last executing test programs: 1m19.146611903s ago: executing program 2 (id=109): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$eJzs281vVFUbAPDn3k4pXy/ti/gBolbR2PjR0oLKwo1GExeamOgCl7UtBCnU0JoIITIag0tD4p4YV/4LrlwZ48rErW6NISFKTEA2jrkz99KZYabQ6ZQpzO+XDHPO3HPvuQ/nnLln7ukNoG+NZv8kEdsj4teIGK5lGwuM1t6uXTk788+VszNJVCrv/JlUy129cnamKFrsty3PjKUR6edJXkmjxdNnjk/Pz8+dyvMTSyc+nFg8feb5Yyemj84dnTs5dejQwQOTL7049UJX4szO6eqeTxb27n7jvQtvzRy+8P7mhu31cXTLaBb4X5Wq5m1PdbuyHvu3shxnUur12XC7BiIia67B6vgfjoFYbrzheP2znp4csK6y7+zfmz8cvJEqV4B7WBId7Rad7QZsHMWFPvv9W7zu4PSj5y6/UvsBlMV9LX/VtpQizf+DBtex/tGIOFy+fjF7RdN9iEqL+wYAAGv1fTb/ee7m+V8SEQ/UlUvytaGRiPh/ROyMiPsiYldE3J+XfTAiHlpl/c1LQzfPP9NLHYZ2W7L538v52lbj/C8tiowM5Ln/VeMfTI4cm5/bHxE7ImIsBoey/GSrgxeHeO2XL9vVXz//O1zOJn1JFHPB/CCXSkN1O5z7pvbepUnp5U8j9pRaxZ9UVwKSqFSytt8dEXtWd+gdReLYM9/ubVeoMf7rF7P6G+NfQRfWmSpfRzxda/9yNMVfSFZen5zYHPNz+yeKXnGzn34+/3a7+tcUfxdk7b+1sf83lRj+O6lfr11cfR3nf/ui7W/K0i3jr+//tTXb2eml6U3Ju9U16035lo+nl5ZOTUZsSt6s5hs+n1o+WpEvymfxj+1rPf535vtk8T8cEVknfiQiHo2Ix/K2ezwinoiIfSvE/+OrT34w1HH86yuLf7bl99+N/j/S2P6rTwwc/+G7dvXfuv9n7X+wmhrLP8nav5ba3Dau9qdT7NNpbwYAAIC7TxoR2yNJx2+k03R8vPb38rtiazq/sLj07JGFj07O1p4RGInBtLjTNVx3P3QyKedHrOWn8nvFxfYD+X3jrwa2VPPjMwvzsz2OHfrdtjbjP/PHQK/PDlh3nteC/tU8/tMenQdw57n+Q//qdPybJ8Ddz/Uf+ler8X+uKW8tAO5Nrv/Qv4x/6F/GP/Qv4x/60lqe6+9OYkt+JsuflFZ4el9ioyQiXbcqyqvca2gDdOMNlSh1YXT38EsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgi/4LAAD//wC47TI=") 1m15.309166161s ago: executing program 2 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m14.516774946s ago: executing program 2 (id=112): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) statfs(0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 1m13.150703577s ago: executing program 2 (id=114): creat(&(0x7f0000000600)='./file0\x00', 0xe5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m11.19421382s ago: executing program 2 (id=118): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x2, 0x400003}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000002c0)={0x4, 0xffff1000, 0x4, 0xffffffffffffffff, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000280)=0x9, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 1m8.238383513s ago: executing program 2 (id=121): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") 51.178770522s ago: executing program 32 (id=121): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") 19.756759005s ago: executing program 0 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000980)="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", 0x1be, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, &(0x7f0000000500)) 16.73397567s ago: executing program 0 (id=182): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0xfffffff6) 15.569998306s ago: executing program 0 (id=183): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001880)=[{0x0}], 0x1}, 0x4010) openat$iommufd(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{0x0}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, 0x0, 0x0) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) 13.511572126s ago: executing program 0 (id=185): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f304"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x10000) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 13.491690063s ago: executing program 1 (id=186): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0xb) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x80) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 12.080251064s ago: executing program 4 (id=188): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 11.787768811s ago: executing program 3 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 10.334975808s ago: executing program 1 (id=190): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0xb) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x80) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 10.262953008s ago: executing program 3 (id=191): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 10.096816157s ago: executing program 4 (id=192): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 9.670541157s ago: executing program 4 (id=193): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 8.47648932s ago: executing program 4 (id=194): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@isofs_parent={0x14, 0x2, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}}, &(0x7f0000000140), 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ppoll(&(0x7f0000000180)=[{r2, 0x102}, {r2, 0xc200}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.567429744s ago: executing program 0 (id=195): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6(0xa, 0x80003, 0xb) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x80) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 7.475017747s ago: executing program 1 (id=196): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) io_setup(0x1000, &(0x7f0000000280)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x1, 0x0, r5, &(0x7f0000000a80)="a9", 0x1}]) 6.128598791s ago: executing program 1 (id=197): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 5.616419688s ago: executing program 1 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000980)="00fd67c6d222406b4000c34801001000867418aaf9b90732f41ec9591b532723e017c8c54d863ecd9b0df09072030025c3a03ce14a48716ba2f4127d38d2128725d9fff7065d51f973ee7ad483b1b28e4aa696cd0d0000b1e1caee2a1ffdbff2b7601618da596d1db25ba3cd0e6c352a27bcb491e01f716712f22f000000008951ffe9c3e755a5669dfd474c58dbf5b8e0f47466d4fd536faac836e6252b3119c95587671b000000000000000021e8fcd716f324cf9b6c643fd70880a912fcae50ccee9fb324f2730d348e0123431d63dee94d387ba900f12a902857b51437ec92b90bed3a60a9abf35c2073342745d4670665a3fdd1da894fd30e66abd668fa6a6fcb11cb0a08c8f0c8ccee7a5b347fdbc111b987811d503511eb50582943ac3e0168d9642359d6c37fadff86882a903a9eecbdaa6d2052aed115c73c04f00e92863595e6569d5c463d2b631e5707c7a635a837a80f08ad7222995510653c30247507f8bb08f92f1953b69063c7b4dc4436197da2fd649ab80bd7b490d551d0258c7896e7d907904400000000000000000000000000367cd24a2e167151e9000993431902309f93a1d6629db02507ff23238a6f0dc0475f6f326b02a5ed076b13", 0x1c1, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, &(0x7f0000000500)) 5.375319134s ago: executing program 0 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bind$tipc(r1, &(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e1e}}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) writev(r6, 0x0, 0x0) read(r6, &(0x7f0000001400)=""/4076, 0xfffffeea) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x41, 0x0) 4.754456111s ago: executing program 4 (id=200): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x20002, 0x0) write$binfmt_elf32(r2, 0x0, 0x0) 3.650363157s ago: executing program 3 (id=201): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 3.413380784s ago: executing program 3 (id=202): socket$alg(0x26, 0x5, 0x0) close(0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x7fff, 0x18}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r2, &(0x7f0000002a40), 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 3.191614185s ago: executing program 1 (id=203): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000980)="00fd67c6d222406b4000c34801001000867418aaf9b90732f41ec9591b532723e017c8c54d863ecd9b0df09072030025c3a03ce14a48716ba2f4127d38d2128725d9fff7065d51f973ee7ad483b1b28e4aa696cd0d0000b1e1caee2a1ffdbff2b7601618da596d1db25ba3cd0e6c352a27bcb491e01f716712f22f000000008951ffe9c3e755a5669dfd474c58dbf5b8e0f47466d4fd536faac836e6252b3119c95587671b000000000000000021e8fcd716f324cf9b6c643fd70880a912fcae50ccee9fb324f2730d348e0123431d63dee94d387ba900f12a902857b51437ec92b90bed3a60a9abf35c2073342745d4670665a3fdd1da894fd30e66abd668fa6a6fcb11cb0a08c8f0c8ccee7a5b347fdbc111b987811d503511eb50582943ac3e0168d9642359d6c37fadff86882a903a9eecbdaa6d2052aed115c73c04f00e92863595e6569d5c463d2b631e5707c7a635a837a80f08ad7222995510653c30247507f8bb08f92f1953b69063c7b4dc4436197da2fd649ab80bd7b490d551d0258c7896e7d907904400000000000000000000000000367cd24a2e167151e9000993431902309f93a1d6629db02507ff23238a6f0dc0475f6f32", 0x1ba, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, &(0x7f0000000500)) 2.095082123s ago: executing program 3 (id=204): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0xfffffff6) 635.330467ms ago: executing program 3 (id=205): io_uring_setup(0x2b9b, &(0x7f0000000100)={0x0, 0x658d, 0x800, 0x400, 0x2b4}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000280)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000440)=""/201, 0xc9}], 0x1) 93.984107ms ago: executing program 4 (id=206): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) 0s ago: executing program 5 (id=140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x10000, 0x200000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000140)=""/18) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r8, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) recvmmsg(r10, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0x1, 0x700, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(r9, r8, 0x0, 0x578410eb) fchown(r5, r6, r7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) prlimit64(r11, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. [ 82.903866][ T5834] cgroup: Unknown subsys name 'net' [ 83.014486][ T5834] cgroup: Unknown subsys name 'cpuset' [ 