last executing test programs: 57.050352746s ago: executing program 4 (id=754): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xec, &(0x7f0000000240), &(0x7f0000000380)=0xfffffffffffffea0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r4, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1) read$dsp(r4, &(0x7f0000000200)=""/168, 0xa8) 56.003336166s ago: executing program 4 (id=756): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r7, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x2, 0xa, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 54.856405224s ago: executing program 4 (id=758): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x1c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1a}]}, 0x1c}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x8) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000380)='\x00', 0x1) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="aa07000000000000000017000800450000240000090000119078000014000000002362f40000004e20001090780200000000000000d3153162afe288ae7e71ff3444d6b398c7b2087f16bdfae1edb306bb420d1d71b18b25af5a05656189fa286a5670646e9f1d47516a7b58fdc16afaca53063ca4cece10ffaaa8529f602b1b2eeeb5f82015e5579fe9c826340ce95282bd19bfaaee846b07a0af0035c22c61e69c5df2bcff9894"], 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x1403, 0x13, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}}, 0x20044010) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.022178275s ago: executing program 4 (id=763): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000840)={[{@fat=@sys_immutable}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@utf8no}]}, 0x3, 0x356, &(0x7f0000000200)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x500000, 0x0, 0x0, 0x2}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x21, 0x0, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000000200)={0x10}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=@v3, 0x18, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0xfb, 0x2e, 0x2, 0x1, "1fd23643a8d3f9c79f4a3afb1737d672", "41d825fbbee5f775945d89cf908c786a4aa9e0740993f647e0"}, 0x2e, 0x0) close(r4) 46.723380677s ago: executing program 4 (id=769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_pidfd_open(r1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) ptrace$pokeuser(0x6, r1, 0x7fffffff, 0x6) write(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r7 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) fanotify_init(0x0, 0x0) 44.605581767s ago: executing program 4 (id=775): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x1c, 0x110, 0xd, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{}]}]}}}], 0x20}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RGETLOCK(r1, &(0x7f0000000840)={0xd9, 0x37, 0x2, {0x0, 0x2, 0xffffffffffffff7f, r0, 0xbb, '\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)'}}, 0xd9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r5, &(0x7f0000002280)={0x2020}, 0x2020) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300fd0300028008000500", @ANYRESOCT], 0x44}}, 0x0) 25.177945893s ago: executing program 3 (id=805): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 24.114080954s ago: executing program 3 (id=808): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f0000000280)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf0f7}}, {@sb={'sb', 0x3d, 0x2}}]}, 0x1, 0x55a, &(0x7f0000000840)="$eJzs3d1rZGcZAPDnTDLZzW40UXtRhX5gC7tFm9l0bRu8aCuIdwWl3q8hOxvCTjJLZlI3obhZvBZBRIt3vfJG8A8QpHfeilDQG69ERSm61Ysi6pHzkc0mPaeZuDOZNvP7wZvzns/neefjzJlz3swJYGI9GRGvRMRURDwTEfPl9EZZYq8o2XLv3XtjNStJpOlrf0siKadliyVlyVwsVztfDHJpmt55MG5vZ/fmSqfT3irHW/2NW63ezu6z6xsra+219ubVq0svLL+4/PzylYqspwdo2d1DY1m7Xvrqn3/0/Z9+7aVffvHbf7j218vfyfKdK+fvt2PYisekmT0W92XZb40i2BhMle1pjjsRAAAGkh3jfzoiPp8f/8/H1EDH1oVkpJkBAAAAw5K+PBf/TvLrcwAAAMAZ1cj7wCaNxbIvwFw0GouLRR/eR+JCo9Pt9b9wo7u9eb3oK7sQzcaN9U77ykzRp3Yhmkk2vpTXD8afuz+e7D14vuGH87P5/MXVbuf6+E57AAAAwES5eOT7/z/ni+//H+JumqbpqSUIAAAADMfCuBMAAAAARu6D3//fGkseAAAAwOi4/g8AAABn2tdffTUr6f79r6+/vrN9s/v6r6Ldu7m4sb26uNrdurW41u2uddJzERvHba/T7d76Umxu3271271+q7eze22ju73Zv7Z+6BbYAAAAwCn61BNv/y6JiL0vz+YlM5P9mapZoegr0Di9DIFROdEb+U+jywM4fXUf8x80PdI8gNPnXQ2Tq1kMkuOX/Jff/IczqmYHkN4pK7Wdd349ooQAAIChu/TZ6uv/0wfnBmodNx/4aNORBybX4Nf/gbPG9X+YXE1HADDRZgdY5sj1/4PuAgNf/0/L/kMzfggEAADGZC4vSWOxvBY4F43300IsRDO5sd5pX4mIT0bEb+eb57LxpXzNZJB/GgAAAAAAAAAAAAAAAAAAAAAAAAAA8l/lTiIFAAAAzrSIxl+S8oZel+afnjt6fmAmeX8+H+Z3B3jtx7dX+v2tpWz638vpEf03y+nPneTMgzuPAwAAwKjk39O/Vw6Xxp0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfNe/feWN0vpxn33a9ExEJV/Ok4nw/PRzMiLvwjiWR/pScir08NIf7e3Yh4tCp+kqUVC2UWWfzpB9ZrRMTsQUajjP9YmqaV8S8+dHSYbG9n+59Xqt5/jXgyH1a//6fL8rDq93+N+/u/qYr42Z7nEwPG+Nw7P29VzzlXzJ+u3v/sx09q4j9VtcmKB+Vb39zdrcstfSviUuXnT3IoVqu/cavV29l9dn1jZa291t68enXpheUXl59fvtK6sd5pl38rY/zgsV/8ty7+u3cjLtTEXzjc/pWj7X86qzTrtnzgP+/cvveZoto8sok8/uWnqp//Rw/HP/TQTsWdcqliQ5f263tF/UGP/+w3j39Y+6/XtP+45//y8U3PPfON7/6xrKYDrgIAjFBvZ/fmSqfT3jp5ZfZka72Zpun/HeuEleyIuWbW739SNHwIsbLjoyHk/Ehdqh/lyssDLrwX7a1eeq7qxTaMp+DjWZl++JdNo/4VPqTKWHdLAADACBwc9I87EwAAAAAAAAAAAAAAAAAAAJhcp/GDZ0dj7hWDmTE0FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg1v8CAAD//54G34w=") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a0000009596506221dff14f2a2b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) r4 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}}], 0x1, 0x0) pipe(&(0x7f0000000080)) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) 20.75974309s ago: executing program 3 (id=813): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff22b802000008000000b7030000000000208500000072000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@delchain={0x148, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x100, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x3}, @TCA_ROUTE4_ACT={0xe4, 0x6, [@m_ife={0xe0, 0x0, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x3}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "21b2caeba32a6f7c5900697624a17b85a9db3a31b129a4976a84cfb4f5d651fd8aa24a645c8f63c025fcca463a6b79a3d7e6c9a8b89a140805ef63939ac2e37b49004b0dc3b8446aa7038eceef52fe7bdca153fe865c65015a3b208b282c16472e451aa10a8631235c"}, {0xc}, {0xc}}}]}]}}]}, 0x148}}, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)={0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}]}, 0x10) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x1a2}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)={0x64, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xca}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xed}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000001) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081104e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf0200000000000000457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="244656a6068b8ffe0b796a00", @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000bd44cbb78873e56151c41287ffe681275b054711b6856da25454c32bf237374b3300000000398eab09b3d36416f9ae0ca43fa39dc14ea6f4547f52d2bb930f058a2fcb2547b3c33fafb238ba0b31c52390086b1686030000001a92fb350c733dd54ce2c057f841ae91fd63b546ede232625416abb6d9a8f869893e866229d8ef7a5d223b7f7a318afc8b4685e963f35b9e3014a4fadf9707ca96e5ee3396207b69f23b87d7320c9d94fba300", @ANYRES16, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000000901080000000000000000010000060c00048008000140000000080c000480080001400000ffff080005400000001f0900010073797a300000000008000640000000010800064000000000b8000200060003400003000014000180080001000a01010208000200e00000012c00018014000300fe8000000000000000000000000000aa140004000000000000000000000000000000000014000180080001007f00000108000200ac1414340c0002"], 0x108}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r8, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) bind$tipc(r7, 0x0, 0x0) 18.559339117s ago: executing program 3 (id=818): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000840)={[{@fat=@sys_immutable}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@utf8no}]}, 0x3, 0x356, &(0x7f0000000200)="$eJzs3U9oI9UfAPBvdrJJu7C/9vCDRUEYvQladise9NSydGExF5Xgn4MY3K5KUxcaDHYPzdaLeBQ86smbBz142LMIinjz4NUVxD940OOCiyPJTJJpk3a7QnYtfj6H8O1732/ee5mhmU6b15dXYqMWcTmNiLm5SlRXzq/EzUosRhJD12JSbUobAHA83Myy+CPLHbGkMuMpAQAzNnj/f/V0qeXtLw/Lz7z7A8CxV/z8P39YztxBHVdmMiUAYMYm7v8/tKe7tvdX/dXSXwUAAMfVsy+8+NRqI+KZNJ2L2Hyn2+w248lx/+rleD3asR5nYyFuReQXCv2HyuDxwsXG2tk0TXvx82I0+xXdZsRmr9vMrxRWk0F9Pc7FQiwW9cXVRpZlyYXPGmvn0oGIuNYbjB+blW7zZJwqxv/+VKzHcqTx/4n6iIuNteW0eILm5rC+F7E7vm/Rn/9SLMS3r8SVaMel6NcOL2saazvn0vR81thT323W5y6NXoUD74AAAAAAAAAAAAAAAAAAAAAAAMA/spSOLI72v8nG+/csLU3pH+yPk9cX+wPt5vsDZfUssuz3tx5tvpvEnv2B9u/P021W48S9XToAAAAAAAAAAAAAAAAAAAD8a3S2a9Fqt9e3OttXN8pBb6uzfSIi+i1vfP3JF/MxmXOboFqMUepKi6arG60sGSZnyZ6cIkj6gw9bPr4+mnE5pz5axdRp1A/uardPP/jjB+OWB5LhM/81zkli+gKTfdMoB5v/y6d0Jy/UKFi+Tc6NLMsOKt95abIqKhHVOz9whwdZP/jqp9fue6xz5vFBy+dZ7uFHFp678f5Hv2602v2RY3AEa1udW9lGq/h6+sl2cJCUzp9K5EGlfCZUDyvfLYL5iP6hbCXf/fb8/e99c7TRs3LLm1Nyknw5n+7vquVBJR+03DU/bayTU07+GQRnPlxpXd/54ZejVpW+SdioAwAAAAAAAAAAAAAAAAAA7orSZ8ULxYd9Tx5W9cTTs58ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANw94///Xwp2J1qOEvzZi8mu+vpWJ6J2r5cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/3N8BAAD//zGNaeE=") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x500000, 0x0, 0x0, 0x2}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x21, 0x0, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000000200)={0x10}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=@v3, 0x18, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0xfb, 0x2e, 0x2, 0x1, "1fd23643a8d3f9c79f4a3afb1737d672", "41d825fbbee5f775945d89cf908c786a4aa9e0740993f647e0"}, 0x2e, 0x0) close(r4) 17.635650666s ago: executing program 2 (id=820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x1c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1a}]}, 0x1c}}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x8) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000380)='\x00', 0x1) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="aa07000000000000000017000800450000240000090000119078000014000000002362f40000004e20001090780200000000000000d3153162afe288ae7e71ff3444d6b398c7b2087f16bdfae1edb306bb420d1d71b18b25af5a05656189fa286a5670646e9f1d47516a7b58fdc16afaca53063ca4cece10ffaaa8529f602b1b2eeeb5f82015e5579fe9c826340ce95282bd19bfaaee846b07a0af0035c22c61e69c5df2bcff9894"], 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x1403, 0x13, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}}, 0x20044010) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.799421188s ago: executing program 3 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x3}}, 0x10, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x100) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r7, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) unlink(&(0x7f00000002c0)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) 12.802391988s ago: executing program 2 (id=824): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffeaf, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x40d1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20200005) r5 = semget(0x0, 0x1, 0x2f9) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000000)=""/2) shmctl$SHM_INFO(r5, 0xe, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000001c0)=""/54) r7 = msgget$private(0x0, 0x0) msgrcv(r7, 0x0, 0x0, 0x0, 0x0) msgsnd(r7, &(0x7f00000001c0)={0x3}, 0x8, 0x0) msgctl$MSG_STAT(r7, 0xb, &(0x7f0000000780)=""/237) 12.495267734s ago: executing program 0 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0xfffffffa) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000380)={{0x4, 0x6, 0xce51, 0x0, 'syz0\x00'}, 0x0, 0x10000010, 0x7ff, 0x0, 0x0, 0xcb02, 'syz1\x00', &(0x7f0000000780)}) r2 = memfd_create(0x0, 0x3) fallocate(r2, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000100)={0x0, 0x2, [{r5, 0x0, 0x0, 0x8000}, {r5, 0x0, 0xfffffffff0000000}]}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7ffe}) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 11.619786639s ago: executing program 2 (id=827): syncfs(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x202000, &(0x7f0000000f40)={[{@barrier_val={'barrier', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@grpid}, {@orlov}, {@jqfmt_vfsv1}, {@discard}, {@stripe={'stripe', 0x3d, 0x6}}, {@nomblk_io_submit}, {@debug}]}, 0xdc, 0x564, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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") open(0x0, 0x400145042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) utimes(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xb) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @map_idx={0x18, 0xf, 0x5, 0x0, 0x7}, @generic={0x2a, 0x1, 0x3, 0xa}, @map_fd={0x18, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0xf, 0xe4, &(0x7f0000000500)=""/228, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x1, 0x67c, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000840)={r3, 0x0, 0xf6, 0x0, &(0x7f00000006c0)="2a78d07a0da717c0a80e8bc0ae9ddc8d7e2530cd9e645cb51c465c9b2935eb6cd5961fe44edbbfe00277ff4ab7218ae75ea59d9aa5364a7489489c278eb9656e8d6be7b147ae1029330d999b3d934306d430510515a38b8989f0c2f642b4a21546b825ad9db0a6d53f262f707fe52a09cd3affb78a078e6f1d52cb1f76713a0ce04fb2239183efb1d0ccc9a8e10d357a68c4281eb9676085e48b09d11dcf5918570e4cb1f280f3ac7adc33e799fbf711d5090203cdf01deae383c7d1ba951a3c20f6506e7f983a703f559e00dcd3dee2ecab96ae09d49b7c420a8fb23162a3e4ab93a518771537ce21fe3fc5415ea27b35bc1f18949c", 0x0, 0x9, 0x0, 0x63, 0x0, &(0x7f00000007c0)="062829b048b3c5f613a8a4e536521b93cb36b67938201cdf63f1cd84780b65f0dd55d4210edd9e13f7709ea6da6e613349dc54016324ca011ff2bc956de9b0c1c2ec29ed39641f28e2c7f4e59c3bf8574b7837cbe9c634de11d739c68313123159aa6c", 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe97, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x20404}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4810}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_DO_IT(r2, 0xab03) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000040), 0x60, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, 0x0, 0x48020) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bond_slave_0\x00'}) 11.245445531s ago: executing program 1 (id=828): iopl(0x3) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/75, 0x8e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x2, 0x20, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x8, @void, @value, @void, @value}, 0x48) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1a}}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 10.971406494s ago: executing program 3 (id=830): r0 = socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7fc, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x6) futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800ff7f000000000000000001820a741000000000"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xa89) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x7}, {}, @ext={0x0, 0x0}}, {}], 0x38) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x146, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0) 10.352546727s ago: executing program 1 (id=832): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)=ANY=[], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7ffff000}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x20000010) 9.346971893s ago: executing program 1 (id=833): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) socket$inet6(0xa, 0x3, 0x7) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1d0100001e61e410b1134200557b0102030109021b00010000000009040000"], 0x0) 6.603696837s ago: executing program 2 (id=834): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"}) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9801) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r3, &(0x7f0000003700)={0x2020}, 0x2020) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x84) r5 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, 0x0, 0x0, r5) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x2}) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r4, 0x0) mq_timedsend(r2, &(0x7f0000000440)="ba161ff9cd02fc4d9ee11a3fca48620ab2db095025bbff0aaffcd2e0f604cc375ab2cd51a421286f0484c9345a60e13935fa09f975f501e10e06c7b2183646324409ffd47faf3d5220e0baa26d75d4e4c0aa15a9cb1cef723ba1906d9882", 0x5e, 0x9, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r7, &(0x7f0000001640)=ANY=[], 0x1a3) write$binfmt_misc(r7, &(0x7f0000000000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) 