] EXT4-fs: Invalid want_extra_isize 130 [ 1159.780865][T14091] xt_hashlimit: size too large, truncated to 1048576 [ 1161.936115][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2374'. [ 1162.884537][T14103] loop2: detected capacity change from 0 to 1024 [ 1162.901019][T14101] loop1: detected capacity change from 0 to 512 [ 1162.905679][T14103] EXT4-fs: Ignoring removed bh option [ 1162.964808][T13985] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1163.858996][T14103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1164.355456][T14119] xt_hashlimit: size too large, truncated to 1048576 [ 1167.056284][T14134] tipc: Started in network mode [ 1167.084555][T14134] tipc: Node identity 4, cluster identity 4711 [ 1167.109571][T14134] tipc: Node number set to 4 [ 1167.594097][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1168.568845][T14146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2387'. [ 1168.701872][T14147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'. [ 1169.711555][T14156] loop1: detected capacity change from 0 to 1024 [ 1169.718936][T14156] EXT4-fs: Ignoring removed nobh option [ 1169.724573][T14156] EXT4-fs: Ignoring removed bh option [ 1169.747291][T14156] EXT4-fs: Invalid want_extra_isize 130 [ 1170.078772][T14162] xt_hashlimit: size too large, truncated to 1048576 [ 1173.653080][T14187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2397'. [ 1174.158725][ T22] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1175.781846][T14194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2400'. [ 1175.959603][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 1175.997339][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.794321][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.882825][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1176.901734][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.955949][ T22] usb 2-1: config 0 descriptor?? [ 1176.967585][T14196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2401'. [ 1176.987566][ T22] usb 2-1: can't set config #0, error -71 [ 1176.994998][ T22] usb 2-1: USB disconnect, device number 19 [ 1177.175901][T14207] siw: device registration error -23 [ 1177.222447][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.229486][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.643121][T14210] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2402'. [ 1178.609489][T14218] loop5: detected capacity change from 0 to 512 [ 1178.772214][T14027] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1179.541495][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1179.547617][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1179.839633][T12840] libceph: connect (1)[c::]:6789 error -101 [ 1179.866836][T12840] libceph: mon0 (1)[c::]:6789 connect error [ 1180.379201][T12840] libceph: connect (1)[c::]:6789 error -101 [ 1180.390093][T12840] libceph: mon0 (1)[c::]:6789 connect error [ 1180.410761][T14218] ceph: No mds server is up or the cluster is laggy [ 1180.470507][T14246] loop1: detected capacity change from 0 to 256 [ 1182.873501][T14259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1185.947661][T14295] loop1: detected capacity change from 0 to 2048 [ 1187.845061][T14304] loop2: detected capacity change from 0 to 512 [ 1187.917969][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1187.927024][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1188.235833][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1188.243086][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1188.263219][T14310] loop1: detected capacity change from 0 to 512 [ 1188.973164][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1189.027991][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1189.379186][T14027] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1189.947063][T14304] ceph: No mds server is up or the cluster is laggy [ 1190.241577][T14327] loop1: detected capacity change from 0 to 1024 [ 1190.248957][T14327] EXT4-fs: Ignoring removed bh option [ 1190.419192][T14327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1190.509912][T14335] xt_hashlimit: size too large, truncated to 1048576 [ 1193.049026][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 1194.589412][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1200.256554][T14368] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2442'. [ 1200.595229][T14377] loop2: detected capacity change from 0 to 1024 [ 1200.602297][T14377] EXT4-fs: Ignoring removed nobh option [ 1200.607907][T14377] EXT4-fs: Ignoring removed bh option [ 1200.652287][T14377] EXT4-fs: Invalid want_extra_isize 130 [ 1200.786723][T14379] loop1: detected capacity change from 0 to 512 [ 1200.897752][T14382] xt_hashlimit: size too large, truncated to 1048576 [ 1201.551880][T13985] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1202.892903][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1202.905322][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1202.976602][T14394] fuse: Unknown parameter 'group_i00000000000000000000' [ 