last executing test programs: 21m58.559888938s ago: executing program 32 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r5, 0x140}, &(0x7f0000000100)=0x8) 21m48.876505578s ago: executing program 33 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 21m24.998258381s ago: executing program 34 (id=143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="2dda4b1103590740ebb3851dde3206de998760d92862", 0x16, 0x840, 0x0, 0x0) 20m56.06738881s ago: executing program 35 (id=187): sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xb0b90b5460a932b, 0x0) 20m48.793225953s ago: executing program 36 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000d80)=0x6, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000022c0), r0) syz_genetlink_get_family_id$batadv(&(0x7f00000024c0), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4) 20m7.030878015s ago: executing program 37 (id=278): open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 19m34.61487635s ago: executing program 38 (id=307): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000300)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r3, 0x400000) finit_module(r3, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x1) bind$unix(r4, 0x0, 0x0) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 18m42.652223066s ago: executing program 39 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x3, 0x6, 0x9, 0x800}}]}, {}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 18m38.933153272s ago: executing program 40 (id=421): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, r5, 0x0, 0xb, &(0x7f0000000180)='nodecompose'}, 0x30) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xfff1, 0x4}, {0x460b31a1ce8468fb, 0xe38d31919c970618}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8884) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) 8m13.260786133s ago: executing program 41 (id=3293): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) 7m28.520777883s ago: executing program 42 (id=3496): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x149400, 0xa4) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") socket$netlink(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) setresuid(0xee01, 0xffffffffffffffff, 0xee00) pwritev2(r5, 0x0, 0x0, 0x5405, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() accept4(r4, 0x0, 0x0, 0x80800) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r9, 0x20008) read$char_usb(r3, &(0x7f00000022c0)=""/171, 0xab) 7m25.753581744s ago: executing program 43 (id=3502): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) 7m23.960560787s ago: executing program 44 (id=3508): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESDEC], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x240080c1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 6m33.038148362s ago: executing program 45 (id=3662): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0) 6m29.900301076s ago: executing program 46 (id=3668): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40004) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 6m16.986269591s ago: executing program 47 (id=3701): r0 = gettid() syz_open_procfs(r0, &(0x7f0000000080)='gid_map\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 6m9.889097703s ago: executing program 48 (id=3723): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x8000, 0x400}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x7}]}) 6m4.454411453s ago: executing program 49 (id=3735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x220a, 0x0) 5m41.638940971s ago: executing program 7 (id=3801): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) write$cgroup_devices(r4, 0x0, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) r7 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000001c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x62b754ed69bb2e2f}, 0x10) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$EXT4_IOC_SETFSUUID(r8, 0x4008662c, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x280880f, &(0x7f0000000040), 0x3a, 0x51b, &(0x7f0000000b80)="$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") 5m40.280233821s ago: executing program 7 (id=3803): socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0xfff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x101) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) r4 = eventfd2(0x9, 0x80801) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000200)={0x0, r4}) socket(0x2, 0x3, 0xb) 5m39.794791985s ago: executing program 7 (id=3804): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000000)="b4845891aba62468", 0x0}, 0x20) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c40)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x4000000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x3) 5m39.299789639s ago: executing program 7 (id=3805): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000340)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@fat=@quiet}, {@rodir}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) 5m38.784305502s ago: executing program 50 (id=3806): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00', @ANYBLOB="00db00000040000020001280"], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m38.774142232s ago: executing program 7 (id=3809): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m34.287430665s ago: executing program 7 (id=3817): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x3ff) 5m33.7319728s ago: executing program 51 (id=3817): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x3ff) 2m40.757328894s ago: executing program 0 (id=4656): mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 2m40.379209517s ago: executing program 0 (id=4658): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', 0x0) 2m39.969220791s ago: executing program 0 (id=4662): bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001007f00000192000000000000000c001980080002"], 0x44}}, 0x0) 2m39.676083972s ago: executing program 0 (id=4664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000ff0f000005406d7c5d3600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x210}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000009d1a69b69dc5529d8c41abf6d190174e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff0d000300686173683a6e65740000000005000400"/92], 0x5c}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, 0x0, 0x10034) 2m38.544842231s ago: executing program 0 (id=4667): syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000003c0)={'dvmrp1\x00', {0x2, 0x4e21, @loopback}}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001740)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x2eda) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r5, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xd212}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x25, 0x8, 0x3, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ptrace$pokeuser(0x6, r2, 0x358, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1810716, &(0x7f0000000300)={[{@nodiscard}, {@block_validity}, {@usrquota}, {@prjquota}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@jqfmt_vfsold}, {@prjquota}, {@i_version}]}, 0xff, 0x467, &(0x7f0000000780)="$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") 2m37.748095317s ago: executing program 0 (id=4669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) 2m28.925635992s ago: executing program 9 (id=4699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000090095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/214, 0xd6}], 0x1, 0x7ff, 0xa) 2m27.916336539s ago: executing program 9 (id=4702): socket$unix(0x1, 0x2, 0x0) eventfd(0x6) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0) 2m27.549102642s ago: executing program 9 (id=4705): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800400, &(0x7f0000003240)=ANY=[], 0x2, 0x33c, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x134) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x99c5, 0x80200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r0) 2m26.747710618s ago: executing program 9 (id=4708): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0xc8) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x985640, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0xd, 0x1, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x3, 0xb}}) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x8001, 0x12) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xc000}}}, 0x78) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75b, &(0x7f0000001b40)="$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") chdir(&(0x7f0000000200)='./file0\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) 2m24.027416318s ago: executing program 9 (id=4718): r0 = io_uring_setup(0x868, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x14, &(0x7f0000000140)=[0xfeffffff], 0x2) 2m22.32953437s ago: executing program 52 (id=4669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) 2m22.011690913s ago: executing program 9 (id=4724): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@usrquota}, {@oldalloc}]}, 0xd, 0x5e9, &(0x7f0000001340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000cc0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 2m21.111940779s ago: executing program 53 (id=4724): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@usrquota}, {@oldalloc}]}, 0xd, 0x5e9, &(0x7f0000001340)="$eJzs3c1vVFUbAPDnTj9oKe/bQoyKC2liDCRKSwsYYkyErSENfsSNGystiBRoaI0WTSgJbkyMG2NMXLkQ/wslsmWlKxduXBkSooaliWPu9N7Sae/0u72V+/slQ889Zy7nTKfPnDNnzrkTQGX1p//UIvZHxGQS0ZvMzpe1R1bYP3e/B399fDa9JVGvv/5HEkmWl98/yX72ZCd3RcRPPyaxr21pvVMz1y6OTkyMX82OB6cvTQ5OzVw7fOHS6Pnx8+OXh18YPnH82PETQ0dW8zC6F2dcL7jT6ZvvfdD76chb3379dzL03a8jSZyMV7I7Lnwcm6U/+hu/k2RpUc+Jza6sJG3Z38nCpzhpL7FBrEn+/HVExBPRG23x8MnrjU9eLbVxwJaqJxF1oKIS8Q8VlY8D8vf2i98H10oZlQDb4f6puQmApfHfPjc3GF2NuYHdD5JYOK2TRMSqZuZWsCci7t4ZuXnuzsjN2KJ5OKDY7I2IeLIo/pNG/PdFV/Q14r/WFP/puOBM9jPNf22d9S+eKhb/sH3m4r9r2fiPFvH/9oL4f2ed9fc/TL7b3RT/Sz7SAwAAAAAAAFZw+1REPF/0+X9tfv1PFKz/6YmIk5tQf/+i46Wf/9fubUI1QIH7pyJeKlz/W8tX//a1Zan/NdYDdCTnLkyMH4mI/0fEoejYlR4PLVPH4c/2fdWqrD9b/5ff0vrvZmsBs3bca9/VfM7Y6PToRh83EHH/RsRThet/k/n+Pyno/9PXg8lV1rHv2VtnWpWtHP/AVql/E3GwsP9/eNWKZPnrcww2xgOD+ahgqac/+vz7VvWvN/5dYgI2Lu3/dy8f/33Jwuv1TK29jqMz7fVWZesd/3cmbzQuOdOZ5X04Oj19dSiiMzndluY25Q+vvc3wKMrjIY+XNP4PPbP8/F/R+L87ImYX/d/Jn817inOP/9PzW6v2GP9DedL4H1tT/7/2xPCtvh9a1b+6/v9Yo68/lOWY/4M5X+Zh2tmcXxCO7UVF291eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgU1CJiTyS1gfl0rTYwENETEY/F7trElanp585def/yWFrW+P7/Wv5Nv71zx0n+/f99C46HFx0fjYi9EfFFW3fjeODslYmxsh88AAAAAAAAAAAAAAAAAAAA7BA9Lfb/p35vK7t1wJZrL7sBQGkK4v/nMtoBbD/9P1SX+IfqEv9QXeIfqkv8Q3WJf6gu8Q/VJf4BAAAAAOCRsvfA7V+SiJh9sbtxS3VmZR2ltgzYarWyGwCUxiV+oLos/YHq8h4fSFYo72p50kpnLmfy7AZOBgAAAAAAAAAAAIDKObjf/n+oKvv/obrs/4fqyvf/Hyi5HcD2W+N7/PpGdvsCO9dysV24/3/FswAAAAAAAAAAAACAzTQ1c+3i6MTE+NXKJV6OiKacN3dIw7YxUa/Xr6d/BTulPf/xRL4Ufqe0Z1Ei3+u3urPKe00CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa/RsAAP//EH0kSg==") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000cc0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 2m17.211466058s ago: executing program 8 (id=4741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40302, 0x0) close_range(r1, r2, 0x0) 2m16.9908088s ago: executing program 8 (id=4744): r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) pwritev2(r0, 0x0, 0x0, 0x5405, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000047c0)=ANY=[@ANYBLOB="042c11000000"], 0x14) 2m15.854176478s ago: executing program 8 (id=4747): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f0000000c40)='\x00\x00\x1a\x00\x00\x00z\x9b\xb2\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x99\xe5\x8f\xe2\xb6\xdc\n\xf5kWnr\x92G\xbd\b\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xc3_M\xbe\x19\xea#\xffWj\xdc\xd4\xb1\xcc\\\xa8N\x8c)[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xbfF}\xbd\x1c\xff\xff\xff\xff\xff\xff\xb5v*R?\xa0Y$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xe8\xd6\xae1\xc3\x9e\xec`\xf2\xd1BM\x10\xc6\xb4F\n\x10q\xde\v\xec\xa2\x92x\xe9\xf5\x1f\xc9hj\xc0\xe5\xce\xd1v\bez\"\xb1\xd3 \xbc\x9b\xe8\x86u\x0e\v\x17\x85\xb8\xdb2\x92\x00\x00\x00\x00\x00\x00\x00\x00\x80\x9c99\n|\xc1,\xd3\xedI\x11\xf9\xa6wN\xa3\xc9M\xe6\x92\xaf\xb2I\x16}\xae\xe8\xa8\xd7\xad\\\x84\v\fB\xe2d\x90\xdd\x90\x1e\x8c\xe4\xc70\x93\xc7\x8b\xec/a8\x95a\x8c?)\xa2\xf6~\xa7\xc3\xfc\x19\xa8\x98\x1f\x8d\x13\x00e;g]\x1c\x1d\xb0\xa0\x96\xac\x9f3\xe8\xa7R\x92\xe6\n\xdda\x86\xa8\x13\xf1\xccQa\xef\x94u\xed\x0fvq=|\xb0\xc2I/\\}\xf4\xb7\xda\xdds\xf3\xf9\f\xff\xcc\xf3\xa8\x02\xa9/\xfd\xcfn\x00\x84wa[,\xd8\xda\xd4h\xdd\xc4\x80\xb9_\x7f\xa1\x90H\x824Y\x89E', 0x7) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 2m14.661989937s ago: executing program 8 (id=4750): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$eJzs3M1uG0UcAPD/br5I+uEgcUCFQwQIgoCkDgQoQqJw5eMCPICVpKXCbarGSLTkUBAnThwQNw59AQ48QFUhJCRegRdAlSqU5gC3oLV3HTe2Qyw7der8ftLIM+txZv7ezWpmvTsBHFtzEXE+IsYiYikiSvn2NE9xs5Gyeve3Nle2tzZXktjZ+fjvJJJ8W/G3kvz1RF6YTyPSbyOeutne7sb1G59XqtW1a3l5sXb56uLG9RuvXLpcubh2ce1K+Y1z5fLy0pvl1wYW64/PvXhu7L3zZ376s3RneXJyOuvvyfy91jgGZS7mmt/JXsuDbmzIJofdAQAADiTNx/7j9fF/KcbquYZSLG4OtXMAAADAQOy8k78CAAAAIywx9wcAAIARV9wHcH9rc6VIB7pxoHRotyQ8VPfejYjZ3Webt5vxj8djeZ2JQ3y+dS4irj6flLIUh/QcMgBAqzvZ+Odsp/FfGk+21JuKqI+Hpgfc/tyecvv4J7074CYfkI3/3o6I7bbxX1pUmR3LS6fqQ8WJ5MKl6trZiDgdEfMxMZWVy/u08f4/P3/U7b0s/t+SU6eLlLWfve7WSO+OTz34mdVKrdJPzK3ufR1xZrxT/Elz/JtExEwfbYx9deutbu/9f/yHa+dWxAsd9//uyj3J/usTLdaPh8XiqGj37ze/fNit/WHHn+3/mf3jn01a12va6L2N25/98XQ90yGq1vlPL8f/ZPJJPV/My76s1GrXyhGTyQft25d2P1uUi/pZ/PPPdv7/L85/Sb6m1cn8HNCr777/9eX9azTiz1LWfjEXfBiy+Fd72v+9Z16//fun3dpv3f+d48/2f2MNsPl8y0HOfwftYD/fHQAAADwq0vp1jSRdaObTdGGhcb3jiZhJq+sbtZcurH9xZbVx/WM2JtLiSlep5XpoufEzerO8tKf8akQ8HhE/lKbr5YWV9erqsIMHAACAY+JEl/l/5q8RuccfAAAAyH+oBwAAAEab+T8AAACMtH7W9Tu+meybOwLdOPKZZ45GN4aQmYgj0Y0+MsM+MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADza/gsAAP//Bdqy/A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) read$FUSE(r0, &(0x7f0000000c80)={0x2020}, 0x2020) 2m13.695084114s ago: executing program 8 (id=4754): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r1, 0x164, 0x2000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x100, 0x0) getdents64(r2, &(0x7f0000000540)=""/51, 0x33) getdents(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f00000002c0)={[{@test_dummy_encryption, 0x3d}, {@discard}, {@noauto_da_alloc}, {@minixdf}, {@nojournal_checksum}, {@nogrpid}], [{@euid_eq}]}, 0x3, 0x45c, &(0x7f0000000fc0)="$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") syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e07090908"], 0xa) 2m11.244038612s ago: executing program 8 (id=4758): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) sync_file_range(0xffffffffffffffff, 0x80000000, 0xfffffffffffffffd, 0x6) userfaultfd(0x801) 2m10.732446276s ago: executing program 54 (id=4758): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) sync_file_range(0xffffffffffffffff, 0x80000000, 0xfffffffffffffffd, 0x6) userfaultfd(0x801) 1m38.177839526s ago: executing program 1 (id=4865): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) 1m37.863813118s ago: executing program 1 (id=4868): mmap(&(0x7f0000b95000/0x1000)=nil, 0x1000, 0x300000a, 0x6031, 0xffffffffffffffff, 0x41f9000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1m37.532022691s ago: executing program 1 (id=4871): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\xf4\xb5\xb2\xed\xc6;\xc7,4\\xev/bus/us\xae\xd1\x93\xc1\bm\xe9\xf3#\x00:\xbem\x02H;\x90\xa5\x1f\x8d\xc6\xae\xcc\x95a7\xc3\x168%\xc3\xc6\n\x8d\xbc\x81\x1a\x80\x16jY\x9f~\x12\x94]\x1e\x8c\x1d\xe7\xfe\"y\xa6O\xf5\xa2\xb6\xe7\xe3]%)l\x90\xe9\x026\xe4\xabX\xa0+\x86\nB&\xab\xef\xea\xa3\tUc\xc3\xad\x84\xa3vK{\xb2\xa3\xfc\x1f', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0xaf) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000140)) 1m37.159964093s ago: executing program 1 (id=4874): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./bus\x00', 0x10418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x4, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m36.143634261s ago: executing program 1 (id=4879): r0 = socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(r0, &(0x7f0000000280)=@random={'security.', '@\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x840, 0x0) mount$9p_fd(0x0, &(0x7f0000004d40)='./file0/file0\x00', 0x0, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) getpid() r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m35.657242404s ago: executing program 1 (id=4883): socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(0x0, 0xb, 0x2) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet(0x2, 0x2, 0x0) 1m34.86771189s ago: executing program 55 (id=4883): socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(0x0, 0xb, 0x2) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet(0x2, 0x2, 0x0) 31.951492594s ago: executing program 2 (id=5151): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 30.911374922s ago: executing program 2 (id=5154): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) getxattr(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 30.509497085s ago: executing program 2 (id=5158): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x9c583, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 30.228298287s ago: executing program 2 (id=5159): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x3000000, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x5d8, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40488b1}, 0x20040080) bind$inet(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) write$UHID_INPUT(r4, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e04046d0c"], 0x7) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) getdents(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000000000/0x4000)=nil) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) 29.74964544s ago: executing program 2 (id=5161): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) fchdir(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xf8) lseek(r0, 0x3, 0x0) getdents64(r0, 0x0, 0x22) 29.190812164s ago: executing program 2 (id=5162): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={@remote, 0x1, 0x0, 0x30, 0x0, [{@local}, {@multicast1}, {@multicast1}]}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000380)=""/85, 0x55, 0x81ffffffffffffc) 28.761365317s ago: executing program 56 (id=5162): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={@remote, 0x1, 0x0, 0x30, 0x0, [{@local}, {@multicast1}, {@multicast1}]}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000380)=""/85, 0x55, 0x81ffffffffffffc) 19.584744145s ago: executing program 5 (id=5205): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x9c583, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 19.300374688s ago: executing program 5 (id=5206): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3587], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() timer_create(0x9, 0x0, &(0x7f0000000300)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80241, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x2, 0xc47, &(0x7f0000000fc0)="$eJzs3UFsHNd9B+D/Gy3FlYxWTJwoThoXm7ZIZcZyZUkxFatwVzXNNoAsE6GYWwCuSEpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj0zrAsnFhyKnnogWNoKiB7YIkFPAYGbfUkuatBlRlCjp+2zqtzv73sx789YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN9/5dKZ59ODbgUAcD9dGfvKmbPu/wDwWLnq//8BAAAAAAAAAAAAAOCwS1HEk5Fi/sp6mqjed9Qvt/tu3R4fHtm52rFU1TxSlS9/6s+fPXf+iy8MXejm5fbsh9S/1z4Tr41dvdR4ee7m/ML04uL0VGN8tj05NzW95z3st/52g9UJaNx8/dbU9euLjbPPndvy8e2B9/ufODlwceiZ0093y44Pj4yM3SlS7y1fu+uGdOw2w+NoFHE6Ujz73Z+kVkQUsf9zUb+/Y7/dsaoTg1UnxodHqo7MtFuzS+WHo90TUUQ0eio1u+do57GIWt997cPumhHLZfPLBg+W3Rubby20rs1MN0ZbC0vtpfbc7GjqtLbsTyOKuJAiViJirf+Du+uLImqR4tsn1tO1iDjSPQ9fqCYG796O4gD7uAdlOxt9ESvFQzBmh1h/FPFqpPjpO6diMl9nqmvN5yNeLfP7EW+V+VJEKr8Y5yPe2+F7xMOpFkX8ZTn+F9fTVHU96F5XLn+18eXZ63M9ZbvXlV/y/vCBK8UDuj8c25b3xyG/NtWjiFZ1xV9Pd/+bHQAAAAAAAAAAAAAAAADutWNRxKcjxSv/8cfVvOKo5qWfuDj0BwO/0jtn/KmP2E9Z9rmIWC72Nif3aJ4YOJpGU3rAc4kfZ/Uo4k/y/L9vPujGAAAAAAAAAAAAAAAAAAAAPNaK+HGkePHdU2kletcUb8/eaFxtXZvprArbXfu3u2b6xsbGRiN1splzIudyzpWcqznXOlnN+6/qF7l+zomcyzlXcq7mXMsZR3L9nM2cEzmXc67kXM25ljNquX7OZs6JnMs5V3Ku5lzLGYdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEdJEUX8PFJ86+vrKVJENCMmopOr/Q+6dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqT8V8b1I0fjD5ua2WkSk6t+OU+Uv56N5tMyPR3OozJeieSlnq8pa85sPoP3sT18q4keRor/+9uaA5/Hv67zb/BrEW9+48+4ztU4e6X448H7/EydPXBwa+fWndnuddmrA4OX27K3bjfHhkZGxns21fPSP92wbyMct7k3XiYjFN958vTUzM71w9y/Kr8AuH21sbPxZeZT9HuKQvEi1XXv6WL4oh/YQNOMAO1g7FM14YIPLo668/78XKX7n3f/s3vCr+39ts8TmHT5+9qd37v8vbt/RHu//te318v2/vKfvdP9/smfbi/l3I321iPrSzfm+kxH1xTfePN2+2boxfWN69vyZM18aGvrSuTN9RyPq19sz0z2v9n+uAAAAAAAAAAAAAAAAAO6rVMTvRYrWj9ZTIyJuV/O1Bi4OPXP66SNxpJpvtWXe9mtjVy81Xp67Ob8wvbg4PdUYn21Pzk1N7/Vw9Wq61/jwyIF05iMdO+D2H6u/PDf/xkL7xh8t7fj58fqla4tLC63JnT+OY1FENHu3DFYNHh8eqRo9027NVlVHd5xM/8vrS0X8V6SYPN9In8vb8vz/7TP8t8z/X96+owOa//+xnm3lMVMq4meR4rf/6qn4XNXO4/GBc5bL/V2kGLzw2Vwujpblum3oPFegMzOwLPt/keKffr61bHc+5JN3yj6/5xP7kCjH/0Sk+N5ffCd+I2/b+vyHncf/+PYdHdD4f6Jn2/EtzyvYd9fJ4386Urz05Nvxm3nbhz3/o/vsjVO58ObzOQ5o/D/Zs20gH/e37k3XAQAAAAAAAAAAHmp9qYi/jxQ/GKmlF/K2vfz9v6ntOzqgv//1qZ5tU/dmvaKPfLHvkwoAAAAAh0RfKuLHkeLG0tubc6i3zv/umf/5u3fmfw6nbZ9Wf873q9VzA+7ln//1GsjHndh/twEAAAAAAAAAAAAAAAAAAOBQSamIF/J66hPVfP6pXddTX40Ur/zPs7lcOlmW664DP1D9Wr8yN3v60szM3GRrqXVtZroxNt+anC7rfiJSrP/tZ3PdolpfvbvefGeN93otIqq12Bcixcg/dMt21mLvrk3eWQ+8sxZ7WfZjkeK//3Fr2e461p+8U/ZsWfZvIsXX/mXnsifvlD1Xlv1OpPjh1xrdssfLst3no37qTtnnJueKAxgVAAAAAAAAAAAAAAAAAAAAHjd9qYg/jxT/e3Nlcy5/Xv+/r+dt5a1v9Kz3v83tap3/gWr9/91e3836/9VzBZZ3OyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyaUhTxZqSYv7KeVvvL9x31y+3ZW7fHh0d2rnYsVTWPVOXLn/rzZ8+d/+ILQxe6+eH177VPx2tjVy81Xp67Ob8wvbg4PdUYn21Pzk1N73kPu9ev31WLBqsT0Lj5+q2p69cXG2efO7fl49sD7/c/cXLg4tAzp5/ulh0fHhkZ6ylT67urI+8o7bL9aBTx15Hi2e/+JP2gP6KIDz0Xe/IR352DdqzqxGDVifHhkaojM+3W7FL54Wj3RBQRjZ5Kze45ug9jsS/NiOWy+WWDB8vujc23FlrXZqYbo62FpfZSe252NHVaW/anEUVcSBErEbHW/8Hd9UURr0eKb59YT//aH3Gkex6+cGXsK2fO7t6O4gD7uAdlOxt9ESvFQzBmh1h/FPHPkeKn75yKf+uPqEXnJz4f8WqZ3494KzrjncovxvmI93b4HvFwqkUR/1+O/8X19E5/eT3oXlcuf7Xx5dnrcz1lu9eVh/7+cD8d8mtTPYr4YXXFX0//7r9rAAAAAAAAAAAAAAAAgEOkiF+LFC++eypV84M35xS3Z280rrauzXSm9XXn/nXnTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjSK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs545DM3QMAAAAAAAAAAAAAAAAAAB4tRfVPim99fT1t9HfWl56ITq5aD/SR94sAAAD//8or9Fc=") r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_WRITE(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xb4}}, 0xfffffe53) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000005c0), 0x0) 17.638614179s ago: executing program 5 (id=5210): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f0000000300)=@ethtool_coalesce={0xe, 0x7, 0x10001, 0x7, 0xb, 0x7, 0x650, 0x9, 0xc622, 0x2, 0xd4a, 0xc, 0x7fff, 0xab1f, 0x7, 0xffffffff, 0xfffffff7, 0xfffff52b, 0xcc, 0x7, 0x7, 0x3, 0xffff}}) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x2, 0x7}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002020800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1, 0x0, 0x0, @void, @value}, 0x20) 17.51608283s ago: executing program 6 (id=5212): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) clock_settime(0x0, &(0x7f00000001c0)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00007b2000/0x2000)=nil, 0x2000) r2 = syz_clone(0x81000, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() ptrace(0x10, r2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000e58000/0x4000)=nil, 0x4000, 0x300000c, 0x4010, 0xffffffffffffffff, 0x43ec0000) 8.788894865s ago: executing program 3 (id=5225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 8.13181506s ago: executing program 3 (id=5226): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYBLOB="010000006e6963622c73657373696f6e08003030303030303030303030303030303030ff352c00"], 0x2, 0xc47, &(0x7f0000000fc0)="$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") r6 = creat(&(0x7f00000001c0)='./file1\x00', 0x80) write$FUSE_WRITE(r6, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xb4}}, 0xfffffe53) 6.70878191s ago: executing program 3 (id=5227): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20801000}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x114}}, 0x4008001) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010600000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="07005300010000000800050004"], 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111130000000000851000000200000085000000000000f995000000000000009500a50500"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xf, 0x9, 0x10, @rand_addr=' \x01\x00', @local, 0x2e, 0x1, 0x6, 0x2}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x0, 0x0, 'queue1\x00', 0x8}) write$sndseq(r8, &(0x7f0000000000)=[{0x1e, 0x3, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x8}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000940)={0x1, 0x20000006, 0xfffffffb}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup(r10) read(r5, &(0x7f00000008c0)=""/79, 0x4f) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000900"]) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) close_range(r7, 0xffffffffffffffff, 0x400000000000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000600)={'ip_vti0\x00', r6, 0x8, 0x10, 0x81, 0xb, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x67, 0x0, 0xa, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @remote, {[@noop]}}}}}) r12 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x7ca6, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r12, 0xc0505510, &(0x7f0000000080)={0x6, 0x4000000000002f3, 0x2, 0x201, &(0x7f0000000440)}) 6.216178774s ago: executing program 4 (id=5228): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x101000) io_submit(0x0, 0x1, &(0x7f00000002c0)=[0x0]) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x8005) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1818c42, &(0x7f0000000d80)=ANY=[], 0xfe, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==") r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 5.526034969s ago: executing program 4 (id=5229): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="2bb51e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000ec0)={0x2c, &(0x7f0000000cc0)={0x20, 0x12, 0x2, "37e7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000580)={0x14, 0x0, 0x0}, 0x0) 5.42231574s ago: executing program 3 (id=5230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) accept4(r3, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.3761589s ago: executing program 5 (id=5231): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c810) 5.288829371s ago: executing program 6 (id=5232): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x14, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, &(0x7f0000000140)=r1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_generic(r0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xf0, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000100)={0xffffffffffffffff}) unshare(0x22020400) bind$netlink(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.496801434s ago: executing program 3 (id=5233): syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000003c0)={'dvmrp1\x00', {0x2, 0x4e21, @loopback}}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001740)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x2eda) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r5, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r6, 0x1}, 0x20) recvmmsg(r6, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xd212}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x25, 0x8, 0x3, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ptrace$pokeuser(0x6, r2, 0x358, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1810716, &(0x7f0000000300)={[{@nodiscard}, {@block_validity}, {@usrquota}, {@prjquota}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@jqfmt_vfsold}, {@prjquota}, {@i_version}]}, 0xff, 0x467, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG7LL6EVEQVBqmhs/NHSgsrBi0YTD5qY6AGPtS0EWaihNRFCtBqDR0Pi3Xg08S/w5MmoJxOvejckRIkJ6IU1szvTdpfd0h9blnQ/n2S67+28nXnfvnkzb+btBtCzhrI/ScR9EfF7RAzUs40FhuovN69fmvz3+qXJJKrVt//qr5W7cf3SZFG0+NyOPDOcRqSfJ/lOGs1euHhmolKZPp/nR+fOfjA6e+Hic6fPTpyaPjV9bvz48WNHx158Yfz5jsSZxXdj/8czB/a9/u6VNydPXHnv5++y+u49WF+/NI5OGcoC/7ta07zuyU7vrMtuVRfjTMrdrg0rVYqIrLn6av1/IEqx2HgD8dpnXa0csKGyc/aWFm/nr/NVYBNLots1ALqjuOBn97/FcheHH1137eX6DVAW9818qa8pR5qX6dvA/Q9FxIn5/77Olmh6DrHQPv0bWAEAoOf8kI1/nm01/ktj75Jyu/K5ocGIuD8idkfEAxGxJyIejKiVfSgiHl7l/punhm4ff6ZX1xTYCmXjv5fyua3G8V8x+ovBUp7bWYu/Lzl5ujJ9JP+fDEffliw/1mrjxSZe/e3LdvtfOv7Llmz/xVgw38jVctMDuqmJuYlODUqvfRqxv9wq/mRhJiCJiH0RsX91m95VJE4//e2BdoXuHP8yOjDPVP0m4ql6+89HU/yFZPn5ydGtUZk+MlocFbf75dfLb7Xbf8v4b+1cf2ArlLX/9sbjf2FdqfZ34J9k6XztbKz6huTyH1+0vacsr/H470/eqc3pFjX5aGJu7vxYRH/yRkTz++OLny3yRfks/uHDrfv/7vwzWfyPRER2EB+MiEcj4lDedo9FxOMRcXiZ+H965Yn3261b1/EfsW2F5drK4p9qef5bOP4HG9t/9YnSmR+/X3v8Wfsfq6WG83dq5787aF+drXmJxaMZAAAANru09t34JB1ZSKfpyEj9O/x7YntamZmde+bkzIfnpurfoR+MvrR40jWw5HnoWDKfb7GeH8+fFRfrj+bPjb8qbavlRyZnKlNdjh163Y7G/n+o6P+ZP0vdrh2w4fxeC3pXc/9Pu1QP4O5z/Yfepf9D79L/oXe16v+fNOXNBcDm5PoPvUv/h96l/0Pv0v+hJ63nd/0blSgv8+t9iXslEek9UQ2JFonsgr5lnb2722cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvg/AAD//7K/8i4=") 3.355312985s ago: executing program 5 (id=5234): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0xb2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2.018888595s ago: executing program 6 (id=5235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.727462897s ago: executing program 3 (id=5236): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = gettid() syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r3, &(0x7f00000004c0)="a0a387", 0x3, 0x200080d1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 1.620115028s ago: executing program 4 (id=5237): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 1.543201168s ago: executing program 5 (id=5238): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013d"], 0x0) 1.483251969s ago: executing program 4 (id=5239): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x0, 0x101000) io_submit(0x0, 0x1, &(0x7f00000002c0)=[0x0]) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x8005) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.379892689s ago: executing program 6 (id=5240): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20801000}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x114}}, 0x4008001) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010600000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="07005300010000000800050004"], 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111130000000000851000000200000085000000000000f995000000000000009500a50500"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xf, 0x9, 0x10, @rand_addr=' \x01\x00', @local, 0x2e, 0x1, 0x6, 0x2}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x0, 0x0, 'queue1\x00', 0x8}) write$sndseq(r8, &(0x7f0000000000)=[{0x1e, 0x3, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x8}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000940)={0x1, 0x20000006, 0xfffffffb}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup(r10) read(r5, &(0x7f00000008c0)=""/79, 0x4f) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000900"]) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) close_range(r7, 0xffffffffffffffff, 0x400000000000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000600)={'ip_vti0\x00', r6, 0x8, 0x10, 0x81, 0xb, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x67, 0x0, 0xa, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @remote, {[@noop]}}}}}) r12 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x7ca6, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r12, 0xc0505510, &(0x7f0000000080)={0x6, 0x4000000000002f3, 0x2, 0x201, &(0x7f0000000440)}) 727.515344ms ago: executing program 4 (id=5241): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 485.541346ms ago: executing program 4 (id=5242): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 434.308327ms ago: executing program 6 (id=5243): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b", @ANYBLOB="00db000000400000200012"], 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240)="02e19d2dfa8f6e35b50f080d91ef49d3d9d43c03e74949522ff7b13a19c3886aaa71445dad1d7c85287332e046c59debce995da0b96973bd013b2e749981d1e1e556e3f35b9651bc9b6229f2a989695c475f6f2e43d168d4b020eb7bd8ddac0575419d0690ce40fb43", 0x0, 0x69}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) 0s ago: executing program 6 (id=5244): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x14, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, &(0x7f0000000140)=r1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_generic(r0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xf0, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000100)={0xffffffffffffffff}) unshare(0x22020400) bind$netlink(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kernel console output (not intermixed with test programs): 267.677042][T18297] usb 9-1: Using ep0 maxpacket: 8 [ 1267.689589][T18297] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1267.727182][T18297] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1267.761571][T18297] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1267.784189][T18297] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1267.804137][T18297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.823237][T18297] usb 9-1: Product: syz [ 1267.828406][T19726] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1267.836673][T18297] usb 9-1: Manufacturer: syz [ 1267.852025][T18297] usb 9-1: SerialNumber: syz [ 1267.857942][T19726] usb 10-1: device descriptor read/8, error -71 [ 1268.048072][T22767] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4562'. [ 1268.136908][T19726] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1268.232704][T18297] usb 9-1: 0:2 : does not exist [ 1268.300104][T19726] usb 10-1: device descriptor read/8, error -71 [ 1268.501184][T19726] usb usb10-port1: unable to enumerate USB device [ 1268.646562][T22771] loop1: detected capacity change from 0 to 128 [ 1268.885036][T18297] usb 9-1: USB disconnect, device number 17 [ 1270.710804][T22819] loop8: detected capacity change from 0 to 16 [ 1270.752063][T22819] erofs: (device loop8): mounted with root inode @ nid 36. [ 1271.634581][T22831] loop9: detected capacity change from 0 to 256 [ 1271.666931][T16197] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1271.715530][T22834] loop8: detected capacity change from 0 to 128 [ 1271.740189][T22831] exfat: Unknown parameter '²áSÌh_‚&†aÐúÊ^©Ë@RY »ÊécayrÍïFzQ>P߆º*Ù¹àV£µ8‡‰d|ëCüŸpÅIýÑ7°7ò"€T©U®ûT¹ªCH{W¶Ž.H K; ^ ­j¡_—]Ñ7ò5³q•Yçb¯Yþ•ÉF' [ 1271.977373][T16197] usb 2-1: device descriptor read/64, error -71 [ 1272.260603][T16197] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1272.437152][T16197] usb 2-1: device descriptor read/64, error -71 [ 1272.557115][T16197] usb usb2-port1: attempt power cycle [ 1273.110318][ T27] audit: type=1326 audit(2000001061.850:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22860 comm="syz.9.4589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f183b58d169 code=0x0 [ 1273.246911][T16197] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1273.278767][T16197] usb 2-1: device descriptor read/8, error -71 [ 1273.557229][T16197] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1273.640615][T16197] usb 2-1: device descriptor read/8, error -71 [ 1273.898142][T16197] usb usb2-port1: unable to enumerate USB device [ 1274.316958][T16197] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1274.522030][T16197] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.552667][T16197] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1274.591190][T16197] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.645166][T16197] usb 