6.030949015s ago: executing program 1 (id=835): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{}, {0x77359400}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x44010) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@my=0x1}) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x0) sendmmsg(r5, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x6}], 0x10}}], 0x1, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000000, 0xfffffffe}) r7 = syz_usbip_server_init(0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r9, 0x89e4, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000180)={{0x0, 0x7, 0x800, 0x2, 0x9, 0x6, 0x1f303d5b, 0x0, 0x1, 0x0, 0x1, 0x10000, 0x400, 0x7, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000000800)={r10, 0x8}) write$usbip_server(r7, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x973) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) 5.985887029s ago: executing program 0 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x4031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 4.855015216s ago: executing program 0 (id=837): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x14, &(0x7f0000000040)={0x0, 0xff, 0x800}, 0xfffffffffffffd4e) sendto$inet(r4, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.774305558s ago: executing program 0 (id=838): socket$inet6(0xa, 0x80000, 0x7e0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x61, 0x0, 0x0, 0x200}, {0x6, 0xe, 0x8}, {0x0, 0x6, 0x6, 0x4}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x7005, 0x0) readv(r7, &(0x7f00000004c0)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002000010300000000000000000200000000000000000000001c4a620167739606e65f2b4164538c4f1299bda1bfde6413a1bf3545b752cc0b2254ed23708c782ce69d367d0522790ad82234f25870263b6c9ec748db2d030000005be6b95b13f81be1536ab8b2f3d8"], 0x1c}}, 0x0) ioctl$KDSETLED(r0, 0x4b45, 0x4) 3.717447273s ago: executing program 1 (id=839): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x10) mkdir(0x0, 0x0) mkdir(0x0, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x15) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d735931001800007f004103ff0100"}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 2.34771102s ago: executing program 2 (id=840): iopl(0x3) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/75, 0x8e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x2, 0x20, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x8, @void, @value, @void, @value}, 0x48) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1a}}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 2.34348378s ago: executing program 0 (id=848): arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000001c0)) socket$inet(0x2, 0x200000002, 0x0) socket$kcm(0xa, 0x3, 0x11) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}) 2.34270624s ago: executing program 1 (id=841): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') readv(r3, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000300)=""/41, 0x29}], 0x2) r4 = getpgrp(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002980), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f00000003c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x1050}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000400)={0x2ec, 0x34, 0x100, 0x70bd25, 0x25dfdbfd, "", [@generic="f45c75e62f2434dc8e9e2c123215e7cad005a9cda23b7f493d6141ded5842593086a217fd5cd5d604c18211bec2e2dcff44e43ea9caf4f81c6eacd31f3c30798e2e96e49f0e32643d0324abfbf4f61cacc83fa84d30420cd444b99a5bc8b62a025d5e9c0463e5fa25134e4e59d055bebf889926622f8760915f39f3f47fc28c3adcaf9a23e554e94b49c6d3ec98cddcc2434675bb048", @generic="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", @nested={0x145, 0x64, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @u32=0x1}, @generic="5548498e3fdce10e448cf8b2906a7d32dbd16c322ac47497035124b8afd9c3988247ac41f6b5cde88a0fc11a77fcdce35047dfd8f405ba17752c1e38bafa9538e792d4d02bbb4f3bdf76f9389e8dd90850953ca1ba8cfe58f5742935b0bdfc587aa7d7e5ff9b94ba32ccd3a7b5a1cb6bf598ece5720c2c7a847fd4a410679d1792946007b645724306cf4984c7c0814d4095734996e62142ea3e0fe3ff187cdcfec558d5762e833fd7d507d30a8170853a9bb8225066d86700f694859f16026add865241b029219016e548", @generic="98061920c88a020411534b15d0f1f0cdfc11f83c98de502d027b0dc71206c8f6ad6051b12eb9e3a6a8a310f5daf41dd7cc7d1d8a1364db06f622effbbbe767d94bad8c9b86a8319010c5f3e192539e88f30f99fdcae23c3fb814d74a4e4d7c5ca3bd3ac19dfa", @typed={0x8, 0x3, 0x0, 0x0, @uid}]}]}, 0x2ec}, {&(0x7f0000000900)={0x134, 0x14, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x1e, 0x6b, 0x0, 0x0, @str='blkio.bfq.group_wait_time\x00'}, @generic="27d436aa9682b220679d91bf0b7fd0b5c85ac366855d2c3db83eccd392134917cbe91af6d32dd2bad3f2197fe34df34b48ac95a07267bb78fd5ad59de815ec028d1e48", @generic="92b61d4ddad4de47450759c0ebb43bca1846e2b450febd801e0a28635715251b68d05f67dd787fb2059b3ca01ad84a19f43e2506f21e946b22aeca21f2dfe7af94e0f1ff242a3f07e581bf18154b7396a8b93d3da263c03a67b7026a016c9692f928cc30faea1b8d62d67a62106e646408cd6174702efc89c6b9a7a7e76935e752820e51e05839794df2f7411d75829c08f5bca8100f8e233212c465767a40fb09138542141f1d08eb512578228d69b5e2f49e5b6057058b5e6cf1a385c38d"]}, 0x134}, {&(0x7f0000000a40)=ANY=[@ANYBLOB="380200003900200028bd7000fbdbdf25aa000380174e4dd5a9a0d38ead39161ac7f3fe4e600c6700a85d6f6701186d94c1a79e85e6194f53f3bdd4924d18e5178e8b21816d027b608b90799b7141a7bf2eee287bd3f123e1c1a6d59561b756870d6f46228a5d85b5ad60766dcb869462b6336937f54ac535e621a22846ba55ed2e38177eae518cb671434041b4b70b5038a8f338fd7d8fce91071d5efd66295575dc4258bdcfb5153687441b18d20c7fa1aec47fb3e7537165e7000008da5e1a69220e388e9eed3820d58205c46663ee698ad9f9d3f6c182cd33f552399ea1d5c64ba37780ef7306b3922bdffa0cd73fb607ccd2dc3b5804a3ae54378bf62e98168b8fab7eba1f13388615fbc9d5eb7509d416280bb88af8ce6459f550bc164dd9b197aa39542af08ffce5ed4651daa8d0fb00d8800c0092007f00000000000000cb2fb918c95d4ce200c400b4b4bf5579aeaba2d0ba04e794f219fdb208351456e07397efd47c6bf4b4dc7b5334fb76078dff5d47ee24ccb9786ad39926943ffe35d616799bff085d19e5602ef9e495ddaf6bc59115f71aa3d6c4f43b3d7a62b084f4ba4ac2a1a367637b3362640b1496df60aa3520f0aa8dffcac775cb4151f95b3c39082f67cf85fc8301c504f0ab9d5a96cbcc9bae10392a5371d8f460a2023c59e587a1f441749d5a4fe02d1cb03e1dfb472ecd14a31ab293846726ca2ea15cb827c02f4b66b604de29ad4ecda916d650aa1bc8dea4b68f948c4995b482f51b5a52dfead79d36a100000008006800", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x238}], 0x3, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x2c, 0x1, 0x1, [r7, 0xffffffffffffffff, r6, 0xffffffffffffffff, r2, r2, r8]}}], 0x90, 0x10000000}, 0x800) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 2.031365557s ago: executing program 0 (id=842): syncfs(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x202000, &(0x7f0000000f40)={[{@barrier_val={'barrier', 0x3d, 0x5}}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@grpid}, {@orlov}, {@jqfmt_vfsv1}, {@discard}, {@stripe={'stripe', 0x3d, 0x6}}, {@nomblk_io_submit}, {@debug}]}, 0xdc, 0x564, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==") open(0x0, 0x400145042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) utimes(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xb) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @map_idx={0x18, 0xf, 0x5, 0x0, 0x7}, @generic={0x2a, 0x1, 0x3, 0xa}, @map_fd={0x18, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0xf, 0xe4, &(0x7f0000000500)=""/228, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x1, 0x67c, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000840)={r3, 0x0, 0xf6, 0x0, &(0x7f00000006c0)="2a78d07a0da717c0a80e8bc0ae9ddc8d7e2530cd9e645cb51c465c9b2935eb6cd5961fe44edbbfe00277ff4ab7218ae75ea59d9aa5364a7489489c278eb9656e8d6be7b147ae1029330d999b3d934306d430510515a38b8989f0c2f642b4a21546b825ad9db0a6d53f262f707fe52a09cd3affb78a078e6f1d52cb1f76713a0ce04fb2239183efb1d0ccc9a8e10d357a68c4281eb9676085e48b09d11dcf5918570e4cb1f280f3ac7adc33e799fbf711d5090203cdf01deae383c7d1ba951a3c20f6506e7f983a703f559e00dcd3dee2ecab96ae09d49b7c420a8fb23162a3e4ab93a518771537ce21fe3fc5415ea27b35bc1f18949c", 0x0, 0x9, 0x0, 0x63, 0x0, &(0x7f00000007c0)="062829b048b3c5f613a8a4e536521b93cb36b67938201cdf63f1cd84780b65f0dd55d4210edd9e13f7709ea6da6e613349dc54016324ca011ff2bc956de9b0c1c2ec29ed39641f28e2c7f4e59c3bf8574b7837cbe9c634de11d739c68313123159aa6c", 0x0, 0x2, 0x0, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe97, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x20404}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4810}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$NBD_DO_IT(r2, 0xab03) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000040), 0x60, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, 0x0, 0x48020) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bond_slave_0\x00'}) 0s ago: executing program 2 (id=843): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(0x0, 0x80040, 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000080)) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): ailable UDC or it's busy [ 192.824073][ T5216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 192.916107][ T3842] gspca_sunplus: reg_w_riv err -71 [ 192.922307][ T3842] sunplus: probe of 5-1:0.0 failed with error -71 [ 192.983937][ T3842] usb 5-1: USB disconnect, device number 5 [ 194.071690][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.082664][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.681125][ T5230] loop2: detected capacity change from 0 to 32768 [ 194.750422][ T5257] loop1: detected capacity change from 0 to 1024 [ 194.772369][ T5234] loop3: detected capacity change from 0 to 32768 [ 194.821702][ T5257] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 194.860053][ T5257] EXT4-fs (loop1): orphan cleanup on readonly fs [ 194.868347][ T5234] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 194.868347][ T5234] [ 194.898499][ T5257] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 194.943918][ T5234] ialloc: diAlloc returned -5! [ 194.951404][ T5257] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 195.078171][ T5257] EXT4-fs error (device loop1): ext4_free_blocks:6225: comm syz.1.325: Freeing blocks not in datazone - block = 0, count = 4096 [ 195.987119][ T5257] EXT4-fs (loop1): Remounting filesystem read-only [ 196.050747][ T5257] EXT4-fs (loop1): 1 truncate cleaned up [ 196.093350][ T5257] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 196.143745][ T3714] Bluetooth: hci6: command 0x0406 tx timeout [ 201.313991][ T3842] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 202.116207][ T5315] loop4: detected capacity change from 0 to 16 [ 202.134702][ T3842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.160797][ T3842] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.281380][ T3842] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.293625][ T5315] erofs: (device loop4): mounted with root inode @ nid 36. [ 202.361093][ T5321] loop3: detected capacity change from 0 to 256 [ 202.381549][ T3842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.207065][ T3842] usb 2-1: SerialNumber: syz [ 204.894309][ T3842] usb 2-1: can't set config #1, error -71 [ 204.914224][ T3842] usb 2-1: USB disconnect, device number 3 [ 205.231772][ T5329] tipc: Started in network mode [ 206.663667][ T5329] tipc: Node identity 369eeb743f1f, cluster identity 4711 [ 206.680681][ T5329] tipc: Enabled bearer , priority 0 [ 206.691624][ T3615] Bluetooth: hci3: command 0x0406 tx timeout [ 206.806083][ T5336] ªªªªªª: renamed from syzkaller0 [ 207.078920][ T5336] tipc: Disabling bearer [ 207.297765][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.536702][ T5343] loop2: detected capacity change from 0 to 512 [ 208.496118][ T5343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 208.546373][ T5343] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 393240: comm syz.2.347: invalid block [ 208.564117][ T5343] EXT4-fs (loop2): Remounting filesystem read-only [ 208.574446][ T5343] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.347: couldn't read orphan inode 11 (err -117) [ 208.620223][ T5343] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,sb=0x0000000000000008,lazytime. Quota mode: none. [ 209.563284][ T3726] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 210.743607][ T3726] usb 4-1: Using ep0 maxpacket: 16 [ 210.768082][ T5374] loop1: detected capacity change from 0 to 16 [ 210.794570][ T5374] erofs: (device loop1): mounted with root inode @ nid 36. [ 210.893887][ T3726] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.915894][ T3726] usb 4-1: config 0 has no interface number 0 [ 211.683811][ T3726] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 211.731356][ T3726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.768702][ T3726] usb 4-1: Product: syz [ 211.782805][ T3726] usb 4-1: Manufacturer: syz [ 211.787874][ T5390] loop2: detected capacity change from 0 to 1024 [ 211.810810][ T3726] usb 4-1: config 0 descriptor?? [ 211.842697][ T3726] usb 4-1: can't set config #0, error -71 [ 211.894752][ T3726] usb 4-1: USB disconnect, device number 6 [ 213.358785][ T5390] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.616553][ T5390] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038 (0x7fffffff) [ 215.858068][ T5414] loop4: detected capacity change from 0 to 2048 [ 216.397973][ T5423] loop2: detected capacity change from 0 to 16 [ 216.723726][ T5423] erofs: (device loop2): mounted with root inode @ nid 36. [ 216.737920][ T5414] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 217.943954][ T5414] NILFS (loop4): error -4 creating segctord thread [ 218.277196][ T5434] loop3: detected capacity change from 0 to 512 [ 218.428746][ T5434] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.501106][ T5434] EXT4-fs (loop3): 1 orphan inode deleted [ 218.511337][ T5434] EXT4-fs (loop3): 1 truncate cleaned up [ 218.528064][ T5434] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 218.603673][ T3842] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 218.943694][ T3842] usb 3-1: Using ep0 maxpacket: 32 [ 219.085037][ T3842] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 219.457453][ T3842] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 219.467308][ T3842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.476616][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'. [ 219.512062][ T3842] usb 3-1: Product: syz [ 219.521544][ T3842] usb 3-1: Manufacturer: syz [ 219.534145][ T3842] usb 3-1: SerialNumber: syz [ 219.558714][ T3842] usb 3-1: config 0 descriptor?? [ 219.594079][ T5438] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 219.602464][ T5457] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.580403][ T5443] loop4: detected capacity change from 0 to 40427 [ 220.696368][ T5443] F2FS-fs (loop4): invalid crc value [ 220.738680][ T3842] usb 3-1: USB disconnect, device number 6 [ 221.126228][ T5443] F2FS-fs (loop4): Found nat_bits in checkpoint [ 221.589932][ T5474] loop3: detected capacity change from 0 to 512 [ 221.659268][ T5474] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 221.659268][ T5474] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 221.659268][ T5474] [ 221.695921][ T5474] EXT4-fs (loop3): Unrecognized mount option "smackfsfloor=ext4" or missing value [ 223.354040][ T5484] xt_hashlimit: max too large, truncated to 1048576 [ 223.365830][ T5484] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 223.575536][ T5485] loop2: detected capacity change from 0 to 16 [ 224.390936][ T5485] erofs: (device loop2): mounted with root inode @ nid 36. [ 224.706759][ T5492] loop1: detected capacity change from 0 to 512 [ 224.996113][ T5492] EXT4-fs (loop1): 1 orphan inode deleted [ 225.649693][ T5492] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 225.744016][ T5492] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038 (0x7fffffff) [ 226.476379][ T5511] loop2: detected capacity change from 0 to 8192 [ 226.743815][ T5511] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 226.784661][ T5511] REISERFS (device loop2): using ordered data mode [ 226.791207][ T5511] reiserfs: using flush barriers [ 226.827665][ T5511] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.855177][ T5518] loop3: detected capacity change from 0 to 8192 [ 226.994943][ T5511] REISERFS (device loop2): checking transaction log (loop2) [ 227.028679][ T5511] REISERFS (device loop2): Using r5 hash