last executing test programs: 2m57.524074015s ago: executing program 0 (id=89): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1c1040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000ce0000/0x3000)=nil, 0x3000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0xfffffffffffffffe) 2m56.835688769s ago: executing program 0 (id=93): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f0000000900)="$eJzs3d1rLGcZAPBnNtmer+iu2otaaHuwlZyiZzdpbBu8aCuIdwWl3h9Dsgkhm2zIbupJKJqD9woi2tteeSMI3grS/0BRCnovKkrRUwV7oY7M7OTkZLub5JD9oMnvB2/mnZmdeZ53kn3n85wJ4NK6GRGvRcRURDwfEZVieqkocdAt2ec+uP/WclaSSNM3/p5EUkzLPpYUJXOjWOxqd5D7d3o8bntvf2Op2WzsFOP1zuZ2vb23f3t9c2mtsdbYWliYf2nx5cUXF+eG0s6sXa989S8//sFPv/bKr7747T/e+dut72T5zhTzD9sxbN1tUs62xQPTEbEzimATMFW0pzzpRAAAOJPsGP/TEfG5/Pi/ElP50dzZJCPNDAAAABiW9NWZ+E8SkQIAAAAXVil/BjYp1YpnAWaiVKrVus/wPh7XS81Wu/OF1dbu1kr3WdlqlEur683GXPFMbTXKSTY+n9ePxl94MJ4cPHy94UeVa/n82nKruTK5yx4AAABwqdzoOf//V6V7/n+Ce2NLDgAAABie6lE1rUwyEQAAAGBkqh+Z8s5E8gAAAABG56Pn/wAAAMAF8vXXX89Kmr//uhqx8ube7kbrzdsrjfZGbXN3ubbc2tmurbVaa830SsTmaetrtlrbX4qt3bv1TqPdqbf39u9stna3OnfWj70CGwAAABijTz3z7h+SiDj48rW8ZB7LfkwNWMCzAnBhlB7lw38eXR7A+A3azQMX3/SkEwAmptwdJJPOA5ic0zqAgQ/v/Gb4uQAAAKMx+9n+9/+nj64NABfUI93/By4U9//h8nL/Hy6vsiMAuPRGf/8/TU9dFwAAMFIzeUlKteJe4EyUPky7ohrlZHW92ZiLiE9GxO8r5SvZ+Hy+ZOIfDQAAAAAAAAAAAAAAAAAAAAAAAADAGaVpEikAAABwoUWU/poU7/+arTw303t94LHkw0o+zN8O8MZP7i51Ojvz2fR/FNMjOm8X0194lCsP3jwOAAAAo3J4nn54Hg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw/TB/beWD8vxOaWRxn3/KxFR7Rd/Oq7mw6tRjojr/0xi+nChZyKSiJgaQvyDexHxRL/4SZZWVIssjsUvtsq1PIuRx38qTdPv9ot/49zR4XJ7N+t/Xuv3/SvFzXzY//s/XZTzGtz/lR70f1N94mc9zyfOsP4rEfHkez+vD54b8eR0//7nMH4yIP6z/VbZZ6N865v7+4PyS9+JmD3a/3z/eISjWr2zuV1v7+3fXt9cWmusNbYWFuZfWnx58cXFufrqerNR/Owb44dP/fJ/g+K/fy/iet/9X7f/faj9S73tfy6rlAet+ch/37t7/zN5rZL2rCKPf+vZ/r//J47HP7Zps7+Jzxf7gWz+7GH9oFt/2NM/++3TJ7V/ZUD7T/v93+pZ16D98fPf+N6fTtxAAMBYtff2N5aazcbOyCtvp2k6plj5gci42nXuyuMfn1Tbe7/4Xbfyau+smye0Ir0y7j82lXNXenuKX4+/cwIAAIbq6KB/0pkAAAAAAAAAAAAAAAAAAADA5TWO/06sN+bBZJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCi/wcAAP//rgHbtw==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, {@in6=@dev, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x10000000000000}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @extra_flags={0x8, 0x18, 0x3}]}, 0x140}}, 0x0) 2m56.143923993s ago: executing program 4 (id=96): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x6, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000000)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffd}, 0x48, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r7, r5, 0x0, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e697f90be6d623ceb0eb4912f9f6a31854ec980700000000000000f0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffc}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) 2m54.530163903s ago: executing program 4 (id=99): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0x42, 0x4, 0x340, 0xffffffff, 0x0, 0xa0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@ip={@multicast1, @loopback, 0xffffffff, 0x0, 'gre0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x32, 0x0, 0x40}, 0x287, 0x110, 0x170, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x6, {0x59}}}, @common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'pimreg1\x00', {}, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0xfff7, 0xf, [0x1, 0x25, 0x7, 0x14, 0x1f, 0xe, 0x27, 0x24, 0x10, 0x22, 0x0, 0xe, 0xd, 0x37, 0x0, 0x3a], 0x2, 0x0, 0xffffffffffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 2m53.667768368s ago: executing program 4 (id=101): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2m53.648767668s ago: executing program 0 (id=102): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x4000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) write(0xffffffffffffffff, &(0x7f0000002200)="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", 0x1de) 2m53.46423839s ago: executing program 4 (id=104): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x3, 0x443, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8080c61) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) fallocate(r0, 0x3, 0x5000000, 0x8000c62) 2m52.687913544s ago: executing program 4 (id=109): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x6, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000000)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffd}, 0x48, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r7, r5, 0x0, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e697f90be6d623ceb0eb4912f9f6a31854ec980700000000000000f0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffc}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) 2m50.440293487s ago: executing program 4 (id=117): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 2m50.178659259s ago: executing program 32 (id=117): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 2m48.107868692s ago: executing program 0 (id=122): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f00000001a0093cf26bd7000fddbdf25ff7fd36b27d9a6bde300000000000000ff0100000000000000000000000000013d2200054e240002020000002c000000", @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000004d332000000ac1e010100000000000000000000000004"], 0xf0}}, 0x28008004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) 2m47.860145893s ago: executing program 0 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 2m47.697010494s ago: executing program 0 (id=126): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 2m46.536942471s ago: executing program 1 (id=130): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="49730000000000000000670000007dd1a97eb491d5ffbb3ea843813a286f912968e03666b39cfec60fc13c1d6d2084fed3dd45173b15e90c63abee03e5c00849aac2315467666725ed94472adea004fbb18b10756d86b0c677ba78cbee66266e3981255931fb232b969b60e191ac"], 0x14}}, 0x1233c996511ec814) 2m45.306500639s ago: executing program 1 (id=133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2a, 0x7f, 0x3, 0x5, 0x9, 0x3, 0x90, 0x67, 0x17, 0x40, 0x1, 0xfb, 0x7, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000004c0)={r1}, &(0x7f0000000180)=0x8) 2m45.15536561s ago: executing program 1 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 2m39.827788462s ago: executing program 1 (id=142): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x3, 0x443, &(0x7f0000000a40)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQuFWp26AmSLSqICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckGMLDG05ckYldE/B4Ro7VsY4Hx2j83ly/P/r18eTaJSuXNv5JquRvLl2fzovn7duaZoYjCp0kcaFHvwsVLaYnShSw/uXjuvcmFi5eePXNu5nTpdOn89IkTx45OPX98+rmexJnGdWP/h/MH97369tXXZ09efefnb5M8/qY4emS808HHK5UeV9dfu+vSyVAfG0JXirVuGsPV/j8axVg9eaPxyid9bRywqSqVSuW+9oeXKsBdLIl+twDoj/yHPp3/5tsWDT3uCNdfrE2A0rhvZlvtyFAUsjLDTfPbXhqPiJNL/3yVbrE59yEAABp8n45/nmk1/itE/X2h/2drKGMRcU9E7ImI4xGxNyLujaiWvT8iHuiy/uZFkrXjn8K1DQW2Tun474Vsbatx/JeP/mKsmOV2V+MfTk6dKZeOZJ/J4RjeluanOtTxw8u/fd7uWP34L93S+vOxYNaOa0PbGt8zN7M4czsx17v+ccT+oVbxJysrAUlE7IuI/Rus48