last executing test programs: 11m28.778141516s ago: executing program 2 (id=3286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x400c080) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'team_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x7, 0x58, "d5f3091a136d71efe80cba74b0dda988a05a82f22f1d7a9d6cae80555eef043620389d638120f278927cd11b7d29b7d82a1df971a25368f1647be9b4df57babe1dee177e4e81443a63983053b328d2cebc256be083086e3d"}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000180)={0x0, 0x94, 0xd}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x40, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x3d4, 0x3, 0x3}, 0x7}) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r7, r8, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040b0b19c9000700b3fd0f34416c"], 0xe) r9 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 11m13.022476884s ago: executing program 32 (id=3286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x400c080) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'team_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x7, 0x58, "d5f3091a136d71efe80cba74b0dda988a05a82f22f1d7a9d6cae80555eef043620389d638120f278927cd11b7d29b7d82a1df971a25368f1647be9b4df57babe1dee177e4e81443a63983053b328d2cebc256be083086e3d"}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000180)={0x0, 0x94, 0xd}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x40, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x3d4, 0x3, 0x3}, 0x7}) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r7, r8, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040b0b19c9000700b3fd0f34416c"], 0xe) r9 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 8m42.351752064s ago: executing program 4 (id=3794): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 8m41.99047542s ago: executing program 0 (id=3795): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 8m41.598557961s ago: executing program 0 (id=3796): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 8m36.645938652s ago: executing program 0 (id=3800): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8m35.90839453s ago: executing program 4 (id=3805): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 8m35.471772156s ago: executing program 4 (id=3807): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffb, 0x0, 0x8, 0xfffffffc, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1001, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x18, 0x0, 0x0, {0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r4, 0x6700000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) 8m34.876147436s ago: executing program 0 (id=3809): openat$ptp0(0xffffff9c, &(0x7f00000003c0), 0x8402, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, 0x0, 0x8000) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) userfaultfd(0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) 8m34.191756617s ago: executing program 4 (id=3811): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 8m29.414260013s ago: executing program 0 (id=3816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 8m28.668745945s ago: executing program 4 (id=3819): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 8m28.511918327s ago: executing program 0 (id=3821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x4070bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x10000000, 0x8, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 8m27.866415022s ago: executing program 4 (id=3823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 8m13.493721986s ago: executing program 33 (id=3821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x4070bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x10000000, 0x8, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 8m12.553356767s ago: executing program 34 (id=3823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5m1.587827234s ago: executing program 8 (id=4186): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x49}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m0.563575203s ago: executing program 3 (id=4190): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 4m58.929521829s ago: executing program 8 (id=4194): sched_setscheduler(0x0, 0x2, 0x0) socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) keyctl$revoke(0x3, r3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 4m58.846301581s ago: executing program 3 (id=4195): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)=',', 0x1, 0x18854, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendto(r0, &(0x7f0000000280)="1fe7ba0cbc99e6dfdcab9522ffb9c841cc2384f9a015eb9f9b79f7fd465f124c84333f37eff64ed8", 0x28, 0x4000001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 4m58.193612687s ago: executing program 3 (id=4198): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000a00)={[{@noquota}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff00}}, {@errors_remount}, {@commit={'commit', 0x3d, 0x7}}, {@orlov}], [{@subj_role={'subj_role', 0x3d, 'commit'}}]}, 0xfc, 0x587, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xf0f, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0xfc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8001, 0x7, 0x2582}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x0) 4m57.631692167s ago: executing program 8 (id=4199): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/10/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) socket$l2tp6(0xa, 0x2, 0x73) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000180)={0x1, 0x0, 0x80, 0xa, 0x4, 0xfffffed8, 0x2, 0xfffffffd, 0x20, 0x1, 0x20, 0x2, &(0x7f00000002c0)=[0x4], 0x1, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) 4m55.336870291s ago: executing program 3 (id=4202): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x7, 0x41217df2c9ce37e8}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 4m54.612025193s ago: executing program 8 (id=4205): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 4m53.124937346s ago: executing program 8 (id=4207): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 4m52.735546132s ago: executing program 3 (id=4211): sched_setscheduler(0x0, 0x2, 0x0) socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x5b) keyctl$revoke(0x3, r3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 4m52.29390796s ago: executing program 8 (id=4212): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 4m51.605761525s ago: executing program 3 (id=4216): openat$ptp0(0xffffff9c, &(0x7f00000003c0), 0x8402, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) userfaultfd(0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) 4m37.098760236s ago: executing program 35 (id=4212): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 4m36.238092991s ago: executing program 36 (id=4216): openat$ptp0(0xffffff9c, &(0x7f00000003c0), 0x8402, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) userfaultfd(0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) 2m34.57338033s ago: executing program 2 (id=4238): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 2m33.797502783s ago: executing program 2 (id=4511): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0x7, 0x8}}, 0x28) 2m32.266858804s ago: executing program 2 (id=4514): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='ACME\n\x00', 0x5) 2m31.830235597s ago: executing program 2 (id=4518): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r1) 2m31.299889284s ago: executing program 2 (id=4521): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r0, &(0x7f0000000500)="0600000000000000010000000401000000000000000000006c733100"/123, 0x77) 2m16.187724757s ago: executing program 37 (id=4521): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write(r0, &(0x7f0000000500)="0600000000000000010000000401000000000000000000006c733100"/123, 0x77) 8.383987034s ago: executing program 7 (id=4883): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) 5.931883024s ago: executing program 7 (id=4886): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.647252595s ago: executing program 1 (id=4888): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x4000000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='bfq\n\x00', 0x4) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x100000, &(0x7f0000000500), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x101000, &(0x7f0000000600), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000680)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x102000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) io_uring_enter(r3, 0x10, 0x10, 0x1, 0x0, 0x0) 5.57420021s ago: executing program 5 (id=4889): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000300)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 5.314430704s ago: executing program 1 (id=4891): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000001f00)='u', 0x1) 5.274319812s ago: executing program 5 (id=4892): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r2 = fanotify_init(0x81, 0x40000) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) creat(0x0, 0x93) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) 4.982963369s ago: executing program 1 (id=4894): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)=0x2) 4.897220841s ago: executing program 7 (id=4895): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000240)={0x0, 0x1, 0x38, 0x3}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003580)={{{@in=@private, @in6=@mcast2}}, {{}, 0x0, @in6=@private1}}, &(0x7f0000003680)=0xe4) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x4e8, 0x40000) statx(0xffffffffffffff9c, &(0x7f00000036c0)='./file0\x00', 0x400, 0x80, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x2000000}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000040)=[{r1, 0x10}, {r4, 0x2010}, {r4, 0x2}, {r4, 0x1304}], 0x4, 0xbfcb) write$uinput_user_dev(r4, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.428505585s ago: executing program 6 (id=4897): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xa8860) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) r8 = dup2(r5, r0) getsockopt$sock_buf(r8, 0x1, 0x1a, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x4c}, 0x2, 0x34005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 2.110531917s ago: executing program 5 (id=4898): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.062027061s ago: executing program 1 (id=4899): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80080, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0x8}}) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1.961471798s ago: executing program 6 (id=4900): syz_emit_ethernet(0x79, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x43, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], @dest_unreach={0x1, 0x4, 0x0, 0x80, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x2f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "7bf354"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e23, 0xc01, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffe7ffff}, 0x1c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.56368996s ago: executing program 5 (id=4901): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x4000000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, &(0x7f0000000200)) write(0xffffffffffffffff, &(0x7f0000000280)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='bfq\n\x00', 0x4) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x100000, &(0x7f0000000500), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x101000, &(0x7f0000000600), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}}}) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000680)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x102000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) syz_io_uring_submit(r4, r5, r6, 0x0) io_uring_enter(r3, 0x10, 0x10, 0x1, 0x0, 0x0) 1.504414349s ago: executing program 7 (id=4902): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000300)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 1.503049497s ago: executing program 6 (id=4903): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000020000000000000099aa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffff7f7b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400008d0000008500000015000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.056623687s ago: executing program 6 (id=4904): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000001f00)='u', 0x1) 1.055580229s ago: executing program 5 (id=4905): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) 937.539359ms ago: executing program 7 (id=4906): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 506.684142ms ago: executing program 6 (id=4907): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='usb-ss-gadget\x00', 0xe) 505.515427ms ago: executing program 7 (id=4908): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x5, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x866, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 493.689816ms ago: executing program 1 (id=4909): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000140)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x81, 0x10}, 0x90) 99.730663ms ago: executing program 5 (id=4910): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xa8860) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) r8 = dup2(r5, r0) getsockopt$sock_buf(r8, 0x1, 0x1a, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x4c}, 0x2, 0x34005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 82.591483ms ago: executing program 6 (id=4911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=4912): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000240)={0x0, 0x1, 0x38, 0x3}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003580)={{{@in=@private, @in6=@mcast2}}, {{}, 0x0, @in6=@private1}}, &(0x7f0000003680)=0xe4) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x4e8, 0x40000) statx(0xffffffffffffff9c, &(0x7f00000036c0)='./file0\x00', 0x400, 0x80, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x2000000}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000040)=[{r1, 0x10}, {r4, 0x2010}, {r4, 0x2}, {r4, 0x1304}], 0x4, 0xbfcb) write$uinput_user_dev(r4, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): netdevsim8 netdevsim3: renamed from eth3 [ 1233.751291][T20012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1233.887112][T19336] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1234.067730][T19336] usb 7-1: device descriptor read/64, error -71 [ 1234.356923][T19336] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1234.401695][T20012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.535453][T20012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.568587][T19336] usb 7-1: device descriptor read/64, error -71 [ 1234.624558][T16719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.631707][T16719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.730164][T19336] usb usb7-port1: attempt power cycle [ 1234.764599][T16719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.771788][T16719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.804847][T20412] fuse: Bad value for 'fd' [ 1234.884780][T20007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.274048][T19336] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1235.308689][T20012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1235.358697][T19336] usb 7-1: device descriptor read/8, error -71 [ 1235.630431][T19336] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1235.710604][T19336] usb 7-1: device descriptor read/8, error -71 [ 1235.858195][T19336] usb usb7-port1: unable to enumerate USB device [ 1236.960272][T20028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.175302][T20007] veth0_vlan: entered promiscuous mode [ 1237.334918][T20007] veth1_vlan: entered promiscuous mode [ 1237.645873][T20007] veth0_macvtap: entered promiscuous mode [ 1237.729617][T20007] veth1_macvtap: entered promiscuous mode [ 1237.878088][T20007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1237.899823][T19336] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1238.091764][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.099742][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.592229][T20007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1238.716159][T19336] usb 2-1: Using ep0 maxpacket: 16 [ 