83.023703][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.743218][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.674978][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.683528][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.690740][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.694154][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.698873][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.706634][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.719677][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.728573][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.742469][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.756064][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.765521][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.773712][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.782166][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.783973][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.790243][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.805014][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.806027][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.814400][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.843004][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.851039][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.860810][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.891554][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.899665][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.915544][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.923900][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.572462][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 88.584748][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 88.787166][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 88.847506][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 88.902778][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 88.924470][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.931849][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.939290][ T5860] bridge_slave_0: entered allmulticast mode [ 88.946863][ T5860] bridge_slave_0: entered promiscuous mode [ 89.023640][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.031043][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.038312][ T5860] bridge_slave_1: entered allmulticast mode [ 89.047206][ T5860] bridge_slave_1: entered promiscuous mode [ 89.073364][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.080713][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.088518][ T5846] bridge_slave_0: entered allmulticast mode [ 89.096111][ T5846] bridge_slave_0: entered promiscuous mode [ 89.153308][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.161108][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.168307][ T5846] bridge_slave_1: entered allmulticast mode [ 89.176448][ T5846] bridge_slave_1: entered promiscuous mode [ 89.197861][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.211031][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.334715][ T5860] team0: Port device team_slave_0 added [ 89.358103][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.382459][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.389613][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.400359][ T5849] bridge_slave_0: entered allmulticast mode [ 89.407660][ T5849] bridge_slave_0: entered promiscuous mode [ 89.418973][ T5860] team0: Port device team_slave_1 added [ 89.425433][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.432844][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.440056][ T5848] bridge_slave_0: entered allmulticast mode [ 89.447403][ T5848] bridge_slave_0: entered promiscuous mode [ 89.457203][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.481300][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.488524][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.498803][ T5849] bridge_slave_1: entered allmulticast mode [ 89.506862][ T5849] bridge_slave_1: entered promiscuous mode [ 89.535472][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.542711][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.549877][ T5848] bridge_slave_1: entered allmulticast mode [ 89.558314][ T5848] bridge_slave_1: entered promiscuous mode [ 89.577563][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.585190][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.593386][ T5855] bridge_slave_0: entered allmulticast mode [ 89.601250][ T5855] bridge_slave_0: entered promiscuous mode [ 89.675343][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.682665][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.689852][ T5855] bridge_slave_1: entered allmulticast mode [ 89.699186][ T5855] bridge_slave_1: entered promiscuous mode [ 89.708439][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.722261][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.732433][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.739410][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.765765][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.794196][ T5846] team0: Port device team_slave_0 added [ 89.804426][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.857341][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.864542][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.890679][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.911225][ T5859] Bluetooth: hci0: command tx timeout [ 89.911455][ T5867] Bluetooth: hci1: command tx timeout [ 89.918829][ T5846] team0: Port device team_slave_1 added [ 89.926815][ T5853] Bluetooth: hci2: command tx timeout [ 89.946368][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.969763][ T5849] team0: Port device team_slave_0 added [ 89.981285][ T5849] team0: Port device team_slave_1 added [ 89.991034][ T5853] Bluetooth: hci4: command tx timeout [ 89.991094][ T5867] Bluetooth: hci3: command tx timeout [ 90.028191][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.041444][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.066234][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.073496][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.099850][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.184618][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.193598][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.220398][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.233707][ T5848] team0: Port device team_slave_0 added [ 90.273804][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.281076][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.307748][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.321448][ T5848] team0: Port device team_slave_1 added [ 90.335597][ T5860] hsr_slave_0: entered promiscuous mode [ 90.342206][ T5860] hsr_slave_1: entered promiscuous mode [ 90.351287][ T5855] team0: Port device team_slave_0 added [ 90.357978][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.365107][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.391223][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.431916][ T5855] team0: Port device team_slave_1 added [ 90.505281][ T5846] hsr_slave_0: entered promiscuous mode [ 90.512283][ T5846] hsr_slave_1: entered promiscuous mode [ 90.518425][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 90.524316][ T5846] Cannot create hsr debugfs directory [ 90.569958][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.577290][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.603799][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.675058][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.682707][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.709274][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.743598][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.750654][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.777195][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.818354][ T5849] hsr_slave_0: entered promiscuous mode [ 90.824944][ T5849] hsr_slave_1: entered promiscuous mode [ 90.831485][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 90.837245][ T5849] Cannot create hsr debugfs directory [ 90.859773][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.867016][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.893986][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.100055][ T5848] hsr_slave_0: entered promiscuous mode [ 91.111623][ T5848] hsr_slave_1: entered promiscuous mode [ 91.117875][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 91.123845][ T5848] Cannot create hsr debugfs directory [ 91.185909][ T5855] hsr_slave_0: entered promiscuous mode [ 91.192778][ T5855] hsr_slave_1: entered promiscuous mode [ 91.199006][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 91.204866][ T5855] Cannot create hsr debugfs directory [ 91.524775][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.559583][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.572609][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.584503][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.702060][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.715814][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.727614][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.754462][ T978] cfg80211: failed to load regulatory.db [ 91.768375][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.837784][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.850175][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.863192][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.877012][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.982398][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.991720][ T5867] Bluetooth: hci0: command tx timeout [ 91.991938][ T5853] Bluetooth: hci2: command tx timeout [ 91.997172][ T5867] Bluetooth: hci1: command tx timeout [ 92.012512][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.027089][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.057027][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.070548][ T5867] Bluetooth: hci3: command tx timeout [ 92.081575][ T5867] Bluetooth: hci4: command tx timeout [ 92.173526][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.203016][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.234608][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.259549][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.269213][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.357525][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.376888][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.398067][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.438717][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.446185][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.467086][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.479481][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.498641][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.527309][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.534496][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.544894][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.552088][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.563558][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.570734][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.584421][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.591622][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.658472][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.665649][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.703846][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.734852][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.742075][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.792959][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.800146][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.856200][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.001839][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.097355][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.166233][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.173473][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.256174][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.263846][ T4556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.427734][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.549121][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.595730][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.630942][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.645373][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.828667][ T5846] veth0_vlan: entered promiscuous mode [ 93.846991][ T5849] veth0_vlan: entered promiscuous mode [ 93.871551][ T5846] veth1_vlan: entered promiscuous mode [ 93.896755][ T5855] veth0_vlan: entered promiscuous mode [ 93.936862][ T5849] veth1_vlan: entered promiscuous mode [ 93.971426][ T5855] veth1_vlan: entered promiscuous mode [ 94.046948][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.068289][ T5849] veth0_macvtap: entered promiscuous mode [ 94.076816][ T5867] Bluetooth: hci1: command tx timeout [ 94.083498][ T5859] Bluetooth: hci2: command tx timeout [ 94.085010][ T5853] Bluetooth: hci0: command tx timeout [ 94.101310][ T5846] veth0_macvtap: entered promiscuous mode [ 94.111757][ T5849] veth1_macvtap: entered promiscuous mode [ 94.151945][ T5853] Bluetooth: hci4: command tx timeout [ 94.151954][ T5867] Bluetooth: hci3: command tx timeout [ 94.188225][ T5846] veth1_macvtap: entered promiscuous mode [ 94.229531][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.243532][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.254753][ T5855] veth0_macvtap: entered promiscuous mode [ 94.295264][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.306245][ T5848] veth0_vlan: entered promiscuous mode [ 94.315070][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.325529][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.338629][ T5855] veth1_macvtap: entered promiscuous mode [ 94.352676][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.364254][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.376191][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.406311][ T5848] veth1_vlan: entered promiscuous mode [ 94.428423][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.439150][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.465402][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.498237][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.515596][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.550059][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.610076][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.620208][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.629378][ T5860] veth0_vlan: entered promiscuous mode [ 94.639525][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.662724][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.676105][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.688278][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.737220][ T5860] veth1_vlan: entered promiscuous mode [ 94.766905][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.768130][ T5848] veth0_macvtap: entered promiscuous mode [ 94.780623][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.826343][ T5848] veth1_macvtap: entered promiscuous mode [ 94.869381][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.888200][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.912684][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.968340][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.979408][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.987203][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.000261][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.027162][ T5860] veth0_macvtap: entered promiscuous mode [ 95.056858][ T5860] veth1_macvtap: entered promiscuous mode [ 95.118363][ T1097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.128226][ T1097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.168368][ T1097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.205874][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.216832][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.244606][ T1097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.296118][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.363610][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.376013][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.388925][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.405418][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.434553][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.480062][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.511853][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.572629][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.601088][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.874276][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.898671][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.170579][ T5859] Bluetooth: hci0: command tx timeout [ 96.176315][ T5867] Bluetooth: hci2: command tx timeout [ 96.185219][ T5853] Bluetooth: hci1: command tx timeout [ 96.230838][ T5853] Bluetooth: hci3: command tx timeout [ 96.236880][ T5867] Bluetooth: hci4: command tx timeout [ 97.160645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 97.171129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.211489][ T30] audit: type=1326 audit(1752545818.123:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a18e929 code=0x7ffc0000 [ 97.241871][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.249713][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.366299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.426708][ T30] audit: type=1326 audit(1752545818.123:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efe7a18e929 code=0x7ffc0000 [ 97.468236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.608458][ T30] audit: type=1326 audit(1752545818.123:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7a18e929 code=0x7ffc0000 [ 97.671701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.711192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.720235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.729099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.737660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.746457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.843131][ T30] audit: type=1326 audit(1752545818.123:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efe7a18e929 