9-1: config 0 descriptor?? [ 1275.099387][T16197] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 1275.106420][T16197] lg-g15 0003:046D:C222.001B: unknown main item tag 0x0 [ 1275.148517][T16197] lg-g15 0003:046D:C222.001B: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0 [ 1275.325472][T16197] usb 9-1: USB disconnect, device number 18 [ 1275.507864][ T27] audit: type=1326 audit(2000001064.320:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22910 comm="syz.9.4604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f183b58d169 code=0x0 [ 1275.870946][T22919] loop1: detected capacity change from 0 to 16 [ 1275.919306][T22919] erofs: (device loop1): mounted with root inode @ nid 36. [ 1277.007009][T16197] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1277.043331][T22939] loop1: detected capacity change from 0 to 128 [ 1277.166895][T16197] usb 10-1: device descriptor read/64, error -71 [ 1277.436932][T16197] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1277.597001][T16197] usb 10-1: device descriptor read/64, error -71 [ 1277.731275][T16197] usb usb10-port1: attempt power cycle [ 1277.773839][T22960] loop8: detected capacity change from 0 to 128 [ 1278.217049][T16197] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1278.291029][T16197] usb 10-1: device descriptor read/8, error -71 [ 1278.401085][ T27] audit: type=1326 audit(2000001067.210:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22963 comm="syz.8.4618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd00178d169 code=0x0 [ 1279.004799][T16197] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1279.053466][T16197] usb 10-1: device descriptor read/8, error -71 [ 1279.197679][T16197] usb usb10-port1: unable to enumerate USB device [ 1279.599282][T22991] loop1: detected capacity change from 0 to 512 [ 1279.616932][T22991] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1279.960633][T22991] EXT4-fs (loop1): 1 truncate cleaned up [ 1280.056422][T22991] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1280.604869][T22998] loop0: detected capacity change from 0 to 512 [ 1280.616259][T22998] EXT4-fs: Ignoring removed i_version option [ 1280.674110][T22998] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1280.692508][T22998] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 1280.700378][T22998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1281.054549][T19429] EXT4-fs (loop0): unmounting filesystem. [ 1281.360406][T19326] EXT4-fs (loop1): unmounting filesystem. [ 1281.708893][T23012] loop1: detected capacity change from 0 to 512 [ 1281.745394][T23012] EXT4-fs: Ignoring removed oldalloc option [ 1281.788846][T23012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1281.857208][T23012] EXT4-fs (loop1): 1 truncate cleaned up [ 1281.886531][T23012] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1282.149187][T19326] EXT4-fs (loop1): unmounting filesystem. [ 1282.405401][T23029] fuse: Bad value for 'fd' [ 1284.776936][T18297] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1284.936910][T18297] usb 1-1: device descriptor read/64, error -71 [ 1285.216912][T18297] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1285.377123][T18297] usb 1-1: device descriptor read/64, error -71 [ 1285.497189][T18297] usb usb1-port1: attempt power cycle [ 1285.597147][ T9684] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1285.804603][ T9684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.834921][ T9684] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1285.877955][ T9684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.927075][T18297] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1285.938629][ T9684] usb 2-1: config 0 descriptor?? [ 1285.985756][T18297] usb 1-1: device descriptor read/8, error -71 [ 1286.574568][T18297] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1286.607789][T18297] usb 1-1: device descriptor read/8, error -71 [ 1286.737311][T18297] usb usb1-port1: unable to enumerate USB device [ 1286.787020][ T9684] lg-g15 0003:046D:C222.001C: unknown main item tag 0x0 [ 1286.805431][ T9684] lg-g15 0003:046D:C222.001C: unknown main item tag 0x0 [ 1286.834427][ T9684] lg-g15 0003:046D:C222.001C: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 1286.849118][T23088] fuse: Bad value for 'fd' [ 1286.979295][T16197] usb 2-1: USB disconnect, device number 24 [ 1287.129416][T23097] loop9: detected capacity change from 0 to 256 [ 1287.157883][T23097] FAT-fs (loop9): Unrecognized mount option "sh" or missing value [ 1287.309516][T23097] loop9: detected capacity change from 0 to 8192 [ 1289.489290][T23131] loop1: detected capacity change from 0 to 1024 [ 1289.593465][T23131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1289.883809][ T27] audit: type=1326 audit(2000001078.690:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23135 comm="syz.2.4657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x0 [ 1291.335629][ T9684] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1291.563172][ T9684] usb 9-1: Using ep0 maxpacket: 8 [ 1291.570835][ T9684] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1291.596955][ T9684] usb 9-1: config 179 has no interface number 0 [ 1291.616857][ T9684] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1291.655644][ T9684] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1291.692868][ T9684] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1291.728488][ T4996] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1291.901297][T23177] loop0: detected capacity change from 0 to 512 [ 1291.912576][T23177] EXT4-fs: Ignoring removed i_version option [ 1292.044181][ T4996] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.135566][T23177] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1292.201705][T23177] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 1292.209519][T23177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1292.341800][ T4996] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1292.396865][ T4996] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1292.447064][ T4996] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.481337][T19429] EXT4-fs (loop0): unmounting filesystem. [ 1292.534995][ T4996] usb 10-1: config 0 descriptor?? [ 1292.587003][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 1293.016505][ T9684] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1293.027114][ T9684] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1293.040676][ T9684] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1293.050434][ T9684] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.073650][T23151] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1293.100238][ T9684] xpad: probe of 9-1:179.65 failed with error -5 [ 1293.416292][ T4302] usb 9-1: USB disconnect, device number 19 [ 1293.993088][T23217] loop1: detected capacity change from 0 to 16 [ 1294.085748][T23217] erofs: (device loop1): mounted with root inode @ nid 36. [ 1294.327722][ T27] audit: type=1326 audit(2000001083.130:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23215 comm="syz.8.4675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd00178d169 code=0x0 [ 1294.564591][ T9684] usb 10-1: USB disconnect, device number 51 [ 1295.091638][T23229] loop9: detected capacity change from 0 to 2048 [ 1295.139155][T23229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1297.000200][ T4996] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1297.116259][T23265] loop9: detected capacity change from 0 to 128 [ 1297.228948][ T4996] usb 2-1: Using ep0 maxpacket: 8 [ 1297.229053][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 1297.236115][ T4996] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1297.257075][ T4996] usb 2-1: config 179 has no interface number 0 [ 1297.306606][ T4996] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1297.456275][ T4996] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1297.533412][ T4996] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1297.592981][ T4996] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1297.613546][ T4996] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1297.641630][ T4996] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1297.660721][ T4996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.686125][T23247] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1297.705512][ T4996] xpad: probe of 2-1:179.65 failed with error -5 [ 1297.837471][T23272] loop9: detected capacity change from 0 to 256 [ 1297.894077][T23272] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1297.930078][T23247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.939888][T23272] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1297.972163][T23272] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1297.977363][T23247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.019574][T23247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.062433][T23247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.655371][T23302] loop9: detected capacity change from 0 to 512 [ 1299.663339][T23302] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1300.124982][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.136510][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.626455][ T9684] usb 2-1: USB disconnect, device number 25 [ 1300.769800][T23309] loop9: detected capacity change from 0 to 128 [ 1301.916705][T23324] loop8: detected capacity change from 0 to 256 [ 1301.944326][ T27] audit: type=1326 audit(2000001090.750:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23314 comm="syz.1.4698" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe146f8d169 code=0x0 [ 1301.994183][T23324] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1302.076715][T23324] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1302.158209][T23324] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1302.503443][T23334] loop1: detected capacity change from 0 to 512 [ 1302.587389][T23334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1302.703617][T23334] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1302.751041][T23344] loop9: detected capacity change from 0 to 128 [ 1302.845644][ T27] audit: type=1800 audit(2000001091.650:109): pid=23344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4705" name="file1" dev="loop9" ino=1048877 res=0 errno=0 [ 1302.901452][T23344] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 1302.946906][T23344] FAT-fs (loop9): Filesystem has been set read-only [ 1302.950328][T23348] loop8: detected capacity change from 0 to 512 [ 1302.970358][ T27] audit: type=1800 audit(2000001091.690:110): pid=23344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4705" name="file1" dev="loop9" ino=1048877 res=0 errno=0 [ 1302.971227][T23344] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 1303.043415][T23348] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1303.084980][T23348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0102] [ 1303.085664][T19326] EXT4-fs (loop1): unmounting filesystem. [ 1303.204738][T23348] System zones: 1-12 [ 1303.238093][T23348] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1303.281170][T23348] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.4706: invalid indirect mapped block 12 (level 1) [ 1303.295906][T23352] loop1: detected capacity change from 0 to 512 [ 1303.319331][T23348] EXT4-fs (loop8): Remounting filesystem read-only [ 1303.325901][T23348] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.4706: invalid indirect mapped block 2 (level 2) [ 1303.407445][T23348] EXT4-fs (loop8): Remounting filesystem read-only [ 1303.422511][T23352] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.4707: bad orphan inode 13 [ 1303.436316][T23352] ext4_test_bit(bit=12, block=4) = 1 [ 1303.441814][T23352] is_bad_inode(inode)=0 [ 1303.446087][T23352] NEXT_ORPHAN(inode)=0 [ 1303.458860][T23352] max_ino=32 [ 1303.462103][T23352] i_nlink=1 [ 1303.464963][T23348] EXT4-fs (loop8): 1 truncate cleaned up [ 1303.465290][T23352] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1303.496300][T23358] loop9: detected capacity change from 0 to 1024 [ 1303.501439][T23348] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1303.559689][T23352] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.4707: Unrecognised inode hash code 20 [ 1303.621830][T23352] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4707: Corrupt directory, running e2fsck is recommended [ 1303.668188][T23358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1303.694847][T23352] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.4707: path /204/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1303.727981][T23352] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.4707: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1303.753448][T23358] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1303.816730][T23358] bridge0: port 3(team0) entered blocking state [ 1303.830493][T23358] bridge0: port 3(team0) entered disabled state [ 1303.841220][T23358] device team0 entered promiscuous mode [ 1303.851267][T23358] device team_slave_0 entered promiscuous mode [ 1303.860966][T23358] device team_slave_1 entered promiscuous mode [ 1303.880760][T23358] bridge0: port 3(team0) entered blocking state [ 1303.887301][T23358] bridge0: port 3(team0) entered forwarding state [ 1303.909768][T19326] EXT4-fs (loop1): unmounting filesystem. [ 1303.979888][T23358] EXT4-fs error (device loop9): ext4_validate_block_bitmap:420: comm syz.9.4708: bg 0: bad block bitmap checksum [ 1304.241837][T23371] loop1: detected capacity change from 0 to 128 [ 1304.378669][T23358] EXT4-fs error (device loop9): ext4_lookup:1858: inode #12: comm syz.9.4708: iget: checksum invalid [ 1304.886896][T18297] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1305.073418][T19851] EXT4-fs (loop8): unmounting filesystem. [ 1305.092075][T18297] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1305.118489][T18297] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.126678][T18297] usb 10-1: Product: syz [ 1305.141267][T18297] usb 10-1: Manufacturer: syz [ 1305.146348][T18297] usb 10-1: SerialNumber: syz [ 1305.191467][T18297] usb 10-1: config 0 descriptor?? [ 1305.412411][T18297] usb-storage 10-1:0.0: USB Mass Storage device detected [ 1305.508509][T18297] usb 10-1: USB disconnect, device number 52 [ 1305.721467][T23397] loop8: detected capacity change from 0 to 256 [ 1306.029104][T19907] EXT4-fs error (device loop9): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 1306.068948][ T27] audit: type=1326 audit(2000001094.880:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23404 comm="syz.1.4716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe146f8d169 code=0x0 [ 1306.307106][T23410] loop8: detected capacity change from 0 to 512 [ 1306.318326][T23410] EXT4-fs: Ignoring removed i_version option [ 1306.415270][T19907] EXT4-fs error (device loop9): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 1306.527057][T23410] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1306.581482][T23410] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 1306.589382][T23410] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1306.754596][T19851] EXT4-fs (loop8): unmounting filesystem. [ 1306.985043][T20936] EXT4-fs (loop9): unmounting filesystem. [ 1307.990710][ T27] audit: type=1326 audit(2000001096.800:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23435 comm="syz.2.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x7ffc0000 [ 1308.135279][ T27] audit: type=1326 audit(2000001096.830:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23435 comm="syz.2.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x7ffc0000 [ 1308.242942][ T27] audit: type=1326 audit(2000001096.840:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23435 comm="syz.2.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x7ffc0000 [ 1308.374835][ T27] audit: type=1326 audit(2000001096.840:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23435 comm="syz.2.