to sort names [ 227.085542][ T5518] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 227.124173][ T5518] REISERFS (device loop3): using ordered data mode [ 227.414612][ T5518] reiserfs: using flush barriers [ 227.548800][ T5518] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.887468][ T5518] REISERFS (device loop3): checking transaction log (loop3) [ 227.899300][ T5518] REISERFS (device loop3): Using r5 hash to sort names [ 227.950514][ T5511] reiserfs: enabling write barrier flush mode [ 227.988185][ T5518] reiserfs: enabling write barrier flush mode [ 228.006988][ T5518] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 228.038534][ T5511] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 230.024188][ T26] audit: type=1400 audit(1728973068.894:24): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5517 comm="syz.3.393" [ 230.536691][ T26] audit: type=1800 audit(1728973070.654:25): pid=5511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="bus" dev="loop2" ino=2 res=0 errno=0 [ 230.952833][ T5541] loop1: detected capacity change from 0 to 256 [ 235.346520][ T5559] sp0: Synchronizing with TNC [ 235.399924][ T5559] input: syz0 as /devices/virtual/input/input6 [ 236.023535][ T5578] loop3: detected capacity change from 0 to 1024 [ 237.494774][ T3612] Bluetooth: hci5: command 0x0406 tx timeout [ 239.305951][ T5603] loop1: detected capacity change from 0 to 16 [ 239.372752][ T5593] chnl_net:caif_netlink_parms(): no params data found [ 239.418950][ T5603] erofs: (device loop1): mounted with root inode @ nid 36. [ 239.435150][ T3612] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 239.460842][ T3702] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.757121][ T3702] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.849151][ T5613] xt_socket: unknown flags 0x50 [ 239.996204][ T3612] usb 3-1: Using ep0 maxpacket: 32 [ 240.555419][ T3702] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.622516][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.645047][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.865304][ T5593] device bridge_slave_0 entered promiscuous mode [ 241.642317][ T1074] Bluetooth: hci0: command 0x0409 tx timeout [ 241.662494][ T5626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.684647][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.830681][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.838352][ T3612] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 241.865469][ T5593] device bridge_slave_1 entered promiscuous mode [ 241.880864][ T3612] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 241.883779][ T3721] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 241.896557][ T3612] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.965670][ T3702] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.106335][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.150872][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.163748][ T3612] usb 3-1: string descriptor 0 read error: -71 [ 242.166065][ T3721] usb 4-1: Using ep0 maxpacket: 32 [ 242.175740][ T3612] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.193648][ T3612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.233713][ T3612] usb 3-1: can't set config #1, error -71 [ 242.245123][ T3612] usb 3-1: USB disconnect, device number 7 [ 242.303830][ T3721] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 221, using maximum allowed: 30 [ 242.305908][ T5593] team0: Port device team_slave_0 added [ 242.332140][ T3721] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 221 [ 242.377960][ T5593] team0: Port device team_slave_1 added [ 242.523100][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.543860][ T3721] usb 4-1: New USB device found, idVendor=0572, idProduct=c69a, bcdDevice=50.5e [ 242.553645][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.566965][ T3721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.611909][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.644527][ T3721] usb 4-1: Product: syz [ 242.658435][ T3721] usb 4-1: Manufacturer: syz [ 242.677713][ T3721] usb 4-1: SerialNumber: syz [ 242.694025][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.701590][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.702626][ T3721] usb 4-1: config 0 descriptor?? [ 243.225491][ T3721] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 243.425354][ T3721] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 243.432390][ T3721] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 243.814768][ T3721] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 243.889050][ T3721] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 243.942054][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.033837][ T3721] usb 4-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230C v2 Lite' in warm state [ 244.245056][ T3721] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 244.294084][ T3721] dvbdev: DVB: registering new adapter (MyGica Mini DVB-(T/T2/C) USB Stick T230C v2 Lite) [ 244.343755][ T3721] usb 4-1: media controller created [ 244.396535][ T3613] Bluetooth: hci0: command 0x041b tx timeout [ 244.452814][ T3721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.532138][ T3721] usb 4-1: USB disconnect, device number 7 [ 245.825359][ T5593] device hsr_slave_0 entered promiscuous mode [ 245.852489][ T5593] device hsr_slave_1 entered promiscuous mode [ 245.879674][ T5593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.902777][ T5593] Cannot create hsr debugfs directory [ 246.673575][ T3645] Bluetooth: hci0: command 0x040f tx timeout [ 248.773917][ T3613] Bluetooth: hci0: command 0x0419 tx timeout [ 249.435616][ T3702] device hsr_slave_0 left promiscuous mode [ 249.456650][ T3702] device hsr_slave_1 left promiscuous mode [ 249.471943][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.498699][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.518741][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.531966][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.544677][ T3702] device bridge_slave_1 left promiscuous mode [ 249.551078][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.567989][ T3702] device bridge_slave_0 left promiscuous mode [ 249.571968][ T3615] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 249.584319][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.598919][ T3702] device veth1_macvtap left promiscuous mode [ 249.605050][ T3702] device veth0_macvtap left promiscuous mode [ 249.611112][ T3702] device veth1_vlan left promiscuous mode [ 249.617365][ T3702] device veth0_vlan left promiscuous mode [ 249.862489][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 249.881252][ T3615] usb 1-1: Using ep0 maxpacket: 16 [ 249.919472][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 249.960601][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.003651][ T3615] usb 1-1: device descriptor read/all, error -71 [ 250.037369][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.233469][ T5724] loop1: detected capacity change from 0 to 512 [ 250.493943][ T5724] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 250.543453][ T3702] bond0 (unregistering): Released all slaves [ 250.572877][ T5724] System zones: 0-2, 18-18, 34-34 [ 250.922686][ T5724] EXT4-fs (loop1): 1 orphan inode deleted [ 250.949063][ T5724] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,debug,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 250.962541][ T3721] Bluetooth: hci1: command 0x0409 tx timeout [ 250.985978][ T5724] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038 (0x7fffffff) [ 251.141499][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.178981][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.237030][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.266862][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.337669][ T5700] chnl_net:caif_netlink_parms(): no params data found [ 251.659782][ T5719] loop3: detected capacity change from 0 to 40427 [ 251.670845][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.701461][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.713185][ T5700] device bridge_slave_0 entered promiscuous mode [ 251.736538][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.743986][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.751150][ T5719] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 251.760447][ T5719] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 251.774682][ T5700] device bridge_slave_1 entered promiscuous mode [ 251.786514][ T5719] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 251.836074][ T5719] F2FS-fs (loop3): invalid crc value [ 251.858266][ T5700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.891694][ T5719] F2FS-fs (loop3): Found nat_bits in checkpoint [ 251.898313][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.931611][ T5700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.976562][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.088705][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.107771][ T5719] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 252.137338][ T5719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 252.169420][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.225652][ T5748] attempt to access beyond end of device [ 252.225652][ T5748] loop3: rw=2049, want=45104, limit=40427 [ 252.301557][ T5700] team0: Port device team_slave_0 added [ 252.328144][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.354241][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.390344][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.397546][ T4586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.437204][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.465780][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.494084][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.501218][ T4586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.541071][ T5700] team0: Port device team_slave_1 added [ 252.564957][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.593437][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.634608][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.857635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.896502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.005985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.668771][ T3615] Bluetooth: hci1: command 0x041b tx timeout [ 253.675708][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.682664][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.793625][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.851966][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.876851][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.962644][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.999500][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.033250][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.138365][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.166287][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.230674][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.253362][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.308393][ T5700] device hsr_slave_0 entered promiscuous mode [ 254.325036][ T5700] device hsr_slave_1 entered promiscuous mode [ 254.340155][ T5700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.372540][ T5700] Cannot create hsr debugfs directory [ 255.524499][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.531176][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.602370][ T5700] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.723776][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.731316][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.744072][ T3726] Bluetooth: hci1: command 0x040f tx timeout [ 255.814568][ T5700] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.014910][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.635788][ T5700] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.796758][ T5825] loop3: detected capacity change from 0 to 16 [ 256.832381][ T5700] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.929942][ T5825] erofs: (device loop3): mounted with root inode @ nid 36. [ 257.044535][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.090304][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.161115][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 257.196602][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.211051][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.257155][ T5593] device veth0_vlan entered promiscuous mode [ 257.270380][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.284444][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.343984][ T5593] device veth1_vlan entered promiscuous mode [ 257.365882][ T5700] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.392622][ T5700] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.423784][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.434071][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 257.442623][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.465849][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.484951][ T5700] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.515150][ T5593] device veth0_macvtap entered promiscuous mode [ 257.541617][ T5700] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.564824][ T5593] device veth1_macvtap entered promiscuous mode [ 257.644032][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.664039][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.694434][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.719823][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.751916][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.803699][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.821163][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.824471][ T3618] Bluetooth: hci1: command 0x0419 tx timeout [ 257.851195][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.034904][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.055811][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.068434][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.078755][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.089271][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.252695][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.377589][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.528056][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.893791][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.902550][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.929018][ T5593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.976412][ T5593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.985515][ T5593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.004839][ T5593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.132596][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.245425][ T5700] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.255330][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.259021][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.271983][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.280188][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.335139][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.353692][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.372910][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.394227][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.401346][ T3704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.415673][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.484159][ T4103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.500471][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.502426][ T4103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.524050][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.532745][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.539857][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.550786][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.566471][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.592717][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.632114][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.678656][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.796563][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.956115][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.044920][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.232562][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.319433][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.344999][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.365184][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.402171][ T26] audit: type=1326 audit(1728973100.844:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7ffc0000 [ 260.454336][ T26] audit: type=1326 audit(1728973100.874:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f811962dff9 code=0x7ffc0000 [ 260.725173][ T26] audit: type=1326 audit(1728973100.884:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7ffc0000 [ 260.832338][ T26] audit: type=1326 audit(1728973100.884:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f811962dff9 code=0x7ffc0000 [ 261.221356][ T26] audit: type=1326 audit(1728973100.884:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7ffc0000 [ 261.589171][ T26] audit: type=1326 audit(1728973100.884:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f811962dff9 code=0x7ffc0000 [ 261.629233][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.696005][ T26] audit: type=1326 audit(1728973100.884:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7ffc0000 [ 261.745173][ T5875] loop3: detected capacity change from 0 to 16 [ 261.803756][ T26] audit: type=1326 audit(1728973100.884:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f811962dff9 code=0x7ffc0000 [ 261.873638][ T5875] erofs: (device loop3): mounted with root inode @ nid 36. [ 261.884702][ T26] audit: type=1326 audit(1728973100.884:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7ffc0000 [ 261.978634][ T26] audit: type=1326 audit(1728973100.884:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.0.