1203.675155][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1203.758487][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1203.967699][T14379] ceph: No mds server is up or the cluster is laggy [ 1203.994155][T14405] xt_hashlimit: size too large, truncated to 1048576 [ 1205.558641][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1205.564619][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1205.835853][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 1205.889222][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 1206.030279][T14414] fuse: Unknown parameter 'group_i00000000000000000000' [ 1206.133953][T14418] loop1: detected capacity change from 0 to 1024 [ 1206.142345][T14418] EXT4-fs: Ignoring removed bh option [ 1206.191954][T14418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1206.218595][T14423] tipc: Cannot configure node identity twice [ 1206.637126][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2456'. [ 1208.129296][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1208.415223][T14439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.429093][T14439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.791498][T14437] loop1: detected capacity change from 0 to 1024 [ 1208.798809][T14437] EXT4-fs: Ignoring removed nobh option [ 1208.804447][T14437] EXT4-fs: Ignoring removed bh option [ 1208.813144][T14437] EXT4-fs: Invalid want_extra_isize 130 [ 1209.465246][T14444] xt_hashlimit: size too large, truncated to 1048576 [ 1212.265485][T14452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2464'. [ 1214.176633][T14470] siw: device registration error -23 [ 1214.560950][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1214.566983][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1215.500164][T14487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2470'. [ 1215.545409][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1216.896291][T14471] ceph: No mds server is up or the cluster is laggy [ 1216.906640][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1218.001786][T14500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.014272][T14500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.099962][T14508] loop1: detected capacity change from 0 to 1024 [ 1218.147698][T14508] EXT4-fs: Ignoring removed nobh option [ 1218.158658][T14508] EXT4-fs: Ignoring removed bh option [ 1218.172604][T14500] device vlan2 left promiscuous mode [ 1218.180703][T14508] EXT4-fs: Invalid want_extra_isize 130 [ 1218.295542][T14512] loop2: detected capacity change from 0 to 128 [ 1218.333411][T14512] EXT4-fs: Ignoring removed oldalloc option [ 1218.400652][T14512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1218.457731][T14512] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.559233][T14519] siw: device registration error -23 [ 1218.599127][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1219.928197][T14532] xt_hashlimit: size too large, truncated to 1048576 [ 1222.153686][T14539] loop2: detected capacity change from 0 to 512 [ 1222.575857][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 1222.593028][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 1222.600152][T14547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1222.650404][T14547] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1222.670615][T14547] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1223.232279][T14547] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1223.235010][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 1223.248211][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 1223.333179][T14547] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1223.340560][T14547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1223.499960][T14542] lo speed is unknown, defaulting to 1000 [ 1223.893344][T14539] ceph: No mds server is up or the cluster is laggy [ 1223.918818][T12383] libceph: connect (1)[c::]:6789 error -101 [ 1223.924860][T12383] libceph: mon0 (1)[c::]:6789 connect error [ 1223.942093][T14561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.951368][T14561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.129261][T14562] tipc: Started in network mode [ 1224.138617][T14562] tipc: Node identity 4, cluster identity 4711 [ 1224.154952][T14562] tipc: Node number set to 4 [ 1224.301421][ T5086] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.369849][ T5086] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.395273][T14542] chnl_net:caif_netlink_parms(): no params data found [ 1224.943181][ T5086] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.381494][T14547] Bluetooth: hci4: command 0x0409 tx timeout [ 1225.557515][ T5086] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.722836][T14542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.736223][T14542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.755338][T14542] device bridge_slave_0 entered promiscuous mode [ 1225.795984][T14542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.810215][T14542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.830885][T14542] device