1238.759701][T19336] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1238.776974][T16420] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.842075][T16420] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.863807][T19336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1238.926528][T19336] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1238.956211][T16719] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.011699][T19336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.022500][T16719] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.087831][T19336] usb 2-1: config 0 descriptor?? [ 1239.131733][T20012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.205579][T20489] fuse: Bad value for 'fd' [ 1239.547715][T16719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.629167][T16719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.898225][T16420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.898246][T16420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.949083][T19336] bigben 0003:146B:0902.001A: unexpected rdesc, please submit for review [ 1239.949495][T19336] bigben 0003:146B:0902.001A: ignoring exceeding usage max [ 1239.972624][T19336] bigben 0003:146B:0902.001A: unknown main item tag 0x0 [ 1239.972651][T19336] bigben 0003:146B:0902.001A: unknown main item tag 0x0 [ 1239.972669][T19336] bigben 0003:146B:0902.001A: item fetching failed at offset 37/40 [ 1239.973220][T19336] bigben 0003:146B:0902.001A: parse failed [ 1239.973298][T19336] bigben 0003:146B:0902.001A: probe with driver bigben failed with error -22 [ 1240.085701][T20028] veth0_vlan: entered promiscuous mode [ 1240.172260][T20028] veth1_vlan: entered promiscuous mode [ 1240.354472][T20028] veth0_macvtap: entered promiscuous mode [ 1240.405526][T20028] veth1_macvtap: entered promiscuous mode [ 1240.529967][T20028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.590241][T20028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.692296][T16420] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.692578][T16420] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.692707][T16420] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.692819][T16420] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.168458][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.168478][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.490071][T16719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.490092][T16719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.557200][T20012] veth0_vlan: entered promiscuous mode [ 1241.649992][T20012] veth1_vlan: entered promiscuous mode [ 1241.894972][T20012] veth0_macvtap: entered promiscuous mode [ 1241.943370][T20012] veth1_macvtap: entered promiscuous mode [ 1242.100815][T20012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1242.154686][T20012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1242.196591][T16420] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.196716][T16420] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.196747][T16420] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.196777][T16420] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1242.380064][T19336] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1242.452276][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4142'. [ 1242.452296][T20535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4142'. [ 1242.541195][T19336] usb 6-1: Using ep0 maxpacket: 16 [ 1242.554402][T19336] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.554442][T19336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1242.554467][T19336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1242.554487][T19336] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1242.554508][T19336] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.557460][T19336] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1242.557484][T19336] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1242.557504][T19336] usb 6-1: Manufacturer: syz [ 1242.562119][T19336] usb 6-1: config 0 descriptor?? [ 1242.600261][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4142'. [ 1242.600280][T20535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4142'. [ 1242.774203][ T6221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.774223][ T6221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.789921][ T5996] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1242.790678][ T5996] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1242.790732][ T5996] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1242.790762][ T5996] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1242.825613][ T31] audit: type=1326 audit(1785527403.467:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20531 comm="syz.5.3717" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f322af9e019 code=0x0 [ 1243.039466][ T6221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.039486][ T6221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.441944][T20562] kAFS: unable to lookup cell 'ÿ' [ 1246.509071][T19336] rc_core: IR keymap rc-hauppauge not found [ 1246.509090][T19336] Registered IR keymap rc-empty [ 1246.509196][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.528714][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.547459][T19336] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1246.560455][T19336] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input56 [ 1246.601115][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.622425][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.638443][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.656873][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.676130][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.695956][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.718598][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.736331][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.757037][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.776186][T19336] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1246.797615][T19336] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1246.797635][T19336] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1246.831671][T19336] usb 6-1: USB disconnect, device number 57 [ 1246.974131][T20569] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1248.650868][T20600] Cannot find add_set index 0 as target [ 1251.215027][ T5866] usb 2-1: USB disconnect, device number 31 [ 1252.404626][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4161'. [ 1253.368822][T20612] loop5: detected capacity change from 0 to 32768 [ 1253.410752][T20612] btrfs: Deprecated parameter 'usebackuproot' [ 1253.476719][T20612] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1253.607376][T20612] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4157 (20612) [ 1253.805578][T20612] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1253.887262][T20612] BTRFS info (device loop5): using crc32c checksum algorithm [ 1255.406538][ T5995] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1256.316127][T20612] BTRFS error (device loop5): failed to load root extent [ 1256.421908][T20612] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1256.538507][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1256.701450][T20612] BTRFS warning (device loop5): couldn't read tree root [ 1256.748116][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1256.799755][T20612] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1256.855225][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1256.892535][ T12] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1256.981304][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1257.020228][T20612] BTRFS warning (device loop5): couldn't read tree root [ 1257.081697][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1257.109875][T20612] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1257.562768][T20612] BTRFS error (device loop5): open_ctree failed: -4 [ 1257.990995][T20704] kAFS: unable to lookup cell 'ÿ' [ 1262.833794][T20735] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[20028] was attempted by ""[20735] [ 1262.846504][T20735] netlink: 'syz.5.4183': attribute type 29 has an invalid length. [ 1263.012455][T20730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1263.778151][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4186'. [ 1263.858149][T20745] netlink: 'syz.3.4187': attribute type 1 has an invalid length. [ 1263.882839][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4186'. [ 1263.964379][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4188'. [ 1264.064251][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4188'. [ 1264.310699][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4186'. [ 1264.326191][ T5995] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.433628][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4186'. [ 1264.445291][ T1110] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.550973][ T1110] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1264.657858][ T1110] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1269.873159][T20790] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[20007] was attempted by ""[20790] [ 1269.885913][T20790] netlink: 'syz.7.4200': attribute type 29 has an invalid length. [ 1269.896353][T20790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1270.393069][T20799] netlink: 'syz.3.4202': attribute type 1 has an invalid length. [ 1270.531064][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4203'. [ 1270.627746][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4203'. [ 1271.888738][ T31] audit: type=1800 audit(1785527432.538:116): pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4206" name="local" dev="configfs" ino=65963 res=0 errno=0 [ 1272.135605][ T31] audit: type=1800 audit(1785527432.598:117): pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4206" name="scan_secs" dev="configfs" ino=65970 res=0 errno=0 [ 1275.545297][T20834] loop6: detected capacity change from 0 to 1024 [ 1275.638136][T20834] EXT4-fs: Invalid want_extra_isize 7 [ 1278.077253][T20846] kAFS: unable to lookup cell 'ÿ' [ 1278.358466][T20851] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[16703] was attempted by ""[20851] [ 1278.371098][T20851] netlink: 'syz.6.4218': attribute type 29 has an invalid length. [ 1278.381586][T20851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1282.384872][T20869] loop6: detected capacity change from 0 to 512 [ 1282.496190][T20869] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 1282.590225][T20869] EXT4-fs (loop6): 1 truncate cleaned up [ 1282.671394][T20869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1282.893971][T20877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4225'. [ 1282.996050][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4225'. [ 1283.068724][T16703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.169546][T20877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4225'. [ 1283.181160][T20880] binder: 20879:20880 ioctl c0306201 0 returned -14 [ 1283.188212][ T49] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.289269][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4225'. [ 1283.299435][ T49] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.409641][ T49] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1283.517124][ T49] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1284.416348][T20893] loop7: detected capacity change from 0 to 1024 [ 1284.478319][T20893] EXT4-fs: Invalid want_extra_isize 7 [ 1290.134407][T14255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1290.149992][T14255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1290.159282][T14255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1290.190696][T14255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1290.207368][T14255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1290.546401][T20929] xt_hashlimit: size too large, truncated to 1048576 [ 1291.156972][T20942] binder: 20940:20942 ioctl c0306201 0 returned -14 [ 1291.288227][ T5651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1291.300165][ T5651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1291.327976][ T5651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1291.339280][ T5651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1291.350533][ T5651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1291.633785][T20951] netlink: 'syz.1.4223': attribute type 1 has an invalid length. [ 1292.325075][T14255] Bluetooth: hci1: command tx timeout [ 1292.861498][T20968] loop5: detected capacity change from 0 to 1024 [ 1292.947819][T20968] EXT4-fs: Invalid want_extra_isize 7 [ 1293.726962][T14255] Bluetooth: hci4: command tx timeout [ 1294.405142][T14255] Bluetooth: hci1: command tx timeout [ 1295.763854][T14255] Bluetooth: hci4: command tx timeout [ 1296.354296][T20987] netlink: 'syz.5.4248': attribute type 17 has an invalid length. [ 1296.461563][T20987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4248'. [ 1296.483412][T14255] Bluetooth: hci1: command tx timeout [ 1297.715827][T20996] loop1: detected capacity change from 0 to 512 [ 1297.734230][T20997] binder: 20995:20997 ioctl c0306201 0 returned -14 [ 1297.846794][T14255] Bluetooth: hci4: command tx timeout [ 1297.939780][T20996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.902745][T14255] Bluetooth: hci1: command tx timeout [ 1299.368513][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.377200][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.461182][T20996] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1299.541159][T21010] xt_hashlimit: size too large, truncated to 1048576 [ 1299.923801][T14255] Bluetooth: hci4: command tx timeout [ 1299.937600][T14653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.112161][ T5881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.250827][ T5881] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.227340][T21025] netlink: 'syz.1.4257': attribute type 1 has an invalid length. [ 1302.368379][T21032] loop5: detected capacity change from 0 to 1024 [ 1302.408553][T21032] EXT4-fs: Invalid want_extra_isize 7 [ 1302.422076][ T5881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1302.677650][ T5881] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.855559][ T5881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.954641][ T5881] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.309447][T21050] netlink: 'syz.1.4263': attribute type 17 has an invalid length. [ 1304.364050][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'. [ 1304.700209][ T5881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.774659][ T5881] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.582011][T21071] loop6: detected capacity change from 0 to 256 [ 1305.642065][T21071] msdos: Bad value for 'dmask' [ 1306.185164][T21081] loop6: detected capacity change from 0 to 1024 [ 1306.261880][T21081] EXT4-fs: Invalid want_extra_isize 7 [ 1308.545196][T21120] loop1: detected capacity change from 0 to 1024 [ 1308.614989][T21120] EXT4-fs: Invalid want_extra_isize 7 [ 1308.621390][ T5881] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.880620][ T5881] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.676045][T21129] loop6: detected capacity change from 0 to 512 [ 1309.714889][T21132] loop5: detected capacity change from 0 to 256 [ 1309.857163][T21129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.875189][ T5881] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.980583][ T5881] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.002556][T21129] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1310.332401][T16703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.347583][T20920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.401427][T20920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.475574][T20920] bridge_slave_0: entered allmulticast mode [ 1310.555242][T20920] bridge_slave_0: entered promiscuous mode [ 1310.714990][T21148] loop5: detected capacity change from 0 to 1024 [ 1310.738136][T20920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.759036][T21148] EXT4-fs: Invalid want_extra_isize 7 [ 1310.783985][T20920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.003152][T20920] bridge_slave_1: entered allmulticast mode [ 