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x7ffc0000 [ 1308.396096][ T4322] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.733279][ T4322] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.967900][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1308.981258][ T4322] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.997839][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1309.019444][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1309.027929][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1309.035588][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1309.043267][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1309.245564][ T4322] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.012848][T23452] chnl_net:caif_netlink_parms(): no params data found [ 1310.090775][ T4267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1310.104823][ T4267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1310.114974][ T4267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1310.126849][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1310.135244][ T4267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1310.281193][ T4267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1311.149026][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 1311.201505][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4732'. [ 1311.214044][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4732'. [ 1312.451780][T23452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.461492][T23452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.480516][T23452] device bridge_slave_0 entered promiscuous mode [ 1312.583904][T23452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.591521][T23452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.618126][T23452] device bridge_slave_1 entered promiscuous mode [ 1312.823400][T23452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.943181][T23452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.987196][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 1313.231494][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 1313.347553][T23452] team0: Port device team_slave_0 added [ 1314.178434][T23452] team0: Port device team_slave_1 added [ 1314.333480][T23452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.353083][T23452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.546931][T23452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.069266][T14354] Bluetooth: hci4: command 0x041b tx timeout [ 1315.388467][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 1315.442645][T23560] loop8: detected capacity change from 0 to 512 [ 1315.450104][T23560] EXT4-fs: Ignoring removed nobh option [ 1315.455707][T23560] EXT4-fs: Ignoring removed mblk_io_submit option [ 1315.474814][T23558] loop1: detected capacity change from 0 to 1024 [ 1315.494408][T23560] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1315.497769][T23452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.568599][T23452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.594909][T23452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.690496][T23558] syz.1.4749: attempt to access beyond end of device [ 1315.690496][T23558] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1315.709850][ T4322] device hsr_slave_0 left promiscuous mode [ 1315.716529][ T4322] device hsr_slave_1 left promiscuous mode [ 1315.724093][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1315.733873][T23558] syz.1.4749: attempt to access beyond end of device [ 1315.733873][T23558] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1315.748523][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.755793][T23558] Buffer I/O error on dev loop1, logical block 2889, async page read [ 1315.764480][ T27] audit: type=1800 audit(2000001104.580:116): pid=23558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4749" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 1315.767489][T23558] syz.1.4749: attempt to access beyond end of device [ 1315.767489][T23558] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1315.801051][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1315.815364][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.824244][ T4322] device team0 left promiscuous mode [ 1315.830602][ T4322] device team_slave_0 left promiscuous mode [ 1315.837601][T23558] syz.1.4749: attempt to access beyond end of device [ 1315.837601][T23558] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1315.851601][ T4322] device team_slave_1 left promiscuous mode [ 1315.864636][ T4322] bridge0: port 3(team0) entered disabled state [ 1315.883413][T23557] syz.1.4749: attempt to access beyond end of device [ 1315.883413][T23557] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1315.898543][ T4322] device bridge_slave_1 left promiscuous mode [ 1315.904870][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.917224][ T4322] device bridge_slave_0 left promiscuous mode [ 1315.927424][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.057819][ T4322] device veth1_macvtap left promiscuous mode [ 1316.063936][ T4322] device veth0_macvtap left promiscuous mode [ 1316.087081][ T4322] device veth1_vlan left promiscuous mode [ 1316.093692][ T4322] device veth0_vlan left promiscuous mode [ 1316.286877][ T27] audit: type=1800 audit(2000001105.090:117): pid=23560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4750" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1316.348822][T19851] EXT4-fs error (device loop8): ext4_map_blocks:634: inode #2: block 6: comm syz-executor: lblock 0 mapped to illegal pblock 6 (length 1) [ 1316.393261][T19851] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 1316.412682][T19851] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error [ 1316.425787][T23573] loop1: detected capacity change from 0 to 2048 [ 1316.558989][T23573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1316.651316][T19326] EXT4-fs (loop1): unmounting filesystem. [ 1316.676222][T22385] EXT4-fs (loop8): unmounting filesystem. [ 1317.161081][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 1317.400624][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 1317.466917][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 1317.482381][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 1317.542547][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.604495][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.717409][ T9684] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1317.916933][ T9684] usb 2-1: Using ep0 maxpacket: 32 [ 1317.924181][ T9684] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1317.939217][ T9684] usb 2-1: config 0 has no interface number 0 [ 1317.948535][ T9684] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1317.958591][ T9684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.966677][ T9684] usb 2-1: Product: syz [ 1317.971437][ T9684] usb 2-1: Manufacturer: syz [ 1317.976085][ T9684] usb 2-1: SerialNumber: syz [ 1317.991274][ T9684] usb 2-1: config 0 descriptor?? [ 1317.998873][ T9684] smsc95xx v2.0.0 [ 1318.384928][ T4322] bond0 (unregistering): Released all slaves [ 1318.488610][T23476] chnl_net:caif_netlink_parms(): no params data found [ 1318.709594][T23452] device hsr_slave_0 entered promiscuous mode [ 1318.727295][T23452] device hsr_slave_1 entered promiscuous mode [ 1318.762646][T23452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1318.787241][T23452] Cannot create hsr debugfs directory [ 1318.967042][T23594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4759'. [ 1319.009333][ T9684] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -61 [ 1319.026823][ T9684] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1319.122656][T23476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.152962][T23476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.173159][T23476] device bridge_slave_0 entered promiscuous mode [ 1319.224506][ T9684] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1319.227068][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 1319.245235][ T9684] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 1319.282680][ T9684] usb 2-1: USB disconnect, device number 26 [ 1319.338540][T23476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.345699][T23476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.364754][T23476] device bridge_slave_1 entered promiscuous mode [ 1319.455408][T23476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.492314][T23476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.996343][T23476] team0: Port device team_slave_0 added [ 1320.368991][T23476] team0: Port device team_slave_1 added [ 1320.579380][T23476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.586388][T23476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.687550][T23476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.718797][T23476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.725793][T23476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.790615][T23476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.850325][T14354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1320.861796][T14354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1320.875278][T14354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1320.894637][T14354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1320.911536][T14354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1320.919474][T14354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1321.008076][ T4322] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.160548][ T4322] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.286267][T23633] loop1: detected capacity change from 0 to 256 [ 1321.304955][T23476] device hsr_slave_0 entered promiscuous mode [ 1321.338186][T23476] device hsr_slave_1 entered promiscuous mode [ 1321.350687][T23633] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1321.369009][T23476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1321.376629][T23476] Cannot create hsr debugfs directory [ 1321.427394][T23633] exFAT-fs (loop1): hint_cluster is invalid (17) [ 1321.439429][ T27] audit: type=1800 audit(2000001110.250:118): pid=23633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4766" name="file1" dev="loop1" ino=1048882 res=0 errno=0 [ 1321.448208][T23633] exFAT-fs (loop1): error, broken FAT chain. [ 1321.500685][T23633] exFAT-fs (loop1): error, failed to bmap (inode : ffff888054609b60 iblock : 8, err : -5) [ 1321.513242][ T4322] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.638745][ T4322] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.284131][T23452] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1322.455087][T23452] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1322.737340][T23452] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1322.814710][T23452] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1322.949529][ T4322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.988765][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 1323.051382][T23618] chnl_net:caif_netlink_parms(): no params data found [ 1323.170421][ T4322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.421682][ T4322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.505896][T23674] loop1: detected capacity change from 0 to 16 [ 1323.521545][T23674] erofs: (device loop1): mounted with root inode @ nid 36. [ 1324.184227][T23618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.223614][T23618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.264250][T23618] device bridge_slave_0 entered promiscuous mode [ 1324.313077][T23452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.453524][ T4322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.520898][T23618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.536993][T23618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.545630][T23618] device bridge_slave_1 entered promiscuous mode [ 1324.658754][T20452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1324.672172][T23687] loop1: detected capacity change from 0 to 2048 [ 1324.704423][T20452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1324.705175][T23687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1324.743738][T23618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.768772][T23452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.789466][T23618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.880980][T20452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1324.908191][T20452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1324.931282][T20452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.938484][T20452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.962032][T20452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1324.975758][T20452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1325.044437][T20452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.051665][T20452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.067099][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 1325.179547][T23700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1325.387518][T20452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1325.395767][T20452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1325.520186][T23618] team0: Port device team_slave_0 added [ 1325.559893][T20452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1325.591727][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1325.644113][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1325.863764][T23618] team0: Port device team_slave_1 added [ 1325.931208][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1325.948418][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1325.967584][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1326.120989][T23618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.135659][T23618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.162442][T23618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.181219][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1326.208273][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1326.232862][T23476] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1326.264096][T23618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.306839][T23618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.386858][T23618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.430397][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1326.445784][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1326.474709][T23476] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1326.626598][T23452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1326.955485][T23728] loop1: detected capacity change from 0 to 16 [ 1326.971707][T23728] erofs: (device loop1): mounted with root inode @ nid 36. [ 1327.277464][T23476] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1327.426138][T23476] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1327.657022][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 1327.691839][T23618] device hsr_slave_0 entered promiscuous mode [ 1327.707962][T23618] device hsr_slave_1 entered promiscuous mode [ 1327.767656][T23618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1327.820289][T23618] Cannot create hsr debugfs directory [ 1328.252931][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1328.263358][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1328.291617][T23452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.451281][T23476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.535012][T23476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.557920][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1328.566137][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1328.694384][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1328.718016][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1328.729119][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.736282][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.768127][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1328.791131][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1328.823725][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.830974][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.051260][T23760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1329.467408][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1329.475715][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1329.714554][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 1330.604163][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1330.631641][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1330.663303][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1330.678573][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1330.699235][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1330.708226][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1330.721795][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1330.733984][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1330.900451][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1330.909748][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1330.980785][T23476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1331.033475][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1331.051450][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1331.117257][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1331.126652][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1331.262384][T23452] device veth0_vlan entered promiscuous mode [ 1331.486689][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1331.504626][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1331.529544][T23452] device veth1_vlan entered promiscuous mode [ 1331.607053][ T4304] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1331.616255][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1331.627463][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1331.673867][T23452] device veth0_macvtap entered promiscuous mode [ 1331.818037][ T4304] usb 2-1: Using ep0 maxpacket: 8 [ 1331.825727][ T4304] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1331.852554][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1331.867853][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1331.876027][ T4304] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.897843][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1331.907450][ T4304] usb 2-1: config 0 has no interface number 0 [ 1331.928756][ T4304] usb 2-1: New USB device found, idVendor=8168, idProduct=1745, bcdDevice=5c.b2 [ 1331.951033][T23452] device veth1_macvtap entered promiscuous mode [ 1331.968455][ T4304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.009732][ T4304] usb 2-1: config 0 descriptor?? [ 1332.071944][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.089819][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.101784][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.113356][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.156724][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.176808][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.196660][T23452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.454338][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1332.465859][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1332.476260][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1332.503591][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.533555][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.571607][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.587562][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.607022][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.619180][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.631535][T23452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.639703][T23791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1332.680961][ T4304] usb 2-1: string descriptor 0 read error: -71 [ 1332.699162][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1332.715723][ T4304] usb 2-1: bad CDC descriptors [ 1332.722822][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1332.743003][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1332.753251][ T4304] usb 2-1: bad CDC descriptors [ 1332.760772][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1332.770263][ T4304] usb 2-1: USB disconnect, device number 27 [ 1332.803464][T23452] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.848874][T23452] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.867003][T23452] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.876234][T23452] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.904869][ T4322] device hsr_slave_0 left promiscuous mode [ 1332.917863][ T4322] device hsr_slave_1 left promiscuous mode [ 1332.930878][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1332.947563][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.964138][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1332.979775][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.999127][ T4322] device bridge_slave_1 left promiscuous mode [ 1333.005428][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.041728][ T4322] device bridge_slave_0 left promiscuous mode [ 1333.057014][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.073956][ T4322] device hsr_slave_0 left promiscuous mode [ 1333.087145][ T4322] device hsr_slave_1 left promiscuous mode [ 1333.100991][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.116351][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.130938][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.147016][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.164019][ T4322] device bridge_slave_1 left promiscuous mode [ 1333.177358][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.195521][ T4322] device bridge_slave_0 left promiscuous mode [ 1333.212214][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.407244][ T4322] device veth1_macvtap left promiscuous mode [ 1333.413416][ T4322] device veth0_macvtap left promiscuous mode [ 1333.427216][ T4322] device veth1_vlan left promiscuous mode [ 1333.459279][ T4322] device veth0_vlan left promiscuous mode [ 1333.491733][ T4322] device veth1_macvtap left promiscuous mode [ 1333.519453][ T4322] device veth0_macvtap left promiscuous mode [ 1333.525628][ T4322] device veth1_vlan left promiscuous mode [ 1333.557132][ T4322] device veth0_vlan left promiscuous mode [ 1335.332774][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 1335.457516][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 1335.558518][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.641581][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.604932][ T4322] bond0 (unregistering): Released all slaves [ 1337.403824][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 1337.515601][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 1337.594220][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.669320][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.513508][ T4322] bond0 (unregistering): Released all slaves [ 1338.680113][T23476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1338.721484][T23618] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1338.753790][T23618] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1338.855498][T23618] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1338.946020][T23618] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1339.050391][T23868] loop1: detected capacity change from 0 to 128 [ 1339.161332][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.193703][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.291414][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1339.480200][ T4587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.512833][ T4587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.584527][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1339.906876][T23618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.094144][T23618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.113865][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1340.142056][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1340.207956][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1340.251202][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1340.260414][T19100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.267650][T19100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.278272][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1340.287940][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1340.297411][T19100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.304597][T19100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.320224][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1340.368521][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1340.396397][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1340.440560][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1340.521234][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1340.530727][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1340.542974][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1340.552675][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1340.567016][ T4483] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1340.570668][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1340.584341][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1340.593808][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1340.604727][T23618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1340.630747][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1340.798214][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1340.814547][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1340.822967][ T4483] usb 2-1: Using ep0 maxpacket: 32 [ 1340.832151][ T4483] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1340.842134][ T4483] usb 2-1: config 0 has no interface number 0 [ 1340.866644][ T4483] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1340.875982][ T4483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.884519][ T4483] usb 2-1: Product: syz [ 1340.889244][ T4483] usb 2-1: Manufacturer: syz [ 1340.899870][ T4483] usb 2-1: SerialNumber: syz [ 1340.908249][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1340.921713][ T4483] usb 2-1: config 0 descriptor?? [ 1340.931908][ T4483] smsc95xx v2.0.0 [ 1340.941321][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1340.971718][T23476] device veth0_vlan entered promiscuous mode [ 1341.027155][T23476] device veth1_vlan entered promiscuous mode [ 1341.105153][T23476] device veth0_macvtap entered promiscuous mode [ 1341.120756][T23476] device veth1_macvtap entered promiscuous mode [ 1341.185218][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.231570][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.258876][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.269905][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.291039][T23476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.303454][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1341.326500][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1341.338208][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1341.346922][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1341.355603][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1341.364903][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1341.376118][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1341.403172][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1341.415937][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1341.434213][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1341.474583][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.510039][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.533609][T23476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.558536][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.584736][T23476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.668483][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1341.706080][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1341.779087][T23476] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.807708][T23476] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.885520][T23476] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.920483][T23476] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.032152][ T4483] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -61 [ 1342.061005][ T4483] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1342.112817][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1342.132910][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1342.169438][T23618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.194430][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.213890][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.236930][ T4483] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1342.265951][ T4483] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 1342.296008][ T4483] usb 2-1: USB disconnect, device number 28 [ 1342.304469][T19100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1342.339224][ T4587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.377267][ T4587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.417507][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1343.307037][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 1343.319696][T23958] loop5: detected capacity change from 0 to 16 [ 1343.334890][T23958] erofs: (device loop5): mounted with root inode @ nid 36. [ 1343.372291][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1343.432692][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1343.494379][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1343.510817][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1343.548173][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1343.557220][ T4302] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 1343.571029][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1343.630466][T23618] device veth0_vlan entered promiscuous mode [ 1343.738265][T23618] device veth1_vlan entered promiscuous mode [ 1343.779024][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1343.797725][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1344.043593][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1344.397076][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1344.470505][T23618] device veth0_macvtap entered promiscuous mode [ 1344.518731][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1344.553793][T23618] device veth1_macvtap entered promiscuous mode [ 1344.618856][ T4302] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1344.640660][ T4302] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1344.661784][T23618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.661890][T23978] loop5: detected capacity change from 0 to 1024 [ 1344.685917][ T4302] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1344.706091][ T4302] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1344.715658][T23618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.746695][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.755599][T23618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.794463][ T4302] usb 5-1: config 0 descriptor?? [ 1344.799706][T23618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.837724][T23961] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1344.876922][T23618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.974926][T23618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.010769][T23618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.401648][T23618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1345.553595][T23961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.593839][T23961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.602748][T23618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.648679][ T4302] holtek_mouse 0003:04D9:A067.001D: unbalanced delimiter at end of report description [ 1345.674785][T23618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1345.722072][T23618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.732789][ T4302] holtek_mouse 0003:04D9:A067.001D: hid parse failed: -22 [ 1345.746825][T23618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1345.766806][T23618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.786959][ T4302] holtek_mouse: probe of 0003:04D9:A067.001D failed with error -22 [ 1345.808648][T23618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.817036][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1345.825770][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1345.895253][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1345.933479][ T4302] usb 5-1: USB disconnect, device number 2 [ 1345.958949][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1345.996251][T23618] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.018830][T23618] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.056854][T23618] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.076033][T23618] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.321590][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.348304][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.442151][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.465416][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.484232][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1346.641617][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1346.649582][T24010] loop1: detected capacity change from 0 to 16 [ 1346.658418][T24010] erofs: (device loop1): mounted with root inode @ nid 36. [ 1346.963589][T24018] loop4: detected capacity change from 0 to 256 [ 1347.025944][T24018] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1347.055588][T24018] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1347.080809][T24018] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1348.640207][T24047] loop5: detected capacity change from 0 to 2048 [ 1348.696712][T24047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1348.717461][T18297] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1348.899339][T18297] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.928250][T18297] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.989738][T18297] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1349.062319][T18297] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1349.197959][T18297] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.219037][T18297] usb 7-1: config 0 descriptor?? [ 1349.292645][T24056] loop1: detected capacity change from 0 to 128 [ 1349.380539][T24056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1349.407016][T24056] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.427857][T24065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4851'. [ 1349.598180][T24067] loop4: detected capacity change from 0 to 512 [ 1349.623863][T24067] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1349.708222][T18297] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1349.746840][T18297] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1349.754429][T18297] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1350.043981][T18297] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1350.128024][T18297] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1350.135525][T18297] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1350.143951][T18297] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 1350.154230][T19326] EXT4-fs (loop1): unmounting filesystem. [ 1350.163773][T18297] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1350.266991][T18297] usb 7-1: USB disconnect, device number 22 [ 1350.300918][T24073] loop5: detected capacity change from 0 to 256 [ 1350.360086][T24073] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1350.360096][T14354] Bluetooth: Wrong link type (-22) [ 1350.462382][T24073] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1350.525410][T24073] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1350.586923][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 1351.076854][ T27] audit: type=1326 audit(2000001139.870:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24088 comm="syz.6.4860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf78d169 code=0x0 [ 1351.214437][T14354] Bluetooth: hci2: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1351.296989][ T4483] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1351.486904][ T4483] usb 6-1: Using ep0 maxpacket: 32 [ 1351.497580][ T4483] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 1351.516374][ T4483] usb 6-1: config 0 has no interface number 1 [ 1351.525850][ T4483] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1351.542524][ T4483] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1351.561583][ T4483] usb 6-1: Product: syz [ 1351.565902][ T4483] usb 6-1: Manufacturer: syz [ 1351.578477][ T4483] usb 6-1: SerialNumber: syz [ 1351.592485][ T4483] usb 6-1: config 0 descriptor?? [ 1351.814299][ T4483] qcserial 6-1:0.37: Qualcomm USB modem converter detected [ 1352.022074][T24121] tmpfs: Unknown parameter 'noswap' [ 1352.031205][ T4483] usb 6-1: USB disconnect, device number 4 [ 1352.049002][ T4483] qcserial 6-1:0.37: device disconnected [ 1352.522725][T24132] loop6: detected capacity change from 0 to 16 [ 1352.530966][T24132] erofs: (device loop6): mounted