bridge_slave_1 entered promiscuous mode [ 1225.868389][ T22] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1225.931865][T14542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.975945][T14542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.127809][ T5086] tipc: Left network mode [ 1226.261473][T14595] loop2: detected capacity change from 0 to 1024 [ 1226.280337][T14595] EXT4-fs: Ignoring removed nobh option [ 1226.287048][T14595] EXT4-fs: Ignoring removed bh option [ 1226.389270][T14595] EXT4-fs: Invalid want_extra_isize 130 [ 1226.472993][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.496242][T14542] team0: Port device team_slave_0 added [ 1226.574434][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1226.772595][ T22] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 1226.798427][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.994570][ T22] usb 2-1: config 0 descriptor?? [ 1227.022309][T14542] team0: Port device team_slave_1 added [ 1227.106796][T14604] xt_hashlimit: size too large, truncated to 1048576 [ 1227.899125][T14547] Bluetooth: hci4: command 0x041b tx timeout [ 1229.517633][T14542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.535728][T14542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1229.694547][ T22] saitek 0003:06A3:0CFA.0001: item fetching failed at offset 2/41 [ 1229.703245][ T22] saitek 0003:06A3:0CFA.0001: parse failed [ 1229.729353][ T22] saitek: probe of 0003:06A3:0CFA.0001 failed with error -22 [ 1229.804739][T14542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.843366][T14542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.908842][T14542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1230.133241][T14542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1230.228555][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 1230.234808][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 1230.693214][T14547] Bluetooth: hci4: command 0x040f tx timeout [ 1230.844706][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 1230.919234][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 1231.365473][T11415] usb 2-1: USB disconnect, device number 20 [ 1231.506745][T14630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2503'. [ 1231.575213][T14542] device hsr_slave_0 entered promiscuous mode [ 1231.591349][T14542] device hsr_slave_1 entered promiscuous mode [ 1231.605840][T14542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1231.614059][T14542] Cannot create hsr debugfs directory [ 1231.685716][T14641] siw: device registration error -23 [ 1231.719723][T14621] ceph: No mds server is up or the cluster is laggy [ 1231.753543][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 1231.762433][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 1233.069675][T14654] loop2: detected capacity change from 0 to 512 [ 1233.319735][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 1234.233934][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2511'. [ 1235.069762][T14542] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1235.470965][ T6560] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1235.987125][ T6560] usb 2-1: config 220 has an invalid interface number: 142 but max is 0 [ 1236.051268][ T6560] usb 2-1: config 220 has no interface number 0 [ 1236.112368][ T6560] usb 2-1: config 220 interface 142 has no altsetting 0 [ 1236.654480][T14542] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1236.665016][T14683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2514'. [ 1236.684993][ T6560] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e [ 1236.731375][ T6560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.737451][T14542] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1236.739459][ T6560] usb 2-1: Product: syz [ 1236.739477][ T6560] usb 2-1: Manufacturer: syz [ 1236.739490][ T6560] usb 2-1: SerialNumber: syz [ 1236.836147][T14542] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1236.963943][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.984528][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.065723][T14694] siw: device registration error -23 [ 1237.110181][ T5086] device hsr_slave_0 left promiscuous mode [ 1237.120093][ T5086] device hsr_slave_1 left promiscuous mode [ 1237.157705][ T5086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1237.855342][ T5086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.002782][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.009142][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.409316][ T5086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.630219][ T6560] ttusb_dec_send_command: command bulk message failed: error -22 [ 1240.638121][ T6560] ttusb-dec: probe of 2-1:220.142 failed with error -22 [ 1241.045953][ T6560] usb 2-1: USB disconnect, device number 21 [ 1241.487524][ T5086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.577267][ T5086] device bridge_slave_1 left promiscuous mode [ 1241.595919][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.632147][ T5086] device bridge_slave_0 left promiscuous mode [ 1241.660403][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.675528][ T4368] libceph: connect (1)[c::]:6789 error -101 [ 1241.681900][ T4368] libceph: mon0 (1)[c::]:6789 connect error [ 1241.757094][ T5086] device veth1_macvtap left promiscuous mode [ 1241.780819][ T5086] device veth0_macvtap left promiscuous mode [ 1241.788274][ T5086] device veth1_vlan left promiscuous mode [ 1241.833685][ T5086] device veth0_vlan left promiscuous mode [ 1241.949212][ T6560] libceph: connect (1)[c::]:6789 error -101 [ 1241.955569][ T6560] libceph: mon0 (1)[c::]:6789 connect error [ 1242.108662][T14729] loop2: detected capacity change from 0 to 2048 [ 1242.694038][ T4368] libceph: connect (1)[c::]:6789 error -101 [ 1242.700355][ T4368] libceph: mon0 (1)[c::]:6789 connect error [ 1243.876891][T14716] ceph: No mds server is up or the cluster is laggy [ 1243.884567][ T4368] libceph: connect (1)[c::]:6789 error -101 [ 1243.892095][ T4368] libceph: mon0 (1)[c::]:6789 connect error [ 1246.642637][ T5086] team0 (unregistering): Port device team_slave_1 removed [ 1247.137796][ T5086] team0 (unregistering): Port device team_slave_0 removed [ 1247.272955][ T5086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.344001][ T5086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.751492][T14766] loop2: detected capacity change from 0 to 2048 [ 1248.066157][ T5086] bond0 (unregistering): Released all slaves [ 1248.290745][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2515'. [ 1248.384786][T14542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.413951][T14542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.436403][T14732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2523'. [ 1248.506730][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2528'. [ 1248.588512][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1248.596415][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1248.630891][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1248.657122][T14771] loop1: detected capacity change from 0 to 512 [ 1248.698155][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1248.734184][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.741405][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.780532][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1248.820280][T14776] loop2: detected capacity change from 0 to 1024 [ 1248.827536][T14776] EXT4-fs: Ignoring removed bh option [ 1249.111457][T14776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1249.350866][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1249.588534][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1249.628593][ T4765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.635714][ T4765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.678817][ T4352] libceph: connect (1)[c::]:6789 error -101 [ 1249.722478][ T4352] libceph: mon0 (1)[c::]:6789 connect error [ 1250.086658][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2531'. [ 1250.698220][T14542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1250.785043][T14542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1252.165960][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1252.174728][T14784] ceph: No mds server is up or the cluster is laggy [ 1252.226249][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1252.255877][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1252.288753][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1252.297454][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1252.308116][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1252.316857][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1252.321849][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 1252.334200][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1252.342968][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1252.360143][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1252.387005][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1252.397501][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1252.552444][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1252.568624][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1252.765645][T14542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.790038][T13864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1252.797574][T13864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1252.942188][T14821] siw: device registration error -23 [ 1254.458112][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2539'. [ 1255.610541][T14839] loop1: detected capacity change from 0 to 2048 [ 1258.225189][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1258.244737][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1258.500210][T13873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1258.694483][T13873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1258.891894][T14542] device veth0_vlan entered promiscuous mode [ 1258.935880][T14542] device veth1_vlan entered promiscuous