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7ffc0000 [ 264.244109][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.258573][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.300640][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.513077][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.522427][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.628833][ T5895] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 264.646949][ T5894] loop3: detected capacity change from 0 to 512 [ 264.668354][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.679412][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.725044][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.742536][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.752725][ T5700] device veth0_vlan entered promiscuous mode [ 264.836016][ T5894] EXT4-fs (loop3): 1 orphan inode deleted [ 264.841792][ T5894] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,noquota,barrier=0x0000000000000006,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 264.870828][ T5700] device veth1_vlan entered promiscuous mode [ 264.965892][ T3702] device hsr_slave_0 left promiscuous mode [ 264.972441][ T3702] device hsr_slave_1 left promiscuous mode [ 264.987124][ T5894] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038 (0x7fffffff) [ 265.026185][ T3702] device veth1_macvtap left promiscuous mode [ 265.032249][ T3702] device veth0_macvtap left promiscuous mode [ 265.083925][ T3702] device veth1_vlan left promiscuous mode [ 265.089855][ T3702] device veth0_vlan left promiscuous mode [ 266.238390][ T5909] nullb0: AHDI p1 [ 268.998949][ T3702] bond0 (unregistering): Released all slaves [ 269.164231][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.172747][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.006720][ T5929] loop4: detected capacity change from 0 to 16 [ 270.072463][ T5929] erofs: (device loop4): mounted with root inode @ nid 36. [ 270.287717][ T5700] device veth0_macvtap entered promiscuous mode [ 270.298299][ T5700] device veth1_macvtap entered promiscuous mode [ 270.316140][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.439936][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.495594][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.626674][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.726630][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.159409][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.185861][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.213579][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.264058][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.305750][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.347348][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.364556][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.380204][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.411028][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.430953][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.441203][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.460977][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.475221][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.486376][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.511054][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.529798][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.565050][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.603610][ T3716] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 271.622831][ T5700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.631656][ T5700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.640456][ T5700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.661974][ T5700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.825469][ T5952] vivid-004: disconnect [ 271.869284][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.005039][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.267439][ T5944] vivid-004: reconnect [ 272.451116][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.477'. [ 272.515059][ T5955] loop4: detected capacity change from 0 to 256 [ 272.534241][ T3716] usb 1-1: Using ep0 maxpacket: 8 [ 272.535079][ T5953] loop1: detected capacity change from 0 to 4096 [ 272.814010][ T3716] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 272.829631][ T5953] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 272.847987][ T5953] ntfs3: loop1: Failed to load $MFT. [ 272.850908][ T3716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.525358][ T3716] usb 1-1: Product: syz [ 273.529744][ T3716] usb 1-1: Manufacturer: syz [ 273.534507][ T3716] usb 1-1: SerialNumber: syz [ 273.567209][ T3760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.576674][ T3716] usb 1-1: config 0 descriptor?? [ 273.589634][ T3760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.678123][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.730469][ T4586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.747053][ T4586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.786467][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.833725][ T3716] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 274.691089][ T5965] loop4: detected capacity change from 0 to 64 [ 275.613910][ T3716] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 275.684590][ T3716] usb 1-1: USB disconnect, device number 10 [ 275.775948][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.991273][ T5976] loop4: detected capacity change from 0 to 512 [ 276.888662][ T5976] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 276.896728][ T5976] EXT4-fs (loop4): Ignoring removed orlov option [ 276.903296][ T5976] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 276.944157][ T5976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c198, mo2=0002] [ 276.952335][ T5976] System zones: 1-12 [ 276.987011][ T5976] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.482: corrupted in-inode xattr [ 277.001672][ T5976] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.482: couldn't read orphan inode 15 (err -117) [ 277.024046][ T5976] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,orlov,debug,noload,minixdf,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 277.100846][ T5986] loop3: detected capacity change from 0 to 512 [ 278.251984][ T5986] EXT4-fs (loop3): Ignoring removed nobh option [ 278.356147][ T5986] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.535758][ T5986] EXT4-fs (loop3): 1 truncate cleaned up [ 278.541626][ T5986] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,nobh,data_err=ignore,nolazytime,grpjquota=,acl,,errors=continue. Quota mode: none. [ 279.920106][ T6002] loop1: detected capacity change from 0 to 8192 [ 280.139128][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 280.139145][ T26] audit: type=1800 audit(1728973120.584:52): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.491" name="bus" dev="loop1" ino=1048646 res=0 errno=0 [ 281.071810][ T6019] loop3: detected capacity change from 0 to 2048 [ 281.296523][ T6026] loop2: detected capacity change from 0 to 64 [ 281.373221][ T6019] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.459063][ T6034] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 281.478692][ T3645] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 282.338646][ T3645] usb 2-1: Using ep0 maxpacket: 8 [ 282.423913][ T6026] MINIX-fs: mounting file system with errors, running fsck is recommended [ 282.802566][ T3645] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 283.618821][ T3645] usb 2-1: can't read configurations, error -71 [ 283.694260][ T6052] loop2: detected capacity change from 0 to 16 [ 283.888812][ T6052] erofs: (device loop2): mounted with root inode @ nid 36. [ 284.105464][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 285.038284][ T3618] Bluetooth: hci1: command 0x0405 tx timeout [ 285.193909][ T3721] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 285.919927][ T3721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 285.997875][ T6083] loop3: detected capacity change from 0 to 256 [ 286.033586][ T3721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.082540][ T6085] loop1: detected capacity change from 0 to 1024 [ 286.112421][ T3721] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 286.140726][ T3721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.178017][ T6085] EXT4-fs (loop1): Mount option "nojournal_checksum" incompatible with ext2 [ 286.254956][ T3721] usb 1-1: config 0 descriptor?? [ 286.296060][ T3721] gspca_main: spca561-2.14.0 probing abcd:cdee [ 287.056194][ T6072] udc-core: couldn't find an available UDC or it's busy [ 287.093697][ T6072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 287.763712][ T3721] spca561: probe of 1-1:0.0 failed with error -22 [ 287.771209][ T3721] usb 1-1: MIDIStreaming interface descriptor not found [ 290.217921][ T3716] usb 1-1: USB disconnect, device number 11 [ 290.342014][ T6113] loop1: detected capacity change from 0 to 16 [ 290.468233][ T6113] erofs: (device loop1): mounted with root inode @ nid 36. [ 290.535827][ T6118] loop2: detected capacity change from 0 to 512 [ 290.588352][ T6114] loop4: detected capacity change from 0 to 8192 [ 291.343159][ T6114] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 291.413643][ T6114] REISERFS (device loop4): using ordered data mode [ 291.445059][ T6118] EXT4-fs (loop2): Test dummy encryption mode enabled [ 291.539111][ T6114] reiserfs: using flush barriers [ 291.553595][ T6114] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 291.638890][ T6114] REISERFS (device loop4): checking transaction log (loop4) [ 291.662758][ T6114] REISERFS (device loop4): Using r5 hash to sort names [ 291.669803][ T6114] REISERFS (device loop4): using 3.5.x disk format [ 291.717098][ T6118] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 1: comm syz.2.519: invalid block [ 291.826987][ T6114] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 291.990079][ T6118] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.519: couldn't read orphan inode 11 (err -117) [ 292.278581][ T6118] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 295.810774][ T6158] loop1: detected capacity change from 0 to 512 [ 296.126120][ T6158] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 298.300058][ T6158] EXT4-fs (loop1): 1 truncate cleaned up [ 298.319849][ T6158] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 299.677023][ T6178] loop4: detected capacity change from 0 to 512 [ 300.803612][ T6178] EXT4-fs (loop4): Ignoring removed oldalloc option [ 303.275918][ T6178] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 303.558650][ T4103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.641182][ T4103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.772776][ T6207] loop2: detected capacity change from 0 to 1024 [ 304.334434][ T4103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.817492][ T3760] hfsplus: b-tree write err: -5, ino 4 [ 305.175998][ T4103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.663927][ T3717] Bluetooth: hci4: command 0x0409 tx timeout [ 305.780633][ T6197] chnl_net:caif_netlink_parms(): no params data found [ 307.235610][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.263733][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.313652][ T6197] device bridge_slave_0 entered promiscuous mode [ 307.358073][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.365245][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.374170][ T6197] device bridge_slave_1 entered promiscuous mode [ 307.743750][ T3721] Bluetooth: hci4: command 0x041b tx timeout [ 308.199520][ T6197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.256682][ T6197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.430322][ T6197] team0: Port device team_slave_0 added [ 308.481652][ T6197] team0: Port device team_slave_1 added [ 309.655675][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.687481][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.760960][ T6197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.774128][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.781142][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.945963][ T6197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.134564][ T3721] Bluetooth: hci4: command 0x040f tx timeout [ 313.281542][ T6197] device hsr_slave_0 entered promiscuous mode [ 313.516436][ T3612] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 313.530708][ T3618] Bluetooth: hci4: command 0x0419 tx timeout [ 313.687010][ T6197] device hsr_slave_1 entered promiscuous mode [ 314.889926][ T6197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.168549][ T6197] Cannot create hsr debugfs directory [ 316.274996][ T3612] usb 1-1: device not accepting address 12, error -71 [ 316.302870][ T6305] loop2: detected capacity change from 0 to 2048 [ 317.118494][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.124867][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.221596][ T6305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 317.235932][ T4103] device hsr_slave_0 left promiscuous mode [ 317.261780][ T6305] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 317.640505][ T4103] device hsr_slave_1 left promiscuous mode [ 317.723127][ T4103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.934460][ T4103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.069740][ T4103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.109468][ T4103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.504385][ T4103] device bridge_slave_1 left promiscuous mode [ 318.518755][ T4103] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.530399][ T4103] device bridge_slave_0 left promiscuous mode [ 318.604504][ T4103] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.709711][ T4103] device veth1_macvtap left promiscuous mode [ 318.731605][ T4103] device veth0_macvtap left promiscuous mode [ 318.766868][ T4103] device veth1_vlan left promiscuous mode [ 318.772715][ T4103] device veth0_vlan left promiscuous mode [ 319.354640][ T6362] loop4: detected capacity change from 0 to 4096 [ 322.480868][ T26] audit: type=1326 audit(1728973162.914:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed0967ff9 code=0x7ffc0000 [ 322.989616][ T6362] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 323.066295][ T6362] ntfs3: loop4: Failed to load $MFT. [ 323.137694][ T26] audit: type=1326 audit(1728973162.914:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed0967ff9 code=0x7ffc0000 [ 323.162292][ T26] audit: type=1326 audit(1728973162.914:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2ed0967ff9 code=0x7ffc0000 [ 324.429990][ T4103] team0 (unregistering): Port device team_slave_1 removed [ 324.434313][ T26] audit: type=1326 audit(1728973162.914:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed0967ff9 code=0x7ffc0000 [ 324.561846][ T4103] team0 (unregistering): Port device team_slave_0 removed [ 324.981114][ T26] audit: type=1326 audit(1728973162.914:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed0967ff9 code=0x7ffc0000 [ 325.364484][ T4103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.382450][ T26] audit: type=1326 audit(1728973162.914:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2ed0967ff9 code=0x7ffc0000 [ 325.424467][ T4103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.468724][ T26] audit: type=1326 audit(1728973162.914:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed0967ff9 code=0x7ffc0000 [ 325.492767][ T26] audit: type=1326 audit(1728973162.914:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6377 comm="syz.2.