xT3xxsd+zW8XfQg3WmytcRT9TO/1I0xZ9LOq9PTv4vyqUjk/lVsdYvv155o139txV/D6Tnf0fL638l/rGktl57dqZcLl1Y6OZ///LJ9PXKH5+1ndNs9PofSd5q2PfBzOLihamIkeS1WqPr9083lZteLZ/Gf/hQ6/6/J1Y/iQMRkV7ED0bEQxHxcNb2RyLi0Yg41OFT+Omlx97dePybK41/rqvzv5oYieY9rRPFsz9+11DpWDfxp+f/WDV1ONuznu+/9bSr26sZAAAA/qsKEbErksLESrpQmJio/Q3/3thRKM8vLD59av7983O1ZwTGYriQ3+karbsfOpVN6/P8dFP+aHbf+Ivi9mp+Yna+PNfv4GHA7WzT/1N/FvvdOmDTeV4LBpf+D4NL/4fBpf/D4GrR/7f3ox3A1mv1+/9RH9oBbL2m/m/ZDwaI+T8Mro30f98ZcHfo2JdHtq4dwJZa2B63fkheQmJNIgp3RDMkNinR728mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vg3AAD//5US5f8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x8080c61) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) fallocate(r0, 0x3, 0x5000000, 0x8000c62) 2m38.553376079s ago: executing program 1 (id=145): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000001840)=""/4082, 0xff2) 2m33.968054177s ago: executing program 1 (id=153): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000440)={[{@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) tgkill(r1, r0, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) futex(0x0, 0x5, 0x1, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000300), 0x2) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fchown(r4, 0x0, 0xee01) 2m33.956189097s ago: executing program 33 (id=153): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000440)={[{@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) tgkill(r1, r0, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) futex(0x0, 0x5, 0x1, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000300), 0x2) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fchown(r4, 0x0, 0xee01) 2m32.516399696s ago: executing program 34 (id=126): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 2m16.75613806s ago: executing program 5 (id=189): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$eJzs3c9rI2UYwPEnaTa/lm1yEEVB+qAXvQxt9KwG2QUx4NLdiLuCMLudaMiYlJlQiYitJ6/izX9AcNljbwX1H+jFW7148dZLQdAi4shMZtr8mCRNmpLWfj9Q8kze95mZNzOE5w3M28MPvvm0UXONmtmWZFYlISJyLFKUpEQS4WsyiNPSa0devfnHwYv3Hjx8t1yp3F5XvVO+/1pJVZdXfvzsi1zYbS8j+8WPDo9Kv+8/u//84b/3P6m7Wne12WqrqY9av7XNR7alG3W3YajetS3TtbTedC2n297qttfs1uZmR83mxq38pmO5rprNjjasjrZb2nY6an5s1ptqGIbeysv1kh3Y9hKTc6pP1tfN8owHfDxjHubtb8/zxjQ7TtlcEjFyQy3VJxd6XgAA4FIaqP+/i2qEoiRPCspE31xguP6P4qD+96vO0/r/6Us/t2++v7sc1v976bj6//Vfu/l99b9/9LnX/z8MbA9XRFfe9jSdz1X/43JYSQ+91T/18+v/fDh/D3z14dPVIKD+BwAAAAAAAAAAAAAAAAAAAADgKjj2vILneYXoNfo7fYQg3I62xj1ojCtn1PXPhCsKnNwP+F+69+ChZIMH91LLIvbXW9Wtavc1bI86rkpB/gnuh1B3wYmdoFF9RfnJ3g7zt7eqS0FLWUTFFkvWpCDFvvwgvvNO5faadvXnJ1J5P78m9SC/JAV5Jj6/FJufllde7sk3pCC/PJaW2LIRfo9F+V+uqb79XmUgPxf0i/PmxV8WAAAAAADmylDNhtPn2Pm7YajGtftzeemdnw//PnAyv16NnZ+nCi+kFjt2AAAAAACuCzf9ecO0bctxOyODnEzqkwn3Nn4/8UFqms5+cBAEN8b1WeoZ4Vn3nA7/g8YUJy/TjdS07T8zEvthRku49jVlz/GpmnY0/jN0zk57CRw3Of3YLcdd8c9HZxpOTxD9bDSqj9yddc+jgmjl3Emdn/v2+79mO0QiXLW3t+mN3eyEkQZBYuCdnQk37ZHnTTyfGxf5nQMAAABgMaKiP+dG77y12BMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAamusyaSOCRY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCz+CwAA//+9m/li") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x4000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) write(0xffffffffffffffff, &(0x7f0000002200)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1", 0x1de) 2m15.599834008s ago: executing program 5 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 2m12.053809009s ago: executing program 5 (id=197): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) io_setup(0xffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f00000003c0)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc4c03d12, &(0x7f0000000140)={0x3664, 0x9}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)=ANY=[], 0x110) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1, 0x5c, 0x2) socket$inet6(0xa, 0x1, 0x0) 2m11.683673021s ago: executing program 5 (id=199): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x3, 0x443, &(0x7f0000000a40)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQuFWp26AmSLSqICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckGMLDG05ckYldE/B4Ro7VsY4Hx2j83ly/P/r18eTaJSuXNv5JquRvLl2fzovn7duaZoYjCp0kcaFHvwsVLaYnShSw/uXjuvcmFi5eePXNu5nTpdOn89IkTx45OPX98+rmexJnGdWP/h/MH97369tXXZ09efefnb5M8/qY4emS808HHK5UeV9dfu+vSyVAfG0JXirVuGsPV/j8axVg9eaPxyid9bRywqSqVSuW+9oeXKsBdLIl+twDoj/yHPp3/5tsWDT3uCNdfrE2A0rhvZlvtyFAUsjLDTfPbXhqPiJNL/3yVbrE59yEAABp8n45/nmk1/itE/X2h/2drKGMRcU9E7ImI4xGxNyLujaiWvT8iHuiy/uZFkrXjn8K1DQW2Tun474Vsbatx/JeP/mKsmOV2V+MfTk6dKZeOZJ/J4RjeluanOtTxw8u/fd7uWP34L93S+vOxYNaOa0PbGt8zN7M4czsx17v+ccT+oVbxJysrAUlE7IuI/Rus48xT3xxsd+zW8XfQg3WmytcRT9TO/1I0xZ9LOq9PTv4vyqUjk/lVsdYvv155o139txV/D6Tnf0fL638l/rGktl57dqZcLl1Y6OZ///LJ9PXKH5+1ndNs9PofSd5q2PfBzOLihamIkeS1WqPr9083lZteLZ/Gf/hQ6/6/J1Y/iQMRkV7ED0bEQxHxcNb2RyLi0Yg41OFT+Omlx97dePybK41/rqvzv5oYieY9rRPFsz9+11DpWDfxp+f/WDV1ONuznu+/9bSr26sZAAAA/qsKEbErksLESrpQmJio/Q3/3thRKM8vLD59av7983O1ZwTGYriQ3+karbsfOpVN6/P8dFP+aHbf+Ivi9mp+Yna+PNfv4GHA7WzT/1N/FvvdOmDTeV4LBpf+D4NL/4fBpf/D4GrR/7f3ox3A1mv1+/9RH9oBbL2m/m/ZDwaI+T8Mro30f98ZcHfo2JdHtq4dwJZa2B63fkheQmJNIgp3RDMkNinR728mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vg3AAD//5US5f8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) fallocate(r0, 0x3, 0x5000000, 0x8000c62) 2m10.795220997s ago: executing program 5 (id=201): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$eJzs3c9rI2UYwPEnaTa/lm1yEEVB+qAXvQxt9KwG2QUx4NLdiLuCMLudaMiYlJlQiYitJ6/izX9AcNljbwX1H+jFW7148dZLQdAi4shMZtr8mCRNmpLWfj9Q8kze95mZNzOE5w3M28MPvvm0UXONmtmWZFYlISJyLFKUpEQS4WsyiNPSa0devfnHwYv3Hjx8t1yp3F5XvVO+/1pJVZdXfvzsi1zYbS8j+8WPDo9Kv+8/u//84b/3P6m7Wne12WqrqY9av7XNR7alG3W3YajetS3TtbTedC2n297qttfs1uZmR83mxq38pmO5rprNjjasjrZb2nY6an5s1ptqGIbeysv1kh3Y9hKTc6pP1tfN8owHfDxjHubtb8/zxjQ7TtlcEjFyQy3VJxd6XgAA4FIaqP+/i2qEoiRPCspE31xguP6P4qD+96vO0/r/6Us/t2++v7sc1v976bj6//Vfu/l99b9/9LnX/z8MbA9XRFfe9jSdz1X/43JYSQ+91T/18+v/fDh/D3z14dPVIKD+BwAAAAAAAAAAAAAAAAAAAADgKjj2vILneYXoNfo7fYQg3I62xj1ojCtn1PXPhCsKnNwP+F+69+ChZIMH91LLIvbXW9Wtavc1bI86rkpB/gnuh1B3wYmdoFF9RfnJ3g7zt7eqS0FLWUTFFkvWpCDFvvwgvvNO5faadvXnJ1J5P78m9SC/JAV5Jj6/FJufllde7sk3pCC/PJaW2LIRfo9F+V+uqb79XmUgPxf0i/PmxV8WAAAAAADmylDNhtPn2Pm7YajGtftzeemdnw//PnAyv16NnZ+nCi+kFjt2AAAAAACuCzf9ecO0bctxOyODnEzqkwn3Nn4/8UFqms5+cBAEN8b1WeoZ4Vn3nA7/g8YUJy/TjdS07T8zEvthRku49jVlz/GpmnY0/jN0zk57CRw3Of3YLcdd8c9HZxpOTxD9bDSqj9yddc+jgmjl3Emdn/v2+79mO0QiXLW3t+mN3eyEkQZBYuCdnQk37ZHnTTyfGxf5nQMAAABgMaKiP+dG77y12BMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAamusyaSOCRY8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCz+CwAA//+9m/li") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x4000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) write(0xffffffffffffffff, &(0x7f0000002200)="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", 0x1de) 2m9.171794417s ago: executing program 5 (id=204): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 1m53.619829741s ago: executing program 35 (id=204): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 1m42.31610326s ago: executing program 6 (id=282): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="49730000000000000000670000007dd1a97eb491d5ffbb3ea843813a286f912968e03666b39cfec60fc13c1d6d2084fed3dd45173b15e90c63abee03e5c00849aac2315467666725ed94472adea004fbb18b10756d86b0c677ba78cbee66266e3981255931fb232b969b60e191ac"], 0x14}}, 0x1233c996511ec814) 1m38.756665201s ago: executing program 6 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000080000002e00000008000300", @ANYRES32=r2, @ANYBLOB="050034008b0000000800c9000c030000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048800) 1m38.574281852s ago: executing program 6 (id=289): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fcntl$lock(r0, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000000)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffd}, 0x48, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r6, r4, 0x0, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e697f90be6d623ceb0eb4912f9f6a31854ec980700000000000000f0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffc}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r7, r7, 0x0, 0x0) 1m37.33093516s ago: executing program 6 (id=293): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x3, 0x443, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, 0x0, 0x0) fallocate(r0, 0x3, 0x5000000, 0x8000c62) 1m34.878444334s ago: executing program 6 (id=300): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, 0x0, 0x0) close(0x3) 1m30.708269559s ago: executing program 6 (id=314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="44002f802c000380080001000200000020000380080002000300000006000100030000000c00040000000000000000000c0002000203aaaaaaaaaaaa080001"], 0x60}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) 1m29.789340105s ago: executing program 36 (id=314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="44002f802c000380080001000200000020000380080002000300000006000100030000000c00040000000000000000000c0002000203aaaaaaaaaaaa080001"], 0x60}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) 5.350658477s ago: executing program 2 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x6a, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f70b87594b3f"}, 0x0, 0x0, @default, @val, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x6, "d8a062cc132f"}, {0xdd, 0x6, "be3bd5f39a64"}, {0xdd, 0x2c, "8554a53b4220bec0e90cfbcb2da96b5e5aa2c5a314922e0370b1ad33958137fe020bcf4c1bcac73fde3cb03b"}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 5.184242208s ago: executing program 2 (id=601): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x1, @local, 0xec}}, 0x7, 0x8000}, 0x90) 5.088516528s ago: executing program 2 (id=602): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='%\x00', &(0x7f0000000400)='\x00', 0x0) 4.993312299s ago: executing program 2 (id=603): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="400fcb"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 3.867546366s ago: executing program 8 (id=615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 3.593393968s ago: executing program 8 (id=618): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @remote}, {0x1, @local}, 0x2, {0x2, 0x4e24, @broadcast}, 'hsr0\x00'}) 3.520576808s ago: executing program 7 (id=619): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x2000, 0x8000000000000000, 0x0) 3.428186129s ago: executing program 8 (id=620): syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x7f000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x4}}}}}}}}, 0x0) 