last executing test programs: 5m5.977966342s ago: executing program 2 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)={0x12, 0x8, &(0x7f00000000c0)="94d8f63489914533"}) socket$inet6(0xa, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000000c0)=0x7) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1842, 0x267) 5m4.701862945s ago: executing program 2 (id=128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 5m3.990723692s ago: executing program 2 (id=129): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xa14401, &(0x7f0000000380)={[{@errors_remount}, {@nodiscard}]}, 0x0, 0x48d, &(0x7f00000003c0)="$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") 5m0.968460524s ago: executing program 2 (id=136): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, &(0x7f0000001100)={0x9, 0x3, 0xb61, 0x7, 0x3, 0xe2}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000e40), 0x4000, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}, {@version_9p2000}]}}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) setuid(0xee00) 4m58.369811271s ago: executing program 2 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x8) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)="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", 0x122}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba46", 0x76}, {&(0x7f0000000d40)="518d091c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d0000000000000000000000000000c691982d5010be49260288f8f9629ccc782d9acbdb9cba112648136045612cd4d67e00f5bb0e1ac16467a133dc1c16fb5f364f689e2cc053bd4230cfc69fc863967ffb3f2196c2b42fe3bfeea73ccd4e83d75afed8077204552c34fcf30b180b341707fa86712df21db64c1da4bec3dd8adec0e45f60fdc6fbd9417c6c7958ce970e54e96b81da444ccf90f7041e93f2fb061d2fe681fed67fc52841607461af044c7191", 0xe7}, {&(0x7f0000000740)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9eda462f1233702f941cf239ec1bfe8c9ca3c5faa4c0efa368def9717a2da7e0cde5146db635972858964020d656353a476e01071bc9367c8ab8ee6b5ff6cd25be88a2326b81df502c8b117250afb4a1b9f205eac48359e3c4323ff3e32f2be7c235dfb3613995f704263f6085512d9e267d49f43cb55255ecd5ddb42153df7b980f08cec8c0341a7c0b25c2215fbbb7c8fc128b9f0b6bc1bf061ffc5991d335691cd72902056876cba7dc2c619dd8eb75e387ed526407d774133fef0f6208bca52334a065c36f230170a8971287164653d2aaad9d2b4f2fd755c1cd890f6013943e8d4d80b915d5460", 0x152}, {&(0x7f0000000b40)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb425705d6cdbb4a07ea786417aac814e03e5d80b297abe644830816977ccba1f493", 0x5a}], 0x6}}], 0x1, 0x8040) close_range(r0, 0xffffffffffffffff, 0x0) 4m57.983198505s ago: executing program 2 (id=144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x80002000, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000080)="29000300010003", 0x7) 4m42.869223741s ago: executing program 32 (id=144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x80002000, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000080)="29000300010003", 0x7) 4m26.648752978s ago: executing program 0 (id=217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x8) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)="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", 0x122}, {&(0x7f0000000040)}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f0000000d40)="518d091c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d0000000000000000000000000000c691982d5010be49260288f8f9629ccc782d9acbdb9cba112648136045612cd4d67e00f5bb0e1ac16467a133dc1c16fb5f364f689e2cc053bd4230cfc69fc863967ffb3f2196c2b42fe3bfeea73ccd4e83d75afed8077204552c34fcf30b180b341707fa86712df21db64c1da4bec3dd8adec0e45f60fdc6fbd9417c6c7958ce970e54e96b81da444ccf90f7041e93f2fb061d2fe681fed67fc52841607461af044c7191", 0xe7}, {&(0x7f0000000740)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9eda462f1233702f941cf239ec1bfe8c9ca3c5faa4c0efa368def9717a2da7e0cde5146db635972858964020d656353a476e01071bc9367c8ab8ee6b5ff6cd25be88a2326b81df502c8b117250afb4a1b9f205eac48359e3c4323ff3e32f2be7c235dfb3613995f704263f6085512d9e267d49f43cb55255ecd5ddb42153df7b980f08cec8c0341a7c0b25c2215fbbb7c8fc128b9f0b6bc1bf061ffc5991d335691cd72902056876cba7dc2c619dd8eb75e387ed526407d774133fef0f6208bca52334a065c36f230170a8971287164653d2aaad9d2b4f2fd755c1cd890f6013943e8d4d80b915d5460", 0x152}, {&(0x7f0000000b40)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb425705d6cdbb4a07ea786417aac814e03e5d80b297abe644830816977ccba1f493", 0x5a}], 0x6}}], 0x1, 0x8040) close_range(r0, 0xffffffffffffffff, 0x0) 4m26.648020958s ago: executing program 0 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x1, &(0x7f0000000180)=[{0x6, 0xba, 0x2, 0xffff}]}, 0x10) chdir(0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x210, 0x3a8, 0x3a8, 0x210, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [0xff], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xf0, 0x138, 0x700, {}, [@common=@unspec=@limit={{0x48}, {0xe, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xffff, 0x6, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) syz_emit_ethernet(0x4a, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r3, 0x0, 0x0) 4m25.671191308s ago: executing program 0 (id=222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x411}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x10000, 0x6, 0x9, 0x0, 0x3}}]}}}]}, 0x78}}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 4m24.446745431s ago: executing program 0 (id=225): syz_emit_ethernet(0x76, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) clock_adjtime(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r5, 0x4b45, 0x0) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 4m23.839432877s ago: executing program 0 (id=227): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x7) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/129, 0x81, 0x40000002, 0x0, 0x0) 4m21.834812198s ago: executing program 0 (id=232): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000002"], 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 4m6.269448128s ago: executing program 33 (id=232): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000002"], 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1m40.6866995s ago: executing program 1 (id=729): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m39.865012239s ago: executing program 1 (id=731): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef}) 1m38.858650929s ago: executing program 1 (id=735): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x8) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)="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", 0x11e}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f0000000d40)="518d091c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d0000000000000000000000000000c691982d5010be49260288f8f9629ccc782d9acbdb9cba112648136045612cd4d67e00f5bb0e1ac16467a133dc1c16fb5f364f689e2cc053bd4230cfc69fc863967ffb3f2196c2b42fe3bfeea73ccd4e83d75afed8077204552c34fcf30b180b341707fa86712df21db64c1da4bec3dd8adec0e45f60fdc6fbd9417c6c7958ce970e54e96b81da444ccf90f7041e93f2fb061d2fe681fed67fc52841607461af044c7191", 0xe7}, {&(0x7f0000000740)="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", 0x152}, {&(0x7f0000000b40)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb425705d6cdbb4a07ea786417aac814e03e5d80b297abe644830816977ccba1f493", 0x5a}], 0x6}}], 0x1, 0x8040) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.674762141s ago: executing program 1 (id=738): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x8, 0x1b) 1m36.399798905s ago: executing program 1 (id=743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1m24.354052109s ago: executing program 1 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x9}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) 1m24.327241079s ago: executing program 34 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x9}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) 7.851150608s ago: executing program 3 (id=983): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000298000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 7.67475846s ago: executing program 3 (id=985): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xffffffffffffffff) 7.67202756s ago: executing program 5 (id=986): socket$inet6(0xa, 0xa, 0x1000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xc0012fb, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x3, 0x5}, {0xfff2}}}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r4, 0x0, 0x0) 7.119417306s ago: executing program 7 (id=988): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008b88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881cae811852806175d63892a15234fbcd7a88a0a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2053db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 7.018710887s ago: executing program 5 (id=989): syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"], 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2c4d, &(0x7f0000000480)={0x0, 0xab86, 0x2000, 0x0, 0x20324}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) clock_adjtime(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x180}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x48}}, 0x0) 6.300289284s ago: executing program 5 (id=991): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.122363426s ago: executing program 6 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) 6.121761646s ago: executing program 5 (id=993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000075c0)={@local, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x9, 0x400, 0x6, 0x20001}) r6 = dup(0xffffffffffffffff) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}}) getxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) 6.038810767s ago: executing program 7 (id=994): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000500)=""/61, 0x3d}], 0x1, 0x40, 0x4, 0x0) r2 = userfaultfd(0x80001) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009c, 0x0, 0xeff}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x4c) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x11) 5.906647298s ago: executing program 6 (id=995): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.79648741s ago: executing program 6 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r3, 0x0, &(0x7f00000000c0)) getpid() 5.230348715s ago: executing program 4 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 4.874644059s ago: executing program 4 (id=998): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r2, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) 4.869705409s ago: executing program 7 (id=999): socket$inet6(0xa, 0xa, 0x1000) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xc0012fb, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x3, 0x5}, {0xfff2}}}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r4, 0x0, 0x0) 4.7766969s ago: executing program 5 (id=1000): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.193242146s ago: executing program 3 (id=1001): syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"], 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2c4d, &(0x7f0000000480)={0x0, 0xab86, 0x2000, 0x0, 0x20324}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) clock_adjtime(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x180}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x48}}, 0x0) 3.936065219s ago: executing program 7 (id=1002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfffd, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 3.138420047s ago: executing program 4 (id=1003): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000440)={[{@user_xattr}, {@usrquota}, {@minixdf}, {@dax_always}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") 3.126581057s ago: executing program 3 (id=1004): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.90228023s ago: executing program 7 (id=1005): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) 2.87994993s ago: executing program 3 (id=1006): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) bind$unix(r2, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82) close(0x3) read$FUSE(r3, &(0x7f0000006780)={0x2020}, 0x2020) 2.646700662s ago: executing program 4 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) 2.410631915s ago: executing program 6 (id=1008): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 1.416588885s ago: executing program 6 (id=1009): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 1.402414945s ago: executing program 4 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.278725296s ago: executing program 6 (id=1011): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xffffffffffffffff) 1.165876607s ago: executing program 4 (id=1012): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r2, 0x0, 0xfffe82) 485.914054ms ago: executing program 5 (id=1013): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r2, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) 246.704857ms ago: executing program 3 (id=1014): syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"], 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2c4d, &(0x7f0000000480)={0x0, 0xab86, 0x2000, 0x0, 0x20324}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) clock_adjtime(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc0202, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x180}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x48}}, 0x0) 0s ago: executing program 7 (id=1015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f5"], 0x58) kernel console output (not intermixed with test programs): to_hsr: link becomes ready [ 70.415019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.430965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.452625][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.476698][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.513560][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.527086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.540079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.549426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.557352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.583045][ T4195] device veth0_vlan entered promiscuous mode [ 70.614468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.623924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.634549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.646164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.655933][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.663085][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.672229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.681379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.701365][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.708511][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.718543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.727814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.742466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.751058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.759701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.774479][ T4195] device veth1_vlan entered promiscuous mode [ 70.789243][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.797681][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.811561][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.820256][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.852165][ T4189] device veth0_vlan entered promiscuous mode [ 