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed0967ff9 code=0x7ffc0000 [ 326.992298][ T6410] loop2: detected capacity change from 0 to 8 [ 327.685297][ T4103] bond0 (unregistering): Released all slaves [ 327.827108][ T6406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.651528][ T6419] loop4: detected capacity change from 0 to 256 [ 333.693120][ T6453] loop4: detected capacity change from 0 to 1024 [ 333.733850][ T26] audit: type=1326 audit(1728973174.154:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7fc00000 [ 333.797318][ T26] audit: type=1326 audit(1728973174.154:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f811962dff9 code=0x7fc00000 [ 333.829269][ T26] audit: type=1326 audit(1728973174.154:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7fc00000 [ 334.844628][ T26] audit: type=1326 audit(1728973174.164:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7fc00000 [ 334.867745][ T26] audit: type=1326 audit(1728973174.164:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7fc00000 [ 334.914611][ T26] audit: type=1326 audit(1728973174.164:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7fc00000 [ 335.120730][ T26] audit: type=1326 audit(1728973174.164:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7fc00000 [ 335.147397][ T26] audit: type=1326 audit(1728973174.164:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7fc00000 [ 335.188296][ T26] audit: type=1326 audit(1728973174.164:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7fc00000 [ 337.491773][ T26] audit: type=1326 audit(1728973174.164:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f811962dff9 code=0x7fc00000 [ 340.063904][ T6489] netlink: 104 bytes leftover after parsing attributes in process `syz.2.594'. [ 341.064410][ T6497] loop2: detected capacity change from 0 to 2048 [ 342.286876][ T6497] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,nolazytime,,errors=continue. Quota mode: none. [ 342.546503][ T6197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.483328][ T6517] loop1: detected capacity change from 0 to 128 [ 343.518139][ T6197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.562435][ T6197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.762032][ T6197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.774553][ T6517] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.593742][ T6517] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 346.028075][ T6197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.290239][ T3915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 347.324529][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.334443][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.388786][ T3915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 347.421249][ T6197] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.456424][ T3915] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 347.473946][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.490434][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.529063][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.536228][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.545860][ T3915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 347.594355][ T3915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 347.612929][ T6566] loop4: detected capacity change from 0 to 256 [ 347.626087][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.637073][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.667264][ T3915] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 347.687739][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.714206][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.721296][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.747444][ T3915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 347.774920][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.804963][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.824305][ T3915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 347.847182][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.875970][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.910704][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.961081][ T3915] EXT4-fs error (device loop1): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 348.012878][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.033075][ T3915] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 348.044970][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.129344][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.139681][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.153216][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.162303][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.377634][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.703314][ T6587] loop4: detected capacity change from 0 to 2048 [ 348.833163][ T6587] EXT4-fs (loop4): Ignoring removed orlov option [ 348.918304][ T6587] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 348.985976][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.994349][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.118040][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.323813][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.374636][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.588325][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.608228][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.658354][ T6197] device veth0_vlan entered promiscuous mode [ 349.666846][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.688763][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.735660][ T6197] device veth1_vlan entered promiscuous mode [ 349.761070][ T4295] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 349.840633][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.862290][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.883949][ T4295] EXT4-fs (loop4): Remounting filesystem read-only [ 350.016302][ T6197] device veth0_macvtap entered promiscuous mode [ 350.057798][ T6197] device veth1_macvtap entered promiscuous mode [ 350.101957][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.113303][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.123289][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.133791][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.163505][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.210700][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.004310][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.021453][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.100693][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.110651][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.121870][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.144156][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.183581][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.212543][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.269573][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.284810][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.372536][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.384337][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.403238][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.420157][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.438821][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 352.241739][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.299376][ T6197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.340964][ T6197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.352937][ T6197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.386936][ T6197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.271298][ T3722] Bluetooth: hci3: command 0x0409 tx timeout [ 353.566958][ T3626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.578491][ T3626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.462410][ T3717] Bluetooth: hci3: command 0x041b tx timeout [ 355.761407][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 356.498637][ T4103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.518279][ T6674] "syz.4.624" (6674) uses obsolete ecb(arc4) skcipher [ 356.527584][ T3626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.533737][ T4103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.618767][ T6618] chnl_net:caif_netlink_parms(): no params data found [ 356.674445][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.711421][ T3626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.777360][ T6686] loop3: detected capacity change from 0 to 16 [ 356.813850][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.624'. [ 356.836351][ T6686] erofs: (device loop3): mounted with root inode @ nid 36. [ 357.012433][ T3615] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 357.106108][ T3626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.661814][ T3722] Bluetooth: hci3: command 0x040f tx timeout [ 357.894253][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.924378][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.954437][ T6618] device bridge_slave_0 entered promiscuous mode [ 358.000661][ T3626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.031778][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.063984][ T3615] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.170027][ T6705] affs: Unrecognized mount option "ß" or missing value [ 358.177431][ T6705] affs: Error parsing options [ 358.199717][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.468887][ T6618] device bridge_slave_1 entered promiscuous mode [ 358.840652][ T3615] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 358.853791][ T3615] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 358.862860][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.873172][ T3615] usb 1-1: config 0 descriptor?? [ 358.962178][ T3615] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 359.785805][ T3717] Bluetooth: hci3: command 0x0419 tx timeout [ 359.982197][ T6716] loop4: detected capacity change from 0 to 2048 [ 359.997812][ T6618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.955716][ T3721] usb 1-1: USB disconnect, device number 14 [ 361.015869][ T6618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.959061][ T6716] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.067000][ T6618] team0: Port device team_slave_0 added [ 362.182785][ T3626] tipc: Left network mode [ 362.212864][ T6618] team0: Port device team_slave_1 added [ 362.402747][ T6740] loop3: detected capacity change from 0 to 4096 [ 362.409800][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.416982][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.473512][ T6618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.526840][ T6740] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 362.584149][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.591759][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.628778][ T6740] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 362.715029][ T6618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.823116][ T6748] loop4: detected capacity change from 0 to 4096 [ 363.591255][ T6748] NILFS (loop4): invalid segment: Checksum error in segment payload [ 363.660410][ T6748] NILFS (loop4): trying rollback from an earlier position [ 363.720031][ T6748] NILFS (loop4): invalid segment: Checksum error in segment payload [ 363.750726][ T6748] NILFS (loop4): error -22 while searching super root [ 364.414124][ T6618] device hsr_slave_0 entered promiscuous mode [ 364.834090][ T6618] device hsr_slave_1 entered promiscuous mode [ 365.165938][ T4103] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 365.216076][ T6197] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 365.226519][ T6748] capability: warning: `syz.4.634' uses 32-bit capabilities (legacy support in use) [ 366.890638][ T6790] loop3: detected capacity change from 0 to 16 [ 367.724583][ T6790] erofs: (device loop3): mounted with root inode @ nid 36. [ 367.754862][ T6789] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 367.774121][ T6789] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 367.787944][ T6789] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 367.856615][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 368.887118][ T6805] loop3: detected capacity change from 0 to 128 [ 369.475586][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 369.475608][ T26] audit: type=1800 audit(1728973209.724:107): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.644" name="bus" dev="loop3" ino=1048649 res=0 errno=0 [ 369.890752][ T6814] loop4: detected capacity change from 0 to 1024 [ 370.410575][ T6825] loop2: detected capacity change from 0 to 16 [ 370.450632][ T6825] erofs: (device loop2): mounted with root inode @ nid 36. [ 370.470603][ T6814] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 370.470603][ T6814] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 370.470603][ T6814] [ 370.497283][ T6814] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 370.888053][ T6814] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 371.207849][ T6834] loop3: detected capacity change from 0 to 64 [ 371.812033][ T3626] device hsr_slave_0 left promiscuous mode [ 372.011615][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.054363][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.125210][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.132759][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.246163][ T3626] device bridge_slave_1 left promiscuous mode [ 372.252487][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.301488][ T6850] 9pnet: Insufficient options for proto=fd [ 372.321189][ T3626] device bridge_slave_0 left promiscuous mode [ 372.330549][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.393014][ T3626] device hsr_slave_1 left promiscuous mode [ 372.410226][ T3626] device veth1_macvtap left promiscuous mode [ 372.513615][ T3626] device veth0_macvtap left promiscuous mode [ 372.553861][ T3626] device veth1_vlan left promiscuous mode [ 373.764093][ T3626] device veth0_vlan left promiscuous mode [ 374.136589][ T6875] loop4: detected capacity change from 0 to 512 [ 374.221743][ T6875] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 374.248345][ T6875] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 375.277455][ T3626] team0 (unregistering): Port device team_slave_1 removed [ 375.293273][ T3626] team0 (unregistering): Port device team_slave_0 removed [ 375.308639][ T3626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.323614][ T3626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.153675][ T4362] Bluetooth: hci1: command 0x0406 tx timeout [ 376.188643][ T3626] bond0 (unregistering): Released all slaves [ 376.287370][ T6865] device team0 entered promiscuous mode [ 376.294956][ T6865] device team_slave_0 entered promiscuous mode [ 376.301701][ T6865] device team_slave_1 entered promiscuous mode [ 376.334753][ T6868] team0: Port device team_slave_0 removed [ 376.341318][ T6873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.409075][ T6873] device team0 left promiscuous mode [ 376.423607][ T6873] device team_slave_1 