mode [ 1259.130205][T14542] device veth0_macvtap entered promiscuous mode [ 1259.523024][T14542] device veth1_macvtap entered promiscuous mode [ 1259.566546][T14873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2546'. [ 1259.592969][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1259.607059][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1259.623319][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1259.654205][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1259.684447][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1259.697945][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1259.910781][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1259.912610][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1259.916820][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1259.936637][T14542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.953743][T14542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.967246][T14542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.979102][T14542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.098366][T14889] loop1: detected capacity change from 0 to 2048 [ 1260.197701][T14542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.230380][T12383] libceph: connect (1)[c::]:6789 error -101 [ 1260.252286][T12383] libceph: mon0 (1)[c::]:6789 connect error [ 1260.389216][T14542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.508774][T14542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.598654][T14542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.617110][T14542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.626468][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1260.639528][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1260.652723][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1260.704464][T14876] ceph: No mds server is up or the cluster is laggy [ 1260.738539][T14542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.749386][T14542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.761717][T14542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.772619][T14542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.795709][T14542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.998021][T11415] libceph: connect (1)[c::]:6789 error -101 [ 1261.011164][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 1261.040919][T14542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.073207][T14542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.275262][T14542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.916952][T14908] siw: device registration error -23 [ 1262.102941][T14542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.132500][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1262.159656][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1262.189088][T14542] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.197832][T14542] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.245323][T14542] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.264381][T14542] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.421304][ T5086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.448609][ T5086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.884673][T13864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.929562][T13864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.078971][T13870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1263.167662][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1263.235560][T14922] fuse: Unknown parameter 'fd00000000000000000003' [ 1263.409822][T14929] loop6: detected capacity change from 0 to 1024 [ 1263.417096][T14929] EXT4-fs: Ignoring removed bh option [ 1263.693559][T14935] lo speed is unknown, defaulting to 1000 [ 1264.106100][T14934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2559'. [ 1264.898462][T14929] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1267.449588][T14950] fuse: Bad value for 'fd' [ 1267.550525][T14951] fuse: Bad value for 'fd' [ 1267.678411][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2484'. [ 1268.120118][T14542] EXT4-fs (loop6): unmounting filesystem. [ 1268.154728][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1268.166740][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1268.188806][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1268.197759][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1268.205621][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1268.213106][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1268.386678][T14954] lo speed is unknown, defaulting to 1000 [ 1268.440178][T14963] loop6: detected capacity change from 0 to 256 [ 1268.483805][T14963] exfat: Deprecated parameter 'utf8' [ 1268.519823][T14963] exfat: Deprecated parameter 'utf8' [ 1268.525212][T14963] exfat: Deprecated parameter 'utf8' [ 1268.563592][ T6560] libceph: connect (1)[c::]:6789 error -101 [ 1268.574544][T14963] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 1268.592587][ T6560] libceph: mon0 (1)[c::]:6789 