70.860010][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.867508][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.875529][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.885111][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.893260][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.902449][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.918761][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.940184][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.961823][ T4189] device veth1_vlan entered promiscuous mode [ 70.975857][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.984765][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.000013][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.010573][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.020854][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.034355][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.044820][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.066682][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.077669][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.105469][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.114718][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.124376][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.133534][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.143036][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.151824][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.171339][ T4195] device veth0_macvtap entered promiscuous mode [ 71.213174][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.222545][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.232793][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.244698][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.255265][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.265005][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.277836][ T4195] device veth1_macvtap entered promiscuous mode [ 71.291789][ T4189] device veth0_macvtap entered promiscuous mode [ 71.332383][ T4189] device veth1_macvtap entered promiscuous mode [ 71.339790][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.346350][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.370425][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.380301][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.389757][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.397904][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.406999][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.417191][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.425616][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.443367][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.454313][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.471187][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.484197][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.493470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.503193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.512467][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.521801][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.533616][ T4190] device veth0_vlan entered promiscuous mode [ 71.546366][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.558390][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.567050][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.608383][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.645325][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.659030][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.672867][ T4190] device veth1_vlan entered promiscuous mode [ 71.690269][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.701168][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.710727][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.719963][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.730904][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.741127][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.751256][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.760645][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.776930][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.786798][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.795653][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.805859][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.854695][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.864144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.873585][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.882019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.902289][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.911896][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.925148][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.945640][ T4190] device veth0_macvtap entered promiscuous mode [ 71.957860][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.967292][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.980712][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.989863][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.997808][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.008257][ T4201] device veth0_vlan entered promiscuous mode [ 72.022356][ T4190] device veth1_macvtap entered promiscuous mode [ 72.047175][ T4201] device veth1_vlan entered promiscuous mode [ 72.090980][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.103212][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.112595][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.121752][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.137769][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.151609][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.162484][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.174963][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.186538][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.230715][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.239419][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.250143][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.264028][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.274824][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.285246][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.297493][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.310226][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.339814][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.349169][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.358683][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.367214][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.375453][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 72.386767][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 72.393773][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.395852][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 72.409903][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.418715][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.427430][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.443416][ T4194] device veth0_vlan entered promiscuous mode [ 72.450521][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 72.457133][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 72.466056][ T4201] device veth0_macvtap entered promiscuous mode [ 72.486216][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.486216][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.486277][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.514348][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.522261][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.531953][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.540562][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.549334][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.557812][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.566131][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.574340][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.627756][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.636549][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.655496][ T4194] device veth1_vlan entered promiscuous mode [ 72.665642][ T4201] device veth1_macvtap entered promiscuous mode [ 72.676728][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.691961][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.700493][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.732623][ T1437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.741926][ T1437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.776361][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.798974][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.809473][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.821121][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.831490][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.842804][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.856056][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.869896][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.889551][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.899545][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.950178][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.973353][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.984934][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.989394][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.002818][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.015938][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.026171][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.037112][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.056462][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.064933][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.076884][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.098555][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.107628][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.116379][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.130525][ T4194] device veth0_macvtap entered promiscuous mode [ 73.146909][ T4201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.194056][ T4201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.218293][ T4201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.227145][ T4201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.253565][ T4276] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6'. [ 73.273159][ T4194] device veth1_macvtap entered promiscuous mode [ 73.344645][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.359728][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.391472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.408439][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.416598][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.435229][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.446732][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.457272][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.468174][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.478242][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.490730][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.509869][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.524571][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.550477][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.581044][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.590382][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.604970][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.615813][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.627778][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.641860][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.655041][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.666131][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.676793][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.687624][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.697779][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.710787][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.751087][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.768246][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.777127][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.786351][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.819104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.829585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.848580][ T1437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.862901][ T4286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.877796][ T1437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.919711][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.939817][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.957517][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.969232][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 73.986891][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.088240][ T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 74.097582][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.125102][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.146837][ T4293] capability: warning: `syz.3.10' uses 32-bit capabilities (legacy support in use) [ 74.175584][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.211109][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.222669][ T21] pvrusb2: Hardware description: Terratec Grabster AV400 [ 74.243238][ T21] pvrusb2: ********** [ 74.247397][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.265549][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.275630][ T21] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 74.297654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.302194][ T21] pvrusb2: Important functionality might not be entirely working. [ 74.330489][ T21] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 74.362739][ T21] pvrusb2: ********** [ 74.445432][ T2427] pvrusb2: Invalid write control endpoint [ 74.473060][ T4301] comedi comedi3: pcl730: I/O port conflict (0xa,4) [ 74.503742][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 74.512517][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 74.538070][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 74.558625][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 74.574965][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 74.606234][ T2427] pvrusb2: Invalid write control endpoint [ 74.630279][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 74.648341][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.667846][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 74.677477][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 74.727772][ T2427] pvrusb2: Device being rendered inoperable [ 74.749451][ T4235] usb 2-1: USB disconnect, device number 2 [ 74.757860][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 74.767709][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 74.788920][ T2427] pvrusb2: Attached sub-driver cx25840 [ 74.799775][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 74.815941][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 74.913410][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 74.979277][ T4314] ======================================================= [ 74.979277][ T4314] WARNING: The mand mount option has been deprecated and [ 74.979277][ T4314] and is ignored by this kernel. Remove the mand [ 74.979277][ T4314] option from the mount