1311.050601][T20920] bridge_slave_1: entered promiscuous mode [ 1311.223665][ T5881] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1311.271772][ T5881] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.769083][T20944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.812392][T20944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.853475][T20944] bridge_slave_0: entered allmulticast mode [ 1311.898215][T20944] bridge_slave_0: entered promiscuous mode [ 1311.957841][T20920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.120035][ T5881] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.174281][ T5881] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.310203][T20944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.322575][ T5939] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1312.359967][T20944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.405599][T20944] bridge_slave_1: entered allmulticast mode [ 1312.454873][T20944] bridge_slave_1: entered promiscuous mode [ 1312.528638][ T5939] usb 7-1: Using ep0 maxpacket: 8 [ 1312.550924][ T5939] usb 7-1: config 0 has no interfaces? [ 1312.571642][T20920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.583157][ T5939] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1312.626814][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.716522][ T5939] usb 7-1: config 0 descriptor?? [ 1312.722219][T19336] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1312.885362][T20944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.938405][T19336] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1312.999822][ T5939] usb 7-1: USB disconnect, device number 26 [ 1313.008268][T19336] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1313.092840][T19336] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1313.175224][T20944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.194507][T19336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1313.246033][T19336] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1313.303253][T19336] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1313.353998][T20920] team0: Port device team_slave_0 added [ 1313.367856][T19336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1313.390468][T20920] team0: Port device team_slave_1 added [ 1313.402903][T19336] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1313.436509][T19336] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1313.518621][T19336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1313.576901][T19336] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1313.645845][T19336] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1313.744365][T19336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1313.811367][T19336] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1313.878685][T19336] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1313.902097][T20944] team0: Port device team_slave_0 added [ 1313.946635][T20944] team0: Port device team_slave_1 added [ 1313.964300][T19336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1313.985682][T20920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.997033][T19336] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.010827][T20920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.037132][T19336] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.050827][T19336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1314.058247][T20920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.073574][T19336] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.088989][T19336] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.110465][T19336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1314.145889][T19336] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1314.183215][T19336] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1314.235025][T19336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1314.258289][T20920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.286068][T19336] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1314.304353][T20920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.342190][T19336] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1314.360229][T19336] usb 2-1: Product: syz [ 1314.390131][T19336] usb 2-1: Manufacturer: syz [ 1314.419727][T19336] usb 2-1: SerialNumber: syz [ 1314.440615][T20920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.453886][T19336] usb 2-1: config 0 descriptor?? [ 1314.507813][T19336] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1314.807283][T21198] loop7: detected capacity change from 0 to 4096 [ 1314.916260][T20944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.979293][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 1314.997301][ T5768] usb 2-1: USB disconnect, device number 32 [ 1315.016003][T20944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.114887][ T5768] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1315.251781][T20944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1315.379327][T20944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.450133][T20944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.580421][T21207] loop6: detected capacity change from 0 to 512 [ 1315.713724][T21207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.726558][T20944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.867373][T21207] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1316.153347][T21217] loop1: detected capacity change from 0 to 1024 [ 1316.200149][T16703] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.229920][T21217] EXT4-fs: Invalid want_extra_isize 7 [ 1316.628864][T20920] hsr_slave_0: entered promiscuous mode [ 1316.699559][T20920] hsr_slave_1: entered promiscuous mode [ 1316.782426][T20920] debugfs: 'hsr0' already exists in 'hsr' [ 1316.953895][T20920] Cannot create hsr debugfs directory [ 1317.043728][T21225] loop6: detected capacity change from 0 to 1024 [ 1317.109607][T21225] EXT4-fs: Invalid want_extra_isize 7 [ 1317.580842][ T5881] dummy0: left allmulticast mode [ 1317.653628][ T5881] bridge0: port 3(dummy0) entered disabled state [ 1317.728470][ T5881] bridge_slave_1: left allmulticast mode [ 1317.776844][ T5881] bridge_slave_1: left promiscuous mode [ 1317.821177][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.886089][ T5881] bridge_slave_0: left allmulticast mode [ 1317.941042][ T5881] bridge_slave_0: left promiscuous mode [ 1317.996816][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.182264][ T5881] bridge_slave_1: left allmulticast mode [ 1318.217455][ T5881] bridge_slave_1: left promiscuous mode [ 1318.267248][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.330126][ T5881] bridge_slave_0: left allmulticast mode [ 1318.393273][ T5881] bridge_slave_0: left promiscuous mode [ 1318.440452][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.765534][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1319.835818][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1319.909846][ T5881] bond0 (unregistering): Released all slaves [ 1320.583783][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.648640][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.687840][ T5881] bond0 (unregistering): Released all slaves [ 1320.833086][T20944] hsr_slave_0: entered promiscuous mode [ 1320.878325][T20944] hsr_slave_1: entered promiscuous mode [ 1320.920761][T20944] debugfs: 'hsr0' already exists in 'hsr' [ 1320.974458][T20944] Cannot create hsr debugfs directory [ 1321.247120][T21280] loop5: detected capacity change from 0 to 512 [ 1321.377844][T21280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1321.494421][T21280] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.802182][T20028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.937967][T21263] Bluetooth: hci2: command 0x0406 tx timeout [ 1321.948148][T21263] Bluetooth: hci8: command 0x0406 tx timeout [ 1322.033841][T21293] loop6: detected capacity change from 0 to 16 [ 1322.114827][T21293] erofs (device loop6): invalid ishare xattr prefix id 0 [ 1322.785842][T21306] loop6: detected capacity change from 0 to 1024 [ 1322.855272][T21306] EXT4-fs: Invalid want_extra_isize 7 [ 1323.459708][T21282] loop1: detected capacity change from 0 to 32768 [ 1323.590311][T21282] JBD2: Ignoring recovery information on journal [ 1323.811397][T21282] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1324.429377][T14653] ocfs2: Unmounting device (7,1) on (node local) [ 1325.098067][T21313] loop5: detected capacity change from 0 to 32768 [ 1325.152494][T21313] btrfs: Deprecated parameter 'usebackuproot' [ 1325.192716][T21313] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1325.298043][T21313] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4312 (21313) [ 1325.392152][ T5881] hsr_slave_0: left promiscuous mode [ 1325.435783][ T5881] hsr_slave_1: left promiscuous mode [ 1325.480750][T21313] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1325.493656][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.528732][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.540283][T21313] BTRFS info (device loop5): using crc32c checksum algorithm [ 1325.576638][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1325.621005][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.654568][T16420] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1325.691220][ T5939] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1325.752670][T21313] BTRFS error (device loop5): failed to load root extent [ 1325.785916][T21313] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1325.821961][T16420] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1325.849887][ T5881] hsr_slave_0: left promiscuous mode [ 1325.885588][T21313] BTRFS warning (device loop5): couldn't read tree root [ 1325.893430][ T5939] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1325.918771][ T5881] hsr_slave_1: left promiscuous mode [ 1325.936884][T21313] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1325.956701][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.976789][ T5939] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1325.990284][ T5995] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1326.008042][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1326.030163][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1326.053409][T21313] BTRFS warning (device loop5): couldn't read tree root [ 1326.080652][ T5939] usb 2-1: Product: syz [ 1326.090898][T21313] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1326.101861][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1326.119447][ T5939] usb 2-1: Manufacturer: syz [ 1326.135750][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1326.150709][ T5939] usb 2-1: SerialNumber: syz [ 1326.174383][T21313] BTRFS info (device loop5): rebuilding free space tree [ 1326.336383][ T5881] veth1_macvtap: left promiscuous mode [ 1326.383534][ T5881] veth0_macvtap: left promiscuous mode [ 1326.405847][T21325] binder: 21324:21325 ioctl c018620c 200000000780 returned -22 [ 1326.430178][ T5881] veth1_vlan: left promiscuous mode [ 1326.473278][ T5939] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1326.492709][ T5881] veth0_vlan: left promiscuous mode [ 1326.529544][ T5881] veth1_macvtap: left promiscuous mode [ 1326.570811][ T5881] veth0_macvtap: left promiscuous mode [ 1326.593083][T21313] BTRFS info (device loop5): checking UUID tree [ 1326.613116][ T5881] veth1_vlan: left promiscuous mode [ 1326.637976][T21313] BTRFS error (device loop5): failed to check the UUID tree: -4 [ 1326.650370][ T5881] veth0_vlan: left promiscuous mode [ 1326.815855][T21313] BTRFS error (device loop5): open_ctree failed: -4 [ 1326.832235][ C0] usblp0: nonzero write bulk status received: -71 [ 1326.855805][ T5939] usb 2-1: USB disconnect, device number 33 [ 1326.935994][ T5939] usblp0: removed [ 1328.888526][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4320'. [ 1328.950011][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4320'. [ 1329.300708][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 1329.397532][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 1333.139272][T21384] efs: cannot read volume header [ 1334.039248][ T5881] team0 (unregistering): Port device team_slave_1 removed [ 1334.147026][ T5881] team0 (unregistering): Port device team_slave_0 removed [ 1334.803875][ T31] audit: type=1800 audit(1785527495.452:118): pid=21394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4328" name="ifname" dev="configfs" ino=68376 res=0 errno=0 [ 1338.756070][T21432] vivid-002: ================= START STATUS ================= [ 1338.809820][T21432] vivid-002: Radio HW Seek Mode: Bounded [ 1338.855660][T21432] vivid-002: Radio Programmable HW Seek: false [ 1338.914538][T21432] vivid-002: RDS Rx I/O Mode: Block I/O [ 1338.962018][T21432] vivid-002: Generate RBDS Instead of RDS: false [ 1339.026968][T21432] vivid-002: RDS Reception: true [ 1339.059863][T21432] vivid-002: RDS Program Type: 0 inactive [ 1339.109962][T21432] vivid-002: RDS PS Name: inactive [ 1339.143221][T21432] vivid-002: RDS Radio Text: inactive [ 1339.204253][T21432] vivid-002: RDS Traffic Announcement: false inactive [ 1339.254958][T21432] vivid-002: RDS Traffic Program: false inactive [ 1339.313250][T21432] vivid-002: RDS Music: false inactive [ 1339.347885][T21432] vivid-002: ================== END STATUS ================== [ 1339.688269][T20944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1339.786649][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1339.849518][T20944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1339.927412][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1340.002049][T20944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1340.033850][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1340.063476][T20944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1340.117192][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1340.754650][T20920] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1340.829770][T20920] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1340.894542][T20920] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1340.986638][T20920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1341.054314][T20920] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1341.152043][T20920] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1341.218159][T20920] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1341.316788][T20920] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1342.148906][T21495] fuse: Unknown parameter 'user_id00000000000000000000' [ 1342.164965][T20944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.594164][T20944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.774176][T18162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.781331][T18162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.914501][T21504] netlink: 'syz.6.4350': attribute type 9 has an invalid length. [ 1342.955973][T18162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.963108][T18162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.088711][T21504] macvlan2: entered promiscuous mode [ 1343.143273][T21504] macvlan2: entered allmulticast mode [ 1343.401224][T20920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.446638][T20920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.622750][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.629909][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.788297][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.795458][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.330247][T21535] Invalid ELF header magic: != ELF [ 1347.975426][T21540] warning: `syz.1.4357' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1349.967936][T21545] workqueue: Failed to create a rescuer kthread for wq "dio/overlay": -EINTR [ 1350.031628][T21548] fuse: Bad value for 'fd' [ 1353.301263][T14255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1353.317055][T14255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1353.326401][T14255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1353.337062][T14255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1353.357870][T21290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1353.408875][T21290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1353.423404][T21290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1353.443583][T21290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1353.454256][T21290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1353.469153][T21290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1354.255765][T21590] fuse: Unknown parameter 'grou00000000000000000000' [ 1355.349740][T21603] Invalid ELF header magic: != ELF [ 1355.914186][T14255] Bluetooth: hci3: command tx timeout [ 1355.921318][T21290] Bluetooth: hci5: command tx timeout [ 1357.350159][T21619] fuse: Bad value for 'fd' [ 1357.379455][ T5939] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1357.431955][T21615] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1357.497865][T21615] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1357.720369][T21615] udc dummy_udc.0: failed to start g1: -22 [ 1358.008530][T21290] Bluetooth: hci5: command tx timeout [ 1358.014025][T14255] Bluetooth: hci3: command tx timeout [ 1358.042134][ T5939] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1358.109151][T21615] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1358.177201][ T5939] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1358.203733][T21615] UDC core: g1: couldn't find an available UDC or it's busy [ 1358.254020][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1358.885620][ T5939] usb 2-1: Product: syz [ 1358.926805][ T5939] usb 2-1: Manufacturer: syz [ 1358.972472][ T5939] usb 2-1: SerialNumber: syz [ 1359.272510][T21613] binder: 21611:21613 ioctl c018620c 200000000780 returned -22 [ 1359.356564][ T5939] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1359.683613][T21649] fuse: Unknown parameter 'grou00000000000000000000' [ 1360.081540][T21290] Bluetooth: hci5: command tx timeout [ 1360.087000][T14255] Bluetooth: hci3: command tx timeout [ 1360.728237][ T5939] usb 2-1: USB disconnect, device number 34 [ 1360.812072][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.818507][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.901004][ T5939] usblp0: removed [ 1361.063354][T21679] fuse: Bad value for 'fd' [ 1361.891032][ T5996] bridge_slave_1: left allmulticast mode [ 1362.309422][ T5651] Bluetooth: hci5: command tx timeout [ 1362.316743][T21290] Bluetooth: hci3: command tx timeout [ 1362.335362][ T5996] bridge_slave_1: left promiscuous mode [ 1362.389702][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.485027][ T5996] bridge_slave_0: left allmulticast mode [ 1362.667854][ T5996] bridge_slave_0: left promiscuous mode [ 1362.723210][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.814398][T21698] netlink: 'syz.6.4391': attribute type 1 has an invalid length. [ 1363.246245][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.273418][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.301144][ T5996] bond0 (unregistering): Released all slaves [ 1363.390155][ T5282] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1363.404741][T21687] loop7: detected capacity change from 0 to 32768 [ 1363.533071][T21687] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1363.558352][T21698] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1363.666737][ T5996] hsr_slave_0: left promiscuous mode [ 1363.717564][ T5996] hsr_slave_1: left promiscuous mode [ 1363.775384][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1363.799070][T21687] XFS (loop7): Ending clean mount [ 1363.880105][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.974910][T21687] XFS (loop7): Quotacheck needed: Please wait. [ 1364.369270][ T5939] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1364.518213][T21687] XFS (loop7): Quotacheck: Done. [ 1364.585344][ T5939] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1364.671199][T20007] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1364.715838][ T5939] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1364.791067][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1364.879263][ T5939] usb 6-1: Product: syz [ 1364.923636][ T5939] usb 6-1: Manufacturer: syz [ 1364.973977][ T5939] usb 6-1: SerialNumber: syz [ 1364.994987][T21738] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1365.002897][ T31] audit: type=1800 audit(1785527525.644:119): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4399" name="UDC" dev="configfs" ino=70150 res=0 errno=0 [ 1365.075860][T21738] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1365.185684][T21738] udc dummy_udc.0: failed to start g1: -22 [ 1365.233858][T21738] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1365.302957][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 1365.317648][T21738] UDC core: g1: couldn't find an available UDC or it's busy [ 1365.343383][T21725] binder: 21723:21725 ioctl c018620c 200000000780 returned -22 [ 1365.455719][ T5939] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1365.480656][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 1368.036171][ T5939] usb 6-1: USB disconnect, device number 58 [ 1368.124042][ T5939] usblp0: removed [ 1369.202264][T19336] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1369.221801][T21769] netlink: 'syz.5.4404': attribute type 1 has an invalid length. [ 1369.344979][T21769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1369.411428][T19336] usb 2-1: Using ep0 maxpacket: 32 [ 1369.435266][T19336] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1369.469921][T21775] bond1: (slave geneve2): making interface the new active one [ 1369.488920][T19336] usb 2-1: config 0 has no interface number 0 [ 1369.496457][T21775] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1369.507081][T19336] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1369.541758][T19336] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1369.575575][T19336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.617289][T19336] usb 2-1: Product: syz [ 1369.654914][T19336] usb 2-1: Manufacturer: syz [ 1369.718468][T19336] usb 2-1: SerialNumber: syz [ 1369.788075][T19336] usb 2-1: config 0 descriptor?? [ 1370.997828][T21807] fuse: Bad value for 'fd' [ 1371.067873][T19336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 1371.173041][T19336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1371.260748][T19336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1371.325099][T19336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1371.392080][T19336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1371.453832][T19336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1371.485032][T21569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.535215][T19336] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1371.543802][T21569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.578462][T21569] bridge_slave_0: entered allmulticast mode [ 1371.603849][T19336] usb 2-1: USB disconnect, device number 35 [ 1371.651015][T21569] bridge_slave_0: entered promiscuous mode [ 1371.804475][T21569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.860743][T21569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.924232][T21569] bridge_slave_1: entered allmulticast mode [ 1371.933239][T21816] loop5: detected capacity change from 0 to 2048 [ 1372.131031][T21569] bridge_slave_1: entered promiscuous mode [ 1372.514044][T21816] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1372.558434][T20613] udevd[20613]: incorrect nilfs2 checksum on /dev/loop5 [ 1372.595334][T21816] NILFS (loop5): mounting unchecked fs [ 1372.710816][T20613] udevd[20613]: incorrect nilfs2 checksum on /dev/loop5 [ 1372.977050][T21816] NILFS (loop5): recovery complete [ 1374.182721][T21571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.403624][T21571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.423065][T21832] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1374.475830][T21571] bridge_slave_0: entered allmulticast mode [ 1374.528275][T21571] bridge_slave_0: entered promiscuous mode [ 1374.601662][T21571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.654441][T21571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.866424][T21571] bridge_slave_1: entered allmulticast mode [ 1375.229773][T21571] bridge_slave_1: entered promiscuous mode [ 1375.263770][ T5282] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1375.307784][T21569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.392526][T21569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.449525][T21847] loop1: detected capacity change from 0 to 8 [ 1375.777124][T21850] fuse: Unknown parameter 'group_i00000000000000000000' [ 1375.792763][T21847] SQUASHFS error: xz decompression failed, data probably corrupt [ 1375.867070][T21847] SQUASHFS error: Failed to read block 0x60: -5 [ 1375.949113][T21847] SQUASHFS error: xz decompression failed, data probably corrupt [ 1376.041189][T21847] SQUASHFS error: Failed to read block 0x60: -5 [ 1376.106752][ T31] audit: type=1800 audit(1785527536.754:120): pid=21847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4420" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 1376.212760][T21858] fuse: Bad value for 'fd' [ 1376.391622][T21571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.473386][T21569] team0: Port device team_slave_0 added [ 1376.562879][T21569] team0: Port device team_slave_1 added [ 1376.634854][T21571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.498242][T21879] binder: 21878:21879 ioctl c018620c 200000000780 returned -22 [ 1379.802132][T21571] team0: Port device team_slave_0 added [ 1379.860526][T21569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.920129][T21888] fuse: Bad value for 'fd' [ 1379.932524][T21569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1380.154871][T21569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1380.275079][T21571] team0: Port device team_slave_1 added [ 1380.334369][T21897] fuse: Bad value for 'fd' [ 1380.586384][T21885] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4429'. [ 1380.684709][T21569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1380.753967][T21569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1380.954041][T21569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.279865][T21571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1381.340518][T21571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1381.724005][T21922] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[20028] was attempted by ""[21922] [ 1381.736719][T21922] netlink: 'syz.5.4438': attribute type 29 has an invalid length. [ 1381.750363][T21922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.774197][T21571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1382.054765][T21889] loop7: detected capacity change from 0 to 32768 [ 1382.296414][T21571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1382.365880][T21571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1382.583122][T21571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.712746][T21885] bridge0: port 3(syz_tun) entered blocking state [ 1382.750881][T21885] bridge0: port 3(syz_tun) entered disabled state [ 1382.794639][T21885] syz_tun: entered allmulticast mode [ 1382.831554][T21885] syz_tun: entered promiscuous mode [ 1382.862740][T21885] bridge0: port 3(syz_tun) entered blocking state [ 1382.869260][T21885] bridge0: port 3(syz_tun) entered forwarding state [ 1383.087389][ T5282] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1383.709156][T21569] hsr_slave_0: entered promiscuous mode [ 1383.740606][T21569] hsr_slave_1: entered promiscuous mode [ 1383.770940][T21569] debugfs: 'hsr0' already exists in 'hsr' [ 1383.794639][T21569] Cannot create hsr debugfs directory [ 1383.849148][T21571] hsr_slave_0: entered promiscuous mode [ 1383.869857][T21571] hsr_slave_1: entered promiscuous mode [ 1383.899818][T21571] debugfs: 'hsr0' already exists in 'hsr' [ 1383.923122][T21571] Cannot create hsr debugfs directory [ 1384.054583][ T5996] bridge_slave_1: left allmulticast mode [ 1384.073271][ T5996] bridge_slave_1: left promiscuous mode [ 1384.092824][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.133019][ T5996] bridge_slave_0: left allmulticast mode [ 1384.153331][ T5996] bridge_slave_0: left promiscuous mode [ 1384.171823][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.853711][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1384.904013][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1384.955313][ T5996] bond0 (unregistering): Released all slaves [ 1385.051526][T21949] fuse: fd is not a fuse device [ 1385.401853][ T5996] hsr_slave_0: left promiscuous mode [ 1385.448946][ T5996] hsr_slave_1: left promiscuous mode [ 1385.469170][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.526095][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.671611][T21967] 9p: Bad value for 'wfdno' [ 1386.258736][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 1386.456352][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 1386.555875][T21983] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[20028] was attempted by ""[21983] [ 1386.574594][T21983] netlink: 'syz.5.4455': attribute type 29 has an invalid length. [ 1386.586142][T21983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.984425][T21985] efs: cannot read volume header [ 1389.516469][T21997] loop1: detected capacity change from 0 to 2048 [ 1389.619739][T21997] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1389.732457][T21997] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1389.812532][T21997] UDF-fs: Scanning with blocksize 512 failed [ 1389.961487][T21997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1390.205176][ T31] audit: type=1800 audit(1785527550.845:121): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4458" name="file1" dev="loop1" ino=838 res=0 errno=0 [ 1390.495267][ T31] audit: type=1800 audit(1785527551.135:122): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4458" name="file1" dev="loop1" ino=838 res=0 errno=0 [ 1390.592667][T22012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4461'. [ 1390.689334][T22012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4461'. [ 1391.112164][T22018] 9p: Bad value for 'wfdno' [ 1391.830541][T22027] loop1: detected capacity change from 0 to 1024 [ 1391.883296][T22027] EXT4-fs: Invalid want_extra_isize 7 [ 1392.549049][T22035] loop1: detected capacity change from 0 to 1024 [ 1392.602838][T22035] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1392.830678][T22035] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1392.999629][T22035] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.4468: lblock 2 mapped to illegal pblock 2 (length 1) [ 1393.096606][T22035] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1393.098604][ C0] EXT4-fs (loop1): initial error at time 1785527553: ext4_map_blocks:791: inode 3: block 2 [ 1393.117722][ C0] EXT4-fs (loop1): last error at time 1785527553: ext4_map_blocks:791: inode 3: block 2 [ 1393.149907][T22035] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1393.194164][T22035] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.4468: lblock 0 mapped to illegal pblock 48 (length 1) [ 1393.311504][T22035] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1393.313403][T22035] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1393.432466][T22035] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.4468: Failed to acquire dquot type 0 [ 1393.612838][T22035] loop1: lost filesystem error report for type 5 error -117 [ 1393.614683][T22035] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1393.731578][T22035] loop1: lost filesystem error report for type 5 error -117 [ 1393.732172][T22035] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.4468: mark_inode_dirty error [ 1393.864992][T22035] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1393.865221][T22035] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1394.006825][T22035] EXT4-fs (loop1): 1 orphan inode deleted [ 1394.022701][ T5881] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1394.047389][T21569] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1394.090272][T22035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1394.106462][T22032] loop7: detected capacity change from 0 to 32768 [ 1394.131877][T22053] fuse: fd is not a fuse device [ 1394.143343][T21569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1394.159550][T22032] btrfs: Deprecated parameter 'usebackuproot' [ 1394.186618][ T5881] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1394.215205][T21569] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1394.242891][ T5881] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1394.259556][T22032] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1394.310124][ T5881] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:11: Failed to release dquot type 0 [ 1394.333068][T22032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4467 (22032) [ 1394.387925][T22035] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.4468: Invalid inode table block 1 in block_group 0 [ 1394.418323][T21569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1394.484706][T21569] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1394.521283][T22035] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1394.553393][T22032] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1394.627141][T22032] BTRFS info (device loop7): using crc32c checksum algorithm [ 1394.635955][T21569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1394.697158][T21569] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1394.750559][T21569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1394.777137][T14653] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.861678][ T5881] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1394.881193][T14653] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1394.939852][T22076] netlink: 'syz.5.4473': attribute type 10 has an invalid length. [ 1394.984824][T14653] loop1: lost filesystem error report for type 5 error -117 [ 1395.002082][T22080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4473'. [ 1395.033095][T14653] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1395.053000][T22032] BTRFS error (device loop7): failed to load root extent [ 1395.098781][T22032] BTRFS warning (device loop7): try to load backup roots slot 1 [ 1395.110679][T14653] loop1: lost filesystem error report for type 5 error -117 [ 1395.112864][T14653] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 1395.160763][T22080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4473'. [ 1395.185418][ T1118] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1395.250998][T14653] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1395.271822][T22032] BTRFS warning (device loop7): couldn't read tree root [ 1395.411895][T22032] BTRFS warning (device loop7): try to load backup roots slot 2 [ 1395.496444][ T5996] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1395.549969][T22083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4474'. [ 1395.600932][T22032] BTRFS warning (device loop7): couldn't read tree root [ 1395.655421][T22032] BTRFS warning (device loop7): try to load backup roots slot 3 [ 1395.719380][T22085] 9p: Bad value for 'wfdno' [ 1396.282966][T22083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4474'. [ 1396.302146][ T1118] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1396.334974][T22032] BTRFS error (device loop7): open_ctree failed: -4 [ 1396.368360][T21571] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1396.454486][T21571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1396.527032][T21571] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1396.872407][T21571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1396.957653][ T12] netdevsim netdevsim120 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1397.031168][T21571] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1397.161904][T21571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1397.244278][T21571] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1397.320453][ T31] audit: type=1800 audit(1785527557.965:123): pid=22110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4480" name="b_vendor_code" dev="configfs" ino=71904 res=0 errno=0 [ 1397.434125][T21571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1397.527550][T16420] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1397.997639][ T5881] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1398.708372][T21569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.798228][ T5881] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1398.865132][T22132] loop6: detected capacity change from 0 to 2048 [ 1398.925346][T22132] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=301129, location=301129 [ 1398.966843][T21569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.088339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.095518][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.151859][T22132] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1399.240481][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.247673][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.312019][T22138] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[20028] was attempted by ""[22138] [ 1399.324604][T22138] netlink: 'syz.5.4479': attribute type 29 has an invalid length. [ 1399.335071][T22138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.614908][T21571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.852660][T22141] fuse: Unknown parameter 'fd0x0000000000000003' [ 1399.866034][T21571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.969040][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.976220][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.196736][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.203941][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.300659][T21569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.833560][T22197] xt_hashlimit: size too large, truncated to 1048576 [ 1404.874206][T21571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.310182][T21571] veth0_vlan: entered promiscuous mode [ 1406.419604][T21571] veth1_vlan: entered promiscuous mode [ 1407.507096][T22210] comedi comedi0: 8255: I/O base address not correctly aligned [ 1407.550678][T22211] bridge1: entered promiscuous mode [ 1407.604496][T22211] bridge1: entered allmulticast mode [ 1407.753772][T22216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4496'. [ 1407.840014][T22216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4496'. [ 1407.872535][T22219] fuse: Unknown parameter 'fd0x0000000000000003' [ 1407.933139][T21571] veth0_macvtap: entered promiscuous mode [ 1408.042624][T21571] veth1_macvtap: entered promiscuous mode [ 1408.244760][T21571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1408.613418][T21571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.735638][T22233] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1408.778593][T22233] bond2: (slave macvlan2): making interface the new active one [ 1408.827146][T22233] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 1408.912556][ T5282] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1409.137438][ T6825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.201481][ T6825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.269243][ T6825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.336611][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.444083][T21569] veth0_vlan: entered promiscuous mode [ 1409.563800][T22252] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 1409.767646][T21569] veth1_vlan: entered promiscuous mode [ 1409.775958][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.824364][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.930340][T18161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.980653][T18161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.009561][T21569] veth0_macvtap: entered promiscuous mode [ 1410.064124][T21569] veth1_macvtap: entered promiscuous mode [ 1410.156033][T22256] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[14653] was attempted by ""[22256] [ 1410.169011][T22256] netlink: 'syz.1.4504': attribute type 29 has an invalid length. [ 1410.179574][T22256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.297821][T21569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.765419][T22265] xt_hashlimit: size too large, truncated to 1048576 [ 1412.452742][T14255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1412.468790][T14255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1412.478797][T14255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1412.497958][T14255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1412.512220][T14255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1413.915732][T22313] dlm: Using TCP for communications [ 1414.114665][T22313] dlm: ls1: joining the lockspace group... [ 1414.637692][T14255] Bluetooth: hci1: command tx timeout [ 1415.093663][ T5282] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1416.717898][T14255] Bluetooth: hci1: command tx timeout [ 1416.858920][ T58] bridge_slave_1: left allmulticast mode [ 1416.917554][ T58] bridge_slave_1: left promiscuous mode [ 1416.961171][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.077141][ T58] bridge_slave_0: left allmulticast mode [ 1417.142704][ T58] bridge_slave_0: left promiscuous mode [ 1417.213843][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.272802][T22391] fuse: Bad value for 'fd' [ 1417.489014][T15370] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1417.722475][T15370] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.791661][T15370] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.869122][T15370] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1417.973671][T15370] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1418.089750][T15370] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1418.154592][T15370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.250150][T15370] opticon 2-1:1.0: opticon converter detected [ 1418.321621][T15370] usb 2-1: opticon converter now attached to ttyUSB0 [ 1418.449471][T22417] loop6: detected capacity change from 0 to 1024 [ 1418.486554][T15370] usb 2-1: USB disconnect, device number 36 [ 1418.497878][T22417] EXT4-fs: Invalid want_extra_isize 7 [ 1418.722961][T15370] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1419.030696][T14255] Bluetooth: hci1: command tx timeout [ 1419.142027][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.184690][T15370] opticon 2-1:1.0: device disconnected [ 1419.225622][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.272451][ T58] bond0 (unregistering): Released all slaves [ 1419.387388][T22413] netlink: 'syz.7.4550': attribute type 3 has an invalid length. [ 1419.420867][T22413] netlink: 'syz.7.4550': attribute type 3 has an invalid length. [ 1419.504726][ T5282] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1419.632983][ T58] hsr_slave_0: left promiscuous mode [ 1419.690640][ T58] hsr_slave_1: left promiscuous mode [ 1419.724880][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1419.776334][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.814073][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.833474][T22431] fuse: Bad value for 'fd' [ 1419.891676][ T58] veth1_macvtap: left promiscuous mode [ 1419.934061][ T58] veth0_macvtap: left promiscuous mode [ 1419.977626][ T58] veth1_vlan: left promiscuous mode [ 1419.999679][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4557'. [ 1420.023472][ T58] veth0_vlan: left promiscuous mode [ 1420.052541][T22433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4557'. [ 1420.975479][T22441] loop7: detected capacity change from 0 to 4096 [ 1421.058767][T22441] ntfs3(loop7): ino=b, mi_enum_attr [ 1421.115596][T22441] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1421.123492][T14255] Bluetooth: hci1: command tx timeout [ 1421.206203][T22441] ntfs3(loop7): Failed to load $Extend (-22). [ 1421.258371][T22441] ntfs3(loop7): Failed to initialize $Extend. [ 1421.786696][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1421.876454][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1422.091398][T22454] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1422.102995][T22445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1422.133866][T22454] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1422.200309][T22454] udc dummy_udc.0: failed to start g1: -22 [ 1422.230890][T22454] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1422.247620][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.259605][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.320239][T22454] UDC core: g1: couldn't find an available UDC or it's busy [ 1422.549402][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4557'. [ 1422.588078][T22461] loop7: detected capacity change from 0 to 1024 [ 1422.617602][T22433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4557'. [ 1422.697610][T19336] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1423.301117][T22463] 9pnet_virtio: no channels available for device syz [ 1423.329833][T19336] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.405778][T19336] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.594150][T19336] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1423.665274][T19336] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1423.969145][T19336] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1424.981796][T22472] fuse: Bad value for 'fd' [ 1425.733242][T19336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.979949][T19336] usb 7-1: can't set config #1, error -71 [ 1426.075321][T19336] usb 7-1: USB disconnect, device number 27 [ 1426.330912][T22278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.342814][T22278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.342927][T22278] bridge_slave_0: entered allmulticast mode [ 1426.351716][T22278] bridge_slave_0: entered promiscuous mode [ 1426.473532][T22278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.473619][T22278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.473738][T22278] bridge_slave_1: entered allmulticast mode [ 1426.494795][T22278] bridge_slave_1: entered promiscuous mode [ 1426.757066][T22278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.780936][T22278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.010998][T22278] team0: Port device team_slave_0 added [ 1427.031956][T22497] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 1427.074787][T22278] team0: Port device team_slave_1 added [ 1427.105523][T22497] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 1427.159941][T22497] udc dummy_udc.0: failed to start g1: -22 [ 1427.197296][T22497] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1427.274217][T22278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1427.284989][T22497] UDC core: g1: couldn't find an available UDC or it's busy [ 1427.332786][T22278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.497107][T22477] loop1: detected capacity change from 0 to 32768 [ 1427.540374][T22278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1427.603065][T22477] JBD2: Ignoring recovery information on journal [ 1427.637367][T22503] netlink: 23 bytes leftover after parsing attributes in process `syz.7.4579'. [ 1427.653870][T22278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1427.712624][T22278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.843621][T22477] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1427.938521][T22278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.388334][T22518] netlink: 'syz.6.4586': attribute type 13 has an invalid length. [ 1428.450572][T22278] hsr_slave_0: entered promiscuous mode [ 1428.487018][T22278] hsr_slave_1: entered promiscuous mode [ 1428.514084][T22278] debugfs: 'hsr0' already exists in 'hsr' [ 1428.546137][T22278] Cannot create hsr debugfs directory [ 1428.961817][T14653] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 1429.052221][T14653] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1429.159763][T14653] OCFS2: File system is now read-only. [ 1429.212034][T14653] (syz-executor,14653,0):_ocfs2_free_suballoc_bits:2913 ERROR: status = -30 [ 1431.232089][T14653] (syz-executor,14653,0):_ocfs2_free_clusters:3024 ERROR: status = -30 [ 1431.363454][T14653] (syz-executor,14653,0):ocfs2_replay_truncate_records:5993 ERROR: status = -30 [ 1431.492197][T14653] (syz-executor,14653,0):__ocfs2_flush_truncate_log:6074 ERROR: status = -30 [ 1431.523808][T21290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1431.544250][T21290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1431.561885][T21290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1431.571107][T21290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1431.579609][T21290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1431.649385][T14653] (syz-executor,14653,0):ocfs2_sync_fs:408 