connect error [ 1269.716886][T14965] ceph: No mds server is up or the cluster is laggy [ 1269.724295][ T6560] libceph: connect (1)[c::]:6789 error -101 [ 1269.731298][ T6560] libceph: mon0 (1)[c::]:6789 connect error [ 1270.260478][T11415] libceph: connect (1)[c::]:6789 error -101 [ 1270.379880][T14547] Bluetooth: hci5: command 0x0409 tx timeout [ 1270.409207][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 1270.686419][T14984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.696632][T14984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.979352][T14997] fuse: Unknown parameter '00000000000000000003' [ 1271.053995][T15000] xt_hashlimit: size too large, truncated to 1048576 [ 1272.580033][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 1275.027284][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 1275.235308][T14954] chnl_net:caif_netlink_parms(): no params data found [ 1276.597768][T14954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.461424][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 1277.534099][T14954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.582016][T14954] device bridge_slave_0 entered promiscuous mode [ 1277.603627][T15030] lo speed is unknown, defaulting to 1000 [ 1277.901478][T14954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.948125][T14954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.983510][T14954] device bridge_slave_1 entered promiscuous mode [ 1278.028226][T14954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1278.633606][T15036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2577'. [ 1279.526078][T15043] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2579'. [ 1279.557430][T14954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.759532][ T4415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.833825][T14954] team0: Port device team_slave_0 added [ 1279.856291][T14954] team0: Port device team_slave_1 added [ 1279.934942][T14954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.970258][T14954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.005688][T14954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1280.130891][ T4415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.154837][T14954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1280.166171][T14954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.170006][T11415] libceph: connect (1)[c::]:6789 error -101 [ 1280.192513][T14954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1280.199933][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 1280.257030][T14954] device hsr_slave_0 entered promiscuous mode [ 1280.293139][T14954] device hsr_slave_1 entered promiscuous mode [ 1280.316008][T14954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1280.327474][T15073] fuse: Unknown parameter '00000000000000000003' [ 1280.343776][T14954] Cannot create hsr debugfs directory [ 1280.389106][ T4415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.468892][ T6560] libceph: connect (1)[c::]:6789 error -101 [ 1280.482472][ T6560] libceph: mon0 (1)[c::]:6789 connect error [ 1280.526081][ T4415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.425941][T10767] libceph: connect (1)[c::]:6789 error -101 [ 1282.515932][T10767] libceph: mon0 (1)[c::]:6789 connect error [ 1282.661666][T15065] ceph: No mds server is up or the cluster is laggy [ 1286.116433][T15117] siw: device registration error -23 [ 1286.201844][T15109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2590'. [ 1286.258629][ T4415] tipc: Left network mode [ 1286.914349][ T4573] libceph: connect (1)[c::]:6789 error -101 [ 1286.920872][ T4573] libceph: mon0 (1)[c::]:6789 connect error [ 1287.789946][T15131] ceph: No mds server is up or the cluster is laggy [ 1287.798805][ T4573] libceph: connect (1)[c::]:6789 error -101 [ 1287.804826][ T4573] libceph: mon0 (1)[c::]:6789 connect error [ 1288.005263][T14954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1288.070758][T14954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1288.165750][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2597'. [ 1288.215761][T14954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1288.285634][T14954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1289.610930][T14954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.766276][T14954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.787674][T13864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1289.798036][T14906] libceph: connect (1)[c::]:6789 error -101 [ 1289.799404][T13864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1289.814536][T14906] libceph: mon0 (1)[c::]:6789 connect error [ 1290.495407][T13864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1290.536842][T13864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1291.702556][T14906] libceph: connect (1)[c::]:6789 error -101 [ 1291.708916][T14906] libceph: mon0 (1)[c::]:6789 connect error [ 