code=0x7ffc0000 [ 97.869838][ T30] audit: type=1326 audit(1752545818.123:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.3" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7a18e929 code=0x0 [ 97.902784][ T30] audit: type=1326 audit(1752545818.173:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.3" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7a18e929 code=0x0 [ 97.927860][ T30] audit: type=1326 audit(1752545818.913:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.2.3" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7a18e929 code=0x0 [ 98.055663][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.063732][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.724806][ T5999] loop1: detected capacity change from 0 to 512 [ 98.740219][ T5999] ======================================================= [ 98.740219][ T5999] WARNING: The mand mount option has been deprecated and [ 98.740219][ T5999] and is ignored by this kernel. Remove the mand [ 98.740219][ T5999] option from the mount to silence this warning. [ 98.740219][ T5999] ======================================================= [ 99.562388][ T5999] EXT4-fs (loop1): Test dummy encryption mode enabled [ 100.570394][ T5999] EXT4-fs error (device loop1): __ext4_iget:5376: inode #11: block 1: comm syz.1.7: invalid block [ 100.642503][ T5999] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.7: couldn't read orphan inode 11 (err -117) [ 100.689604][ T5999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.533415][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.157384][ T6018] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.182353][ T6018] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.440931][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.544994][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 105.590708][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.650999][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.673218][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 105.682366][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.690796][ T9] usb 4-1: Product: syz [ 105.694992][ T9] usb 4-1: Manufacturer: syz [ 105.699606][ T9] usb 4-1: SerialNumber: syz [ 105.721422][ T9] usb 4-1: config 0 descriptor?? [ 107.013837][ T978] usb 4-1: USB disconnect, device number 2 [ 111.517733][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 111.935748][ T30] audit: type=1326 audit(1752545833.273:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ca58e929 code=0x7ffc0000 [ 112.104537][ T30] audit: type=1326 audit(1752545833.273:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f69ca58e929 code=0x7ffc0000 [ 112.128424][ T30] audit: type=1326 audit(1752545833.283:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ca58e929 code=0x7ffc0000 [ 112.970811][ T30] audit: type=1326 audit(1752545833.283:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f69ca58e929 code=0x7ffc0000 [ 113.222505][ T6083] loop2: detected capacity change from 0 to 512 [ 114.031402][ T30] audit: type=1326 audit(1752545833.283:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.19" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ca58e929 code=0x0 [ 114.052971][ T30] audit: type=1326 audit(1752545833.513:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.3.19" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ca58e929 code=0x0 [ 115.058153][ T6083] EXT4-fs (loop2): Test dummy encryption mode enabled [ 116.010748][ T6083] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 116.011664][ T6083] EXT4-fs: failed to create workqueue [ 116.026606][ T6083] EXT4-fs (loop2): mount failed [ 116.700291][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.580524][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 117.629993][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.694745][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.745199][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.774558][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.880396][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.910608][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.991487][ T5919] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.160387][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 118.192073][ T5919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.218434][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 118.221658][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.257072][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.260400][ T9] usbtmc 2-1:16.0: can't read capabilities [ 118.493662][ T5919] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.506785][ T5919] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.515936][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.242128][ T5919] usb 5-1: GET_CAPABILITIES returned 0 [ 119.247696][ T5919] usbtmc 5-1:16.0: can't read capabilities [ 119.262724][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.291652][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.300794][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.309998][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.324498][ T5919] usb 2-1: USB disconnect, device number 2 [ 119.341651][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 119.478015][ T9] usb 5-1: USB disconnect, device number 2 [ 123.813017][ T5911] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.343180][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 124.412800][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.428701][ T5911] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.449506][ T5911] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 124.458729][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.466774][ T5911] usb 5-1: Product: syz [ 124.471093][ T5911] usb 5-1: Manufacturer: syz [ 124.475686][ T5911] usb 5-1: SerialNumber: syz [ 124.541313][ T5911] usb 5-1: config 0 descriptor?? [ 124.785849][ T5911] usb 5-1: USB disconnect, device number 3 [ 125.079999][ T6155] tipc: Started in network mode [ 125.098108][ T6155] tipc: Node identity 46c047fc626a, cluster identity 4711 [ 125.125334][ T6155] tipc: Enabled bearer , priority 0 [ 125.237119][ T6155] syzkaller0: entered promiscuous mode [ 125.269193][ T6155] syzkaller0: entered allmulticast mode [ 125.471159][ T6155] tipc: Resetting bearer [ 125.634234][ T6153] tipc: Resetting bearer [ 125.699464][ T6153] tipc: Disabling bearer [ 127.590877][ T6170] loop3: detected capacity change from 0 to 512 [ 130.262104][ T6170] EXT4-fs (loop3): Test dummy encryption mode enabled [ 130.275967][ T6170] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 130.276017][ T6170] EXT4-fs: failed to create workqueue [ 130.290933][ T6170] EXT4-fs (loop3): mount failed [ 131.526376][ T6175] tipc: Started in network mode [ 131.569508][ T6175] tipc: Node identity 165c5ae54769, cluster identity 4711 [ 131.731123][ T6175] tipc: Enabled bearer , priority 0 [ 131.752417][ T6175] syzkaller0: entered promiscuous mode [ 131.757936][ T6175] syzkaller0: entered allmulticast mode [ 132.716088][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.722815][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.762350][ T5967] tipc: Node number set to 1362451173 [ 132.960526][ T6172] tipc: Resetting bearer [ 133.003658][ T6172] tipc: Disabling bearer [ 134.624187][ T6209] loop0: detected capacity change from 0 to 512 [ 137.267405][ T6209] EXT4-fs (loop0): Test dummy encryption mode enabled [ 137.314630][ T6209] EXT4-fs error (device loop0): __ext4_iget:5376: inode #11: block 1: comm syz.0.51: invalid block [ 137.334917][ T6209] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.51: couldn't read orphan inode 11 (err -117) [ 137.348341][ T6209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.619343][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.414864][ T6243] loop4: detected capacity change from 0 to 512 [ 142.230369][ T6243] EXT4-fs (loop4): Test dummy encryption mode enabled [ 144.463205][ T6243] EXT4-fs: error -4 creating inode table initialization thread [ 144.473196][ T6243] EXT4-fs (loop4): mount failed [ 145.193736][ T6263] loop2: detected capacity change from 0 to 512 [ 145.283067][ T6263] EXT4-fs (loop2): Test dummy encryption mode enabled [ 145.377958][ T6263] EXT4-fs error (device loop2): __ext4_iget:5376: inode #11: block 1: comm syz.2.62: invalid block [ 145.405768][ T6263] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.62: couldn't read orphan inode 11 (err -117) [ 145.480489][ T6263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.979461][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.010795][ T6264] tipc: Enabled bearer , priority 0 [ 147.174152][ T6258] tipc: Resetting bearer [ 147.205045][ T6256] tipc: Disabling bearer [ 147.619982][ T6269] tipc: Started in network mode [ 147.628018][ T6269] tipc: Node identity 6222c4cf8dd6, cluster identity 4711 [ 147.693841][ T6269] tipc: Enabled bearer , priority 0 [ 147.731519][ T6270] syzkaller0: entered promiscuous mode [ 147.784144][ T6270] syzkaller0: entered allmulticast mode [ 147.872043][ T6269] tipc: Resetting bearer [ 147.922231][ T6268] tipc: Resetting bearer [ 148.660540][ T6277] loop3: detected capacity change from 0 to 512 [ 148.910596][ T5967] tipc: Node number