ERROR: status = -30 [ 1431.901091][T14653] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 1432.017195][T14653] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1432.092251][T14653] (syz-executor,14653,0):_ocfs2_free_suballoc_bits:2913 ERROR: status = -30 [ 1432.188807][T14653] (syz-executor,14653,0):_ocfs2_free_clusters:3024 ERROR: status = -30 [ 1432.253514][T14653] (syz-executor,14653,0):ocfs2_sync_local_to_main:994 ERROR: status = -30 [ 1432.311730][T14653] (syz-executor,14653,0):ocfs2_sync_local_to_main:1007 ERROR: status = -30 [ 1432.400558][T14653] (syz-executor,14653,0):ocfs2_shutdown_local_alloc:450 ERROR: status = -30 [ 1432.609907][T14653] ocfs2: Unmounting device (7,1) on (node local) [ 1433.676418][T21290] Bluetooth: hci3: command tx timeout [ 1433.954614][T22556] loop7: detected capacity change from 0 to 32768 [ 1434.032436][T22556] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4599 (22556) [ 1434.267293][T22556] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1434.303444][T22590] netlink: 'syz.6.4606': attribute type 1 has an invalid length. [ 1434.337196][T22556] BTRFS info (device loop7): using blake2b checksum algorithm [ 1434.520433][T22590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1434.540076][T22556] BTRFS info (device loop7): enabling ssd optimizations [ 1434.592964][T22556] BTRFS info (device loop7): enabling free space tree [ 1434.782502][T22581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1435.757797][T21290] Bluetooth: hci3: command tx timeout [ 1437.033805][T20007] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1437.729751][T22278] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1437.835091][T21290] Bluetooth: hci3: command tx timeout [ 1437.910502][T22278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1437.986794][T22278] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1439.389129][T22278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1439.570555][T22278] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1439.702673][T22278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1439.821411][T22278] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1439.917111][T21290] Bluetooth: hci3: command tx timeout [ 1439.923595][T22278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1441.063716][T22278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1441.233897][T22278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1441.409948][T22676] loop7: detected capacity change from 0 to 1024 [ 1441.461932][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.469110][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.478134][T22676] EXT4-fs: Invalid want_extra_isize 7 [ 1441.494828][T22663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1442.379029][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.386179][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.404322][T22641] loop6: detected capacity change from 0 to 32768 [ 1442.551014][T22641] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1442.577793][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1442.654022][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1442.702371][T22641] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop6": -EINTR [ 1442.719334][T22641] XFS (loop6): log mount failed [ 1443.068926][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1443.091405][T22681] syzkaller0: entered promiscuous mode [ 1443.139133][T22681] syzkaller0: entered allmulticast mode [ 1443.157667][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1443.459087][T22543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.532551][T22543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.599496][T22543] bridge_slave_0: entered allmulticast mode [ 1443.691681][T22543] bridge_slave_0: entered promiscuous mode [ 1443.713499][T22706] UDC core: g1: couldn't find an available UDC or it's busy [ 1443.769877][T22543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.843893][T22543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.921634][T22543] bridge_slave_1: entered allmulticast mode [ 1443.965349][T22543] bridge_slave_1: entered promiscuous mode [ 1444.174416][T22719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4631'. [ 1444.233231][T22717] bridge0: port 4(syz_tun) entered blocking state [ 1444.276654][T22717] bridge0: port 4(syz_tun) entered disabled state [ 1444.314017][T22717] syz_tun: entered allmulticast mode [ 1444.361324][T22717] syz_tun: entered promiscuous mode [ 1444.377475][T22717] bridge0: port 4(syz_tun) entered blocking state [ 1444.383985][T22717] bridge0: port 4(syz_tun) entered forwarding state [ 1444.449082][T22543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.666635][T22543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.151920][T22543] team0: Port device team_slave_0 added [ 1447.240181][T22543] team0: Port device team_slave_1 added [ 1448.567453][T22543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.859425][T22756] netlink: 'syz.6.4640': attribute type 1 has an invalid length. [ 1448.903453][T22543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.026347][T22763] UDC core: g1: couldn't find an available UDC or it's busy [ 1449.191540][T22543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.310811][T22756] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1449.326869][T22543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.517411][T22543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.701930][T22778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4644'. [ 1449.791049][T22543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.215972][T22543] hsr_slave_0: entered promiscuous mode [ 1450.256549][T22543] hsr_slave_1: entered promiscuous mode [ 1450.297825][T22543] debugfs: 'hsr0' already exists in 'hsr' [ 1450.340564][T22543] Cannot create hsr debugfs directory [ 1451.393913][T22814] fuse: fd is not a fuse device [ 1451.935191][T22821] loop1: detected capacity change from 0 to 2048 [ 1451.972401][T22821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1452.543036][T22831] netlink: 'syz.1.4654': attribute type 1 has an invalid length. [ 1452.599255][T22833] fuse: fd is not a fuse device [ 1453.040742][T22843] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4657'. [ 1456.475049][T22831] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1456.479136][T22843] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1456.859617][T22880] fuse: Unknown parameter 'use00000000000000000000' [ 1456.914179][T22882] loop7: detected capacity change from 0 to 256 [ 1457.136904][T22882] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1457.241726][T22882] FAT-fs (loop7): Filesystem has been set read-only [ 1457.306510][T22882] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1457.416883][T22882] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1457.457416][T22892] kAFS: unable to lookup cell 'ÿ' [ 1457.520179][T22882] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1457.593118][T22882] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1457.653519][T22882] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1457.713363][T22882] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1457.763585][T22882] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1457.816653][ T31] audit: type=1800 audit(1785527618.479:124): pid=22882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4664" name="file1" dev="loop7" ino=1048675 res=0 errno=0 [ 1457.881042][T22882] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1458.499825][T22278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.316678][T22925] binder: 22921:22925 ioctl c0306201 0 returned -14 [ 1459.578917][T22929] netlink: 'syz.7.4673': attribute type 1 has an invalid length. [ 1459.853098][T22929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1459.931002][T22931] bond1: (slave geneve2): making interface the new active one [ 1459.962140][T22931] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1461.697325][T22543] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1461.808521][T22543] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1461.900162][T22543] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1461.980443][T22543] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1462.089571][T22543] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1462.201010][T22543] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1462.269963][T22543] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1462.349868][T22543] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1462.362766][T22977] netlink: 'syz.5.4686': attribute type 1 has an invalid length. [ 1462.532333][T22977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1462.632150][T22278] veth0_vlan: entered promiscuous mode [ 1462.764813][T22278] veth1_vlan: entered promiscuous mode [ 1465.028569][T22993] efs: cannot read volume header [ 1465.149668][T22278] veth0_macvtap: entered promiscuous mode [ 1465.307940][T22278] veth1_macvtap: entered promiscuous mode [ 1465.379099][ T5282] netdevsim netdevsim8 eth19: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1465.449773][ T5282] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1467.089263][T22543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.649336][T22278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1467.680328][T23018] fuse: fd is not a fuse device [ 1467.846379][T22278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1467.986235][T22543] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.083645][ T5996] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.145331][T23030] netlink: 'syz.7.4698': attribute type 1 has an invalid length. [ 1468.190599][T16420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.197727][T16420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.416142][T23030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1468.464145][ T6221] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.548599][T16420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.555773][T16420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.704234][T16420] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.783304][ T6825] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.279092][T23043] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4702'. [ 1469.603375][T23047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4702'. [ 1471.329728][T23044] efs: cannot read volume header [ 1471.377042][T23043] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1471.378522][T23047] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1473.590691][T23072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1473.719945][T14255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1473.735315][T14255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1473.758647][T14255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1473.779399][T14255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1473.790420][T14255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1473.841678][T23076] loop7: detected capacity change from 0 to 128 [ 1473.952026][T23076] FAT-fs (loop7): data area starts beyond volume (33 > 0) [ 1474.046977][T23076] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1474.946766][T23085] loop7: detected capacity change from 0 to 2048 [ 1476.059489][T14255] Bluetooth: hci4: command tx timeout [ 1476.109788][T23085] UDF-fs: warning (device loop7): udf_fill_super: No partition found (2) [ 1476.534214][T23090] netlink: 'syz.6.4710': attribute type 1 has an invalid length. [ 1477.341829][T23090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1478.157206][T14255] Bluetooth: hci4: command tx timeout [ 1480.232600][T14255] Bluetooth: hci4: command tx timeout [ 1480.638485][T14255] Bluetooth: hci5: command 0x0406 tx timeout [ 1482.312513][T21290] Bluetooth: hci4: command tx timeout [ 1483.021111][T23123] efs: cannot read volume header [ 1483.170804][ T6221] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.522721][T22543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1483.678772][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.685288][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1483.789519][T23146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4720'. [ 1483.917616][ T6221] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.184915][T23151] bond5 (unregistering): Released all slaves [ 1485.888349][ T6221] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.923262][T23162] fuse: fd is not a fuse device [ 1486.397560][ T6221] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.058174][T22543] veth0_vlan: entered promiscuous mode [ 1488.387790][T22543] veth1_vlan: entered promiscuous mode [ 1491.123201][ T5282] netdevsim netdevsim8 eth20: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1491.474640][T23183] efs: cannot read volume header [ 1491.544172][ T5282] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1491.770262][ T5768] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1492.028592][ T5768] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1492.118566][ T6221] bridge_slave_1: left allmulticast mode [ 1492.193040][ T5768] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1492.215824][ T6221] bridge_slave_1: left promiscuous mode [ 1492.242031][T14255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1492.258386][T14255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1492.268721][T14255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1492.279578][T14255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1492.290152][T14255] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1492.340774][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.370163][ T5768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1492.424309][ T6221] bridge_slave_0: left allmulticast mode [ 1492.441396][ T5768] usb 2-1: Product: syz [ 1492.488495][ T5768] usb 2-1: Manufacturer: syz [ 1492.500473][ T6221] bridge_slave_0: left promiscuous mode [ 1492.530460][ T5768] usb 2-1: SerialNumber: syz [ 1492.539224][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.817658][T23188] binder: 23186:23188 ioctl c018620c 200000000780 returned -22 [ 1492.952807][ T5768] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1493.088237][ T5768] usb 2-1: USB disconnect, device number 37 [ 1493.206388][ T5768] usblp0: removed [ 1493.315099][T23205] netlink: 'syz.6.4724': attribute type 1 has an invalid length. [ 1493.813506][T23194] loop7: detected capacity change from 0 to 32768 [ 1493.870256][T23194] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4731 (23194) [ 1493.895865][ T6221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.965406][ T6221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.019435][T23194] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1494.064594][ T6221] bond0 (unregistering): Released all slaves [ 1494.074923][T23194] BTRFS info (device loop7): using blake2b checksum algorithm [ 1494.161491][T23228] netlink: 'syz.5.4728': attribute type 10 has an invalid length. [ 1494.274073][T23228] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4728'. [ 1494.362865][T23194] BTRFS info (device loop7): enabling ssd optimizations [ 1494.392745][T21290] Bluetooth: hci1: command tx timeout [ 1494.440130][T23194] BTRFS info (device loop7): turning on async discard [ 1494.511616][T23194] BTRFS info (device loop7): enabling free space tree [ 1494.560931][T23194] BTRFS info (device loop7): use zstd compression, level 3 [ 1494.630856][T23205] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1494.791053][ T31] audit: type=1800 audit(1785527655.431:125): pid=23194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4731" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 1496.301433][T23228] dummy0: entered promiscuous mode [ 1496.503016][T21290] Bluetooth: hci1: command tx timeout [ 1496.830157][ T6221] hsr_slave_0: left promiscuous mode [ 1496.925971][ T6221] hsr_slave_1: left promiscuous mode [ 1496.989105][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1497.075554][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.168570][ T6221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1497.245796][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.360135][ T6221] veth1_macvtap: left promiscuous mode [ 1497.398323][ T6221] veth0_macvtap: left promiscuous mode [ 1497.406486][T20007] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1497.446689][ T6221] veth1_vlan: left promiscuous mode [ 1497.489551][ T6221] veth0_vlan: left promiscuous mode [ 1498.189225][T23271] loop7: detected capacity change from 32768 to 0 [ 1498.551771][T21290] Bluetooth: hci1: command tx timeout [ 1498.716398][T23282] netlink: 'syz.7.4744': attribute type 1 has an invalid length. [ 1499.410979][T23292] loop1: detected capacity change from 0 to 256 [ 1499.579298][T23292] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1499.688760][ T6221] team0 (unregistering): Port device team_slave_1 removed [ 1499.735655][T23292] exFAT-fs (loop1): valid_size(562949953421322) is greater than size(10) [ 1499.905764][ T6221] team0 (unregistering): Port device team_slave_0 removed [ 1500.632075][T21290] Bluetooth: hci1: command tx timeout [ 1501.021693][T23275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.029001][T23275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.156640][T23275] dummy0: left promiscuous mode [ 1501.268683][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4747'. [ 1501.455894][T23275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1501.511070][T23275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1502.105025][T23282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1502.180704][T16719] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.443724][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.841585][ T5995] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.154037][ T58] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.445312][T23073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.792407][T23073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.822663][T23073] bridge_slave_0: entered allmulticast mode [ 1507.419251][T23073] bridge_slave_0: entered promiscuous mode [ 1507.475776][T23073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.520001][T23347] efs: cannot read volume header [ 1507.537207][T23073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.585169][T23073] bridge_slave_1: entered allmulticast mode [ 1507.643320][T23073] bridge_slave_1: entered promiscuous mode [ 1508.077530][T23073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1508.103994][T23358] loop1: detected capacity change from 0 to 2048 [ 1508.147877][T23358] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1508.182762][T23073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.228087][T23358] NILFS (loop1): mounting unchecked fs [ 1508.262418][T22875] udevd[22875]: incorrect nilfs2 checksum on /dev/loop1 [ 1508.321671][T23358] NILFS (loop1): recovery complete [ 1508.352448][T23360] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1508.599650][T23358] loop1: detected capacity change from 2048 to 0 [ 1508.759259][T23360] NILFS (loop1): I/O error writing log (start-blocknr=53, block-count=11) in segment 3 [ 1508.989658][T23360] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=6) in segment 4 [ 1509.037713][T23360] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1509.139626][T23360] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1509.193000][T23360] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1509.239329][T23073] team0: Port device team_slave_0 added [ 1509.248606][T23360] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1509.286267][T23073] team0: Port device team_slave_1 added [ 1509.326554][T23360] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1509.418055][T23360] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1509.486291][T23360] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1509.579532][T23358] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1509.810582][T23358] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1509.860015][T23384] netlink: 'syz.7.4759': attribute type 1 has an invalid length. [ 1509.875274][T23358] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1509.988060][T23358] NILFS (loop1): I/O error writing log (start-blocknr=64, block-count=16) in segment 4 [ 1510.063635][T23358] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1510.185983][T23358] buffer_io_error: 11 callbacks suppressed [ 1510.185999][T23358] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 1510.308553][T23358] NILFS (loop1): unable to write superblock: err=-5 [ 1510.323747][T23073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.366965][T23073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1511.363205][T23358] Buffer I/O error on dev loop1, logical block 1020, lost sync page write [ 1511.390637][T23358] NILFS (loop1): unable to write superblock: err=-5 [ 1512.171675][ T5866] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1512.181055][T23073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.261438][T23384] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1512.396059][ T5866] usb 7-1: Using ep0 maxpacket: 16 [ 1512.442185][T23073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.507641][T23403] fuse: fd is not a fuse device [ 1512.519671][T23073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.567189][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.626734][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1512.704491][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1512.724786][T23073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.774583][ T5866] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1512.844332][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1512.938485][ T5866] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1512.975573][ T5866] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1513.029196][ T5866] usb 7-1: Manufacturer: syz [ 1513.074856][ T5866] usb 7-1: config 0 descriptor?? [ 1513.579445][T23073] hsr_slave_0: entered promiscuous mode [ 1513.649377][T23073] hsr_slave_1: entered promiscuous mode [ 1513.714017][T23073] debugfs: 'hsr0' already exists in 'hsr' [ 1513.764970][T23073] Cannot create hsr debugfs directory [ 1513.822579][ T5866] rc_core: IR keymap rc-hauppauge not found [ 1513.879773][ T5866] Registered IR keymap rc-empty [ 1513.936446][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1514.042648][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1514.132994][ T5866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1514.277157][ T5866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input57 [ 1514.329323][T23409] loop7: detected capacity change from 0 to 32768 [ 1514.424610][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1514.474979][T23409] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 1514.525655][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1514.574945][T23409] JBD2: Ignoring recovery information on journal [ 1514.621521][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1514.722930][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1514.793914][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1514.819919][T23409] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1514.861627][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1514.944075][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1515.021740][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1515.102401][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1515.163126][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1515.250888][ T5866] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1515.316149][ T5866] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1515.351731][T23434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1515.407144][ T5866] usb 7-1: USB disconnect, device number 28 [ 1515.787850][T20007] ocfs2: Unmounting device (7,7) on (node local) [ 1516.834061][T23195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.555982][ T5866] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1517.632597][T23195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.761838][T23195] bridge_slave_0: entered allmulticast mode [ 1517.845820][T23195] bridge_slave_0: entered promiscuous mode [ 1518.035400][T23195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.096502][T23195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.152195][T23195] bridge_slave_1: entered allmulticast mode [ 1518.219466][T23195] bridge_slave_1: entered promiscuous mode [ 1518.466178][ T6221] bridge_slave_1: left allmulticast mode [ 1518.503469][ T6221] bridge_slave_1: left promiscuous mode [ 1518.542166][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.648606][ T6221] bridge_slave_0: left allmulticast mode [ 1518.668773][ T6221] bridge_slave_0: left promiscuous mode [ 1518.979077][T23483] netlink: 'syz.7.4775': attribute type 1 has an invalid length. [ 1519.704830][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.958156][T23491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4784'. [ 1521.412629][ T6221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1521.457987][ T6221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1521.478494][ T6221] bond0 (unregistering): Released all slaves [ 1521.541471][T23195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.319265][T23491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4784'. [ 1523.345804][T23195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.791003][ T5866] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1523.808596][T16420] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1523.887035][T23195] team0: Port device team_slave_0 added [ 1523.958857][ T6221] hsr_slave_0: left promiscuous mode [ 1524.004315][ T6221] hsr_slave_1: left promiscuous mode [ 1524.019885][ T5866] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1524.045127][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1524.098488][ T6221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1524.117632][ T5866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1524.182248][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1524.205483][ T6221] veth1_vlan: left promiscuous mode [ 1524.235946][ T5866] usb 2-1: Product: syz [ 1524.241334][ T6221] veth0_vlan: left promiscuous mode [ 1524.263811][ T5866] usb 2-1: Manufacturer: syz [ 1524.299272][ T5866] usb 2-1: SerialNumber: syz [ 1524.534850][T23505] binder: 23504:23505 ioctl c018620c 200000000780 returned -22 [ 1524.555594][T23527] fuse: fd is not a fuse device [ 1524.580669][T23526] loop6: detected capacity change from 0 to 1024 [ 1524.615310][T23526] EXT4-fs: Invalid want_extra_isize 7 [ 1524.672854][ T5866] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1525.205471][ T5866] usb 2-1: USB disconnect, device number 38 [ 1525.264854][ T5866] usblp0: removed [ 1525.605411][T23533] netlink: 'syz.7.4799': attribute type 1 has an invalid length. [ 1527.559043][ T6221] team0 (unregistering): Port device team_slave_1 removed [ 1527.667092][ T6221] team0 (unregistering): Port device team_slave_0 removed [ 1527.705449][T23542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4802'. [ 1528.052276][T23195] team0: Port device team_slave_1 added [ 1528.077280][T23533] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1528.137868][T23542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4802'. [ 1528.402601][T16420] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.584316][T23195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.645352][T23195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1530.050385][T23195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1530.150163][T23122] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1530.237689][T18162] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1530.282426][T23195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1531.297270][T23195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.045134][ T5939] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1532.240363][T23195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.275651][ T5939] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1532.370164][T23573] netlink: 'syz.7.4815': attribute type 1 has an invalid length. [ 1532.378005][ T5939] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1532.418934][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1532.452428][ T5939] usb 7-1: Product: syz [ 1532.477041][ T5939] usb 7-1: Manufacturer: syz [ 1532.508210][ T5939] usb 7-1: SerialNumber: syz [ 1532.566783][T23573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1532.630894][T16042] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.746206][ T5939] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1532.804772][T23195] hsr_slave_0: entered promiscuous mode [ 1532.827654][T23195] hsr_slave_1: entered promiscuous mode [ 1533.041255][T23195] debugfs: 'hsr0' already exists in 'hsr' [ 1533.075163][T23195] Cannot create hsr debugfs directory [ 1533.368212][T23583] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[14653] was attempted by ""[23583] [ 1533.380839][T23583] netlink: 'syz.1.4817': attribute type 29 has an invalid length. [ 1533.392481][T23583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1533.423745][T15370] usb 7-1: USB disconnect, device number 30 [ 1533.470952][T16042] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.497890][T15370] usblp0: removed [ 1533.948114][T14255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1533.964787][T14255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1533.973674][T14255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1533.994616][T14255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1534.002244][T14255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1534.276770][ T6221] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1534.369503][ T6221] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1536.069513][T14255] Bluetooth: hci3: command tx timeout [ 1536.739931][ T5939] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1536.983455][ T5939] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1538.240830][T14255] Bluetooth: hci3: command tx timeout [ 1538.258177][ T5939] usb 7-1: not running at top speed; connect to a high speed hub [ 1538.340441][ T5939] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 1538.439585][ T5939] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1538.502769][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.550643][ T5939] usb 7-1: Product: syz [ 1538.585024][ T5939] usb 7-1: Manufacturer: syz [ 1538.620424][ T5939] usb 7-1: SerialNumber: syz [ 1538.674467][T23602] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1538.720733][ T6825] bridge_slave_1: left allmulticast mode [ 1538.766587][ T6825] bridge_slave_1: left promiscuous mode [ 1538.818541][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.894003][ T6825] bridge_slave_0: left allmulticast mode [ 1538.942161][T23602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.952521][ T6825] bridge_slave_0: left promiscuous mode [ 1538.988165][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.007925][T23602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.762672][T23630] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[20028] was attempted by ""[23630] [ 1539.775461][T23630] netlink: 'syz.5.4830': attribute type 29 has an invalid length. [ 1539.788630][T23630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1540.025916][ T6825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1540.090608][ T6825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1540.144051][ T6825] bond0 (unregistering): Released all slaves [ 1540.231830][ T5939] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1540.286656][ T5939] usb 7-1: MIDIStreaming interface descriptor not found [ 1540.310552][T14255] Bluetooth: hci3: command tx timeout [ 1542.389789][T14255] Bluetooth: hci3: command tx timeout [ 1542.471947][ T6825] hsr_slave_0: left promiscuous mode [ 1542.515040][ T6825] hsr_slave_1: left promiscuous mode [ 1542.560355][T19788] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1542.571693][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1542.660721][ T5939] usb 7-1: USB disconnect, device number 31 [ 