1291.716422][T13864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.723587][T13864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.755096][T13864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1291.781449][T13864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1291.869484][T15158] ceph: No mds server is up or the cluster is laggy [ 1291.877799][T13864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.884933][T13864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.898884][T13864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1291.984195][T15166] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2601'. [ 1292.775684][ T9000] libceph: connect (1)[c::]:6789 error -101 [ 1292.854576][ T9000] libceph: mon0 (1)[c::]:6789 connect error [ 1292.863586][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 1292.872235][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 1293.273872][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 1293.280658][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 1293.297650][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1293.347023][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1293.374356][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1293.411528][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1293.426862][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1293.436495][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1293.513933][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1293.523380][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1293.534584][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.545910][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1293.554804][T15152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1293.616920][T15192] siw: device registration error -23 [ 1293.723328][ T4415] bond0: (slave wlan1): Releasing backup interface [ 1293.755825][ T4415] ------------[ cut here ]------------ [ 1293.761992][ T4415] WARNING: CPU: 0 PID: 4415 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180 [ 1293.772797][ T4415] Modules linked in: [ 1293.776730][ T4415] CPU: 0 PID: 4415 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1293.784406][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1293.794526][ T4415] Workqueue: netns cleanup_net [ 1293.799372][ T4415] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 1293.806355][ T4415] Code: 7c 2d 00 00 74 08 48 89 df e8 ec 42 1c f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f5 04 81 00 e8 20 3b cb f7 <0f> 0b eb c5 48 c7 c1 a4 5e 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1293.826103][ T4415] RSP: 0018:ffffc90004d5f6c8 EFLAGS: 00010293 [ 1293.832325][ T4415] RAX: ffffffff89b74080 RBX: ffff88807e0955a8 RCX: ffff8880794f3c00 [ 1293.840345][ T4415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1293.848373][ T4415] RBP: 0000000000000000 R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 1293.856357][ T4415] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: ffff88807e096ab0 [ 1293.864385][ T4415] R13: 1ffff1100fc12ab5 R14: ffff88807e096228 R15: dffffc0000000000 [ 1293.872416][ T4415] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1293.881398][ T4415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1293.887997][ T4415] CR2: 00007f73d47456b8 CR3: 000000005c59f000 CR4: 00000000003506f0 [ 1293.896024][ T4415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1293.904048][ T4415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1293.912071][ T4415] Call Trace: [ 1293.915446][ T4415] [ 1293.918485][ T4415] ? trace_drv_return_void+0x240/0x240 [ 1293.924049][ T4415] unregister_netdevice_many_notify+0x13d6/0x19c0 [ 1293.930518][ T4415] ? trace_contention_end+0x5f/0x170 [ 1293.935846][ T4415] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1293.941537][ T4415] ? unregister_netdevice_many+0x20/0x20 [ 1293.947200][ T4415] ? mutex_unlock+0x10/0x10 [ 1293.951760][ T4415] ? unregister_netdevice_queue+0x1aa/0x370 [ 1293.957674][ T4415] ? list_netdevice+0x6c0/0x6c0 [ 1293.962605][ T4415] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 1293.968722][ T4415] ? cfg80211_shutdown_all_interfaces+0x175/0x1c0 [ 1293.975157][ T4415] ieee80211_remove_interfaces+0x453/0x710 [ 1293.981030][ T4415] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1293.986340][ T4415] ? up_write+0x1bb/0x420 [ 1293.990735][ T4415] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 1293.997090][ T4415] ieee80211_unregister_hw+0x59/0x290 [ 1294.002534][ T4415] mac80211_hwsim_del_radio+0x285/0x480 [ 1294.008097][ T4415] ? rhashtable_remove_fast+0xc50/0xc50 [ 1294.013706][ T4415] hwsim_exit_net+0x589/0x650 [ 1294.018429][ T4415] ? hwsim_init_net+0x80/0x80 [ 1294.023132][ T4415] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 1294.028994][ T4415] cleanup_net+0x706/0xba0 [ 1294.033442][ T4415] ? ops_free_list+0x3b0/0x3b0 [ 1294.038227][ T4415] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1294.044189][ T4415] ? _raw_spin_unlock+0x40/0x40 [ 1294.049089][ T4415] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1294.054309][ T4415] ? process_one_work+0x7b0/0x1160 [ 1294.059475][ T4415] process_one_work+0x8a2/0x1160 [ 