left promiscuous mode [ 376.563702][ T3717] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 378.020028][ T6618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 378.085014][ T6905] binder: 6904:6905 ioctl c0306201 20000080 returned -14 [ 378.231959][ T6618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 378.282872][ T6618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 378.302795][ T6618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.333717][ T3717] usb 4-1: Using ep0 maxpacket: 8 [ 378.386476][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.392859][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.422674][ T6618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.488203][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 378.494146][ T3717] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 378.505625][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.523723][ T3717] usb 4-1: config 0 has an invalid interface number: 49 but max is 2 [ 378.544257][ T6618] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.626935][ T6916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 379.103830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 379.328458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.334972][ T3717] usb 4-1: config 0 has no interface number 1 [ 379.347170][ T3717] usb 4-1: config 0 has no interface number 2 [ 379.357531][ T3717] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 379.366798][ T3717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.376693][ T3717] usb 4-1: config 0 descriptor?? [ 379.385794][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.392881][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.431588][ T3717] usb 4-1: can't set config #0, error -71 [ 379.443926][ T3717] usb 4-1: USB disconnect, device number 8 [ 379.465277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 379.598092][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 379.614908][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.635372][ T4103] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.642516][ T4103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.846369][ T6930] netlink: 104 bytes leftover after parsing attributes in process `syz.4.667'. [ 380.677939][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 381.987578][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 382.053371][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 382.115851][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 382.135510][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 382.375227][ T6951] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 382.487510][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 382.550059][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 382.614441][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 382.693335][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.825111][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 382.961756][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.011913][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.278961][ T6963] loop3: detected capacity change from 0 to 1024 [ 383.500663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.511050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.528631][ T6618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.557092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 383.567499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 383.594650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 383.605133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.617588][ T6618] device veth0_vlan entered promiscuous mode [ 383.627804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.637114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.653833][ T6618] device veth1_vlan entered promiscuous mode [ 383.682573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 383.732577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 383.751590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.761534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.771454][ T6963] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.802825][ T6963] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038 (0x7fffffff) [ 383.873715][ T3618] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 384.034384][ T6618] device veth0_macvtap entered promiscuous mode [ 384.046611][ T6618] device veth1_macvtap entered promiscuous mode [ 384.300734][ T26] audit: type=1800 audit(1728973224.744:108): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.676" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 384.328110][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.373577][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.414248][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.463466][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.496664][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.544406][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.597574][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.643542][ T3618] usb 3-1: Using ep0 maxpacket: 8 [ 384.653960][ T2630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 384.666302][ T2630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 384.721683][ T6994] loop4: detected capacity change from 0 to 512 [ 384.724805][ T2630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 384.764610][ T3618] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b [ 384.790804][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.797606][ T6994] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.678: corrupted in-inode xattr [ 384.800640][ T2630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 384.838470][ T3618] usb 3-1: config 0 descriptor?? [ 384.841965][ T6994] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.678: couldn't read orphan inode 15 (err -117) [ 384.878489][ T6994] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 384.941901][ T6988] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.678: Directory hole found for htree leaf block 0 [ 385.056335][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.083800][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.118742][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.145491][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.171411][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.199969][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.221055][ T6618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.254451][ T6618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.413818][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.639744][ T6618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.765480][ T6618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.888115][ T6618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.036531][ T6618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.105509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.116004][ T3645] usb 3-1: USB disconnect, device number 8 [ 386.135412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.446952][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 387.728906][ T7025] loop3: detected capacity change from 0 to 8192 [ 388.706503][ T7025] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 388.740106][ T7025] REISERFS (device loop3): using ordered data mode [ 388.764687][ T7025] reiserfs: using flush barriers [ 388.786074][ T7025] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 388.839828][ T3760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.870059][ T3760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.913934][ T7025] REISERFS (device loop3): checking transaction log (loop3) [ 388.948488][ T7025] REISERFS (device loop3): Using r5 hash to sort names [ 388.983689][ T7025] REISERFS (device loop3): using 3.5.x disk format [ 389.025185][ T2630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 389.036931][ T7042] loop4: detected capacity change from 0 to 1024 [ 389.043928][ T7025] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 389.095449][ T3760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.795868][ T3760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.809789][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.684832][ T4362] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 394.143620][ T4362] usb 2-1: device descriptor read/all, error -71 [ 395.660694][ T7071] loop1: detected capacity change from 0 to 1024 [ 395.903105][ T7071] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 395.953592][ T7071] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 396.283678][ T7070] loop4: detected capacity change from 0 to 512 [ 396.290138][ T3618] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 396.780657][ T7070] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 397.009721][ T7070] EXT4-fs (loop4): 1 orphan inode deleted [ 397.056468][ T7070] EXT4-fs (loop4): 1 truncate cleaned up [ 397.062149][ T7070] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 397.253911][ T3618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.288621][ T3618] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.443964][ T3618] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.544872][ T3618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.646426][ T3618] usb 4-1: config 0 descriptor?? [ 398.190652][ T3618] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 398.245552][ T3618] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 398.266749][ T7100] loop1: detected capacity change from 0 to 1024 [ 398.445714][ T7100] EXT4-fs (loop1): Mount option "journal_ioprio=0x0000000000000004" incompatible with ext2 [ 399.431897][ T7109] loop4: detected capacity change from 0 to 16 [ 399.448667][ T7109] erofs: (device loop4): mounted with root inode @ nid 36. [ 399.462008][ T7109] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 399.487009][ T7109] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 399.500230][ T7109] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 399.978231][ T13] usb 4-1: USB disconnect, device number 9 [ 400.945779][ T7123] loop4: detected capacity change from 0 to 1024 [ 401.739965][ T7131] loop2: detected capacity change from 0 to 764 [ 401.962625][ T7133] loop4: detected capacity change from 0 to 512 [ 402.830906][ T7133] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.708: Invalid inode bitmap blk 4 in block_group 0 [ 402.864038][ T7133] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 403.264053][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 403.667817][ T7133] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 403.883518][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 404.155265][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.297583][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.577780][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.624263][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.663645][ T13] usb 4-1: New USB device found, idVendor=044f, idProduct=9320, bcdDevice= 0.00 [ 404.709790][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.808693][ T7153] Symlink component flag not implemented [ 404.817521][ T13] usb 4-1: config 0 descriptor?? [ 405.067681][ T7153] Symlink component flag not implemented [ 406.893343][ T7168] sp0: Synchronizing with TNC [ 407.117063][ T7168] input: syz0 as /devices/virtual/input/input8 [ 407.323896][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 407.331569][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 408.585521][ T13] usb 4-1: USB disconnect, device number 10 [ 414.541376][ T7235] loop4: detected capacity change from 0 to 1024 [ 414.717334][ T7230] chnl_net:caif_netlink_parms(): no params data found [ 414.738788][ T7235] EXT4-fs (loop4): Ignoring removed orlov option [ 414.878510][ T7235] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,sysvgroups,max_batch_time=0x0000000000000009,debug_want_extra_isize=0x0000000000000080,orlov,norecovery,noauto_da_alloc,abort,,errors=continue. Quota mode: none. [ 416.498121][ T3612] Bluetooth: hci5: command 0x0409 tx timeout [ 416.588774][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.597660][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.609567][ T7230] device bridge_slave_0 entered promiscuous mode [ 416.623859][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.631000][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.665984][ T7230] device bridge_slave_1 entered promiscuous mode [ 417.174592][ T7230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.273742][ T4361] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 417.282826][ T7230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.523120][ T7270] loop3: detected capacity change from 0 to 764 [ 417.547258][ T7230] team0: Port device team_slave_0 added [ 417.553671][ T4361] usb 1-1: Using ep0 maxpacket: 8 [ 417.585044][ T7230] team0: Port device team_slave_1 added [ 417.683785][ T4361] usb 1-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 417.697887][ T4361] usb 1-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 417.863095][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.915716][ T4361] usb 1-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 417.935744][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.994062][ T4361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.002335][ T4361] usb 1-1: Product: syz [ 418.042206][ T7272] Symlink component flag not implemented [ 418.048020][ T7272] Symlink component flag not implemented [ 418.083861][ T4361] usb 1-1: Manufacturer: syz [ 418.182103][ T4361] usb 1-1: SerialNumber: syz [ 418.428855][ T7230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.445442][ T4361] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 418.498074][ T4361] dvb-usb: bulk message failed: -22 (3/0) [ 418.523611][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.554336][ T1074] Bluetooth: hci5: command 0x041b tx timeout [ 418.578608][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.616048][ T4361] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 418.683573][ T7230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.683868][ T4361] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 418.790548][ T4361] usb 1-1: media controller created [ 418.843251][ T4361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.915081][ T4361] dvb-usb: bulk message failed: -22 (6/0) [ 418.921448][ T4361] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 419.025145][ T4361] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 419.065385][ T4361] dvb-usb: schedule remote query interval to 150 msecs. [ 419.067874][ T7230] device hsr_slave_0 entered promiscuous mode [ 419.098368][ T4361] dvb-usb: bulk message failed: -22 (3/0) [ 419.126342][ T7230] device hsr_slave_1 entered promiscuous mode [ 419.143645][ T4361] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 419.160827][ T7230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.201605][ T7230] Cannot create hsr debugfs directory [ 419.258496][ T4361] dvb-usb: bulk message failed: -22 (1/0) [ 419.280170][ T4361] dvb-usb: error while querying for an remote control event. [ 419.531265][ T3612] dvb-usb: bulk message failed: -22 (1/0) [ 419.541429][ T3612] dvb-usb: error while querying for an remote control event. [ 419.553955][ T3714] usb 1-1: USB disconnect, device number 15 [ 419.889342][ T7282] devtmpfs: Bad value for 'mpol' [ 420.600278][ T3714] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 420.633962][ T3612] Bluetooth: hci5: command 0x040f tx timeout [ 420.690435][ T7289] program syz.1.740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.747044][ T7230] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.876768][ T7230] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.867442][ T7230] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.199799][ T7230] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.463647][ T3714] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 422.703651][ T3714] usb 5-1: Using ep0 maxpacket: 16 [ 422.703721][ T3612] Bluetooth: hci5: command 0x0419 tx timeout [ 422.823669][ T3714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.946166][ T7230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 423.023635][ T3714] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 