1542.694018][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.801267][T19788] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1542.890506][T22895] udevd[22895]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1542.952640][T19788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1543.007582][T19788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1543.072781][T19788] usb 2-1: Product: syz [ 1543.105303][T19788] usb 2-1: Manufacturer: syz [ 1543.138221][T19788] usb 2-1: SerialNumber: syz [ 1543.550212][T19788] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1543.658344][T19788] usb 2-1: USB disconnect, device number 39 [ 1543.743587][T19788] usblp0: removed [ 1543.934546][ T6825] team0 (unregistering): Port device team_slave_1 removed [ 1543.967510][T23667] netlink: 'syz.7.4826': attribute type 1 has an invalid length. [ 1544.046463][ T6825] team0 (unregistering): Port device team_slave_0 removed [ 1544.063070][ T5939] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1544.596229][T23673] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[14653] was attempted by ""[23673] [ 1544.608928][T23673] netlink: 'syz.1.4845': attribute type 29 has an invalid length. [ 1544.619557][T23673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1544.650824][ T5939] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1544.678652][ T5939] usb 7-1: not running at top speed; connect to a high speed hub [ 1544.706780][ T5939] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 1544.748278][ T5939] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1544.785959][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.823697][ T5939] usb 7-1: Product: syz [ 1544.840062][ T5939] usb 7-1: Manufacturer: syz [ 1544.861675][ T5939] usb 7-1: SerialNumber: syz [ 1544.897902][T23663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1545.060639][T23667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1545.111617][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.118317][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.135279][T23663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.191981][T23663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.768116][T23195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1546.838683][ T5939] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1546.851702][T23195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1546.883364][T23707] netlink: 'syz.5.4859': attribute type 1 has an invalid length. [ 1546.895799][ T5939] usb 7-1: MIDIStreaming interface descriptor not found [ 1546.912405][T23195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1546.968019][T23195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1547.177095][T23707] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1547.243709][T23195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1547.275265][ T5939] usb 7-1: USB disconnect, device number 32 [ 1547.341765][T23195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1547.406887][T23195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1547.668301][T23195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1548.124071][T22895] udevd[22895]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1548.718708][T23705] loop1: detected capacity change from 0 to 32768 [ 1548.831893][T23705] [ 1548.831893][T23705] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1548.831893][T23705] [ 1549.142966][T23589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.223557][T23589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.258540][T23747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4866'. [ 1549.300584][T23589] bridge_slave_0: entered allmulticast mode [ 1549.335431][T23745] ERROR: (device loop1): diWrite: ixpxd invalid [ 1549.335431][T23745] [ 1549.364853][T23589] bridge_slave_0: entered promiscuous mode [ 1549.400974][T23745] ERROR: (device loop1): txCommit: [ 1549.400974][T23745] [ 1549.411949][T23589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.454973][T23589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.508410][T23589] bridge_slave_1: entered allmulticast mode [ 1549.534703][T23705] ERROR: (device loop1): dtSearch: stack overrun! [ 1549.534703][T23705] [ 1549.586589][T23589] bridge_slave_1: entered promiscuous mode [ 1549.630037][T23705] btstack dump: [ 1549.673445][T23705] bn = 0, index = 0 [ 1550.467500][T23705] bn = 0, index = 0 [ 1550.714618][T23705] bn = 0, index = 0 [ 1551.562199][T23705] bn = 0, index = 0 [ 1551.740497][T23760] efs: cannot read volume header [ 1551.771265][T23705] bn = 0, index = 0 [ 1551.818105][T23705] bn = 0, index = 0 [ 1551.889005][T23705] bn = 0, index = 0 [ 1551.925848][T23705] bn = 0, index = 0 [ 1551.967653][T23705] jfs_lookup: dtSearch returned -5 [ 1552.039483][T23589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1552.149836][T23589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1552.228322][T14653] [ 1552.228322][T14653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1552.228322][T14653] [ 1552.361486][T14653] [ 1552.361486][T14653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1552.361486][T14653] [ 1552.417612][T23770] netlink: 'syz.6.4872': attribute type 1 has an invalid length. [ 1552.471062][T23589] team0: Port device team_slave_0 added [ 1552.481081][T21290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1552.503381][T21290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1552.512552][T21290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1552.531969][T21290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1552.543048][T21290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1552.627217][T23589] team0: Port device team_slave_1 added [ 1552.853599][T23770] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1553.203934][T23589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1553.257654][T23589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.684836][T23589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.816710][T23589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.883232][T23589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.060665][T23589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1554.629006][T14255] Bluetooth: hci4: command tx timeout [ 1556.140891][T23589] hsr_slave_0: entered promiscuous mode [ 1556.514516][T23589] hsr_slave_1: entered promiscuous mode [ 1556.567290][T23589] debugfs: 'hsr0' already exists in 'hsr' [ 1556.614271][T23589] Cannot create hsr debugfs directory [ 1556.708398][T14255] Bluetooth: hci4: command tx timeout [ 1558.788287][T14255] Bluetooth: hci4: command tx timeout [ 1558.843412][T23818] efs: cannot read volume header [ 1559.253797][T23833] netlink: 'syz.7.4886': attribute type 1 has an invalid length. [ 1559.853873][T23833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1560.870582][T14255] Bluetooth: hci4: command tx timeout [ 1562.788320][T23868] efs: cannot read volume header [ 1563.284004][T23877] loop1: detected capacity change from 0 to 2048 [ 1563.364158][T23877] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1563.488198][T23877] NILFS (loop1): mounting unchecked fs [ 1563.558378][T23439] udevd[23439]: incorrect nilfs2 checksum on /dev/loop1 [ 1563.666049][T23877] NILFS (loop1): recovery complete [ 1563.743194][T23889] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1564.257447][T23895] netlink: 'syz.5.4905': attribute type 1 has an invalid length. [ 1564.584981][T23895] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1564.950485][ T32] INFO: task syz.2.4521:22313 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1565.049482][ T32] Tainted: G L syzkaller #0 [ 1565.139445][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1565.273564][ T32] task:syz.2.4521 state:D stack:27656 pid:22313 tgid:22312 ppid:21571 task_flags:0x400140 flags:0x00080002 [ 1565.465280][ T32] Call Trace: [ 1565.513075][ T32] [ 1565.553043][ T32] __schedule+0x17d9/0x56c0 [ 1565.606747][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1565.694153][ T32] ? __lock_acquire+0x683/0x2cf0 [ 1565.767812][ T32] ? irqentry_exit+0x218/0x8f0 [ 1565.858262][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1565.979648][ T32] ? lockdep_hardirqs_on+0x7a/0x110 [ 1566.094693][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.163505][ T32] ? __pfx___schedule+0x10/0x10 [ 1566.242320][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.342667][ T32] ? schedule+0x90/0x2b0 [ 1566.363761][ T32] schedule+0x164/0x2b0 [ 1566.375192][ T32] do_uevent+0x2c3/0x570 [ 1566.390557][ T32] ? __pfx_do_uevent+0x10/0x10 [ 1566.405656][ T32] ? kfree+0x1c5/0x640 [ 1566.419218][ T32] ? lockdep_hardirqs_on+0x7a/0x110 [ 1566.429787][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.443214][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.460526][ T32] ? kobject_uevent_env+0x375/0x9e0 [ 1566.477687][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1566.490020][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.502739][ T32] ? kobject_uevent_env+0x375/0x9e0 [ 1566.514207][ T32] __dlm_new_lockspace+0x17d1/0x1cd0 [ 1566.527797][ T32] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 1566.538179][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1566.551695][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.566928][ T32] ? apparmor_capable+0x126/0x170 [ 1566.576234][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.589737][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.601420][ T32] ? security_capable+0x7e/0x2c0 [ 1566.615433][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.628617][ T32] ? dlm_new_user_lockspace+0x3e/0x80 [ 1566.640070][ T32] device_create_lockspace+0xc7/0x350 [ 1566.651588][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.671309][ T32] ? __pfx_device_create_lockspace+0x10/0x10 [ 1566.677339][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.698190][ T32] ? _copy_from_user+0x94/0xb0 [ 1566.702975][ T32] device_write+0x872/0xed0 [ 1566.707505][ T32] ? __pfx_device_write+0x10/0x10 [ 1566.723164][ T32] vfs_write+0x296/0xba0 [ 1566.734104][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1566.744118][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.755045][ T32] ? __fget_files+0x2a/0x420 [ 1566.766475][ T32] ? __fget_files+0x2a/0x420 [ 1566.779245][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.789749][ T32] ? __fget_files+0x3a2/0x420 [ 1566.800925][ T32] ? __fget_files+0x2a/0x420 [ 1566.817690][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1566.824043][ T32] ksys_write+0x150/0x270 [ 1566.838388][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1566.843288][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.857861][ T32] do_syscall_64+0x174/0x580 [ 1566.869912][ T32] ? trace_irq_disable+0x3b/0x140 [ 1566.889854][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.897179][ T32] RIP: 0033:0x7f337919e019 [ 1566.909039][ T32] RSP: 002b:00007f337a0bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1566.928604][ T32] RAX: ffffffffffffffda RBX: 00007f3379425fa0 RCX: 00007f337919e019 [ 1566.947368][ T32] RDX: 0000000000000077 RSI: 0000200000000500 RDI: 0000000000000003 [ 1566.969190][ T32] RBP: 00007f337923500c R08: 0000000000000000 R09: 0000000000000000 [ 1566.987738][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1567.006783][ T32] R13: 00007f3379426038 R14: 00007f3379425fa0 R15: 00007ffc754c5508 [ 1567.031931][ T32] [ 1567.237952][ T32] [ 1567.237952][ T32] Showing all locks held in the system: [ 1567.293120][ T32] 1 lock held by khungtaskd/32: [ 1567.341680][ T32] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1567.436690][ T32] 2 locks held by getty/5375: [ 1567.476751][ T32] #0: ffff8880354500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1567.551950][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1567.622399][ T32] 6 locks held by kworker/u8:14/6221: [ 1567.654557][ T32] #0: ffff88801c28e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1567.725684][ T32] #1: ffffc90005e67c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1567.792917][ T32] #2: ffffffff9001ef08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1567.863217][ T32] #3: ffff8880458f2128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1567.933181][ T32] #4: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1567.995431][ T32] #5: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: netlink_has_listeners+0x77/0x3f0 [ 1568.043356][ T32] 1 lock held by syz.2.4521/22313: [ 1568.076051][ T32] #0: ffffffff9a86c540 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xa8/0x1cd0 [ 1568.135488][ T32] 1 lock held by syz.5.4520/22314: [ 1568.151815][ T32] 1 lock held by dlm_recoverd/22320: [ 1568.171782][ T32] #0: ffff88807eb5ca18 (&ls->ls_in_recovery){+.+.}-{4:4}, at: dlm_recoverd+0xbc/0x2a00 [ 1568.190818][ T32] 1 lock held by syz-executor/23771: [ 1568.205448][ T32] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1568.230116][ T32] 1 lock held by syz.1.4894/23862: [ 1568.240762][ T32] #0: ffff888052114ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 1568.268321][ T32] 1 lock held by syz.7.4908/23907: [ 1568.273566][ T32] #0: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1568.305419][ T32] [ 1568.363700][ T32] ============================================= [ 1568.363700][ T32] [ 1568.476855][ T32] NMI backtrace for cpu 0 [ 1568.476875][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1568.476900][ T32] Tainted: [L]=SOFTLOCKUP [ 1568.476907][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1568.476918][ T32] Call Trace: [ 1568.476926][ T32] [ 1568.476934][ T32] dump_stack_lvl+0xe8/0x150 [ 1568.476967][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1568.476986][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.477008][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1568.477039][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1568.477060][ T32] sys_info+0x135/0x170 [ 1568.477088][ T32] watchdog+0xfd7/0x1030 [ 1568.477118][ T32] ? watchdog+0x1c7/0x1030 [ 1568.477148][ T32] kthread+0x388/0x470 [ 1568.477177][ T32] ? __pfx_watchdog+0x10/0x10 [ 1568.477198][ T32] ? __pfx_kthread+0x10/0x10 [ 1568.477227][ T32] ret_from_fork+0x514/0xb70 [ 1568.477258][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1568.477285][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.477307][ T32] ? __switch_to+0xc89/0x1420 [ 1568.477334][ T32] ? __pfx_kthread+0x10/0x10 [ 1568.477368][ T32] ret_from_fork_asm+0x1a/0x30 [ 1568.477400][ T32] [ 1568.816105][ T6221] bridge_slave_1: left allmulticast mode [ 1568.856065][ T6221] bridge_slave_1: left promiscuous mode [ 1568.931699][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.101642][ T6221] bridge_slave_0: left allmulticast mode [ 1569.159392][ T6221] bridge_slave_0: left promiscuous mode [ 1569.199696][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.479292][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1569.486151][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1569.496818][ T32] Tainted: [L]=SOFTLOCKUP [ 1569.501117][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1569.511149][ T32] Call Trace: [ 1569.514409][ T32] [ 1569.517320][ T32] vpanic+0x56c/0xa60 [ 1569.521300][ T32] ? __pfx___schedule+0x10/0x10 [ 1569.526133][ T32] ? __pfx_vpanic+0x10/0x10 [ 1569.530624][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.536239][ T32] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1569.542403][ T32] panic+0xc5/0xd0 [ 1569.546113][ T32] ? __pfx_panic+0x10/0x10 [ 1569.550516][ T32] ? preempt_schedule_common+0x82/0xd0 [ 1569.555957][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1569.561313][ T32] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1569.567447][ T32] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1569.573584][ T32] watchdog+0x1030/0x1030 [ 1569.577906][ T32] ? watchdog+0x1c7/0x1030 [ 1569.582313][ T32] kthread+0x388/0x470 [ 1569.586385][ T32] ? __pfx_watchdog+0x10/0x10 [ 1569.591043][ T32] ? __pfx_kthread+0x10/0x10 [ 1569.595621][ T32] ret_from_fork+0x514/0xb70 [ 1569.600200][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1569.605296][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1569.610910][ T32] ? __switch_to+0xc89/0x1420 [ 1569.615574][ T32] ? __pfx_kthread+0x10/0x10 [ 1569.620154][ T32] ret_from_fork_asm+0x1a/0x30 [ 1569.624910][ T32] [ 1569.627960][ T32] Kernel Offset: disabled [ 1569.632262][ T32] Rebooting in 86400 seconds..