1294.064471][ T4415] ? worker_detach_from_pool+0x240/0x240 [ 1294.070190][ T4415] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1294.075249][ T4415] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1294.080864][ T4415] ? kthread_data+0x4b/0xc0 [ 1294.085405][ T4415] worker_thread+0xaa2/0x1270 [ 1294.090165][ T4415] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1294.096087][ T4415] ? __kthread_parkme+0x162/0x1c0 [ 1294.101193][ T4415] kthread+0x29d/0x330 [ 1294.105272][ T4415] ? worker_clr_flags+0x1a0/0x1a0 [ 1294.110355][ T4415] ? kthread_blkcg+0xd0/0xd0 [ 1294.114960][ T4415] ret_from_fork+0x1f/0x30 [ 1294.119466][ T4415] [ 1294.122506][ T4415] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1294.129822][ T4415] CPU: 0 PID: 4415 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1294.137369][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1294.147435][ T4415] Workqueue: netns cleanup_net [ 1294.152220][ T4415] Call Trace: [ 1294.155498][ T4415] [ 1294.158442][ T4415] dump_stack_lvl+0x188/0x24e [ 1294.163135][ T4415] ? memcpy+0x3c/0x60 [ 1294.167131][ T4415] ? show_regs_print_info+0x12/0x12 [ 1294.172341][ T4415] ? load_image+0x400/0x400 [ 1294.176875][ T4415] panic+0x2e5/0x730 [ 1294.180792][ T4415] ? bpf_jit_dump+0xd0/0xd0 [ 1294.185314][ T4415] ? ret_from_fork+0x1f/0x30 [ 1294.189925][ T4415] __warn+0x2f8/0x4f0 [ 1294.193916][ T4415] ? ieee80211_link_release_channel+0x150/0x180 [ 1294.200169][ T4415] ? ieee80211_link_release_channel+0x150/0x180 [ 1294.206424][ T4415] report_bug+0x2ba/0x4f0 [ 1294.210765][ T4415] ? ieee80211_link_release_channel+0x150/0x180 [ 1294.217031][ T4415] handle_bug+0x3a/0x70 [ 1294.221200][ T4415] exc_invalid_op+0x16/0x40 [ 1294.225712][ T4415] asm_exc_invalid_op+0x16/0x20 [ 1294.230591][ T4415] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 1294.237455][ T4415] Code: 7c 2d 00 00 74 08 48 89 df e8 ec 42 1c f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f5 04 81 00 e8 20 3b cb f7 <0f> 0b eb c5 48 c7 c1 a4 5e 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1294.257078][ T4415] RSP: 0018:ffffc90004d5f6c8 EFLAGS: 00010293 [ 1294.263164][ T4415] RAX: ffffffff89b74080 RBX: ffff88807e0955a8 RCX: ffff8880794f3c00 [ 1294.271149][ T4415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1294.279137][ T4415] RBP: 0000000000000000 R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 1294.287119][ T4415] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: ffff88807e096ab0 [ 1294.295105][ T4415] R13: 1ffff1100fc12ab5 R14: ffff88807e096228 R15: dffffc0000000000 [ 1294.303100][ T4415] ? ieee80211_link_release_channel+0x150/0x180 [ 1294.309366][ T4415] ? ieee80211_link_release_channel+0x150/0x180 [ 1294.315630][ T4415] ? trace_drv_return_void+0x240/0x240 [ 1294.321105][ T4415] unregister_netdevice_many_notify+0x13d6/0x19c0 [ 1294.327530][ T4415] ? trace_contention_end+0x5f/0x170 [ 1294.332857][ T4415] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1294.338516][ T4415] ? unregister_netdevice_many+0x20/0x20 [ 1294.344172][ T4415] ? mutex_unlock+0x10/0x10 [ 1294.348694][ T4415] ? unregister_netdevice_queue+0x1aa/0x370 [ 1294.354608][ T4415] ? list_netdevice+0x6c0/0x6c0 [ 1294.359482][ T4415] ? ieee80211_txq_teardown_flows+0x15c/0x220 [ 1294.365563][ T4415] ? cfg80211_shutdown_all_interfaces+0x175/0x1c0 [ 1294.372000][ T4415] ieee80211_remove_interfaces+0x453/0x710 [ 1294.377832][ T4415] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1294.383137][ T4415] ? up_write+0x1bb/0x420 [ 1294.387496][ T4415] ? atomic_notifier_chain_unregister+0xf1/0x100 [ 1294.393851][ T4415] ieee80211_unregister_hw+0x59/0x290 [ 1294.399264][ T4415] mac80211_hwsim_del_radio+0x285/0x480 [ 1294.404835][ T4415] ? rhashtable_remove_fast+0xc50/0xc50 [ 1294.410407][ T4415] hwsim_exit_net+0x589/0x650 [ 1294.415123][ T4415] ? hwsim_init_net+0x80/0x80 [ 1294.419827][ T4415] ? __ip_vs_dev_cleanup_batch+0x234/0x250 [ 1294.425654][ T4415] cleanup_net+0x706/0xba0 [ 1294.430096][ T4415] ? ops_free_list+0x3b0/0x3b0 [ 1294.434880][ T4415] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1294.440783][ T4415] ? _raw_spin_unlock+0x40/0x40 [ 1294.445657][ T4415] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1294.450874][ T4415] ? process_one_work+0x7b0/0x1160 [ 1294.455996][ T4415] process_one_work+0x8a2/0x1160 [ 1294.460957][ T4415] ? worker_detach_from_pool+0x240/0x240 [ 1294.466604][ T4415] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1294.471639][ T4415] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1294.477195][ T4415] ? kthread_data+0x4b/0xc0 [ 1294.481721][ T4415] worker_thread+0xaa2/0x1270 [ 1294.486420][ T4415] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1294.492334][ T4415] ? __kthread_parkme+0x162/0x1c0 [ 1294.497381][ T4415] kthread+0x29d/0x330 [ 1294.501462][ T4415] ? worker_clr_flags+0x1a0/0x1a0 [ 1294.506498][ T4415] ? kthread_blkcg+0xd0/0xd0 [ 1294.511100][ T4415] ret_from_fork+0x1f/0x30 [ 1294.515546][ T4415] [ 1294.518727][ T4415] Kernel Offset: disabled [ 1294.523116][ T4415] Rebooting in 86400 seconds..