423.047966][ T7230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 423.048596][ T3714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.073600][ T3714] usb 5-1: Product: syz [ 423.079445][ T3714] usb 5-1: Manufacturer: syz [ 423.084235][ T3714] usb 5-1: SerialNumber: syz [ 423.109465][ T3714] usb 5-1: config 0 descriptor?? [ 423.156561][ T7230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 423.219169][ T3714] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 423.412933][ T7230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.313561][ T3702] usb 5-1: Failed to submit usb control message: -110 [ 424.329270][ T3702] usb 5-1: unable to send the bmi data to the device: -110 [ 425.031450][ T3702] usb 5-1: unable to get target info from device [ 425.056559][ T3702] usb 5-1: could not get target info (-110) [ 425.563714][ T3702] usb 5-1: could not probe fw (-110) [ 427.185909][ T4362] Bluetooth: hci4: command 0x0406 tx timeout [ 427.208801][ T3615] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 427.262256][ T7230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.375780][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.400341][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.473509][ T7230] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.571404][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.602655][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.672311][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.679491][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.873617][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.892130][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.914669][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.944175][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.951251][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.964848][ T7332] loop3: detected capacity change from 0 to 2048 [ 427.998763][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 428.050365][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.064703][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.086367][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.117745][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.129702][ T7332] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 428.133555][ T3615] usb 2-1: Using ep0 maxpacket: 8 [ 428.148515][ T3626] device hsr_slave_0 left promiscuous mode [ 428.164540][ T3626] device hsr_slave_1 left promiscuous mode [ 428.181804][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.190936][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.214548][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.222083][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.230488][ T3626] device bridge_slave_1 left promiscuous mode [ 428.237208][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.246515][ T3626] device bridge_slave_0 left promiscuous mode [ 428.252813][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.267838][ T3626] device veth1_macvtap left promiscuous mode [ 428.274475][ T3626] device veth0_macvtap left promiscuous mode [ 428.280577][ T3626] device veth1_vlan left promiscuous mode [ 428.286800][ T3626] device veth0_vlan left promiscuous mode [ 428.382894][ T13] usb 5-1: USB disconnect, device number 6 [ 428.453700][ T3615] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 428.462779][ T3615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.520443][ T3615] usb 2-1: Product: syz [ 428.552901][ T3615] usb 2-1: Manufacturer: syz [ 428.575497][ T3615] usb 2-1: SerialNumber: syz [ 428.629905][ T3615] usb 2-1: config 0 descriptor?? [ 430.063849][ T3615] usb 2-1: can't set config #0, error -71 [ 430.097368][ T3615] usb 2-1: USB disconnect, device number 8 [ 430.598082][ T3626] team0 (unregistering): Port device team_slave_1 removed [ 430.670859][ T3626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.702296][ T3626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.870109][ T3626] bond0 (unregistering): Released all slaves [ 430.952415][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 430.968167][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.005072][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.014655][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.056456][ T7365] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 431.088582][ T7365] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 431.091012][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.153959][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.300193][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 432.756692][ T7374] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 433.817173][ T7380] loop4: detected capacity change from 0 to 256 [ 433.852906][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.861928][ T4102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.876724][ T7230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.899499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 433.909042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.931419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 433.940455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.980649][ T7230] device veth0_vlan entered promiscuous mode [ 434.016422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 434.030415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.151120][ T7230] device veth1_vlan entered promiscuous mode [ 434.688958][ T7380] FAT-fs (loop4): Directory bread(block 64) failed [ 434.731991][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 434.763139][ T7380] FAT-fs (loop4): Directory bread(block 65) failed [ 434.793614][ T7380] FAT-fs (loop4): Directory bread(block 66) failed [ 434.801096][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 434.839465][ T7380] FAT-fs (loop4): Directory bread(block 67) failed [ 434.840909][ T7385] netlink: 64 bytes leftover after parsing attributes in process `syz.3.765'. [ 434.852664][ T7380] FAT-fs (loop4): Directory bread(block 68) failed [ 434.875194][ T7380] FAT-fs (loop4): Directory bread(block 69) failed [ 434.879200][ T7230] device veth0_macvtap entered promiscuous mode [ 434.889854][ T7380] FAT-fs (loop4): Directory bread(block 70) failed [ 434.897431][ T7380] FAT-fs (loop4): Directory bread(block 71) failed [ 434.904487][ T7380] FAT-fs (loop4): Directory bread(block 72) failed [ 434.911118][ T7380] FAT-fs (loop4): Directory bread(block 73) failed [ 435.000742][ T7390] nullb0: AHDI p1 [ 435.194291][ T3842] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 435.236538][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 435.483758][ T3842] usb 4-1: Using ep0 maxpacket: 32 [ 435.616778][ T3842] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 435.640505][ T3842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.745084][ T3842] usb 4-1: config 0 descriptor?? [ 435.824930][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 435.844602][ T3842] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 435.889992][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 436.732562][ T7395] udc-core: couldn't find an available UDC or it's busy [ 436.770339][ T7395] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 436.804294][ T26] audit: type=1804 audit(1728973277.234:109): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.763" name="/newroot/63/bus/file0" dev="loop4" ino=1048652 res=1 errno=0 [ 438.749722][ T3842] gspca_sunplus: reg_w_riv err -110 [ 438.755260][ T3842] sunplus: probe of 4-1:0.0 failed with error -110 [ 438.881212][ T5593] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 438.891508][ T5593] FAT-fs (loop4): Filesystem has been set read-only [ 439.014840][ T13] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 439.036752][ T7230] device veth1_macvtap entered promiscuous mode [ 439.054638][ T3618] usb 4-1: USB disconnect, device number 11 [ 439.869123][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.875493][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.935606][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.975740][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.013536][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.026607][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.036848][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.046223][ T7412] loop3: detected capacity change from 0 to 512 [ 440.062112][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.080459][ T7414] xt_CONNSECMARK: invalid mode: 0 [ 440.100980][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.184758][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 440.355994][ T7412] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 440.429829][ T7412] System zones: 0-2, 18-18, 34-34 [ 440.585092][ T7412] EXT4-fs (loop3): 1 orphan inode deleted [ 440.728061][ T7412] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,debug,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 440.953750][ T7412] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038 (0x7fffffff) [ 441.044394][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 441.053255][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 441.196740][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.231063][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.270060][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.280794][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.291893][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.302806][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.312993][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.323875][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.358284][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.234474][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 442.259261][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 442.330151][ T7230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.358073][ T7230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.483215][ T7230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.512166][ T7230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.736800][ T7435] nullb0: AHDI p1 [ 443.466568][ T3760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.501324][ T3760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.552077][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 443.575452][ T3760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.583968][ T3760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.632700][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 443.755684][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 446.598275][ T3840] Bluetooth: hci0: command 0x0409 tx timeout [ 447.686723][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 449.154534][ T3840] Bluetooth: hci0: command 0x041b tx timeout [ 451.937152][ T7486] loop2: detected capacity change from 0 to 256 [ 451.942479][ T7308] Bluetooth: hci0: command 0x040f tx timeout [ 452.215120][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.280166][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.315698][ T7432] device bridge_slave_0 entered promiscuous mode [ 452.435717][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.443653][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.648008][ T7503] tipc: Can't bind to reserved service type 0 [ 453.114033][ T7432] device bridge_slave_1 entered promiscuous mode [ 454.701733][ T7308] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 454.717683][ T4361] Bluetooth: hci0: command 0x0419 tx timeout [ 454.863153][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.881970][ T7520] loop2: detected capacity change from 0 to 128 [ 455.217368][ T7308] usb 2-1: Using ep0 maxpacket: 32 [ 455.282993][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.516454][ T7308] usb 2-1: New USB device found, idVendor=13d3, idProduct=3311, bcdDevice=ea.d7 [ 455.540516][ T7308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.555811][ T7308] usb 2-1: Product: syz [ 455.560119][ T7308] usb 2-1: Manufacturer: syz [ 455.575181][ T7308] usb 2-1: SerialNumber: syz [ 455.582507][ T7308] usb 2-1: config 0 descriptor?? [ 455.643243][ T7432] team0: Port device team_slave_0 added [ 455.656382][ T7308] r8712u: register rtl8712_netdev_ops to netdev_ops [ 455.663020][ T7308] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 455.703125][ T7432] team0: Port device team_slave_1 added [ 455.825878][ T7527] loop3: detected capacity change from 0 to 2048 [ 455.963605][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.976533][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.272944][ T7527] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 456.284504][ T7308] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 456.315200][ T7308] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 456.367801][ T7527] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 456.412117][ T7308] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 456.446422][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.787454][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.826436][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.852460][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.922672][ T3612] usb 2-1: USB disconnect, device number 9 [ 457.061432][ T7432] device hsr_slave_0 entered promiscuous mode [ 457.094256][ T7432] device hsr_slave_1 entered promiscuous mode [ 457.164606][ T7432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.587812][ T7432] Cannot create hsr debugfs directory [ 459.850370][ T3704] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.089717][ T7562] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 460.111433][ T7562] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 460.518600][ T3704] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.536165][ T3704] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.596807][ T7577] loop3: detected capacity change from 0 to 512 [ 461.625647][ T7581] siw: device registration error -23 [ 462.000012][ T7577] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #15: comm syz.3.808: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 462.057473][ T7589] loop2: detected capacity change from 0 to 512 [ 462.113996][ T7577] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.808: couldn't read orphan inode 15 (err -117) [ 462.157690][ T7577] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x000000000000f0f7,sb=0x0000000000000002,,errors=continue. Quota mode: none. [ 462.191945][ T7589] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 462.215943][ T3704] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.231293][ T7577] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038 (0x7fffffff) [ 463.134652][ T7598] netlink: 52 bytes leftover after parsing attributes in process `syz.0.811'. [ 464.273897][ T7599] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.808: Directory hole found for htree leaf block 0 [ 464.543223][ T7589] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 464.673502][ T7589] EXT4-fs (loop2): 1 truncate cleaned up [ 464.679289][ T7589] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 465.845110][ T7625] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 465.873673][ T7625] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 465.946057][ T7625] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 466.005148][ T7625] netlink: 'syz.3.813': attribute type 2 has an invalid length. [ 466.144123][ T7625] netlink: 76 bytes leftover after parsing attributes in process `syz.3.813'. [ 466.545031][ T7622] netlink: 'syz.3.813': attribute type 21 has an invalid length. [ 466.561297][ T7622] netlink: 128 bytes leftover after parsing attributes in process `syz.3.813'. [ 466.574329][ T7622] netlink: 'syz.3.813': attribute type 5 has an invalid length. [ 466.582909][ T7622] netlink: 3 bytes leftover after parsing attributes in process `syz.3.813'. [ 467.189833][ T7644] loop2: detected capacity change from 0 to 1024 [ 467.219247][ T7647] loop3: detected capacity change from 0 to 256 [ 467.286643][ T7644] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 467.326374][ T7647] FAT-fs (loop3): Directory bread(block 64) failed [ 467.350886][ T7647] FAT-fs (loop3): Directory bread(block 65) failed [ 467.366684][ T7647] FAT-fs (loop3): Directory