with root inode @ nid 36. [ 1352.580190][T24135] loop1: detected capacity change from 0 to 1024 [ 1352.642274][T24135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1352.669274][T24135] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.861020][T19326] EXT4-fs (loop1): unmounting filesystem. [ 1353.010365][T24146] loop1: detected capacity change from 0 to 128 [ 1353.047019][T24146] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1353.159302][T24146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1353.227528][T14354] Bluetooth: hci2: command 0x0409 tx timeout [ 1353.250543][T24142] loop5: detected capacity change from 0 to 8192 [ 1353.322649][T24146] loop1: detected capacity change from 128 to 64 [ 1353.466064][T24150] syz.1.4874: attempt to access beyond end of device [ 1353.466064][T24150] loop1: rw=2049, sector=87, nr_sectors = 1 limit=64 [ 1353.526572][T24150] Buffer I/O error on dev loop1, logical block 87, lost sync page write [ 1353.569875][T24150] UDF-fs: warning (device loop1): udf_update_inode: IO error syncing udf inode [00000057] [ 1353.904538][T19326] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=88, location=4 [ 1353.972032][T19326] UDF-fs: error (device loop1): udf_read_inode: (ino 88) failed !bh [ 1353.981572][T19326] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=88, location=4 [ 1353.991115][T19326] UDF-fs: error (device loop1): udf_read_inode: (ino 88) failed !bh [ 1354.072469][T21332] syz.1.4180: attempt to access beyond end of device [ 1354.072469][T21332] loop1: rw=2049, sector=83, nr_sectors = 1 limit=64 [ 1354.086677][T21332] Buffer I/O error on dev loop1, logical block 83, lost sync page write [ 1354.336907][T24172] loop6: detected capacity change from 0 to 128 [ 1354.349391][T24174] loop5: detected capacity change from 0 to 2048 [ 1354.438331][T24174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1354.485775][T24172] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1354.560337][T24172] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.031399][T23618] EXT4-fs (loop6): unmounting filesystem. [ 1356.558432][ T4267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1356.571025][ T4267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1356.580357][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1356.595726][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1356.605734][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1356.613575][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1356.934773][ T27] audit: type=1326 audit(2000001145.720:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24226 comm="syz.4.4895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f560598d169 code=0x0 [ 1358.481039][T24255] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1358.707056][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 1359.972393][T24219] chnl_net:caif_netlink_parms(): no params data found [ 1360.757155][T14354] Bluetooth: hci2: command 0x041b tx timeout [ 1360.932645][ T51] device hsr_slave_0 left promiscuous mode [ 1360.968089][ T51] device hsr_slave_1 left promiscuous mode [ 1361.019904][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.044402][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1361.065519][ T51] device bridge_slave_1 left promiscuous mode [ 1361.087509][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.140188][ T51] device bridge_slave_0 left promiscuous mode [ 1361.146535][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.557333][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.563839][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.867056][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 1363.677079][T24319] loop5: detected capacity change from 0 to 128 [ 1364.479576][T24334] loop6: detected capacity change from 0 to 16 [ 1364.499289][T24334] erofs: (device loop6): mounted with root inode @ nid 36. [ 1364.907586][T14354] Bluetooth: hci2: command 0x0419 tx timeout [ 1365.442356][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1365.520023][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1365.667706][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.523518][ T51] bond0 (unregistering): Released all slaves [ 1366.633576][T24219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.640974][T24219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.649687][T24219] device bridge_slave_0 entered promiscuous mode [ 1366.791686][T24219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.816456][T24219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.860386][T24219] device bridge_slave_1 entered promiscuous mode [ 1366.868930][T24356] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4924'. [ 1367.359909][T24219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.403730][T24219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1367.506688][T24219] team0: Port device team_slave_0 added [ 1367.570089][T24219] team0: Port device team_slave_1 added [ 1367.625887][T24219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.641441][T24219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1367.714969][ T4302] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1367.943569][ T4302] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.974576][T24219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.017330][ T4302] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1368.198594][ T4302] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1368.339522][ T4302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.390967][ T4302] usb 7-1: config 0 descriptor?? [ 1368.434510][ T4302] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1368.559252][T24219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.566261][T24219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.682080][T24219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.799006][T24219] device hsr_slave_0 entered promiscuous mode [ 1368.835257][T24219] device hsr_slave_1 entered promiscuous mode [ 1369.801081][ T27] audit: type=1326 audit(2000001158.610:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24409 comm="syz.2.4937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x0 [ 1370.046900][T24417] loop5: detected capacity change from 0 to 512 [ 1370.120664][T24417] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.4939: corrupted inode contents [ 1370.139676][T24219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1370.158148][T24219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1370.178897][T24219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1370.189261][T24219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1370.281010][T24417] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #3: comm syz.5.4939: mark_inode_dirty error [ 1370.368991][T24417] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #3: comm syz.5.4939: corrupted inode contents [ 1370.398437][T18297] usb 7-1: USB disconnect, device number 23 [ 1370.462682][T24219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.483920][T24417] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.4939: mark_inode_dirty error [ 1370.553368][T24417] Quota error (device loop5): write_blk: dquota write failed [ 1370.566440][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1370.586389][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1370.594094][T24417] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1370.624711][T24219] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.634717][T24417] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.4939: Failed to acquire dquot type 0 [ 1370.669682][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1370.674570][T24432] loop6: detected capacity change from 0 to 512 [ 1370.701399][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1370.704854][T24417] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.4939: corrupted inode contents [ 1370.726298][T24432] EXT4-fs: Ignoring removed oldalloc option [ 1370.742601][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.749820][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.770438][T24432] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1370.780413][T24417] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #16: comm syz.5.4939: mark_inode_dirty error [ 1370.807382][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1370.822933][T24417] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.4939: corrupted inode contents [ 1370.836060][T24432] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 1370.867072][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1370.875763][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1370.888856][T24432] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0102] [ 1370.897040][T24417] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.4939: mark_inode_dirty error [ 1370.907868][T24434] kvm: emulating exchange as write [ 1370.917464][T24432] System zones: 0-2, 18-18, 34-34 [ 1370.938580][T24417] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.4939: corrupted inode contents [ 1370.951949][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.959188][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.963643][T24432] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 1370.967579][T24417] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 1370.986564][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1370.997031][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1371.007344][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1371.015596][T24417] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #16: comm syz.5.4939: corrupted inode contents [ 1371.029519][T24432] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.4941: bad orphan inode 15 [ 1371.043625][T24432] ext4_test_bit(bit=14, block=18) = 1 [ 1371.053683][T24417] EXT4-fs error (device loop5): ext4_truncate:4311: inode #16: comm syz.5.4939: mark_inode_dirty error [ 1371.066193][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1371.084283][T24432] is_bad_inode(inode)=0 [ 1371.089647][T24432] NEXT_ORPHAN(inode)=2264924160 [ 1371.109382][T24417] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 1371.119938][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1371.130865][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1371.133364][T24432] max_ino=32 [ 1371.142224][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1371.155409][T24417] EXT4-fs (loop5): 1 truncate cleaned up [ 1371.162497][T24417] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1371.175211][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1371.186262][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1371.187295][T24432] i_nlink=0 [ 1371.195107][T24417] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.222407][T24219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1371.239329][T24219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1371.250981][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1371.261463][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1371.317108][T24432] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1371.391246][T24432] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.4941: bg 0: block 80: padding at end of block bitmap is not set [ 1371.437829][T24432] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1371.458310][T24432] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1371.577088][ T4483] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1371.958538][T24452] loop4: detected capacity change from 0 to 512 [ 1372.214025][ T4483] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1372.244323][ T4483] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1372.254459][ T4483] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1372.261357][T24452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1372.287244][T24452] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1372.298623][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1372.306240][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1372.315208][ T4483] usb 6-1: SerialNumber: syz [ 1372.342311][T24219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1372.453339][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1372.488253][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1372.553356][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1372.568061][ T4483] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1372.584889][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1372.593006][ T4483] usb 6-1: USB disconnect, device number 5 [ 1372.607883][T23618] EXT4-fs (loop6): unmounting filesystem. [ 1372.627669][T24219] device veth0_vlan entered promiscuous mode [ 1372.640622][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1372.649429][T23476] EXT4-fs (loop4): unmounting filesystem. [ 1372.662732][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1372.717727][T24219] device veth1_vlan entered promiscuous mode [ 1372.825973][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1372.843114][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1372.875021][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1372.909700][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1372.941909][T24219] device veth0_macvtap entered promiscuous mode [ 1372.969638][T24219] device veth1_macvtap entered promiscuous mode [ 1373.052471][T24219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.111931][T24219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.175216][T24219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.216844][T24219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.242078][T24219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.293403][T24219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.366825][T24219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1373.396795][T24219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.428610][T24219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.447309][T23452] EXT4-fs (loop5): unmounting filesystem. [ 1373.477216][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1373.498573][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1373.537299][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1373.566212][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1373.610056][T24219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.674302][T24219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.705014][T24219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.736619][T24219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.756863][T24219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.781169][T24219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.792227][T24219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.805085][T24219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.817942][T24219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.825348][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1373.855651][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1373.906218][T24219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.925678][T24219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.946313][T24219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.977143][T24219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.288712][ T4620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.307654][ T4620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.376383][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1374.464348][ T4587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.630257][ T4587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.749469][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1374.919319][T24499] loop6: detected capacity change from 0 to 512 [ 1374.983249][T24499] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1374.998515][T24499] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1375.207633][T24499] EXT4-fs error (device loop6): ext4_search_dir:1549: inode #2: block 3: comm syz.6.4955: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 1375.450691][T23618] EXT4-fs (loop6): unmounting filesystem. [ 1375.781586][ T4267] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1377.787075][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 1377.810341][ T27] audit: type=1326 audit(2000001166.610:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.6.4966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf78d169 code=0x0 [ 1378.674535][T24566] loop3: detected capacity change from 0 to 1024 [ 1378.716973][T24566] EXT4-fs: Ignoring removed bh option [ 1378.734403][T24566] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1378.770303][T24571] loop5: detected capacity change from 0 to 16 [ 1378.791012][T24571] erofs: (device loop5): mounted with root inode @ nid 36. [ 1378.848454][ T4267] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 1378.862796][T24566] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.4971: bad orphan inode 32767 [ 1378.883729][T24566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1378.899896][T24571] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1378.939891][ T27] audit: type=1800 audit(2000001167.750:123): pid=24571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4972" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1379.353908][ T27] audit: type=1800 audit(2000001168.160:124): pid=24566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4971" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1379.462661][T24219] EXT4-fs (loop3): unmounting filesystem. [ 1379.558873][T24591] loop6: detected capacity change from 0 to 2048 [ 1379.626381][T24591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1381.036559][T24589] UDF-fs: warning (device loop6): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 262144 lbcount: 266240 extent 129+265216 [ 1381.048676][ T27] audit: type=1326 audit(2000001169.790:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24607 comm="syz.2.4980" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x0 [ 1381.341285][T24619] loop3: detected capacity change from 0 to 256 [ 1381.382314][T24620] loop6: detected capacity change from 0 to 2048 [ 1381.391097][T24619] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1381.436147][T24620] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1381.440272][T24619] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1381.537563][T24619] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1381.576448][T24620] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1381.727888][T24620] EXT4-fs (loop6): Remounting filesystem read-only [ 1381.904338][T23618] EXT4-fs (loop6): unmounting filesystem. [ 1382.247742][T24651] loop4: detected capacity change from 0 to 1024 [ 1382.271438][T24651] EXT4-fs: Ignoring removed i_version option [ 1382.338879][T24651] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1382.638632][T23476] EXT4-fs (loop4): unmounting filesystem. [ 1383.214770][T24682] loop5: detected capacity change from 0 to 256 [ 1383.262757][T24682] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1383.301672][T24682] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1383.364332][T24682] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1383.416610][ T27] audit: type=1326 audit(2000001172.220:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24687 comm="syz.4.5000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f560598d169 code=0x0 [ 1383.590978][T24695] loop3: detected capacity change from 0 to 128 [ 1383.591211][T24689] loop6: detected capacity change from 0 to 4096 [ 1384.083905][T24689] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1384.126511][T24689] fs-verity: sha256 using implementation "sha256-avx2" [ 1384.949260][T23618] EXT4-fs (loop6): unmounting filesystem. [ 1386.804974][ T27] audit: type=1326 audit(2000001175.610:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24741 comm="syz.2.5016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x0 [ 1387.046209][T24749] loop5: detected capacity change from 0 to 128 [ 1387.079881][T24749] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1387.113064][T24749] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1387.280591][T24753] loop6: detected capacity change from 0 to 256 [ 1387.830384][ T14] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1388.017421][T24773] loop4: detected capacity change from 0 to 2048 [ 1388.027895][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 1388.042017][ T14] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1388.081365][T24773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1388.091151][ T14] usb 6-1: config 179 has no interface number 0 [ 1388.132256][ T14] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1388.186219][ T14] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1388.238876][ T14] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1388.276797][ T14] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1388.306810][ T14] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1388.341406][ T14] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1388.352397][T24783] loop6: detected capacity change from 0 to 512 [ 1388.367175][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.387830][T24757] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1388.398515][T24783] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1388.408885][ T14] xpad: probe of 6-1:179.65 failed with error -5 [ 1388.427225][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 1388.960372][T24757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.065710][T24757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.088100][T24757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.119567][T24757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.451755][T24795] 9pnet_fd: Insufficient options for proto=fd [ 1390.205313][T24801] loop3: detected capacity change from 0 to 128 [ 1390.232152][T23618] EXT4-fs (loop6): unmounting filesystem. [ 1390.235900][T24801] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1390.274046][T24801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1390.383361][T24801] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1390.562515][ T27] audit: type=1326 audit(2000001179.370:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.6.5033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf78d169 code=0x0 [ 1390.715263][T24801] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1390.816269][T24219] EXT4-fs (loop3): unmounting filesystem. [ 1390.971449][T24833] loop3: detected capacity change from 0 to 256 [ 1391.328376][T24840] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5039'. [ 1392.108306][T18297] usb 6-1: USB disconnect, device number 6 [ 1392.304712][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5043'. [ 1392.591445][T14354] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1393.599662][T24886] loop3: detected capacity change from 0 to 16 [ 1393.660609][T24886] erofs: (device loop3): mounted with root inode @ nid 36. [ 1393.697045][T18222] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1393.907003][T18222] usb 5-1: Using ep0 maxpacket: 8 [ 1393.914815][T18222] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1393.961213][T18222] usb 5-1: config 179 has no interface number 0 [ 1393.985412][T18222] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1394.032897][T18222] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1394.081857][T18222] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1394.114800][T18222] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1394.173379][T18222] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1394.208503][ T27] audit: type=1326 audit(2000001183.020:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.2.5056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x0 [ 1394.237281][T18222] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1394.246386][T18222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.287204][T24881] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1394.302745][T18222] xpad: probe of 5-1:179.65 failed with error -5 [ 1394.547103][T24881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.577458][T24881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.601769][T24881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.627949][T24881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.667039][T14354] Bluetooth: hci3: command 0x0409 tx timeout [ 1394.982247][T24908] 9pnet_fd: Insufficient options for proto=fd [ 1396.492697][T24929] xt_hashlimit: size too large, truncated to 1048576 [ 1396.500129][T24929] xt_hashlimit: invalid rate [ 1396.733066][T24932] loop3: detected capacity change from 0 to 512 [ 1396.867910][T18222] usb 5-1: USB disconnect, device number 3 [ 1397.453150][T24932] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.5063: corrupted inode contents [ 1397.506074][T24932] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #3: comm syz.3.5063: mark_inode_dirty error [ 1397.561594][T24932] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.5063: corrupted inode contents [ 1397.630841][T24948] loop6: detected capacity change from 0 to 1024 [ 1397.642473][T24932] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.5063: mark_inode_dirty error [ 1397.708519][T24948] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1397.726033][T24932] Quota error (device loop3): write_blk: dquota write failed [ 1397.777174][T24932] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1397.787698][T24948] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1397.798700][T24932] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.5063: Failed to acquire dquot type 0 [ 1397.853800][T24948] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1397.904267][T24932] EXT4-fs (loop3): 1 orphan inode deleted [ 1397.922021][ T4632] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1397.936358][T24932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1397.938200][T24948] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 1397.959037][ T4632] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:28: Failed to release dquot type 1 [ 1397.994700][T24932] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1397.998140][T24948] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1397.998140][T24948] [ 1398.067057][T24948] EXT4-fs (loop6): Total free blocks count 0 [ 1398.083139][T24948] EXT4-fs (loop6): Free/Dirty block details [ 1398.121434][T24948] EXT4-fs (loop6): free_blocks=4293918720 [ 1398.151269][ T27] audit: type=1326 audit(2000001186.960:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ed18d169 code=0x7fc00000 [ 1398.153922][T24948] EXT4-fs (loop6): dirty_blocks=64 [ 1398.205462][T24948] EXT4-fs (loop6): Block reservation details [ 1398.247869][T24948] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 1398.259274][ T27] audit: type=1326 audit(2000001187.070:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24961 comm="syz.4.5069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f560598d169 code=0x0 [ 1398.959716][T23618] EXT4-fs (loop6): unmounting filesystem. [ 1399.152888][T24219] EXT4-fs (loop3): unmounting filesystem. [ 1399.197254][ T27] audit: type=1326 audit(2000001188.010:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24952 comm="syz.5.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9ed18d169 code=0x7fc00000 [ 1399.555693][T24987] fuse: Bad value for 'fd' [ 1400.556836][T19726] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1400.816832][ T27] audit: type=1326 audit(2000001189.620:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25012 comm="syz.2.5082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x0 [ 1401.039057][T19726] usb 6-1: Using ep0 maxpacket: 8 [ 1401.046234][T19726] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.081756][T19726] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1401.118275][T19726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1401.132769][T19726] usb 6-1: SerialNumber: syz [ 1401.148910][T19726] usb 6-1: config 0 descriptor?? [ 1401.159935][T19726] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 1401.177929][T19726] usb 6-1: Failed to create links for entity 255 [ 1401.197161][T19726] usb 6-1: Failed to register entities (-22). [ 1401.379806][T19726] usb 6-1: USB disconnect, device number 7 [ 1401.525398][T25036] loop6: detected capacity change from 0 to 2048 [ 1401.546955][ T27] audit: type=1326 audit(2000001190.350:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25025 comm="syz.2.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4845d8d169 code=0x7fc00000 [ 1401.595397][T25036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1401.761266][T25042] loop4: detected capacity change from 0 to 256 [ 1401.853344][T25046] fuse: Bad value for 'fd' [ 1402.676404][ T27] audit: type=1326 audit(2000001191.490:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25025 comm="syz.2.5084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4845d8d169 code=0x7fc00000 [ 1402.744252][T25057] loop6: detected capacity change from 0 to 2048 [ 1402.808153][T25057] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1402.902568][T25051] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5087'. [ 1402.984252][ T27] audit: type=1800 audit(2000001191.690:136): pid=25057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5091" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 1404.995362][T25083] loop5: detected capacity change from 0 to 2048 [ 1405.082974][T25083] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1405.693878][T25091] fuse: Bad value for 'fd' [ 1406.157812][T25084] loop6: detected capacity change from 0 to 512 [ 1406.194786][T25084] EXT4-fs: Ignoring removed oldalloc option [ 1406.217112][T16197] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1406.274124][T25084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1406.396850][T16197] usb 6-1: Using ep0 maxpacket: 8 [ 1406.407958][T16197] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1406.408038][T25084] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1406.431158][T16197] usb 6-1: config 179 has no interface number 0 [ 1406.441467][T25084] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.467174][T16197] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1406.478709][T16197] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1406.490923][T16197] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1406.507313][T16197] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1406.518038][T16197] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1406.532121][T16197] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1406.541928][T16197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.570580][T25094] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1406.601304][T16197] xpad: probe of 6-1:179.65 failed with error -5 [ 1406.682413][T25109] loop4: detected capacity change from 0 to 128 [ 1406.728590][T25109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1406.765851][T25109] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.833420][T25094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.847093][T25094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.379862][T25094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.446205][T25094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.476981][T18222] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 1407.644926][T25107] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1407.673136][T18222] usb 5-1: config 0 has no interfaces? [ 1407.692129][T18222] usb 5-1: language id specifier not provided by device, defaulting to English [ 1409.863239][ T14] usb 6-1: USB disconnect, device number 8 [ 1409.911241][T18222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1409.920936][T18222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.943765][T18222] usb 5-1: config 0 descriptor?? [ 1409.958232][T18222] usb 5-1: can't set config #0, error -71 [ 1409.981841][T18222] usb 5-1: USB disconnect, device number 4 [ 1410.151817][T25133] loop5: detected capacity change from 0 to 128 [ 1410.167837][T23476] EXT4-fs (loop4): unmounting filesystem. [ 1410.446946][T25133] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1410.562132][T25133] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.594111][T23618] EXT4-fs (loop6): unmounting filesystem. [ 1410.674365][T25141] netlink: 'syz.2.5113': attribute type 4 has an invalid length. [ 1410.962182][T23452] EXT4-fs (loop5): unmounting filesystem. [ 1411.374901][T25160] loop4: detected capacity change from 0 to 16 [ 1411.529851][T25160] erofs: (device loop4): mounted with root inode @ nid 36. [ 1415.716907][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 1415.785411][T25228] loop3: detected capacity change from 0 to 128 [ 1415.851796][T25228] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1415.897461][T25228] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1416.398587][T25245] loop4: detected capacity change from 0 to 1024 [ 1419.265305][T25283] loop5: detected capacity change from 0 to 512 [ 1419.308348][T25283] ext4: Unknown parameter 'subj_type' [ 1420.481080][T14354] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1422.346981][T14354] Bluetooth: hci1: command 0x0406 tx timeout [ 1422.516823][T14354] Bluetooth: hci4: command 0x0409 tx timeout [ 1422.814632][ T27] audit: type=1326 audit(2000001211.620:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25356 comm="syz.3.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989378d169 code=0x7ffc0000 [ 1422.881062][ T27] audit: type=1326 audit(2000001211.650:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25356 comm="syz.3.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989378d169 code=0x7ffc0000 [ 1422.978471][ T27] audit: type=1326 audit(2000001211.680:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25356 comm="syz.3.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f989378d169 code=0x7ffc0000 [ 1423.006414][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.006464][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.034078][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1423.046509][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1423.057081][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1423.065603][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1423.074606][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1423.082091][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1423.097169][ T27] audit: type=1326 audit(2000001211.680:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25356 comm="syz.3.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989378d169 code=0x7ffc0000 [ 1423.142290][ T27] audit: type=1326 audit(2000001211.680:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25356 comm="syz.3.