set to 4025795791 [ 149.530428][ T6278] loop0: detected capacity change from 0 to 512 [ 150.773196][ T6277] EXT4-fs (loop3): Test dummy encryption mode enabled [ 150.936916][ T6268] tipc: Disabling bearer [ 150.961053][ T6278] EXT4-fs (loop0): Test dummy encryption mode enabled [ 150.968452][ T6278] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 150.968989][ T6278] EXT4-fs: failed to create workqueue [ 150.985212][ T6277] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 150.985289][ T6277] EXT4-fs: failed to create workqueue [ 151.000166][ T6277] EXT4-fs (loop3): mount failed [ 151.005365][ T6278] EXT4-fs (loop0): mount failed [ 152.324742][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 152.345406][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 153.968104][ T6298] loop0: detected capacity change from 0 to 512 [ 154.054968][ T6298] EXT4-fs (loop0): Test dummy encryption mode enabled [ 154.144883][ T6298] EXT4-fs error (device loop0): __ext4_iget:5376: inode #11: block 1: comm syz.0.69: invalid block [ 154.168472][ T6298] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.69: couldn't read orphan inode 11 (err -117) [ 154.202832][ T6298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.597791][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.059822][ T6311] loop4: detected capacity change from 0 to 512 [ 156.934085][ T6311] EXT4-fs (loop4): Test dummy encryption mode enabled [ 158.956103][ T6311] EXT4-fs: error -4 creating inode table initialization thread [ 158.964107][ T6311] EXT4-fs (loop4): mount failed [ 161.798041][ T6333] loop1: detected capacity change from 0 to 512 [ 162.043933][ T6333] EXT4-fs (loop1): Test dummy encryption mode enabled [ 162.108052][ T6333] EXT4-fs error (device loop1): __ext4_iget:5376: inode #11: block 1: comm syz.1.77: invalid block [ 162.127948][ T6333] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.77: couldn't read orphan inode 11 (err -117) [ 162.153017][ T6333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.489304][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.516032][ T6344] tipc: Enabling of bearer rejected, failed to enable media [ 166.010243][ T6360] loop3: detected capacity change from 0 to 512 [ 166.938220][ T6360] EXT4-fs (loop3): Test dummy encryption mode enabled [ 167.046121][ T6360] EXT4-fs error (device loop3): __ext4_iget:5376: inode #11: block 1: comm syz.3.82: invalid block [ 167.066684][ T6360] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.82: couldn't read orphan inode 11 (err -117) [ 167.089361][ T6360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.143972][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.536702][ T6085] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 170.194048][ T5967] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 170.561471][ T5967] usb 2-1: Using ep0 maxpacket: 16 [ 170.589628][ T5967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.630389][ T5967] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.660385][ T5967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 170.687220][ T5967] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 170.699961][ T5967] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 170.734842][ T5967] usb 2-1: Manufacturer: syz [ 170.879652][ T5967] usb 2-1: config 0 descriptor?? [ 171.172363][ T5911] usb 2-1: USB disconnect, device number 3 [ 172.635093][ T6407] loop2: detected capacity change from 0 to 512 [ 175.318243][ T6407] EXT4-fs (loop2): Test dummy encryption mode enabled [ 175.331997][ T6407] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 175.332077][ T6407] EXT4-fs: failed to create workqueue [ 175.347189][ T6407] EXT4-fs (loop2): mount failed [ 175.715306][ T6418] Zero length message leads to an empty skb [ 177.876583][ T6432] lo: entered promiscuous mode [ 177.915327][ T6432] tunl0: entered promiscuous mode [ 177.977243][ T6432] gre0: entered promiscuous mode [ 178.038719][ T6432] gretap0: entered promiscuous mode [ 178.122181][ T6432] erspan0: entered promiscuous mode [ 178.229926][ T6432] ip_vti0: entered promiscuous mode [ 178.357672][ T6432] ip6_vti0: entered promiscuous mode [ 178.408638][ T6432] sit0: entered promiscuous mode [ 178.454535][ T6432] ip6tnl0: entered promiscuous mode [ 178.594844][ T6437] loop3: detected capacity change from 0 to 512 [ 179.430542][ T6437] EXT4-fs (loop3): Test dummy encryption mode enabled [ 179.462398][ T6437] EXT4-fs error (device loop3): __ext4_iget:5376: inode #11: block 1: comm syz.3.98: invalid block [ 179.475719][ T6437] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.98: couldn't read orphan inode 11 (err -117) [ 180.435021][ T6437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.469845][ T6432] ip6gre0: entered promiscuous mode [ 181.127676][ T6432] syz_tun: entered promiscuous mode [ 181.151292][ T6432] ip6gretap0: entered promiscuous mode [ 181.193450][ T6432] bridge0: entered promiscuous mode [ 181.255807][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.265707][ T6432] vcan0: entered promiscuous mode [ 181.289323][ T6432] bond0: entered promiscuous mode [ 181.295228][ T6432] bond_slave_0: entered promiscuous mode [ 181.449338][ T6432] bond_slave_1: entered promiscuous mode [ 181.588929][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 181.759208][ T6432] team0: entered promiscuous mode [ 181.790429][ T6432] team_slave_0: entered promiscuous mode [ 181.796235][ T6432] team_slave_1: entered promiscuous mode [ 181.927530][ T6432] dummy0: entered promiscuous mode [ 182.864863][ T6432] nlmon0: entered promiscuous mode [ 183.049002][ T6432] caif0: entered promiscuous mode [ 183.068753][ T6432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.220451][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 184.440360][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 184.476409][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.608409][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.622336][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.633612][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.709198][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 184.793696][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 184.803987][ T10] usb 2-1: Manufacturer: syz [ 185.132048][ T10] usb 2-1: config 0 descriptor?? [ 186.336456][ T30] audit: type=1326 audit(1752545907.623:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1883f8e929 code=0x7ffc0000 [ 186.407733][ T30] audit: type=1326 audit(1752545907.623:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1883f8e929 code=0x7ffc0000 [ 186.468774][ T30] audit: type=1326 audit(1752545907.623:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1883f8e929 code=0x7ffc0000 [ 186.507862][ T30] audit: type=1326 audit(1752545907.623:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1883f8e929 code=0x7ffc0000 [ 187.561731][ T6499] loop2: detected capacity change from 0 to 512 [ 190.159299][ T6499] EXT4-fs (loop2): Test dummy encryption mode enabled [ 190.168602][ T6499] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 190.168678][ T6499] EXT4-fs: failed to create workqueue [ 190.184277][ T6499] EXT4-fs (loop2): mount failed [ 190.220781][ T5919] usb 2-1: USB disconnect, device number 4 [ 190.261564][ T30] audit: type=1326 audit(1752545907.623:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.4.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1883f8e929 code=0x0 [ 190.288418][ T30] audit: type=1326 audit(1752545907.673:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.4.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1883f8e929 code=0x0 [ 190.582337][ T6507] tipc: Enabled bearer , priority 0 [ 190.664062][ T6502] tipc: Disabling bearer [ 194.252830][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.265680][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.681078][ T6559] loop2: detected capacity change from 0 to 512 [ 197.801468][ T6559] EXT4-fs (loop2): Test dummy encryption mode enabled [ 197.924814][ T6559] EXT4-fs error (device loop2): __ext4_iget:5376: inode #11: block 1: comm syz.2.121: invalid block [ 197.958379][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 199.160410][ T6559] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.121: couldn't read orphan inode 11 (err -117) [ 199.439959][ T6580] loop3: detected capacity change from 0 to 512 [ 199.458969][ T6580] EXT4-fs (loop3): Test dummy encryption mode enabled [ 199.677276][ T6580] EXT4-fs error (device loop3): __ext4_iget:5376: inode #11: block 1: comm syz.3.126: invalid block [ 199.697516][ T6580] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.126: couldn't read orphan inode 11 (err -117) [ 199.741652][ T6580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.209114][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.269148][ T6559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.947391][ T6566] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 207.949360][ T6626] loop1: detected capacity change from 0 to 512 [ 208.008579][ T6626] EXT4-fs (loop1): Test dummy encryption mode enabled [ 210.554934][ T6626] EXT4-fs error (device loop1): __ext4_iget:5376: inode #11: block 1: comm syz.1.136: invalid block [ 210.566229][ T6626] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.136: couldn't read orphan inode 11 (err -117) [ 