bread(block 66) failed [ 467.382541][ T7647] FAT-fs (loop3): Directory bread(block 67) failed [ 467.428335][ T7651] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 467.454624][ T7647] FAT-fs (loop3): Directory bread(block 68) failed [ 467.471003][ T7647] FAT-fs (loop3): Directory bread(block 69) failed [ 467.478310][ T7647] FAT-fs (loop3): Directory bread(block 70) failed [ 467.493630][ T7647] FAT-fs (loop3): Directory bread(block 71) failed [ 467.577975][ T7651] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 467.735999][ T7647] FAT-fs (loop3): Directory bread(block 72) failed [ 467.817578][ T7647] FAT-fs (loop3): Directory bread(block 73) failed [ 467.918313][ T7432] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 467.987474][ T7432] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 468.060184][ T7432] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 468.073161][ T7432] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 468.570322][ T26] audit: type=1804 audit(1728973309.014:110): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.818" name="/newroot/49/bus/file0" dev="loop3" ino=1048678 res=1 errno=0 [ 470.349495][ T6197] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 470.357550][ T6197] FAT-fs (loop3): Filesystem has been set read-only [ 474.147198][ T7700] loop2: detected capacity change from 0 to 1024 [ 474.406234][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.421050][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 474.452095][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 474.600007][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.655772][ T7700] loop2: detected capacity change from 0 to 128 [ 475.360184][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.366271][ T7700] nbd2: detected capacity change from 0 to 22 [ 475.374298][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.396032][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.403203][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.484152][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.555914][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.595828][ T7717] block nbd2: shutting down sockets [ 475.614830][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.137701][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.144851][ T3702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.224109][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.353339][ C1] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.364501][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.372621][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.386887][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.396713][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.407970][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.415993][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.426920][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.435172][ T1203] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.446065][ T1203] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.455196][ T1203] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.466772][ T1203] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.479726][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.490762][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.499720][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.510645][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.519330][ T4162] ldm_validate_partition_table(): Disk read failed. [ 476.664426][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.678341][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.689435][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 476.699200][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.093849][ T3716] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 477.297072][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 477.873783][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 477.883222][ T4162] Dev nbd2: unable to read RDB block 0 [ 477.888886][ T3612] Bluetooth: hci1: command 0x0409 tx timeout [ 477.896431][ T3612] Bluetooth: hci3: command 0x0406 tx timeout [ 477.905788][ T4162] nbd2: unable to read partition table [ 477.933037][ T4162] nbd2: partition table beyond EOD, truncated [ 478.885924][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 478.897649][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 478.907024][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 478.943682][ T3716] usb 2-1: Using ep0 maxpacket: 16 [ 478.988495][ T4162] ldm_validate_partition_table(): Disk read failed. [ 479.076569][ T4162] Dev nbd2: unable to read RDB block 0 [ 479.085232][ T3716] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.099422][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.152466][ T4162] nbd2: unable to read partition table [ 479.195970][ T4162] nbd2: partition table beyond EOD, truncated [ 479.305040][ T3716] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 479.330892][ T3716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.342391][ T7432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.372472][ T3716] usb 2-1: Product: syz [ 479.383655][ T7432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.396868][ T3716] usb 2-1: Manufacturer: syz [ 479.407509][ T3716] usb 2-1: SerialNumber: syz [ 479.430000][ T3716] usb 2-1: config 0 descriptor?? [ 479.599825][ T3716] usb 2-1: can't set config #0, error -71 [ 479.642741][ T3716] usb 2-1: USB disconnect, device number 10 [ 479.693561][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 479.702132][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.727867][ T7731] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 479.735225][ T7731] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 479.894965][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.896032][ T7731] vhci_hcd vhci_hcd.0: Device attached [ 480.324840][ T7454] Bluetooth: hci1: command 0x041b tx timeout [ 480.345617][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.360525][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.807284][ T7732] vhci_hcd: connection closed [ 480.812684][ T3626] vhci_hcd: stop threads [ 480.840397][ T3626] vhci_hcd: release socket [ 480.866631][ T3626] vhci_hcd: disconnect device [ 480.978673][ T3840] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 480.987034][ T3840] usb 11-1: enqueue for inactive port 0 [ 481.123614][ T3840] vhci_hcd: vhci_device speed not set [ 481.881710][ T7743] loop9: detected capacity change from 0 to 7 [ 481.923689][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.931253][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.954254][ T7743] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 482.111604][ T7743] loop9: partition table partially beyond EOD, truncated [ 482.127023][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.133705][ T7743] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 482.813559][ T7454] Bluetooth: hci1: command 0x040f tx timeout [ 483.131606][ T7714] chnl_net:caif_netlink_parms(): no params data found [ 483.258673][ T3704] device hsr_slave_0 left promiscuous mode [ 483.278558][ T3704] device hsr_slave_1 left promiscuous mode [ 483.299630][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.546099][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.555517][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.563808][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.574339][ T3704] device bridge_slave_1 left promiscuous mode [ 483.581758][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.590814][ T3704] device bridge_slave_0 left promiscuous mode [ 485.295111][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.344544][ T3704] device veth1_macvtap left promiscuous mode [ 485.360994][ T3704] device veth0_macvtap left promiscuous mode [ 485.379630][ T3704] device veth1_vlan left promiscuous mode [ 485.390693][ T3704] device veth0_vlan left promiscuous mode [ 485.587802][ T3645] Bluetooth: hci1: command 0x0419 tx timeout [ 485.685100][ T7780] nbd0: detected capacity change from 0 to 22 [ 485.710707][ T7781] block nbd0: shutting down sockets [ 485.738542][ C0] print_req_error: 25 callbacks suppressed [ 485.738560][ C0] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.755288][ C0] buffer_io_error: 25 callbacks suppressed [ 485.755305][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 485.772641][ T1203] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.783660][ T1203] Buffer I/O error on dev nbd0, logical block 0, async page read [ 485.791605][ T1203] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.802463][ T1203] Buffer I/O error on dev nbd0, logical block 0, async page read [ 485.811074][ T1203] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.821938][ T1203] Buffer I/O error on dev nbd0, logical block 0, async page read [ 485.830358][ T1203] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.841228][ T1203] Buffer I/O error on dev nbd0, logical block 0, async page read [ 485.849642][ T1203] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.860517][ T1203] Buffer I/O error on dev nbd0, logical block 0, async page read [ 485.869747][ T1203] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.882330][ C1] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.893218][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 485.901437][ T1203] ------------[ cut here ]------------ [ 485.906979][ T1203] refcount_t: underflow; use-after-free. [ 485.913139][ T1203] WARNING: CPU: 0 PID: 1203 at lib/refcount.c:28 refcount_warn_saturate+0x14e/0x1a0 [ 485.922599][ T1203] Modules linked in: [ 485.926572][ T1203] CPU: 0 PID: 1203 Comm: kworker/0:1H Not tainted 5.15.167-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 485.934949][ T1203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 485.945086][ T1203] Workqueue: kblockd blk_mq_run_work_fn [ 485.950677][ T1203] RIP: 0010:refcount_warn_saturate+0x14e/0x1a0 [ 486.827573][ T1203] Code: 09 01 48 c7 c7 a0 c7 d8 8a e8 ee 9e 42 fd 0f 0b eb 8d e8 05 f5 76 fd c6 05 8e 63 cc 09 01 48 c7 c7 00 c8 d8 8a e8 d2 9e 42 fd <0f> 0b e9 6e ff ff ff e8 e6 f4 76 fd c6 05 70 63 cc 09 01 48 c7 c7 [ 486.847344][ T1203] RSP: 0018:ffffc90004b577a8 EFLAGS: 00010246 [ 486.853487][ T1203] RAX: a86eb5d3886efc00 RBX: 0000000000000003 RCX: ffff8880227d3b80 [ 486.861481][ T1203] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 486.869529][ T1203] RBP: 0000000000000003 R08: ffffffff81668a3c R09: fffff5200096ae35 [ 486.877563][ T1203] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802114e000 [ 486.885622][ T1203] R13: dffffc0000000000 R14: ffffc90004b57a40 R15: ffff888021230c00 [ 486.893693][ T1203] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 486.902647][ T1203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.909319][ T1203] CR2: 0000001b2f315ff8 CR3: 000000000c68e000 CR4: 00000000003506f0 [ 486.917380][ T1203] Call Trace: [ 486.920678][ T1203] [ 486.923675][ T1203] ? __warn+0x15b/0x300 [ 486.927862][ T1203] ? refcount_warn_saturate+0x14e/0x1a0 [ 486.933472][ T1203] ? report_bug+0x1b7/0x2e0 [ 486.938044][ T1203] ? handle_bug+0x3d/0x70 [ 486.942395][ T1203] ? exc_invalid_op+0x16/0x40 [ 486.947149][ T1203] ? asm_exc_invalid_op+0x16/0x20 [ 486.952203][ T1203] ? __wake_up_klogd+0xcc/0x100 [ 486.957149][ T1203] ? refcount_warn_saturate+0x14e/0x1a0 [ 486.962745][ T1203] ? refcount_warn_saturate+0x14e/0x1a0 [ 486.968394][ T1203] blk_mq_dispatch_rq_list+0xc47/0x1f30 [ 486.974020][ T1203] ? _find_next_bit+0xf6/0x1f0 [ 486.978837][ T1203] ? blk_mq_get_driver_tag+0x8b0/0x8b0 [ 486.984403][ T1203] blk_mq_do_dispatch_sched+0x755/0xd50 [ 486.989993][ T1203] ? blk_mq_exit_sched+0x5e0/0x5e0 [ 486.995184][ T1203] ? read_lock_is_recursive+0x10/0x10 [ 487.000588][ T1203] __blk_mq_sched_dispatch_requests+0x39b/0x490 [ 487.006929][ T1203] ? __might_sleep+0xc0/0xc0 [ 487.011544][ T1203] ? blk_mq_sched_dispatch_requests+0x160/0x160 [ 487.017916][ T1203] blk_mq_sched_dispatch_requests+0xec/0x160 [ 487.024459][ T1203] __blk_mq_run_hw_queue+0x11a/0x1b0 [ 487.029775][ T1203] ? __blk_mq_complete_request_remote+0x10/0x10 [ 487.036088][ T1203] ? do_raw_spin_unlock+0x137/0x8b0 [ 487.041318][ T1203] process_one_work+0x8a1/0x10c0 [ 487.046349][ T1203] ? worker_detach_from_pool+0x260/0x260 [ 487.052010][ T1203] ? _raw_spin_lock_irqsave+0x120/0x120 [ 487.057675][ T1203] ? kthread_data+0x4e/0xc0 [ 487.062214][ T1203] ? wq_worker_running+0x97/0x170 [ 487.063659][ T3704] team0 (unregistering): Port device team_slave_1 removed [ 487.067319][ T1203] worker_thread+0xaca/0x1280 [ 487.079390][ T1203] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 487.085388][ T1203] kthread+0x3f6/0x4f0 [ 487.089482][ T1203] ? rcu_lock_release+0x20/0x20 [ 487.094416][ T1203] ? kthread_blkcg+0xd0/0xd0 [ 487.099030][ T1203] ret_from_fork+0x1f/0x30 [ 487.103541][ T1203] [ 487.106590][ T1203] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 487.113879][ T1203] CPU: 0 PID: 1203 Comm: kworker/0:1H Not tainted 5.15.167-syzkaller #0 [ 487.122218][ T1203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 487.132283][ T1203] Workqueue: kblockd blk_mq_run_work_fn [ 487.137851][ T1203] Call Trace: [ 487.141134][ T1203] [ 487.144068][ T1203] dump_stack_lvl+0x1e3/0x2d0 [ 487.148763][ T1203] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 487.154391][ T1203] ? panic+0x860/0x860 [ 487.158457][ T1203] ? refcount_warn_saturate+0xd0/0x1a0 [ 487.163914][ T1203] ? refcount_warn_saturate+0xd0/0x1a0 [ 487.169388][ T1203] panic+0x318/0x860 [ 487.173281][ T1203] ? __warn+0x16a/0x300 [ 487.177434][ T1203] ? fb_is_primary_device+0xd0/0xd0 [ 487.182633][ T1203] ? ret_from_fork+0x1f/0x30 [ 487.187222][ T1203] ? refcount_warn_saturate+0x14e/0x1a0 [ 487.192762][ T1203] __warn+0x2b2/0x300 [ 487.196766][ T1203] ? refcount_warn_saturate+0x14e/0x1a0 [ 487.202313][ T1203] report_bug+0x1b7/0x2e0 [ 487.206641][ T1203] handle_bug+0x3d/0x70 [ 487.210796][ T1203] exc_invalid_op+0x16/0x40 [ 487.215311][ T1203] asm_exc_invalid_op+0x16/0x20 [ 487.220173][ T1203] RIP: 0010:refcount_warn_saturate+0x14e/0x1a0 [ 487.226318][ T1203] Code: 09 01 48 c7 c7 a0 c7 d8 8a e8 ee 9e 42 fd 0f 0b eb 8d e8 05 f5 76 fd c6 05 8e 63 cc 09 01 48 c7 c7 00 c8 d8 8a e8 d2 9e 42 fd <0f> 0b e9 6e ff ff ff e8 e6 f4 76 fd c6 05 70 63 cc 09 01 48 c7 c7 [ 487.245914][ T1203] RSP: 0018:ffffc90004b577a8 EFLAGS: 00010246 [ 487.251982][ T1203] RAX: a86eb5d3886efc00 RBX: 0000000000000003 RCX: ffff8880227d3b80 [ 487.259966][ T1203] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 487.267932][ T1203] RBP: 0000000000000003 R08: ffffffff81668a3c R09: fffff5200096ae35 [ 487.275899][ T1203] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802114e000 [ 487.283863][ T1203] R13: dffffc0000000000 R14: ffffc90004b57a40 R15: ffff888021230c00 [ 487.291854][ T1203] ? __wake_up_klogd+0xcc/0x100 [ 487.296790][ T1203] ? refcount_warn_saturate+0x14e/0x1a0 [ 487.302329][ T1203] blk_mq_dispatch_rq_list+0xc47/0x1f30 [ 487.307873][ T1203] ? _find_next_bit+0xf6/0x1f0 [ 487.312666][ T1203] ? blk_mq_get_driver_tag+0x8b0/0x8b0 [ 487.318152][ T1203] blk_mq_do_dispatch_sched+0x755/0xd50 [ 487.323702][ T1203] ? blk_mq_exit_sched+0x5e0/0x5e0 [ 487.328821][ T1203] ? read_lock_is_recursive+0x10/0x10 [ 487.334272][ T1203] __blk_mq_sched_dispatch_requests+0x39b/0x490 [ 487.340510][ T1203] ? __might_sleep+0xc0/0xc0 [ 487.345110][ T1203] ? blk_mq_sched_dispatch_requests+0x160/0x160 [ 487.351558][ T1203] blk_mq_sched_dispatch_requests+0xec/0x160 [ 487.357550][ T1203] __blk_mq_run_hw_queue+0x11a/0x1b0 [ 487.362825][ T1203] ? __blk_mq_complete_request_remote+0x10/0x10 [ 487.369062][ T1203] ? do_raw_spin_unlock+0x137/0x8b0 [ 487.374284][ T1203] process_one_work+0x8a1/0x10c0 [ 487.379229][ T1203] ? worker_detach_from_pool+0x260/0x260 [ 487.384860][ T1203] ? _raw_spin_lock_irqsave+0x120/0x120 [ 487.390399][ T1203] ? kthread_data+0x4e/0xc0 [ 487.394892][ T1203] ? wq_worker_running+0x97/0x170 [ 487.399903][ T1203] worker_thread+0xaca/0x1280 [ 487.404584][ T1203] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 487.410482][ T1203] kthread+0x3f6/0x4f0 [ 487.414560][ T1203] ? rcu_lock_release+0x20/0x20 [ 487.419429][ T1203] ? kthread_blkcg+0xd0/0xd0 [ 487.424014][ T1203] ret_from_fork+0x1f/0x30 [ 487.428428][ T1203] [ 487.431880][ T1203] Kernel Offset: disabled [ 487.436620][ T1203] Rebooting in 86400 seconds..