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989378d169 code=0x7ffc0000 [ 1423.464129][ T4296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.793846][ T4296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.085059][T25388] loop5: detected capacity change from 0 to 128 [ 1424.171132][ T4296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.158382][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 1425.170131][ T4296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.620463][T25359] chnl_net:caif_netlink_parms(): no params data found [ 1426.399494][ T4267] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1426.729569][T25442] loop3: detected capacity change from 0 to 512 [ 1426.847547][T25444] loop4: detected capacity change from 0 to 128 [ 1427.094885][T25442] EXT4-fs: Ignoring removed oldalloc option [ 1427.108088][T25359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.115233][T25359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.136285][T25359] device bridge_slave_0 entered promiscuous mode [ 1427.149310][T25359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.178319][T25359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.310010][T25452] loop6: detected capacity change from 0 to 2048 [ 1427.364898][T25359] device bridge_slave_1 entered promiscuous mode [ 1427.472218][T25442] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1427.481695][T14354] Bluetooth: hci0: command 0x041b tx timeout [ 1427.505624][T25452] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1428.116585][T25442] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 1428.166171][T25442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0102] [ 1428.250050][T25359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1428.266973][T25442] System zones: 0-2, 18-18, 34-34 [ 1428.346113][T25359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1428.356220][T25442] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 1428.424090][T25442] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.5188: bad orphan inode 15 [ 1428.434587][T14354] Bluetooth: hci1: command 0x0409 tx timeout [ 1428.552708][T25442] ext4_test_bit(bit=14, block=18) = 1 [ 1428.558553][T25442] is_bad_inode(inode)=0 [ 1428.570739][T25442] NEXT_ORPHAN(inode)=2264924160 [ 1428.586184][T25442] max_ino=32 [ 1428.589939][T25442] i_nlink=0 [ 1428.593885][T25442] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1428.677785][T25359] team0: Port device team_slave_0 added [ 1428.732192][T25442] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5188: bg 0: block 80: padding at end of block bitmap is not set [ 1428.773357][T25359] team0: Port device team_slave_1 added [ 1428.787497][T25442] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1428.877474][T25442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1428.931803][T25359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.472010][T25359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1429.547008][T14354] Bluetooth: hci0: command 0x040f tx timeout [ 1429.592496][T25359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1429.825721][T25359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1429.833925][T24219] EXT4-fs (loop3): unmounting filesystem. [ 1429.839222][T25359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1429.880213][T25359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.186373][T25359] device hsr_slave_0 entered promiscuous mode [ 1430.242202][T25359] device hsr_slave_1 entered promiscuous mode [ 1430.275173][T25359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1430.292495][T25359] Cannot create hsr debugfs directory [ 1430.356276][T25499] loop4: detected capacity change from 0 to 512 [ 1430.434133][T25499] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1430.491966][T25499] EXT4-fs warning (device loop4): ext4_enable_quotas:7030: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1430.576964][T25499] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1430.656008][T14354] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1430.787103][T25499] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.5204: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1430.912378][T25499] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.5204: couldn't read orphan inode 13 (err -117) [ 1431.017416][T25499] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1431.278561][T25509] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1431.327556][T25509] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 1431.501684][T25513] loop5: detected capacity change from 0 to 2048 [ 1431.569006][T25499] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.5204: deleted inode referenced: 12 [ 1431.592814][T25513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1431.766837][T14354] Bluetooth: hci0: command 0x0419 tx timeout [ 1432.457918][T23476] EXT4-fs (loop4): unmounting filesystem. [ 1432.516995][ T4483] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1432.631904][ T4296] device hsr_slave_0 left promiscuous mode [ 1432.643946][ T4296] device hsr_slave_1 left promiscuous mode [ 1432.707879][T14354] Bluetooth: hci1: command 0x0409 tx timeout [ 1432.744821][ T4483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.757590][ T4483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.775502][ T4483] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1432.792667][ T4483] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1432.805065][ T4483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.829372][ T4483] usb 4-1: config 0 descriptor?? [ 1432.876646][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.297005][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.306621][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.338930][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.467749][ T4296] device bridge_slave_1 left promiscuous mode [ 1433.481705][ T4483] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1433.481739][ T4483] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1433.481766][ T4483] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1433.481791][ T4483] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1433.481816][ T4483] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1433.481841][ T4483] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1433.481866][ T4483] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1433.481890][ T4483] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1433.481915][ T4483] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1433.481938][ T4483] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 1433.484792][ T4483] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 1433.507507][ T4483] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1433.525545][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.583606][ T4296] device bridge_slave_0 left promiscuous mode [ 1433.583799][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.938319][ T4296] device veth1_macvtap left promiscuous mode [ 1433.946984][ T4296] device veth0_macvtap left promiscuous mode [ 1433.959964][ T4296] device veth1_vlan left promiscuous mode [ 1433.972593][ T4296] device veth0_vlan left promiscuous mode [ 1434.646824][T25550] loop4: detected capacity change from 0 to 1024 [ 1434.747905][ T4302] usb 4-1: USB disconnect, device number 25 [ 1434.755571][ T4626] hfsplus: b-tree write err: -5, ino 4 [ 1435.269727][T14354] Bluetooth: hci4: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 1435.318399][T14354] Bluetooth: hci3: command 0x0406 tx timeout [ 1435.324561][T14354] Bluetooth: hci4: command 0x0406 tx timeout [ 1436.133288][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 1436.653711][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 1436.833704][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1436.877671][T25563] loop3: detected capacity change from 0 to 128 [ 1436.950624][T25563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1436.959662][T25563] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1437.149204][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.397047][T14354] Bluetooth: hci4: command 0x0409 tx timeout [ 1438.148670][T24219] EXT4-fs (loop3): unmounting filesystem. [ 1438.343485][T25573] loop4: detected capacity change from 0 to 2048 [ 1438.551313][T25573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1439.084491][T25576] loop3: detected capacity change from 0 to 128 [ 1440.298124][T25584] loop3: detected capacity change from 0 to 512 [ 1440.437696][T25584] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 1441.147845][T25578] loop3: detected capacity change from 0 to 2048 [ 1441.161448][T25578] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1441.566986][ T4302] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 1441.644834][ T4296] bond0 (unregistering): Released all slaves [ 1441.789669][ T4302] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1441.810151][ T4302] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1441.831584][ T4302] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1441.841002][ T4302] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1441.853708][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.890257][ T4302] usb 5-1: config 0 descriptor?? [ 1441.896022][T25586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1442.494238][T25592] loop3: detected capacity change from 0 to 2048 [ 1442.561562][T25586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.614053][T25592] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1443.084709][T25586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.338562][ T4302] usbhid 5-1:0.0: can't add hid device: -71 [ 1443.347182][ T4302] usbhid: probe of 5-1:0.0 failed with error -71 [ 1443.358241][ T4302] usb 5-1: USB disconnect, device number 5 [ 1444.049399][T25611] loop4: detected capacity change from 0 to 128 [ 1446.533902][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 1446.722592][ T4304] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1446.992597][T25632] loop3: detected capacity change from 0 to 512 [ 1447.005060][T25632] EXT4-fs: Ignoring removed i_version option [ 1447.957357][T25632] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1448.084897][T25632] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 1448.093035][T25632] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1448.350949][ T4304] usb 5-1: device descriptor read/all, error -71 [ 1448.370187][T24219] EXT4-fs (loop3): unmounting filesystem. [ 1448.803098][T25359] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1448.877200][T19726] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 1448.896795][T25359] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1449.082345][T25359] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1449.083026][T19726] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1449.173135][T19726] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1449.192332][T25359] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1449.219851][T19726] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1449.229760][T19726] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1449.242532][T19726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.262695][T19726] usb 6-1: config 0 descriptor?? [ 1449.272331][T25644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1449.479741][T25359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.520859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1449.562689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1449.591160][T25359] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.639498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1449.679387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1449.688618][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.695779][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.715227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1449.724597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1449.738142][T25644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.761233][T25655] loop4: detected capacity change from 0 to 128 [ 1449.768918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1449.777332][T25644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.789413][T25655] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1449.802291][T19726] usbhid 6-1:0.0: can't add hid device: -71 [ 1449.810348][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.817530][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.825377][T19726] usbhid: probe of 6-1:0.0 failed with error -71 [ 1449.860243][T19726] usb 6-1: USB disconnect, device number 9 [ 1449.868561][T25655] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1449.872346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1449.947732][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1449.957925][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1449.976247][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1449.989289][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1450.003905][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1450.033693][T25359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1450.067758][T25359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1450.084577][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1450.095995][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1450.108855][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1450.131138][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1450.154902][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1481.386841][T14354] Bluetooth: hci2: command 0x0406 tx timeout [ 1484.430937][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.437328][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.874379][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.880837][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.946841][T14354] Bluetooth: hci0: command 0x0406 tx timeout [ 1555.456683][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1555.463669][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11/1:b..l [ 1555.472146][ C1] (detected by 1, t=10502 jiffies, g=167529, q=344 ncpus=2) [ 1555.479616][ C1] task:kworker/u4:1 state:R running task stack:20416 pid:11 ppid:2 flags:0x00004000 [ 1555.492153][ C1] Workqueue: bat_events batadv_nc_worker [ 1555.497815][ C1] Call Trace: [ 1555.501095][ C1] [ 1555.504037][ C1] __schedule+0x143f/0x4570 [ 1555.508555][ C1] ? mark_lock+0x9a/0x340 [ 1555.512900][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 1555.518818][ C1] ? print_irqtrace_events+0x210/0x210 [ 1555.524313][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 1555.529622][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 1555.534869][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 1555.540623][ C1] ? rcu_is_watching+0x11/0xb0 [ 1555.545393][ C1] irqentry_exit+0x53/0x80 [ 1555.549821][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1555.555823][ C1] RIP: 0010:batadv_nc_worker+0x1fe/0x610 [ 1555.561488][ C1] Code: ff 74 0e e8 84 81 08 f7 eb b8 e8 7d 81 08 f7 eb 05 e8 76 81 08 f7 e8 41 5f 2f 00 89 c3 31 ff 89 c6 e8 c6 84 08 f7 85 db 74 15 8d 6d f1 f6 84 c0 74 18 e8 54 81 08 f7 48 8b 5c 24 10 eb 65 e8 [ 1555.582592][ C1] RSP: 0018:ffffc90000107bf8 EFLAGS: 00000202 [ 1555.588674][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888017ff3b80 [ 1555.596651][ C1] RDX: ffff888017ff3b80 RSI: 0000000000000001 RDI: 0000000000000000 [ 1555.604727][ C1] RBP: 0000000000000000 R08: ffffffff8a82285a R09: fffffbfff225724d [ 1555.612705][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888063b78c80 [ 1555.620704][ C1] R13: 00000000000003c5 R14: ffff888079efd380 R15: dffffc0000000000 [ 1555.628683][ C1] ? batadv_nc_worker+0x1fa/0x610 [ 1555.633725][ C1] ? batadv_nc_worker+0x1fa/0x610 [ 1555.638783][ C1] ? batadv_nc_worker+0xc7/0x610 [ 1555.643752][ C1] ? process_one_work+0x806/0x1260 [ 1555.648867][ C1] process_one_work+0x917/0x1260 [ 1555.653821][ C1] ? worker_detach_from_pool+0x260/0x260 [ 1555.659465][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1555.665014][ C1] ? kthread_data+0x4e/0xc0 [ 1555.669532][ C1] ? wq_worker_running+0x97/0x190 [ 1555.674586][ C1] worker_thread+0xa47/0x1200 [ 1555.679286][ C1] kthread+0x28d/0x320 [ 1555.683358][ C1] ? worker_clr_flags+0x190/0x190 [ 1555.688384][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1555.692988][ C1] ret_from_fork+0x1f/0x30 [ 1555.697417][ C1] [ 1555.700432][ C1] rcu: rcu_preempt kthread starved for 9729 jiffies! g167529 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1555.711641][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1555.721606][ C1] rcu: RCU grace-period kthread stack dump: [ 1555.727590][ C1] task:rcu_preempt state:R running task stack:26648 pid:16 ppid:2 flags:0x00004000 [ 1555.738365][ C1] Call Trace: [ 1555.741642][ C1] [ 1555.744575][ C1] __schedule+0x143f/0x4570 [ 1555.749087][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1555.753950][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 1555.759846][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 1555.765307][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1555.771208][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1555.776061][ C1] schedule+0xbf/0x180 [ 1555.780139][ C1] schedule_timeout+0x1b9/0x300 [ 1555.784989][ C1] ? console_conditional_schedule+0x40/0x40 [ 1555.790883][ C1] ? update_process_times+0x1b0/0x1b0 [ 1555.796258][ C1] ? prepare_to_swait_event+0x329/0x350 [ 1555.801813][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 1555.806678][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 1555.812195][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1555.818455][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 1555.824447][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1555.829672][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 1555.834490][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1555.840407][ C1] ? finish_swait+0xcf/0x1e0 [ 1555.845041][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 1555.849651][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1555.854775][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1555.860704][ C1] ? __kthread_parkme+0x168/0x1c0 [ 1555.865746][ C1] kthread+0x28d/0x320 [ 1555.869819][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1555.874946][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1555.879647][ C1] ret_from_fork+0x1f/0x30 [ 1555.884098][ C1] [ 1555.887144][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1555.893489][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1555.898752][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340