to silence this warning. [ 74.979277][ T4314] ======================================================= [ 75.040669][ T4314] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.129614][ T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7 [ 75.190851][ T4319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.198544][ T4319] IPv6: NLM_F_CREATE should be set when creating new route [ 75.205991][ T4319] IPv6: NLM_F_CREATE should be set when creating new route [ 75.213294][ T4319] IPv6: NLM_F_CREATE should be set when creating new route [ 75.338543][ T23] usb 5-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 75.347659][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.389630][ T23] usb 5-1: Product: syz [ 75.393888][ T23] usb 5-1: Manufacturer: syz [ 75.421247][ T23] usb 5-1: SerialNumber: syz [ 75.781668][ T23] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 75.839299][ T23] snd-usb-audio: probe of 5-1:1.1 failed with error -2 [ 75.865522][ T4297] ODEBUG: Out of memory. ODEBUG disabled [ 75.900500][ T4235] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.016559][ T23] snd-usb-audio: probe of 5-1:1.2 failed with error -2 [ 76.045601][ T23] usb 5-1: USB disconnect, device number 2 [ 76.091153][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.331451][ T4235] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 76.371824][ T4235] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.398045][ T4235] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.427697][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.508451][ T4327] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.551467][ T4235] usb 1-1: invalid MIDI in EP 0 [ 76.699223][ T4235] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 76.814348][ T1325] usb 1-1: USB disconnect, device number 2 [ 77.129249][ T4339] udevd[4339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.131678][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 78.155060][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 78.279409][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.501977][ T4373] "syz.1.40" (4373) uses obsolete ecb(arc4) skcipher [ 78.569345][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 78.578103][ T4236] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.704556][ T13] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 78.717511][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.787839][ T13] pvrusb2: Hardware description: Terratec Grabster AV400 [ 78.808343][ T13] pvrusb2: ********** [ 78.826932][ T13] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 78.853898][ T13] pvrusb2: Important functionality might not be entirely working. [ 78.872058][ T13] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 78.884040][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 78.896174][ T13] pvrusb2: ********** [ 78.993774][ T1325] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.021126][ T2427] pvrusb2: Invalid write control endpoint [ 79.093425][ T2427] pvrusb2: Invalid write control endpoint [ 79.108591][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 79.135980][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 79.160337][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 79.201068][ T2427] pvrusb2: Device being rendered inoperable [ 79.212838][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 79.233600][ T4236] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 79.237426][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 79.253082][ T13] usb 5-1: USB disconnect, device number 3 [ 79.258245][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.279562][ T1325] usb 1-1: Using ep0 maxpacket: 16 [ 79.286000][ T2427] pvrusb2: Attached sub-driver cx25840 [ 79.296106][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 79.306603][ T4236] usb 4-1: Product: syz [ 79.316667][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 79.326116][ T4236] usb 4-1: Manufacturer: syz [ 79.342811][ T4236] usb 4-1: SerialNumber: syz [ 79.388103][ T4236] usb 4-1: config 0 descriptor?? [ 79.398369][ T1325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.430464][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.444101][ T4236] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 79.452831][ T4236] dvb-usb: bulk message failed: -22 (4/0) [ 79.472612][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.473161][ T4236] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 79.493615][ T1325] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.503424][ T4236] dvb-usb: bulk message failed: -22 (5/0) [ 79.503469][ T4236] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 79.547993][ T1325] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.564392][ T4236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 79.608440][ T4236] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 79.627715][ T4236] usb 4-1: media controller created [ 79.641431][ T1325] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 79.661395][ T4365] dvb-usb: bulk message failed: -22 (7/0) [ 79.677320][ T1325] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.688132][ T4365] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 79.696369][ T1325] usb 1-1: Manufacturer: syz [ 79.705518][ T4236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.724077][ T1325] usb 1-1: config 0 descriptor?? [ 79.728413][ T4365] ttusb2: i2c transfer failed. [ 79.748021][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.777586][ T4236] usb 4-1: selecting invalid altsetting 3 [ 79.788400][ T4236] ttusb2: set interface to alts=3 failed [ 79.864289][ T4297] Set syz1 is full, maxelem 65536 reached [ 79.880399][ T4236] DVB: Unable to find symbol tda10086_attach() [ 79.886621][ T4236] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 79.964781][ T4236] dvb-usb: bulk message failed: -22 (4/0) [ 79.985360][ T4236] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 80.008274][ T4236] dvb-usb: bulk message failed: -22 (5/0) [ 80.014086][ T4236] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 80.050141][ T4236] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 80.095813][ T4236] usb 4-1: USB disconnect, device number 2 [ 80.108455][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.148397][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.238265][ T1325] rc_core: IR keymap rc-hauppauge not found [ 80.244621][ T1325] Registered IR keymap rc-empty [ 80.273743][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.338155][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 80.381063][ T1325] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 80.395877][ T4236] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 80.712439][ T1325] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 81.148502][ T21] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 81.157620][ T21] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 81.223601][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.265831][ T21] usb 2-1: Manufacturer: syz [ 81.268704][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 81.700548][ T21] usb 2-1: config 0 descriptor?? [ 82.038057][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.068085][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.108030][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.158035][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.198021][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.221579][ T4408] netlink: 224 bytes leftover after parsing attributes in process `syz.2.50'. [ 82.230917][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.278107][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.318104][ T1325] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.349455][ T1325] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 82.361251][ T4410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 82.389188][ T1325] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 82.428029][ T1325] usb 1-1: USB disconnect, device number 3 [ 82.514881][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 82.778200][ T21] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 82.813507][ T21] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 82.842861][ T21] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 82.884069][ T21] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 82.900020][ T21] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 82.957366][ T21] usb 2-1: USB disconnect, device number 3 [ 86.931203][ T1107] cfg80211: failed to load regulatory.db [ 90.037697][ T4509] device syzkaller0 entered promiscuous mode [ 90.198125][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.255779][ T2287] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.270264][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 91.569585][ T4236] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 91.578333][ T2287] usb 4-1: Using ep0 maxpacket: 32 [ 91.606205][ T4236] Bluetooth: hci3: Injecting HCI hardware error event [ 91.677522][ T4191] Bluetooth: hci3: hardware error 0x00 [ 91.708706][ T2287] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 91.746585][ T2287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.926502][ T2287] usb 4-1: config 0 descriptor?? [ 92.004586][ T2287] gspca_main: sunplus-2.14.0 probing 041e:400b [ 92.127940][ C0] sched: RT throttling activated [ 92.562679][ T4532] device syzkaller0 entered promiscuous mode [ 93.459619][ T4534] loop2: detected capacity change from 0 to 131072 [ 93.490558][ T2287] gspca_sunplus: reg_w_riv err -110 [ 93.495890][ T2287] sunplus: probe of 4-1:0.0 failed with error -110 [ 93.560966][ T2287] usb 4-1: USB disconnect, device number 3 [ 93.585724][ T4534] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.641488][ T4534] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.738346][ T4234] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 93.748044][ T4234] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 93.808402][ T4234] usb 2-1: Product: syz [ 93.843691][ T4234] usb 2-1: Manufacturer: syz [ 93.850066][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 93.893293][ T4234] usb 2-1: SerialNumber: syz [ 94.434660][ T4234] usb 2-1: config 0 descriptor?? [ 94.490942][ T4234] usb 2-1: can't set config #0, error -71 [ 94.514040][ T4234] usb 2-1: USB disconnect, device number 4 [ 95.045450][ T4564] device syzkaller0 entered promiscuous mode [ 96.954413][ T4587] netlink: 'syz.0.104': attribute type 39 has an invalid length. [ 99.616832][ T4608] device syzkaller0 entered promiscuous mode [ 100.578122][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 102.682341][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 105.125436][ T4661] Zero length message leads to an empty skb [ 105.256436][ T4663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 106.487064][ T4663] device veth0_to_bond entered promiscuous mode [ 106.713183][ T4674] loop3: detected capacity change from 0 to 512 [ 106.818382][ T4663] syz.2.120 (4663) used greatest stack depth: 19792 bytes left [ 106.965220][ T4679] loop1: detected capacity change from 0 to 1024 [ 106.978443][ T4674] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 106.998725][ T4674] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.062177][ T4679] EXT4-fs (loop1): Ignoring removed nobh option [ 107.179563][ T4679] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 107.633779][ T4679] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,inode_readahead_blks=0x0000000000040000,nobh,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 107.659497][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.784826][ T4674] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 107.938839][ T4674] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.012442][ T4708] loop2: detected capacity change from 0 to 512 [ 110.147297][ T4708] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.237104][ T4708] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.269642][ T4708] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 110.425373][ T4708] EXT4-fs (loop2): Remounting filesystem read-only [ 110.469965][ T4708] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.129: corrupted inode contents [ 110.538002][ T4708] EXT4-fs (loop2): Remounting filesystem read-only [ 110.544585][ T4708] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #11: comm syz.2.129: mark_inode_dirty error [ 110.672243][ T4708] EXT4-fs (loop2): Remounting filesystem read-only [ 110.708190][ T4708] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.129: invalid indirect mapped block 327680 (level 0) [ 110.836548][ T4708] EXT4-fs (loop2): Remounting filesystem read-only [ 110.846010][ T4708] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.129: corrupted inode contents [ 111.727885][ T4708] EXT4-fs (loop2): Remounting filesystem read-only [ 111.765299][ T4708] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 111.839326][ T4708] EXT4-fs (loop2): Remounting filesystem read-only [ 111.845941][ T4708] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.129: corrupted inode contents [ 111.973164][ T4708] EXT4-fs (loop2): Remounting filesystem read-only [ 111.989444][ T4708] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.129: mark_inode_dirty error [ 112.083067][ T4708] EXT4-fs (loop2): Remounting filesystem read-only [ 112.118351][ T4708] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 112.157163][ T4708] EXT4-fs (loop2): Remounting filesystem read-only [ 112.164963][ T4708] EXT4-fs (loop2): 1 truncate cleaned up [ 112.170958][ T4708] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,. Quota mode: none. [ 116.393389][ T4776] loop4: detected capacity change from 0 to 128 [ 116.406668][ T4778] loop3: detected capacity change from 0 to 512 [ 116.444737][ T4776] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.506770][ T4776] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.807473][ T4778] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.959186][ T4783] netlink: 'syz.4.146': attribute type 5 has an invalid length. [ 117.696535][ T4242] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.862870][ T4787] loop3: detected capacity change from 0 to 1024 [ 118.013126][ T4787] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 118.029840][ T4787] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 118.047051][ T4787] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: inode #32: comm syz.3.147: iget: special inode unallocated [ 119.774893][ T4787] EXT4-fs (loop3): no journal found [ 119.818035][ T4787] EXT4-fs (loop3): can't get journal size [ 119.996971][ T4787] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 123.586555][ T4828] loop0: detected capacity change from 0 to 1024 [ 123.674761][ T4828] EXT4-fs (loop0): Ignoring removed nobh option [ 123.694593][ T4830] loop3: detected capacity change from 0 to 128 [ 123.772021][ T4828] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.157: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 123.938110][ T4828] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.157: couldn't read orphan inode 11 (err -117) [ 124.115971][ T4828] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 124.487942][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 124.788712][ T4828] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.157: Invalid block bitmap block 0 in block_group 0 [ 124.909303][ T4828] Quota error (device loop0): write_blk: dquota write failed [ 124.964618][ T4828] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 125.050494][ T4828] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.157: Failed to acquire dquot type 0 [ 125.210485][ T1437] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm kworker/u4:4: Invalid inode table block 8589934593 in block_group 0 [ 127.336270][ T4864] loop0: detected capacity change from 0 to 4096 [ 127.395499][ T4864] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 127.468053][ T4864] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 127.555216][ T4864] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 127.728055][ T4864] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 127.889321][ T4864] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 128.599605][ T4864] ntfs: volume version 3.1. [ 128.638124][ T4864] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 128.721457][ T4864] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 128.874118][ T4864] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 129.050002][ T4888] tmpfs: Bad value for 'huge' [ 130.797956][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 130.917968][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 130.937971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 130.947947][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 130.957946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 130.967946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 130.977944][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 130.987940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 130.997940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 131.107211][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 131.657270][ T4912] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.853606][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.870361][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.744814][ T4948] tmpfs: Bad value for 'huge' [ 133.800148][ T4942] loop4: detected capacity change from 0 to 2048 [ 134.277666][ T4942] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.432550][ T4936] chnl_net:caif_netlink_parms(): no params data found [ 134.994108][ T4936] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.340789][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 135.356562][ T4936] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.425258][ T4936] device bridge_slave_0 entered promiscuous mode [ 137.429887][ T1325] Bluetooth: hci5: command 0x041b tx timeout [ 137.437790][ T4936] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.476601][ T4936] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.712546][ T4936] device bridge_slave_1 entered promiscuous mode [ 138.549561][ T4936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.595940][ T4936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.689612][ T4936] team0: Port device team_slave_0 added [ 138.701192][ T4936] team0: Port device team_slave_1 added [ 138.766402][ T4936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.778399][ T4936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.920078][ T4974] Set syz1 is full, maxelem 65536 reached [ 138.932638][ T4936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.137027][ T4936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.199068][ T4980] loop0: detected capacity change from 0 to 32768 [ 139.641269][ T4936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.900493][ T1325] Bluetooth: hci5: command 0x040f tx timeout [ 140.161798][ T4936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.523394][ T4980] JBD2: recovery failed [ 140.533203][ T4980] (syz.0.189,4980,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 140.549734][ T4980] (syz.0.189,4980,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 140.559608][ T4980] (syz.0.189,4980,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 140.567305][ T4980] (syz.0.189,4980,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 140.602996][ T4980] (syz.0.189,4980,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 140.795055][ T4936] device hsr_slave_0 entered promiscuous mode [ 140.833514][ T4936] device hsr_slave_1 entered promiscuous mode [ 140.984883][ T4936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.008009][ T4936] Cannot create hsr debugfs directory [ 141.119128][ T4482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.345282][ T4482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.499308][ T5014] loop1: detected capacity change from 0 to 64 [ 141.517290][ T4482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.905060][ T4482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.072123][ T5018] netlink: 408 bytes leftover after parsing attributes in process `syz.0.199'. [ 142.093870][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 142.440129][ T1325] Bluetooth: hci5: command 0x0419 tx timeout [ 142.807676][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 143.358547][ T5031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 143.541232][ T4936] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.621033][ T4936] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.677667][ T4936] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.701523][ T4936] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.086590][ T4936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.150203][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.176401][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.230423][ T4936] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.014313][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.027342][ T5054] lo speed is unknown, defaulting to 1000 [ 145.049380][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.086045][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.093245][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.224387][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.235170][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.245779][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.252942][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.329526][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.353315][ T5054] lo speed is unknown, defaulting to 1000 [ 145.368916][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.444402][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.469455][ T5054] lo speed is unknown, defaulting to 1000 [ 145.469678][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.501427][ T5054] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.515179][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.518828][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.538901][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.561331][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.569630][ T5054] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 145.579033][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.582715][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.604374][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.631744][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.652629][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.662136][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.692357][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.711697][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.742100][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.760977][ T4936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.772672][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.779174][ T5054] lo speed is unknown, defaulting to 1000 [ 145.793095][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.803315][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.818047][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.841295][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.850304][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.857744][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.874389][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.889817][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.906024][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.914727][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.933445][ T5054] lo speed is unknown, defaulting to 1000 [ 145.939487][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.972039][ T4977] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 145.972766][ T5054] lo speed is unknown, defaulting to 1000 [ 145.998113][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 146.027113][ T4977] hid-generic 0006:0008:0001.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 146.046234][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 146.077455][ T5054] lo speed is unknown, defaulting to 1000 [ 146.312354][ T5085] fido_id[5085]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.472051][ T5054] lo speed is unknown, defaulting to 1000 [ 146.499923][ T5054] lo speed is unknown, defaulting to 1000 [ 147.298707][ T5102] tipc: Failed to remove unknown binding: 66,0,0/0:3467527646/3467527648 [ 147.499877][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.508285][ T5102] tipc: Failed to remove unknown binding: 66,0,0/0:3467527646/3467527647 [ 147.517091][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.538671][ T4936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.558653][ T5102] tipc: Failed to remove unknown binding: 66,0,0/0:3467527646/3467527648 [ 147.647539][ T5102] tipc: Failed to remove unknown binding: 66,0,0/0:3467527646/3467527647 [ 147.772257][ T4482] device hsr_slave_0 left promiscuous mode [ 147.789795][ T4482] device hsr_slave_1 left promiscuous mode [ 147.829866][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.865860][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.911627][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.948952][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.982614][ T4482] device bridge_slave_1 left promiscuous mode [ 148.002770][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.042816][ T4482] device bridge_slave_0 left promiscuous mode [ 148.055498][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.149211][ T4482] device veth1_macvtap left promiscuous mode [ 148.158409][ T4482] device veth0_macvtap left promiscuous mode [ 148.174795][ T4482] device veth1_vlan left promiscuous mode [ 148.185421][ T4482] device veth0_vlan left promiscuous mode [ 148.199196][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.448021][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 148.581802][ T4482] team0 (unregistering): Port device team_slave_1 removed [ 148.599416][ T4482] team0 (unregistering): Port device team_slave_0 removed [ 148.607992][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.621132][ T4234] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 148.637193][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.663799][ T4482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.673304][ T4234] usb 2-1: config 0 descriptor?? [ 148.694186][ T4482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.837276][ T4482] bond0 (unregistering): Released all slaves [ 148.948306][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 149.380399][ T4234] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 149.397982][ T4234] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 149.405726][ T4234] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 149.417985][ T4234] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 149.425723][ T4234] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 149.453234][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 149.489336][ T4234] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 149.529373][ T5148] loop3: detected capacity change from 0 to 2048 [ 149.695371][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.709715][ T4280] usb 2-1: USB disconnect, device number 5 [ 149.763964][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.916074][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.948775][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.998692][ T4936] device veth0_vlan entered promiscuous mode [ 150.006034][ T5155] fido_id[5155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 150.063087][ T4936] device veth1_vlan entered promiscuous mode [ 150.097443][ T5148] loop3: p1 < > p3 < > [ 150.105384][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.133498][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.168259][ T5148] loop3: partition table partially beyond EOD, truncated [ 150.186337][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.213729][ T5148] loop3: p1 start 3405774849 is beyond EOD, truncated [ 150.278495][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.337247][ T4936] device veth0_macvtap entered promiscuous mode [ 150.348030][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.357032][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.368455][ T4936] device veth1_macvtap entered promiscuous mode [ 151.139707][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.154445][ T5174] loop1: detected capacity change from 0 to 1024 [ 151.174915][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.200930][ T4936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.217332][ T4936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.403261][ T4936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.471537][ T4936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.738839][ T4936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.971655][ T4936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.077425][ T4936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.133725][ T4936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.186550][ T4936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.212868][ T4936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.233567][ T4936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.249551][ T4936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.298866][ T4936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.339264][ T4936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.112241][ T4936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.137977][ T4936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.162019][ T4936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.209359][ T4936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.238322][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.247725][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.306185][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.355458][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.827299][ T5201] device syzkaller0 entered promiscuous mode [ 153.887221][ T4936] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.119000][ T4936] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.127871][ T4936] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.430356][ T4936] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.645867][ T5187] lo speed is unknown, defaulting to 1000 [ 155.730989][ T4613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.891140][ T4613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.943553][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 155.958936][ T5231] pit: kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 155.970806][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.359468][ T5231] kvm: pic: level sensitive irq not supported [ 156.549249][ T1437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.614544][ T1437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.698297][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.080395][ T5248] device syzkaller0 entered promiscuous mode [ 159.170149][ T5276] device syzkaller0 entered promiscuous mode [ 159.773705][ T5275] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 159.788630][ T5298] syz.1.254 uses obsolete (PF_INET,SOCK_PACKET) [ 160.188045][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.219285][ T4280] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.609344][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.635059][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.648041][ T4280] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 160.656087][ T4280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.681681][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.717982][ T4280] usb 5-1: config 0 has no interface number 0 [ 160.724139][ T4280] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 160.726997][ T13] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.760016][ T4280] usb 5-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 160.793916][ T4280] usb 5-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 160.796104][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.822731][ T4280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.862564][ T4280] usb 5-1: config 0 descriptor?? [ 160.868557][ T13] usb 4-1: config 0 descriptor?? [ 161.112683][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.173432][ T7] usb 5-1: USB disconnect, device number 4 [ 161.380127][ T13] plantronics 0003:047F:FFFF.0004: unbalanced delimiter at end of report description [ 161.429696][ T13] plantronics 0003:047F:FFFF.0004: parse failed [ 161.491029][ T13] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 161.582965][ T13] usb 4-1: USB disconnect, device number 4 [ 161.853466][ T5341] loop4: detected capacity change from 0 to 512 [ 162.044644][ T5341] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.090019][ T5341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 162.117031][ T5341] System zones: 1-12 [ 162.161730][ T5341] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 162.289195][ T5341] EXT4-fs (loop4): 1 truncate cleaned up [ 162.294928][ T5341] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 162.822658][ T5355] loop5: detected capacity change from 0 to 512 [ 163.136067][ T5355] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.264: inode has both inline data and extents flags [ 163.378575][ T5355] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.264: couldn't read orphan inode 15 (err -117) [ 163.408448][ T5355] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.784575][ T5372] device syzkaller0 entered promiscuous mode [ 164.896424][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 168.058131][ T5433] loop4: detected capacity change from 0 to 128 [ 169.154848][ T5433] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.213880][ T5433] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.229375][ T5439] device syzkaller0 entered promiscuous mode [ 169.274934][ T5430] loop5: detected capacity change from 0 to 8192 [ 169.415177][ T5430] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 169.770936][ T5430] REISERFS (device loop5): using ordered data mode [ 169.936087][ T5430] reiserfs: using flush barriers [ 170.342870][ T5430] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.408899][ T5430] REISERFS (device loop5): checking transaction log (loop5) [ 170.452100][ T5430] REISERFS (device loop5): Using r5 hash to sort names [ 170.462474][ T155] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.513536][ T5430] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 171.051868][ T5460] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 171.063059][ T5460] loop1: detected capacity change from 0 to 164 [ 171.251801][ T5453] lo speed is unknown, defaulting to 1000 [ 171.580648][ T5453] chnl_net:caif_netlink_parms(): no params data found [ 172.110987][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.164885][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.227324][ T5453] device bridge_slave_0 entered promiscuous mode [ 172.286312][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.355786][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.404341][ T5453] device bridge_slave_1 entered promiscuous mode [ 172.478221][ T5453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.489941][ T5453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.539474][ T5453] team0: Port device team_slave_0 added [ 172.758887][ T5453] team0: Port device team_slave_1 added [ 172.848362][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 173.480167][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.545061][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.571157][ T5453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.606231][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.647550][ T5519] loop1: detected capacity change from 0 to 1024 [ 173.660552][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.715410][ T5453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.755226][ T5453] device hsr_slave_0 entered promiscuous mode [ 173.762182][ T5453] device hsr_slave_1 entered promiscuous mode [ 173.768950][ T5453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.776648][ T5453] Cannot create hsr debugfs directory [ 173.912491][ T5519] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 173.948169][ T5519] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.928547][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 175.778990][ T1201] block nbd1: Attempted send on invalid socket [ 175.785993][ T1201] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.825480][ T5548] vxfs: unable to read disk superblock at 1 [ 175.832936][ T1201] block nbd1: Attempted send on invalid socket [ 175.839206][ T1201] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.850176][ T5548] vxfs: unable to read disk superblock at 8 [ 175.856100][ T5548] vxfs: can't find superblock. [ 175.878310][ T5453] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.940241][ T5453] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.021380][ T5453] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.074649][ T5453] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.416548][ T5562] loop4: detected capacity change from 0 to 1024 [ 176.537517][ T5562] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.564130][ T5453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.598316][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.638500][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.675856][ T5453] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.747110][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.776406][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.829631][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.836876][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.851622][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.881733][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.907008][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.934358][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.941563][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.979999][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.996057][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.008219][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 177.034051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.063802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.101336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.132300][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.151586][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.205116][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.237266][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.276942][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.386423][ T5605] loop5: detected capacity change from 0 to 1024 [ 177.407029][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.481964][ T5453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.491509][ T5605] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 177.563156][ T5605] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 177.960948][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.991319][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.022448][ T5453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.625295][ T4236] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 179.142278][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 179.267981][ T4236] usb 5-1: Using ep0 maxpacket: 8 [ 179.351603][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.374306][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.388218][ T4236] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 179.427289][ T4236] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.455210][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.466051][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.474482][ T4236] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.535820][ T4236] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.563298][ T4236] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.605679][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.653690][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.661655][ T4236] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.706338][ T5453] device veth0_vlan entered promiscuous mode [ 179.716889][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.023315][ T5453] device veth1_vlan entered promiscuous mode [ 180.158730][ T4236] usb 5-1: GET_CAPABILITIES returned 0 [ 180.211708][ T4236] usbtmc 5-1:16.0: can't read capabilities [ 180.402290][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.480292][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.551098][ T5673] loop1: detected capacity change from 0 to 512 [ 180.602239][ T5673] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.660071][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.701340][ T5673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 180.709483][ T5673] System zones: 1-12 [ 180.719981][ T5673] EXT4-fs (loop1): 1 truncate cleaned up [ 180.725843][ T5673] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug,block_validity,errors=remount-ro,debug,. Quota mode: none. [ 180.788883][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.934770][ T5453] device veth0_macvtap entered promiscuous mode [ 180.953235][ T5453] device veth1_macvtap entered promiscuous mode [ 181.003697][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.014577][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.025368][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.064989][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.161252][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.353019][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.594101][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.633428][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.666856][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.725219][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.835835][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.870344][ T5684] loop1: detected capacity change from 0 to 512 [ 181.886982][ T4977] usb 5-1: USB disconnect, device number 5 [ 181.893789][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.906694][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.956014][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.011164][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.091834][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.133068][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.169161][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.297354][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.336029][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.361905][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.376688][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.387295][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.397237][ T5453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.407849][ T5453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.419254][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.439860][ T5684] EXT4-fs (loop1): Test dummy encryption mode enabled [ 182.447573][ T5684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.462583][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 182.462597][ T26] audit: type=1326 audit(1778140465.565:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.4.328" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a100dfdd9 code=0x7ffc0000 [ 182.496295][ T5453] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.647825][ T5453] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.741361][ T5684] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.324: bad orphan inode 131083 [ 182.791479][ T5453] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.876568][ T5684] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 182.946533][ T5453] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.091672][ T26] audit: type=1326 audit(1778140465.565:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.4.328" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a100dfdd9 code=0x7ffc0000 [ 183.263259][ T5708] loop4: detected capacity change from 0 to 512 [ 183.271024][ T26] audit: type=1326 audit(1778140465.595:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.4.328" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5a100dfdd9 code=0x7ffc0000 [ 183.273654][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.294949][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.305479][ T26] audit: type=1326 audit(1778140465.595:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.4.328" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5a100dfdd9 code=0x7ffc0000 [ 183.365384][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.415570][ T5684] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 183.424695][ T5708] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.469548][ T5684] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.324: iget: bad extra_isize 1312 (inode size 256) [ 183.520792][ T5684] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.324: iget: bad extra_isize 1312 (inode size 256) [ 183.536132][ T5708] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.714911][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.736693][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.804065][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.850798][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.859261][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.867545][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.918096][ T5747] loop4: detected capacity change from 0 to 512 [ 186.520445][ T5747] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.333: inode has both inline data and extents flags [ 186.539830][ T5747] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.333: couldn't read orphan inode 15 (err -117) [ 186.557150][ T5747] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.328550][ T5768] loop3: detected capacity change from 0 to 1024 [ 188.438352][ T5768] EXT4-fs (loop3): Ignoring removed nobh option [ 188.444694][ T5768] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 188.545628][ T5768] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,inode_readahead_blks=0x0000000000040000,nobh,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 189.729831][ T5786] loop4: detected capacity change from 0 to 256 [ 189.746824][ T5786] exfat: Deprecated parameter 'utf8' [ 189.770058][ T5786] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 191.228082][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 191.238078][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 191.257067][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 194.466622][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.473020][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.480815][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.489635][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.991332][ T5771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.148779][ T5771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.968074][ T5771] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.977245][ T5771] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.997512][ T5771] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.013782][ T5771] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.117560][ T5797] device syzkaller0 entered promiscuous mode [ 201.858615][ T5882] loop5: detected capacity change from 0 to 16 [ 202.045113][ T5882] erofs: (device loop5): mounted with root inode @ nid 36. [ 203.111507][ T5901] hub 8-0:1.0: USB hub found [ 203.118111][ T5901] hub 8-0:1.0: 1 port detected [ 203.200983][ T5882] attempt to access beyond end of device [ 203.200983][ T5882] loop5: rw=524288, want=1049304, limit=16 [ 203.580155][ T5902] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 203.691598][ T5882] attempt to access beyond end of device [ 203.691598][ T5882] loop5: rw=524288, want=40, limit=16 [ 203.722704][ T5882] attempt to access beyond end of device [ 203.722704][ T5882] loop5: rw=524288, want=48, limit=16 [ 205.006615][ T5882] attempt to access beyond end of device [ 205.006615][ T5882] loop5: rw=524288, want=408, limit=16 [ 205.254084][ T5920] loop1: detected capacity change from 0 to 512 [ 205.444285][ T5920] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 206.138914][ T5920] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 206.228067][ T5920] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.381: Invalid inode table block 1 in block_group 0 [ 206.370914][ T5920] EXT4-fs (loop1): get root inode failed [ 206.466384][ T5920] EXT4-fs (loop1): mount failed [ 207.322510][ T5949] ubi0: attaching mtd0 [ 207.337355][ T5949] ubi0: scanning is finished [ 207.342132][ T5949] ubi0: empty MTD device detected [ 207.543539][ T5949] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 209.429423][ T5956] netlink: 'syz.1.388': attribute type 10 has an invalid length. [ 209.678541][ T5956] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 212.308886][ T6002] device syzkaller0 entered promiscuous mode [ 212.600569][ T6010] device syzkaller0 entered promiscuous mode [ 212.688356][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 213.161957][ T6022] loop6: detected capacity change from 0 to 128 [ 216.765508][ T6076] tipc: Started in network mode [ 216.783043][ T6076] tipc: Node identity , cluster identity 4711 [ 216.805538][ T6076] tipc: Failed to obtain node identity [ 216.841943][ T6076] tipc: Enabling of bearer rejected, failed to enable media [ 216.985107][ T1437] Bluetooth: (null): Invalid header checksum [ 217.016085][ T1437] Bluetooth: (null): Invalid header checksum [ 217.069460][ T4351] Bluetooth: (null): Invalid header checksum [ 217.284604][ T4613] Bluetooth: (null): Invalid header checksum [ 217.291830][ T4613] Bluetooth: (null): Invalid header checksum [ 218.000070][ T4351] Bluetooth: (null): Invalid header checksum [ 218.097333][ T6081] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 218.104448][ T6081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.116656][ T6081] vhci_hcd vhci_hcd.0: Device attached [ 219.277993][ T7] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 219.440263][ T6084] vhci_hcd: connection reset by peer [ 219.450463][ T144] vhci_hcd: stop threads [ 219.455266][ T144] vhci_hcd: release socket [ 219.478034][ T144] vhci_hcd: disconnect device [ 219.543897][ T6104] process 'syz.3.417' launched './file0' with NULL argv: empty string added [ 223.945064][ T6158] loop6: detected capacity change from 0 to 256 [ 224.024472][ T6158] exfat: Deprecated parameter 'utf8' [ 224.125985][ T6158] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 224.361889][ T26] audit: type=1804 audit(1778140507.465:6): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.433" name=2F6E6577726F6F742F31372FE91F7189591E9233614B2F66696C65302F66696C6531 dev="loop6" ino=1048607 res=1 errno=0 [ 225.167719][ T7] vhci_hcd: vhci_device speed not set [ 225.348909][ T6178] loop3: detected capacity change from 0 to 512 [ 225.437772][ T6178] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 226.262103][ T6178] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 226.374732][ T6178] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.437: Invalid inode table block 1 in block_group 0 [ 226.435106][ T6178] EXT4-fs (loop3): get root inode failed [ 226.441736][ T6178] EXT4-fs (loop3): mount failed [ 227.746027][ T6191] syz.6.439 (6191): drop_caches: 2 [ 229.282846][ T6234] device syzkaller0 entered promiscuous mode [ 230.496846][ T6250] loop5: detected capacity change from 0 to 512 [ 230.614698][ T6250] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 230.688104][ T6250] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 230.752045][ T6250] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.452: Invalid inode table block 1 in block_group 0 [ 230.997466][ T6250] EXT4-fs (loop5): get root inode failed [ 231.121685][ T6250] EXT4-fs (loop5): mount failed [ 233.630967][ T6291] loop3: detected capacity change from 0 to 2048 [ 233.663219][ T6292] netlink: 'syz.5.457': attribute type 10 has an invalid length. [ 233.705822][ T6292] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 233.779997][ T6291] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.863545][ T6291] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.071104][ T4263] Bluetooth: (null): Invalid header checksum [ 246.077189][ T4263] Bluetooth: (null): Invalid header checksum [ 246.094674][ T4263] Bluetooth: (null): Invalid header checksum [ 246.635464][ T6408] loop6: detected capacity change from 0 to 4096 [ 246.716448][ T6408] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 246.738246][ T6408] NILFS (loop6): mounting unchecked fs [ 246.744304][ T6408] NILFS (loop6): recovery required for readonly filesystem [ 246.821722][ T6408] NILFS (loop6): write access will be enabled during recovery [ 247.691935][ T6408] NILFS (loop6): recovery complete [ 248.160483][ T4235] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 249.898724][ T6459] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 249.922777][ T6459] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 250.959616][ T4235] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 250.975100][ T4235] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 250.984299][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.994323][ T4235] usb 2-1: config 0 descriptor?? [ 251.182451][ T4235] usb 2-1: can't set config #0, error -71 [ 251.198720][ T4235] usb 2-1: USB disconnect, device number 6 [ 255.989403][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.996766][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.082055][ T4352] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.711548][ T4352] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.970507][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 258.563420][ T6533] loop5: detected capacity change from 0 to 512 [ 259.031722][ T4352] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.089929][ T6533] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.155741][ T6533] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.211481][ T4352] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.241145][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 259.313405][ T6557] Illegal XDP return value 514, expect packet loss! [ 259.454831][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 259.840709][ T6573] device syzkaller0 entered promiscuous mode [ 262.289135][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 262.734053][ T6605] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 262.889775][ T6609] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.898964][ T6609] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.915537][ T6609] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.928169][ T6609] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 262.944357][ T6609] bond1: (slave geneve2): making interface the new active one [ 262.953571][ T6609] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 262.973331][ T6609] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 262.989021][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.530'. [ 263.076231][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.122058][ T6609] syz.1.530 (6609) used greatest stack depth: 19352 bytes left [ 263.483097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 264.136099][ T6632] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 265.425939][ T4352] device hsr_slave_0 left promiscuous mode [ 265.463433][ T4352] device hsr_slave_1 left promiscuous mode [ 265.471430][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.513100][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.689212][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.713414][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.805420][ T4352] device bridge_slave_1 left promiscuous mode [ 265.868399][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.385804][ T4352] device bridge_slave_0 left promiscuous mode [ 266.482186][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.238085][ T4352] device veth1_macvtap left promiscuous mode [ 267.244537][ T4352] device veth0_macvtap left promiscuous mode [ 267.604322][ T4352] device veth1_vlan left promiscuous mode [ 267.634692][ T4352] device veth0_vlan left promiscuous mode [ 268.261637][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 268.309485][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 268.330892][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.355827][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.450521][ T4352] bond0 (unregistering): Released all slaves [ 268.678023][ T5793] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 268.749448][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 270.388230][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 271.374897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 271.454584][ T6761] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 271.825912][ T6774] 9pnet: Insufficient options for proto=fd [ 273.937433][ T6790] netlink: 'syz.4.567': attribute type 10 has an invalid length. [ 273.965852][ T6790] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 274.454543][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 275.251092][ T6824] loop1: detected capacity change from 0 to 512 [ 275.264132][ T6823] loop5: detected capacity change from 0 to 512 [ 275.455502][ T6823] EXT4-fs (loop5): Ignoring removed orlov option [ 275.462044][ T6824] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 275.472102][ T6823] EXT4-fs (loop5): Test dummy encryption mode enabled [ 275.478460][ T6824] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 275.480017][ T6823] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 275.528023][ T6824] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.576: Invalid inode table block 1 in block_group 0 [ 275.631535][ T6824] EXT4-fs (loop1): get root inode failed [ 275.643894][ T6824] EXT4-fs (loop1): mount failed [ 275.735797][ T6823] EXT4-fs (loop5): 1 truncate cleaned up [ 275.742643][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 275.768214][ T6823] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 276.018480][ T6841] ubi0: attaching mtd0 [ 276.037302][ T6841] ubi0: scanning is finished [ 276.550794][ T6841] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 276.657480][ T6830] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 277.650528][ T6869] netlink: 'syz.5.584': attribute type 10 has an invalid length. [ 279.768280][ T4233] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 280.328899][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.358103][ T4233] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.367204][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.437790][ T4233] usb 2-1: config 0 descriptor?? [ 281.079900][ T4233] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 281.093569][ T4233] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input6 [ 281.997965][ T4233] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 282.057123][ T4233] usb 2-1: USB disconnect, device number 7 [ 283.322137][ T6975] fido_id[6975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 286.108150][ T1325] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 288.008355][ T1325] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 288.017465][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.102778][ T1325] usb 5-1: Product: syz [ 288.224536][ T1325] usb 5-1: Manufacturer: syz [ 288.229865][ T1325] usb 5-1: SerialNumber: syz [ 288.343853][ T1325] usb 5-1: can't set config #1, error -71 [ 288.364736][ T1325] usb 5-1: USB disconnect, device number 6 [ 288.453770][ T7063] loop3: detected capacity change from 0 to 128 [ 288.485426][ T7065] device ip6gre1 entered promiscuous mode [ 288.578983][ T7063] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.595072][ T7069] IPv6: Can't replace route, no match found [ 288.601632][ T7063] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 289.072679][ T7079] capability: warning: `syz.3.639' uses deprecated v2 capabilities in a way that may be insecure [ 293.686279][ T4236] Bluetooth: hci2: command 0x0406 tx timeout [ 293.696795][ T7142] loop3: detected capacity change from 0 to 512 [ 293.818366][ T7142] EXT4-fs (loop3): Test dummy encryption mode enabled [ 293.908187][ T7142] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.020866][ T7142] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.657: bad orphan inode 131083 [ 294.097713][ T7142] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 296.192038][ T7168] device syzkaller0 entered promiscuous mode [ 297.205516][ C1] hrtimer: interrupt took 35171 ns [ 300.187644][ T7232] loop6: detected capacity change from 0 to 512 [ 300.232458][ T7232] EXT4-fs (loop6): inline encryption not supported [ 300.239453][ T7232] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 304.394514][ T7295] device vlan2 entered promiscuous mode [ 304.413473][ T7295] device bridge0 entered promiscuous mode [ 307.358426][ T7343] netlink: 88 bytes leftover after parsing attributes in process `syz.4.707'. [ 307.782604][ T7343] loop4: detected capacity change from 0 to 256 [ 309.289542][ T7343] FAT-fs (loop4): Unrecognized mount option "iocharseŚżdŠ¾}ąt=iso8859-5" or missing value [ 309.319134][ T7350] loop6: detected capacity change from 0 to 64 [ 309.373746][ T7353] netlink: 'syz.3.712': attribute type 10 has an invalid length. [ 309.406371][ T7353] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 309.753909][ T7350] hfs: bad catalog entry type 0 [ 311.828003][ T4352] wlan1: Trigger new scan to find an IBSS to join [ 311.990558][ T7390] loop5: detected capacity change from 0 to 512 [ 312.162390][ T7390] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 312.193865][ T7401] loop3: detected capacity change from 0 to 128 [ 312.282594][ T7390] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 312.697801][ T7390] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.721: Invalid inode table block 1 in block_group 0 [ 312.840792][ T7390] EXT4-fs (loop5): get root inode failed [ 312.867983][ T7390] EXT4-fs (loop5): mount failed [ 313.709947][ T7422] ubi0: attaching mtd0 [ 313.715285][ T7422] ubi0: scanning is finished [ 313.977406][ T7422] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 315.252547][ T7449] loop1: detected capacity change from 0 to 512 [ 315.307443][ T7449] EXT4-fs (loop1): Ignoring removed nobh option [ 315.332233][ T7449] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 315.923839][ T7456] lo speed is unknown, defaulting to 1000 [ 315.989991][ T7456] loop3: detected capacity change from 0 to 8 [ 316.019440][ T144] wlan1: Trigger new scan to find an IBSS to join [ 317.087624][ T7449] EXT4-fs (loop1): 1 truncate cleaned up [ 317.095977][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.104977][ T7449] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 317.148318][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.380467][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /153/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 317.439741][ T4189] EXT4-fs (loop1): Remounting filesystem read-only [ 317.456485][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 317.518566][ T21] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 317.526886][ T21] Bluetooth: hci0: Injecting HCI hardware error event [ 317.534191][ T4196] Bluetooth: hci0: hardware error 0x00 [ 317.597982][ T4189] EXT4-fs (loop1): Remounting filesystem read-only [ 317.627031][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /153/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 317.719978][ T4189] EXT4-fs (loop1): Remounting filesystem read-only [ 317.739966][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 317.766502][ T4189] EXT4-fs (loop1): Remounting filesystem read-only [ 317.785167][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /153/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 317.854684][ T4189] EXT4-fs (loop1): Remounting filesystem read-only [ 317.868394][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 317.907370][ T4189] EXT4-fs (loop1): Remounting filesystem read-only [ 317.926774][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /153/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 317.974260][ T4189] EXT4-fs (loop1): Remounting filesystem read-only [ 317.990577][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 318.107886][ T4189] EXT4-fs (loop1): Remounting filesystem read-only [ 318.114989][ T4189] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /153/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 318.216332][ T4189] EXT4-fs (loop1): Remounting filesystem read-only [ 318.223837][ T4189] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 318.267934][ T4189] EXT4-fs (loop1): Remounting filesystem read-only [ 318.329024][ T5793] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 318.351327][ T7491] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.796728][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 328.977570][ T5793] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.190632][ T5793] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.665709][ T5793] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.697935][ T5793] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.959941][ T5793] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.999868][ T5793] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 330.190534][ T5793] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.223106][ T5793] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 330.948426][ T7688] fuse: Bad value for 'fd' [ 330.976826][ T7681] lo speed is unknown, defaulting to 1000 [ 332.482415][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 332.867358][ T7681] chnl_net:caif_netlink_parms(): no params data found [ 334.261942][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.327736][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.428415][ T7681] device bridge_slave_0 entered promiscuous mode [ 334.538043][ T1325] Bluetooth: hci0: command 0x041b tx timeout [ 334.698966][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.831409][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.921913][ T7744] fuse: Bad value for 'fd' [ 334.979153][ T7681] device bridge_slave_1 entered promiscuous mode [ 335.156076][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.458515][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.692583][ T7681] team0: Port device team_slave_0 added [ 335.748999][ T7681] team0: Port device team_slave_1 added [ 336.037344][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.067870][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.186009][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.304149][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.322908][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.168246][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 337.201695][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.381472][ T7681] device hsr_slave_0 entered promiscuous mode [ 337.408692][ T7681] device hsr_slave_1 entered promiscuous mode [ 337.468003][ T7681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.475732][ T7681] Cannot create hsr debugfs directory [ 337.628367][ T5793] bond0: (slave wlan1): Releasing backup interface [ 338.125477][ T5793] device hsr_slave_0 left promiscuous mode [ 338.140499][ T5793] device hsr_slave_1 left promiscuous mode [ 338.162789][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.185584][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.216785][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.254640][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.282872][ T5793] device bridge_slave_1 left promiscuous mode [ 338.308149][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.896997][ T5793] device bridge_slave_0 left promiscuous mode [ 338.915105][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.393719][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 339.709008][ T5793] device veth1_macvtap left promiscuous mode [ 339.715088][ T5793] device veth0_macvtap left promiscuous mode [ 340.647555][ T5793] device veth1_vlan left promiscuous mode [ 340.676288][ T5793] device veth0_vlan left promiscuous mode [ 341.212673][ T5793] bond1 (unregistering): (slave geneve2): Releasing active interface [ 341.240688][ T5793] bond1 (unregistering): Released all slaves [ 341.404505][ T5793] team0 (unregistering): Port device team_slave_1 removed [ 341.445768][ T5793] team0 (unregistering): Port device team_slave_0 removed [ 341.495666][ T5793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.533256][ T5793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.773186][ T5793] bond0 (unregistering): Released all slaves [ 342.161485][ T4236] lo speed is unknown, defaulting to 1000 [ 342.166458][ T7681] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 342.881221][ T7681] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 342.898734][ T7681] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 342.908542][ T7681] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 343.614037][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.632641][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.790546][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.822619][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.915049][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.964707][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.040036][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.047794][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.321953][ T7681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.395846][ T7681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.452499][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.486838][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.540357][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.586805][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.594009][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.636980][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.734752][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.743692][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.753055][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.762353][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.771423][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.780720][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.803987][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.824470][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.854277][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.005985][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 345.051155][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 345.296724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.314741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.367025][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.316057][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.345318][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.490050][ T7681] device veth0_vlan entered promiscuous mode [ 346.496940][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.532014][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.569899][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.608408][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.629960][ T7681] device veth1_vlan entered promiscuous mode [ 346.795455][ T7681] device veth0_macvtap entered promiscuous mode [ 346.821834][ T7681] device veth1_macvtap entered promiscuous mode [ 346.848878][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.857215][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 346.919131][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 347.094436][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 347.103161][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.112649][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 347.145779][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.197309][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.222894][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.263221][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.292364][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.320059][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.342535][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.383763][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.407507][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.452168][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.473293][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.501407][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.515797][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.550150][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.587461][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.639083][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.876116][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.163155][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.340195][ T4613] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 349.154244][ T7681] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.617863][ T7681] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.747907][ T7681] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.790660][ T7681] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.033521][ T4613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.048580][ T4613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.088170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.128597][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.136481][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.170036][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 351.755356][ T7992] loop3: detected capacity change from 0 to 1024 [ 351.824721][ T7992] EXT4-fs (loop3): Ignoring removed nobh option [ 351.868035][ T7992] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 351.953717][ T7992] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,inode_readahead_blks=0x0000000000040000,nobh,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 356.656044][ T8049] device syzkaller0 entered promiscuous mode [ 356.671746][ T8056] loop4: detected capacity change from 0 to 1024 [ 356.934103][ T8056] EXT4-fs (loop4): Ignoring removed nobh option [ 356.959618][ T8056] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 357.134621][ T8056] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,inode_readahead_blks=0x0000000000040000,nobh,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 361.599844][ T8127] device syzkaller0 entered promiscuous mode [ 362.886967][ T8138] loop7: detected capacity change from 0 to 1024 [ 362.918028][ T8138] EXT4-fs (loop7): Ignoring removed nobh option [ 362.924486][ T8138] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 362.975968][ T8138] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,inode_readahead_blks=0x0000000000040000,nobh,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 366.072886][ T8199] loop3: detected capacity change from 0 to 1024 [ 366.163912][ T8199] EXT4-fs (loop3): Ignoring removed nobh option [ 366.181661][ T8199] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 366.584648][ T8199] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,inode_readahead_blks=0x0000000000040000,nobh,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 371.281047][ T8283] loop3: detected capacity change from 0 to 1024 [ 371.346213][ T8283] EXT4-fs (loop3): Ignoring removed nobh option [ 371.363229][ T8283] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 371.447537][ T8283] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,inode_readahead_blks=0x0000000000040000,nobh,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 376.142537][ T8343] loop5: detected capacity change from 0 to 1024 [ 376.241662][ T8343] EXT4-fs (loop5): Ignoring removed nobh option [ 376.260242][ T8343] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 376.314632][ T8343] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,inode_readahead_blks=0x0000000000040000,nobh,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 378.622192][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.641719][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.132127][ T8380] loop4: detected capacity change from 0 to 128 [ 379.163743][ T8380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 379.307978][ T8380] System zones: 1-3, 19-19, 35-36 [ 379.329031][ T8380] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 379.368452][ T8380] ext4 filesystem being mounted at /204/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 380.729087][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 381.138565][ T8408] loop5: detected capacity change from 0 