210.581534][ T6626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.853229][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.672775][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.678920][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 211.686058][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 211.692263][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 211.698294][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 212.187361][ T6641] loop1: detected capacity change from 0 to 512 [ 214.455202][ T6641] EXT4-fs (loop1): Test dummy encryption mode enabled [ 214.513310][ T6641] EXT4-fs error (device loop1): __ext4_iget:5376: inode #11: block 1: comm syz.1.139: invalid block [ 214.525045][ T6641] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.139: couldn't read orphan inode 11 (err -117) [ 214.569584][ T6641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.822575][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.216044][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.225215][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.234787][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.246082][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.255817][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.594871][ T6665] loop4: detected capacity change from 0 to 512 [ 218.451015][ T5859] Bluetooth: hci5: command tx timeout [ 219.452754][ T6665] EXT4-fs (loop4): Test dummy encryption mode enabled [ 220.309783][ T6665] EXT4-fs: error -4 creating inode table initialization thread [ 220.317911][ T6665] EXT4-fs (loop4): mount failed [ 220.472373][ T5859] Bluetooth: hci5: command tx timeout [ 220.823088][ T6673] loop4: detected capacity change from 0 to 512 [ 220.850536][ T6673] EXT4-fs (loop4): Test dummy encryption mode enabled [ 222.560542][ T5859] Bluetooth: hci5: command tx timeout [ 223.408243][ T6673] EXT4-fs error (device loop4): __ext4_iget:5376: inode #11: block 1: comm syz.4.146: invalid block [ 223.421897][ T6673] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.146: couldn't read orphan inode 11 (err -117) [ 223.442236][ T6673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.515918][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 223.708658][ T5860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.630547][ T5859] Bluetooth: hci5: command tx timeout [ 225.046950][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.110496][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.148571][ T6653] bridge_slave_0: entered allmulticast mode [ 225.200071][ T6653] bridge_slave_0: entered promiscuous mode [ 225.210052][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.222757][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.229987][ T6653] bridge_slave_1: entered allmulticast mode [ 225.246157][ T6653] bridge_slave_1: entered promiscuous mode [ 225.273627][ T6692] lo: entered promiscuous mode [ 225.298116][ T6557] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.304680][ T6692] tunl0: entered promiscuous mode [ 225.343503][ T6692] gre0: entered promiscuous mode [ 225.349741][ T6692] gretap0: entered promiscuous mode [ 225.376558][ T6692] erspan0: entered promiscuous mode [ 225.384906][ T6692] ip_vti0: entered promiscuous mode [ 225.397620][ T6692] ip6_vti0: entered promiscuous mode [ 225.405940][ T6692] sit0: entered promiscuous mode [ 225.416222][ T6692] ip6tnl0: entered promiscuous mode [ 225.483879][ T6692] ip6gre0: entered promiscuous mode [ 225.512049][ T981] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 225.532317][ T6692] syz_tun: entered promiscuous mode [ 225.538320][ T6692] ip6gretap0: entered promiscuous mode [ 225.559160][ T6692] bridge0: entered promiscuous mode [ 225.565883][ T6692] vcan0: entered promiscuous mode [ 225.572912][ T6692] bond0: entered promiscuous mode [ 225.578056][ T6692] bond_slave_0: entered promiscuous mode [ 225.586803][ T6692] bond_slave_1: entered promiscuous mode [ 225.594594][ T6692] team0: entered promiscuous mode [ 225.599664][ T6692] team_slave_0: entered promiscuous mode [ 225.607904][ T6692] team_slave_1: entered promiscuous mode [ 225.615224][ T6692] dummy0: entered promiscuous mode [ 225.622154][ T6692] nlmon0: entered promiscuous mode [ 225.666228][ T30] audit: type=1326 audit(2000000002.160:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ca58e929 code=0x7ffc0000 [ 225.688421][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.724341][ T6692] caif0: entered promiscuous mode [ 225.729466][ T981] usb 2-1: Using ep0 maxpacket: 16 [ 225.745591][ T6692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.768688][ T981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.789844][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.814943][ T30] audit: type=1326 audit(2000000002.160:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ca58e929 code=0x7ffc0000 [ 225.837076][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.860324][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.925400][ T981] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 225.944370][ T981] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.050087][ T30] audit: type=1326 audit(2000000002.160:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f69ca58e929 code=0x7ffc0000 [ 226.113769][ T30] audit: type=1326 audit(2000000002.170:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ca58e929 code=0x7ffc0000 [ 226.146544][ T981] usb 2-1: Manufacturer: syz [ 226.176569][ T30] audit: type=1326 audit(2000000002.170:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f69ca58e929 code=0x7ffc0000 [ 226.215970][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.246787][ T30] audit: type=1326 audit(2000000002.170:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.3.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ca58e929 code=0x0 [ 226.251998][ T981] usb 2-1: config 0 descriptor?? [ 226.276913][ T30] audit: type=1326 audit(2000000002.250:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.3.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ca58e929 code=0x0 [ 226.342831][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.448286][ T30] audit: type=1326 audit(2000000002.860:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.3.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ca58e929 code=0x0 [ 226.469916][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.728590][ T5912] usb 2-1: USB disconnect, device number 5 [ 227.606679][ T6653] team0: Port device team_slave_0 added [ 227.733209][ T6653] team0: Port device team_slave_1 added [ 228.508252][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.542304][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.598019][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.923428][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.930724][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.956664][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.560308][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.884566][ T6653] hsr_slave_0: entered promiscuous mode [ 229.934825][ T6653] hsr_slave_1: entered promiscuous mode [ 229.961259][ T6653] debugfs: 'hsr0' already exists in 'hsr' [ 229.996840][ T6653] Cannot create hsr debugfs directory [ 230.420632][ T5982] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.103180][ T5982] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.453764][ T6735] lo: entered promiscuous mode [ 231.465433][ T6735] tunl0: entered promiscuous mode [ 231.481309][ T6735] gre0: entered promiscuous mode [ 231.522760][ T6735] gretap0: entered promiscuous mode [ 231.562533][ T6735] erspan0: entered promiscuous mode [ 231.586264][ T6735] ip_vti0: entered promiscuous mode [ 231.603554][ T6735] ip6_vti0: entered promiscuous mode [ 231.655499][ T6735] sit0: entered promiscuous mode [ 231.682304][ T6735] ip6tnl0: entered promiscuous mode [ 231.706556][ T6735] ip6gre0: entered promiscuous mode [ 232.020053][ T6735] syz_tun: entered promiscuous mode [ 232.066306][ T6735] ip6gretap0: entered promiscuous mode [ 232.083701][ T6735] bridge0: entered promiscuous mode [ 232.101205][ T6735] vcan0: entered promiscuous mode [ 232.301460][ T6735] bond0: entered promiscuous mode [ 232.323863][ T6735] bond_slave_0: entered promiscuous mode [ 232.442100][ T6735] bond_slave_1: entered promiscuous mode [ 232.484092][ T6735] team0: entered promiscuous mode [ 232.548983][ T6735] team_slave_0: entered promiscuous mode [ 232.555392][ T6735] team_slave_1: entered promiscuous mode [ 232.567002][ T6735] dummy0: entered promiscuous mode [ 232.573552][ T6735] nlmon0: entered promiscuous mode [ 232.579878][ T6735] caif0: entered promiscuous mode [ 232.599856][ T6735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.771666][ T5982] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.798221][ T6733] syzkaller0: entered promiscuous mode [ 232.805197][ T6733] syzkaller0: entered allmulticast mode [ 233.412472][ T5982] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.774454][ T6761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.051414][ T6653] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.371136][ T6653] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.897802][ T6653] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.859661][ T6653] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.881083][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 239.933506][ T5982] bridge_slave_1: left allmulticast mode [ 239.957213][ T5982] bridge_slave_1: left promiscuous mode [ 240.015464][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.081510][ T5982] bridge_slave_0: left allmulticast mode [ 240.087251][ T5982] bridge_slave_0: left promiscuous mode [ 240.107982][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.180410][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 240.337307][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 240.402880][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.436567][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.453085][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 240.530937][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.549675][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.597755][ T9] usb 2-1: Manufacturer: syz [ 240.614085][ T9] usb 2-1: config 0 descriptor?? [ 240.939950][ T30] audit: type=1326 audit(2000000017.420:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1883f8e929 code=0x7ffc0000 [ 240.941424][ T9] usb 2-1: USB disconnect, device number 6 [ 241.158095][ T30] audit: type=1326 audit(2000000017.430:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1883f8e929 code=0x7ffc0000 [ 241.210903][ T30] audit: type=1326 audit(2000000017.430:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1883f8e929 code=0x7ffc0000 [ 241.304453][ T30] audit: type=1326 audit(2000000017.430:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1883f8e929 code=0x7ffc0000 [ 241.397454][ T30] audit: type=1326 audit(2000000017.440:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.4.171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1883f8e929 code=0x0 [ 241.458293][ T30] audit: type=1326 audit(2000000017.660:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.4.171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1883f8e929 code=0x0 [ 241.628244][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.676200][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.738557][ T5982] bond0 (unregistering): Released all slaves [ 242.128003][ T30] audit: type=1326 audit(2000000018.630:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.4.171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1883f8e929 code=0x0 [ 242.269283][ T6833] loop1: detected capacity change from 0 to 512 [ 242.285410][ T5982] tipc: Left network mode [ 242.395498][ T6833] EXT4-fs (loop1): Test dummy encryption mode enabled [ 242.455521][ T6833] EXT4-fs error (device loop1): __ext4_iget:5376: inode #11: block 1: comm syz.1.175: invalid block [ 242.597494][ T6833] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.175: couldn't read orphan inode 11 (err -117) [ 242.648113][ T6833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.723629][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.854415][ T6846] loop0: detected capacity change from 0 to 512 [ 243.705630][ T6846] EXT4-fs (loop0): Test dummy encryption mode enabled [ 244.012389][ T6839] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 245.550804][ T6846] EXT4-fs error (device loop0): __ext4_iget:5376: inode #11: block 1: comm syz.0.177: invalid block [ 245.563599][ T6846] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.177: couldn't read orphan inode 11 (err -117) [ 245.582764][ T6846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.638557][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.731139][ T6839] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 245.896900][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.461438][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.468622][ T5981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.501249][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.508422][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.637876][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 246.832584][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 247.105899][ T5982] hsr_slave_0: left promiscuous mode [ 247.224002][ T5982] hsr_slave_1: left promiscuous mode [ 247.243463][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.269512][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.288844][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.302868][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.338197][ T5982] veth1_macvtap: left promiscuous mode [ 247.350831][ T5982] veth0_macvtap: left promiscuous mode [ 247.359833][ T5982] veth1_vlan: left promiscuous mode [ 247.376310][ T5982] veth0_vlan: left promiscuous mode [ 250.358931][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 250.912662][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 252.118737][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.306809][ T6883] lo: entered promiscuous mode [ 252.312486][ T6883] tunl0: entered promiscuous mode [ 252.318335][ T6883] gre0: entered promiscuous mode [ 252.355555][ T6883] gretap0: entered promiscuous mode [ 252.407963][ T6883] erspan0: entered promiscuous mode [ 252.452949][ T6883] ip_vti0: entered promiscuous mode [ 252.468653][ T6883] ip6_vti0: entered promiscuous mode [ 252.497097][ T6883] sit0: entered promiscuous mode [ 252.522141][ T6883] ip6tnl0: entered promiscuous mode [ 252.723905][ T6883] ip6gre0: entered promiscuous mode [ 252.770488][ T5861] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 252.795561][ T6883] syz_tun: entered promiscuous mode [ 253.332121][ T6883] ip6gretap0: entered promiscuous mode [ 253.338289][ T6883] bridge0: entered promiscuous mode [ 253.344453][ T6883] vcan0: entered promiscuous mode [ 253.349880][ T6883] bond0: entered promiscuous mode [ 253.355182][ T6883] bond_slave_0: entered promiscuous mode [ 253.418924][ T6883] bond_slave_1: entered promiscuous mode [ 253.510947][ T6883] team0: entered promiscuous mode [ 253.516034][ T6883] team_slave_0: entered promiscuous mode [ 253.521844][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 253.527834][ T6883] team_slave_1: entered promiscuous mode [ 253.552354][ T6883] dummy0: entered promiscuous mode [ 253.558652][ T6883] nlmon0: entered promiscuous mode [ 253.576659][ T6883] caif0: entered promiscuous mode [ 253.600105][ T6883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.063305][ T6894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.601504][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.609288][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.737403][ T6924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.396215][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.790354][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 257.947136][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 257.967782][ T5861] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.993757][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.013806][ T5861] usb 1-1: no configurations [ 258.027583][ T5861] usb 1-1: can't read configurations, error -22 [ 258.044846][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.119491][ T5912] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 258.157411][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.220879][ T5912] usb 5-1: config 0 descriptor?? [ 258.309055][ T6957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.234724][ T5912] ft260 0003:0403:6030.0001: unknown main item tag 0x7 [ 259.450767][ T5912] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 259.588212][ T5912] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 259.799031][ T5912] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 260.054343][ T5966] usb 5-1: USB disconnect, device number 4 [ 260.272573][ T6653] veth0_vlan: entered promiscuous mode [ 260.514898][ T6653] veth1_vlan: entered promiscuous mode [ 260.590161][ T6653] veth0_macvtap: entered promiscuous mode [ 260.909383][ T6653] veth1_macvtap: entered promiscuous mode [ 261.558420][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.873166][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.964519][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.994905][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.068532][ T1154] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.101344][ T1154] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.329272][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.354385][ T30] audit: type=1326 audit(2000000017.700:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95db8e929 code=0x7ffc0000 [ 263.387797][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.537154][ T30] audit: type=1326 audit(2000000017.720:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa95db8e929 code=0x7ffc0000 [ 263.559354][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.768831][ T30] audit: type=1326 audit(2000000017.720:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95db8e929 code=0x7ffc0000 [ 263.790985][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.815550][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.831828][ T30] audit: type=1326 audit(2000000017.720:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95db8e929 code=0x7ffc0000 [ 263.900493][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.049487][ T30] audit: type=1326 audit(2000000017.730:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa95db8e929 code=0x7ffc0000 [ 264.080591][ T30] audit: type=1326 audit(2000000017.730:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa95db8e929 code=0x0 [ 265.039958][ T30] audit: type=1326 audit(2000000017.780:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.0.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa95db8e929 code=0x0 [ 265.650359][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 265.865566][ T7029] syz.4.206: attempt to access beyond end of device [ 265.865566][ T7029] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 265.931974][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 265.951964][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 265.965427][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 265.979794][ T7029] ------------[ cut here ]------------ [ 265.983180][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 265.985715][ T7029] WARNING: fs/buffer.c:1125 at bdev_getblk+0x580/0x660, CPU#1: syz.4.206/7029 [ 266.003527][ T7029] Modules linked in: [ 266.007561][ T7029] CPU: 1 UID: 0 PID: 7029 Comm: syz.4.206 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 266.019870][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.031172][ T7029] RIP: 0010:bdev_getblk+0x580/0x660 [ 266.036399][ T7029] Code: 26 fb ff ff e8 b1 72 78 ff 48 c7 c7 60 0d 9a 8b 48 c7 c6 03 16 9e 8d 4c 89 fa 4c 89 e9 e8 18 4b e0 fe eb bd e8 91 72 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 266.056358][ T7029] RSP: 0018:ffffc9001a8c76b0 EFLAGS: 00010283 [ 266.062475][ T7029] RAX: ffffffff8247530f RBX: ffff888022d39718 RCX: 0000000000080000 [ 266.070870][ T7029] RDX: ffffc9000e7f1000 RSI: 000000000000389c RDI: 000000000000389d [ 266.078852][ T7029] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217293d [ 266.087055][ T7029] R10: 0000000000000406 R11: 0000000000000002 R12: ffff888022d3a070 [ 266.095093][ T7029] R13: ffff888022d39700 R14: 0000000000000200 R15: 1ffff110045a72e3 [ 266.103108][ T7029] FS: 00007f1884d296c0(0000) GS:ffff888125ced000(0000) knlGS:0000000000000000 [ 266.112082][ T7029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.118668][ T7029] CR2: 00002000002ed030 CR3: 00000000117a2000 CR4: 00000000003526f0 [ 266.127502][ T7029] Call Trace: [ 266.131439][ T7029] [ 266.134382][ T7029] __bread_gfp+0x89/0x3c0 [ 266.138722][ T7029] udf_read_tagged+0xad/0xe00 [ 266.143453][ T7029] udf_check_anchor_block+0x99/0x550 [ 266.148749][ T7029] ? udf_get_last_block+0x286/0x360 [ 266.154191][ T7029] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 266.160097][ T7029] ? __bread_gfp+0x340/0x3c0 [ 266.164745][ T7029] udf_load_vrs+0x6e3/0xf20 [ 266.169265][ T7029] ? __pfx_udf_load_vrs+0x10/0x10 [ 266.174333][ T7029] ? udf_get_last_session+0x100/0x200 [ 266.179747][ T7029] ? __pfx_udf_get_last_session+0x10/0x10 [ 266.185519][ T7029] udf_fill_super+0x5ad/0x17a0 [ 266.190348][ T7029] ? __pfx_udf_fill_super+0x10/0x10 [ 266.195550][ T7029] ? set_blocksize+0x21e/0x500 [ 266.200352][ T7029] ? sb_set_blocksize+0x104/0x180 [ 266.205387][ T7029] ? setup_bdev_super+0x4c1/0x5b0 [ 266.210451][ T7029] get_tree_bdev_flags+0x40b/0x4d0 [ 266.215570][ T7029] ? __pfx_udf_fill_super+0x10/0x10 [ 266.220796][ T7029] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 266.226971][ T7029] vfs_get_tree+0x8f/0x2b0 [ 266.232355][ T7029] do_new_mount+0x2a2/0x9e0 [ 266.236881][ T7029] ? ns_capable+0x8a/0xf0 [ 266.241463][ T7029] ? __pfx_do_new_mount+0x10/0x10 [ 266.246496][ T7029] ? path_mount+0x61c/0xfe0 [ 266.251058][ T7029] ? user_path_at+0x44/0x60 [ 266.255590][ T7029] __se_sys_mount+0x317/0x410 [ 266.260315][ T7029] ? __pfx___se_sys_mount+0x10/0x10 [ 266.265534][ T7029] ? do_syscall_64+0xbe/0x3b0 [ 266.270215][ T7029] ? __x64_sys_mount+0x20/0xc0 [ 266.275064][ T7029] do_syscall_64+0xfa/0x3b0 [ 266.279574][ T7029] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.284836][ T7029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.290969][ T7029] ? clear_bhb_loop+0x60/0xb0 [ 266.295651][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.301572][ T7029] RIP: 0033:0x7f1883f8e929 [ 266.306004][ T7029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.326293][ T7029] RSP: 002b:00007f1884d29038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.335435][ T7029] RAX: ffffffffffffffda RBX: 00007f18841b6160 RCX: 00007f1883f8e929 [ 266.343693][ T7029] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 266.351707][ T7029] RBP: 00007f1884010b39 R08: 0000000000000000 R09: 0000000000000000 [ 266.359705][ T7029] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 266.367724][ T7029] R13: 0000000000000001 R14: 00007f18841b6160 R15: 00007fff75f70568 [ 266.375739][ T7029] [ 266.378784][ T7029] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 266.386067][ T7029] CPU: 1 UID: 0 PID: 7029 Comm: syz.4.206 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 266.397440][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.407501][ T7029] Call Trace: [ 266.410785][ T7029] [ 266.413717][ T7029] dump_stack_lvl+0x99/0x250 [ 266.418312][ T7029] ? __asan_memcpy+0x40/0x70 [ 266.422906][ T7029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.428118][ T7029] ? __pfx__printk+0x10/0x10 [ 266.432748][ T7029] vpanic+0x281/0x750 [ 266.436740][ T7029] ? __pfx__printk+0x10/0x10 [ 266.441447][ T7029] ? __pfx_vpanic+0x10/0x10 [ 266.445950][ T7029] ? is_bpf_text_address+0x292/0x2b0 [ 266.451339][ T7029] ? is_bpf_text_address+0x26/0x2b0 [ 266.456539][ T7029] panic+0xb9/0xc0 [ 266.460276][ T7029] ? __pfx_panic+0x10/0x10 [ 266.464721][ T7029] __warn+0x334/0x4c0 [ 266.468705][ T7029] ? bdev_getblk+0x580/0x660 [ 266.473301][ T7029] ? bdev_getblk+0x580/0x660 [ 266.477893][ T7029] report_bug+0x2be/0x4f0 [ 266.482225][ T7029] ? bdev_getblk+0x580/0x660 [ 266.486815][ T7029] ? bdev_getblk+0x580/0x660 [ 266.491405][ T7029] ? bdev_getblk+0x582/0x660 [ 266.496002][ T7029] handle_bug+0x84/0x160 [ 266.500265][ T7029] exc_invalid_op+0x1a/0x50 [ 266.504783][ T7029] asm_exc_invalid_op+0x1a/0x20 [ 266.509646][ T7029] RIP: 0010:bdev_getblk+0x580/0x660 [ 266.514852][ T7029] Code: 26 fb ff ff e8 b1 72 78 ff 48 c7 c7 60 0d 9a 8b 48 c7 c6 03 16 9e 8d 4c 89 fa 4c 89 e9 e8 18 4b e0 fe eb bd e8 91 72 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 266.534462][ T7029] RSP: 0018:ffffc9001a8c76b0 EFLAGS: 00010283 [ 266.540564][ T7029] RAX: ffffffff8247530f RBX: ffff888022d39718 RCX: 0000000000080000 [ 266.548543][ T7029] RDX: ffffc9000e7f1000 RSI: 000000000000389c RDI: 000000000000389d [ 266.556520][ T7029] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8217293d [ 266.564496][ T7029] R10: 0000000000000406 R11: 0000000000000002 R12: ffff888022d3a070 [ 266.572556][ T7029] R13: ffff888022d39700 R14: 0000000000000200 R15: 1ffff110045a72e3 [ 266.580539][ T7029] ? fs_reclaim_acquire+0x7d/0x100 [ 266.585661][ T7029] ? bdev_getblk+0x57f/0x660 [ 266.590283][ T7029] __bread_gfp+0x89/0x3c0 [ 266.594646][ T7029] udf_read_tagged+0xad/0xe00 [ 266.599352][ T7029] udf_check_anchor_block+0x99/0x550 [ 266.604654][ T7029] ? udf_get_last_block+0x286/0x360 [ 266.609873][ T7029] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 266.615797][ T7029] ? __bread_gfp+0x340/0x3c0 [ 266.620390][ T7029] udf_load_vrs+0x6e3/0xf20 [ 266.624929][ T7029] ? __pfx_udf_load_vrs+0x10/0x10 [ 266.629954][ T7029] ? udf_get_last_session+0x100/0x200 [ 266.635354][ T7029] ? __pfx_udf_get_last_session+0x10/0x10 [ 266.641098][ T7029] udf_fill_super+0x5ad/0x17a0 [ 266.645876][ T7029] ? __pfx_udf_fill_super+0x10/0x10 [ 266.651077][ T7029] ? set_blocksize+0x21e/0x500 [ 266.655860][ T7029] ? sb_set_blocksize+0x104/0x180 [ 266.660898][ T7029] ? setup_bdev_super+0x4c1/0x5b0 [ 266.665929][ T7029] get_tree_bdev_flags+0x40b/0x4d0 [ 266.671043][ T7029] ? __pfx_udf_fill_super+0x10/0x10 [ 266.676237][ T7029] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 266.681885][ T7029] vfs_get_tree+0x8f/0x2b0 [ 266.686319][ T7029] do_new_mount+0x2a2/0x9e0 [ 266.690832][ T7029] ? ns_capable+0x8a/0xf0 [ 266.695160][ T7029] ? __pfx_do_new_mount+0x10/0x10 [ 266.700194][ T7029] ? path_mount+0x61c/0xfe0 [ 266.704734][ T7029] ? user_path_at+0x44/0x60 [ 266.709244][ T7029] __se_sys_mount+0x317/0x410 [ 266.713940][ T7029] ? __pfx___se_sys_mount+0x10/0x10 [ 266.719152][ T7029] ? do_syscall_64+0xbe/0x3b0 [ 266.723843][ T7029] ? __x64_sys_mount+0x20/0xc0 [ 266.728626][ T7029] do_syscall_64+0xfa/0x3b0 [ 266.733143][ T7029] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.738357][ T7029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.744450][ T7029] ? clear_bhb_loop+0x60/0xb0 [ 266.749139][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.755038][ T7029] RIP: 0033:0x7f1883f8e929 [ 266.759457][ T7029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.779067][ T7029] RSP: 002b:00007f1884d29038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.787500][ T7029] RAX: ffffffffffffffda RBX: 00007f18841b6160 RCX: 00007f1883f8e929 [ 266.795576][ T7029] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 266.803572][ T7029] RBP: 00007f1884010b39 R08: 0000000000000000 R09: 0000000000000000 [ 266.811596][ T7029] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 266.819853][ T7029] R13: 0000000000000001 R14: 00007f18841b6160 R15: 00007fff75f70568 [ 266.827850][ T7029] [ 266.831230][ T7029] Kernel Offset: disabled [ 266.835572][ T7029] Rebooting in 86400 seconds..