to 128 [ 381.503290][ T8408] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 381.853990][ T8408] hpfs: filesystem error: improperly stopped [ 381.931632][ T4613] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 382.063088][ T8408] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 382.099950][ T8408] hpfs: You really don't want any checks? You are crazy... [ 382.107754][ T8408] hpfs: hpfs_map_sector(): read error [ 382.159276][ T8408] hpfs: code page support is disabled [ 382.187253][ T8408] hpfs: hpfs_map_4sectors(): unaligned read [ 382.232121][ T8408] hpfs: hpfs_map_4sectors(): unaligned read [ 382.347904][ T8408] hpfs: filesystem error: unable to find root dir [ 382.364527][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 383.600387][ T8438] 9pnet: Insufficient options for proto=fd [ 384.496099][ T8427] loop6: detected capacity change from 0 to 32768 [ 384.681979][ T8427] [ 384.681979][ T8427] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 384.681979][ T8427] [ 384.864632][ T8427] ERROR: (device loop6): diWrite: ixpxd invalid [ 384.864632][ T8427] [ 384.960247][ T8427] ERROR: (device loop6): txCommit: [ 384.960247][ T8427] [ 385.124414][ T5453] [ 385.124414][ T5453] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 385.124414][ T5453] [ 385.187684][ T5453] [ 385.187684][ T5453] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 385.187684][ T5453] [ 386.876761][ T8481] loop6: detected capacity change from 0 to 512 [ 387.093799][ T8481] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.931: inode has both inline data and extents flags [ 387.159596][ T8481] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.931: couldn't read orphan inode 15 (err -117) [ 387.198142][ T8481] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 387.492395][ T8491] overlayfs: conflicting lowerdir path [ 388.522526][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.7.937'. [ 403.707552][ T8754] loop3: detected capacity change from 0 to 1024 [ 404.076988][ T8754] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 405.313338][ T8777] 9pnet: Insufficient options for proto=fd [ 408.584387][ T8829] 9pnet: Insufficient options for proto=fd [ 409.582963][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.7.999'. [ 410.667309][ T8855] device syzkaller0 entered promiscuous mode [ 410.913717][ T8859] loop4: detected capacity change from 0 to 512 [ 411.001606][ T8859] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 411.034241][ T8859] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 412.571841][ T8880] netlink: 'syz.4.1010': attribute type 10 has an invalid length. [ 413.261375][ T4352] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 413.591425][ T8884] loop4: detected capacity change from 0 to 32768 [ 413.756795][ T8884] JBD2: Ignoring recovery information on journal [ 414.152891][ T8884] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 414.618885][ T8884] [ 414.621287][ T8884] ====================================================== [ 414.628431][ T8884] WARNING: possible circular locking dependency detected [ 414.635488][ T8884] syzkaller #0 Not tainted [ 414.639923][ T8884] ------------------------------------------------------ [ 414.646961][ T8884] syz.4.1012/8884 is trying to acquire lock: [ 414.652969][ T8884] ffff88802158d488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 414.663976][ T8884] [ 414.663976][ T8884] but task is already holding lock: [ 414.671474][ T8884] ffff88805e113f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x691/0x4a20 [ 414.682065][ T8884] [ 414.682065][ T8884] which lock already depends on the new lock. [ 414.682065][ T8884] [ 414.692517][ T8884] [ 414.692517][ T8884] the existing dependency chain (in reverse order) is: [ 414.701548][ T8884] [ 414.701548][ T8884] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 414.710349][ T8884] down_read+0x44/0x2e0 [ 414.715054][ T8884] ocfs2_read_virt_blocks+0x237/0x8d0 [ 414.720969][ T8884] ocfs2_find_entry+0x3ca/0x2060 [ 414.726482][ T8884] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 414.732479][ T8884] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 414.738564][ T8884] ocfs2_get_system_file_inode+0x32b/0x7f0 [ 414.744917][ T8884] ocfs2_init_global_system_inodes+0x2f3/0x6d0 [ 414.751610][ T8884] ocfs2_fill_super+0x4060/0x50f0 [ 414.757184][ T8884] mount_bdev+0x287/0x3c0 [ 414.762058][ T8884] legacy_get_tree+0xe6/0x180 [ 414.767276][ T8884] vfs_get_tree+0x88/0x270 [ 414.772240][ T8884] do_new_mount+0x24a/0xa40 [ 414.777284][ T8884] __se_sys_mount+0x2e3/0x3d0 [ 414.782508][ T8884] do_syscall_64+0x4c/0xa0 [ 414.787484][ T8884] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 414.793944][ T8884] [ 414.793944][ T8884] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 414.802326][ T8884] __lock_acquire+0x2c42/0x7d10 [ 414.807735][ T8884] lock_acquire+0x19e/0x400 [ 414.812791][ T8884] __mutex_lock_common+0x1e3/0x2400 [ 414.818549][ T8884] mutex_lock_nested+0x17/0x20 [ 414.823856][ T8884] ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 414.830345][ T8884] ocfs2_reserve_suballoc_bits+0x12b/0x44d0 [ 414.836800][ T8884] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 414.843681][ T8884] ocfs2_extend_dir+0xcc9/0x4a20 [ 414.849195][ T8884] ocfs2_prepare_dir_for_insert+0x2fc2/0x53c0 [ 414.855823][ T8884] ocfs2_mknod+0x860/0x2510 [ 414.860899][ T8884] ocfs2_create+0x192/0x420 [ 414.865954][ T8884] path_openat+0x11db/0x2fa0 [ 414.871108][ T8884] do_filp_open+0x1e2/0x410 [ 414.876467][ T8884] do_sys_openat2+0x150/0x4b0 [ 414.881693][ T8884] __x64_sys_creat+0x8c/0xb0 [ 414.886830][ T8884] do_syscall_64+0x4c/0xa0 [ 414.891881][ T8884] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 414.898329][ T8884] [ 414.898329][ T8884] other info that might help us debug this: [ 414.898329][ T8884] [ 414.908664][ T8884] Possible unsafe locking scenario: [ 414.908664][ T8884] [ 414.916133][ T8884] CPU0 CPU1 [ 414.921523][ T8884] ---- ---- [ 414.926912][ T8884] lock(&ocfs2_file_ip_alloc_sem_key); [ 414.932496][ T8884] lock(&osb->system_file_mutex); [ 414.940155][ T8884] lock(&ocfs2_file_ip_alloc_sem_key); [ 414.948259][ T8884] lock(&osb->system_file_mutex); [ 414.953406][ T8884] [ 414.953406][ T8884] *** DEADLOCK *** [ 414.953406][ T8884] [ 414.961574][ T8884] 3 locks held by syz.4.1012/8884: [ 414.966702][ T8884] #0: ffff8880269b0460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 414.975968][ T8884] #1: ffff88805e1142c8 (&type->i_mutex_dir_key#15){+.+.}-{3:3}, at: path_openat+0x803/0x2fa0 [ 414.986326][ T8884] #2: ffff88805e113f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x691/0x4a20 [ 414.997337][ T8884] [ 414.997337][ T8884] stack backtrace: [ 415.003265][ T8884] CPU: 0 PID: 8884 Comm: syz.4.1012 Not tainted syzkaller #0 [ 415.010657][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.020746][ T8884] Call Trace: [ 415.024050][ T8884] [ 415.027027][ T8884] dump_stack_lvl+0x188/0x250 [ 415.031733][ T8884] ? load_image+0x400/0x400 [ 415.036265][ T8884] ? show_regs_print_info+0x20/0x20 [ 415.041492][ T8884] ? print_circular_bug+0x12b/0x1a0 [ 415.046722][ T8884] check_noncircular+0x296/0x330 [ 415.051685][ T8884] ? check_path+0x21/0x40 [ 415.056047][ T8884] ? add_chain_block+0x940/0x940 [ 415.061030][ T8884] ? lockdep_lock+0xf1/0x1f0 [ 415.065662][ T8884] ? mark_lock+0x94/0x320 [ 415.070011][ T8884] __lock_acquire+0x2c42/0x7d10 [ 415.074902][ T8884] ? __bfs+0x2a3/0x5c0 [ 415.079015][ T8884] ? verify_lock_unused+0x140/0x140 [ 415.084249][ T8884] ? mark_lock+0x94/0x320 [ 415.088603][ T8884] ? __lock_acquire+0x13bc/0x7d10 [ 415.093664][ T8884] ? check_path+0x40/0x40 [ 415.098024][ T8884] ? mark_lock+0x94/0x320 [ 415.102387][ T8884] lock_acquire+0x19e/0x400 [ 415.106931][ T8884] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 415.112960][ T8884] ? __might_sleep+0xf0/0xf0 [ 415.117588][ T8884] ? __lock_acquire+0x12e8/0x7d10 [ 415.122648][ T8884] ? read_lock_is_recursive+0x10/0x10 [ 415.128060][ T8884] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 415.134073][ T8884] __mutex_lock_common+0x1e3/0x2400 [ 415.139308][ T8884] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 415.145323][ T8884] ? add_chain_block+0x940/0x940 [ 415.150379][ T8884] ? ocfs2_get_system_file_inode+0x156/0x7f0 [ 415.156401][ T8884] ? mutex_lock_io_nested+0x60/0x60 [ 415.161641][ T8884] ? __rwlock_init+0x140/0x140 [ 415.166450][ T8884] ? do_raw_spin_unlock+0x11d/0x230 [ 415.171689][ T8884] mutex_lock_nested+0x17/0x20 [ 415.176489][ T8884] ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 415.182329][ T8884] ? ocfs2_fast_symlink_readpage+0x3f0/0x3f0 [ 415.188350][ T8884] ? __bfs+0x2a3/0x5c0 [ 415.192452][ T8884] ? verify_lock_unused+0x140/0x140 [ 415.197692][ T8884] ocfs2_reserve_suballoc_bits+0x12b/0x44d0 [ 415.203631][ T8884] ? __lock_acquire+0x7d10/0x7d10 [ 415.208695][ T8884] ? mark_lock+0x94/0x320 [ 415.213054][ T8884] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 415.219071][ T8884] ? lock_chain_count+0x20/0x20 [ 415.223968][ T8884] ? __rwlock_init+0x140/0x140 [ 415.228766][ T8884] ? ocfs2_block_group_search+0x470/0x470 [ 415.234520][ T8884] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 415.240446][ T8884] ? lockdep_hardirqs_on+0x94/0x140 [ 415.245682][ T8884] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 415.251604][ T8884] ? _raw_spin_unlock+0x40/0x40 [ 415.256483][ T8884] ? stack_trace_save+0xa6/0xf0 [ 415.261356][ T8884] ? stack_trace_snprint+0xf0/0xf0 [ 415.266490][ T8884] ? add_lock_to_list+0x18d/0x280 [ 415.271543][ T8884] ? stack_depot_save+0x404/0x440 [ 415.276603][ T8884] ? __kasan_kmalloc+0xcc/0xf0 [ 415.281398][ T8884] ? __kasan_kmalloc+0xb5/0xf0 [ 415.286191][ T8884] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 415.292724][ T8884] ? ocfs2_extend_dir+0xcc9/0x4a20 [ 415.297867][ T8884] ? ocfs2_prepare_dir_for_insert+0x2fc2/0x53c0 [ 415.304132][ T8884] ? ocfs2_mknod+0x860/0x2510 [ 415.308837][ T8884] ? ocfs2_create+0x192/0x420 [ 415.313552][ T8884] ? path_openat+0x11db/0x2fa0 [ 415.318343][ T8884] ? do_filp_open+0x1e2/0x410 [ 415.323050][ T8884] ? do_sys_openat2+0x150/0x4b0 [ 415.327925][ T8884] ? __x64_sys_creat+0x8c/0xb0 [ 415.332715][ T8884] ? do_syscall_64+0x4c/0xa0 [ 415.337329][ T8884] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.343449][ T8884] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 415.349819][ T8884] ? ocfs2_init_steal_slots+0x150/0x150 [ 415.355401][ T8884] ? rwsem_write_trylock+0x135/0x1c0 [ 415.360713][ T8884] ? clear_nonspinnable+0x60/0x60 [ 415.365761][ T8884] ? mark_lock+0x94/0x320 [ 415.370119][ T8884] ocfs2_extend_dir+0xcc9/0x4a20 [ 415.375097][ T8884] ? __lock_acquire+0x13bc/0x7d10 [ 415.380167][ T8884] ? ocfs2_dx_dir_name_hash+0xbb0/0xbb0 [ 415.385747][ T8884] ? ocfs2_allocate_extend_trans+0x5d0/0x5d0 [ 415.391904][ T8884] ? verify_lock_unused+0x140/0x140 [ 415.397225][ T8884] ? mark_lock+0x94/0x320 [ 415.401588][ T8884] ? lockdep_hardirqs_on+0x94/0x140 [ 415.406814][ T8884] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 415.412743][ T8884] ? ocfs2_buffer_cached+0x370/0x860 [ 415.418066][ T8884] ? __lock_acquire+0x7d10/0x7d10 [ 415.423123][ T8884] ? do_raw_spin_lock+0x128/0x2f0 [ 415.428185][ T8884] ? ocfs2_read_blocks+0x108e/0x1450 [ 415.433508][ T8884] ? ocfs2_set_buffer_uptodate+0xab/0x1120 [ 415.439345][ T8884] ? ocfs2_dx_dir_name_hash+0xa01/0xbb0 [ 415.445029][ T8884] ? ocfs2_prepare_dir_for_insert+0x53c0/0x53c0 [ 415.451598][ T8884] ? ocfs2_buffer_cached+0x3f8/0x860 [ 415.456927][ T8884] ocfs2_prepare_dir_for_insert+0x2fc2/0x53c0 [ 415.463046][ T8884] ? ocfs2_set_buffer_uptodate+0xab/0x1120 [ 415.468886][ T8884] ? ocfs2_fill_new_dir_el+0xf20/0xf20 [ 415.474389][ T8884] ? rcu_is_watching+0x11/0xa0 [ 415.479177][ T8884] ? ocfs2_search_dirblock+0x324/0x770 [ 415.484707][ T8884] ? ocfs2_read_dir_block_direct+0x4b0/0x4b0 [ 415.490722][ T8884] ? rcu_is_watching+0x11/0xa0 [ 415.495525][ T8884] ? ocfs2_buffer_cached+0x3f8/0x860 [ 415.500846][ T8884] ? __brelse+0x55/0x90 [ 415.505026][ T8884] ? ocfs2_find_entry+0xe36/0x2060 [ 415.510187][ T8884] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 415.516292][ T8884] ? ocfs2_read_blocks_sync+0xb40/0xb40 [ 415.521893][ T8884] ? ocfs2_inode_lock_full_nested+0x147/0x1bb0 [ 415.528099][ T8884] ? ocfs2_read_inode_block+0x120/0x190 [ 415.533692][ T8884] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 415.539702][ T8884] ? check_noncircular+0x189/0x330 [ 415.544844][ T8884] ? do_raw_spin_unlock+0x11d/0x230 [ 415.550075][ T8884] ? ocfs2_inode_lock_full_nested+0xcdb/0x1bb0 [ 415.556275][ T8884] ? ocfs2_downconvert_lock+0x530/0x530 [ 415.561850][ T8884] ? __lock_acquire+0x28ac/0x7d10 [ 415.566914][ T8884] ? ocfs2_check_dir_for_entry+0x246/0x3d0 [ 415.572757][ T8884] ? ocfs2_lookup_ino_from_name+0xf0/0xf0 [ 415.578515][ T8884] ocfs2_mknod+0x860/0x2510 [ 415.583055][ T8884] ? ocfs2_mkdir+0x420/0x420 [ 415.587776][ T8884] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 415.593698][ T8884] ? __wake_up_common+0x5b/0x4e0 [ 415.598681][ T8884] ? ocfs2_inode_unlock+0xa1/0x140 [ 415.603825][ T8884] ? __lock_acquire+0x7d10/0x7d10 [ 415.608889][ T8884] ? __rwlock_init+0x140/0x140 [ 415.613826][ T8884] ? _raw_spin_unlock+0x24/0x40 [ 415.618712][ T8884] ? do_raw_spin_unlock+0x11d/0x230 [ 415.623945][ T8884] ? rcu_is_watching+0x11/0xa0 [ 415.628731][ T8884] ? ocfs2_lookup+0x490/0x950 [ 415.633573][ T8884] ocfs2_create+0x192/0x420 [ 415.638109][ T8884] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 415.644486][ T8884] ? ocfs2_lookup+0x950/0x950 [ 415.649209][ T8884] ? inode_permission+0xef/0x480 [ 415.654181][ T8884] ? bpf_lsm_inode_create+0x5/0x10 [ 415.659316][ T8884] ? security_inode_create+0xb3/0x100 [ 415.664716][ T8884] ? ocfs2_lookup+0x950/0x950 [ 415.669423][ T8884] path_openat+0x11db/0x2fa0 [ 415.674059][ T8884] ? do_filp_open+0x410/0x410 [ 415.678771][ T8884] do_filp_open+0x1e2/0x410 [ 415.683307][ T8884] ? vfs_tmpfile+0x300/0x300 [ 415.687934][ T8884] ? _raw_spin_unlock+0x24/0x40 [ 415.692812][ T8884] ? alloc_fd+0x598/0x630 [ 415.697177][ T8884] do_sys_openat2+0x150/0x4b0 [ 415.701888][ T8884] ? do_sys_open+0xe0/0xe0 [ 415.706347][ T8884] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 415.712361][ T8884] ? lock_chain_count+0x20/0x20 [ 415.717254][ T8884] ? vtime_user_exit+0x2c8/0x3e0 [ 415.722219][ T8884] __x64_sys_creat+0x8c/0xb0 [ 415.726836][ T8884] do_syscall_64+0x4c/0xa0 [ 415.731283][ T8884] ? clear_bhb_loop+0x30/0x80 [ 415.735992][ T8884] ? clear_bhb_loop+0x30/0x80 [ 415.740809][ T8884] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.746764][ T8884] RIP: 0033:0x7f5a100dfdd9 [ 415.751207][ T8884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.770972][ T8884] RSP: 002b:00007f5a0e339028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 415.779439][ T8884] RAX: ffffffffffffffda RBX: 00007f5a10358fa0 RCX: 00007f5a100dfdd9 [ 415.787446][ T8884] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000200000000100 [ 415.795448][ T8884] RBP: 00007f5a10175d69 R08: 0000000000000000 R09: 0000000000000000 [ 415.803669][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.811679][ T8884] R13: 00007f5a10359038 R14: 00007f5a10358fa0 R15: 00007ffd7eab2be8 [ 415.819692][ T8884] [ 415.852727][ T26] audit: type=1800 audit(1778140698.955:7): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1012" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 415.875525][ T8884] syz.4.1012 (8884) used greatest stack depth: 18032 bytes left [ 415.900718][ T4201] ocfs2: Unmounting device (7,4) on (node local)