3.427898449s ago: executing program 3 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000540)=[@acquire, @decrefs, @decrefs], 0x0, 0x0, 0x0}) 3.427765549s ago: executing program 7 (id=622): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.2922591s ago: executing program 7 (id=623): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="000304000000040307044ddd04a2c2f113493959e9a6f8a270c2b106decdd8"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001080)={0x2c, 0x0, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 3.28121099s ago: executing program 8 (id=624): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) sendto$packet(r0, 0x0, 0x0, 0x406d850, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="13c5e46709f9"}, 0x14) 3.103325671s ago: executing program 8 (id=625): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x24b) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r3}, &(0x7f0000000300)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_io_uring_setup(0xec5, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000500), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_fuse_handle_req(r1, &(0x7f0000007380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9a7e5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c64e2645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fa421a39943513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b70fa8eae6fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xfffffffffffffff5, 0x0, {0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x460, 0x0, {0x3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.755545269s ago: executing program 3 (id=627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) 1.63621312s ago: executing program 3 (id=628): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x604758d4}}, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000001c0)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.60375854s ago: executing program 3 (id=630): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 1.276239512s ago: executing program 3 (id=631): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000c80)=ANY=[@ANYBLOB="01000000000000314503"]) 1.158509583s ago: executing program 9 (id=633): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @link_local}) 1.118897933s ago: executing program 2 (id=634): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.004259734s ago: executing program 3 (id=635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0x4) listen(r1, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) syz_clone(0x8308c00, &(0x7f0000000340)="e14b52e4fae5e5cae55e7feba6c8d4b3d4d9ee482999ef28f2e5cb68c1b2437696ccc52be31ad7344a673bcb8ae15c1ea2c80c8a19540386ff80c264d976a1d5f2bed8944d49ad4a34dd3883c4045a867a8f709eaa74d0b27b43403b8e1fa39567dacb6709d49cf08c5202542eb8fbd4173ab13699b3e7e9edb94208c706ead63b66b857578adb058e183bff8597e74a", 0x90, &(0x7f0000000200), &(0x7f0000000480), 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x1, 0x42, 0xfffffffffffffffc}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) recvfrom(r3, &(0x7f0000000400)=""/70, 0x480, 0x0, 0x0, 0x0) 991.685194ms ago: executing program 9 (id=636): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x208) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x44a1}], 0x2f, &(0x7f0000000080), &(0x7f00000000c0)={[0x3]}, 0x8) 971.211794ms ago: executing program 2 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000540)=[@acquire, @decrefs, @decrefs], 0x0, 0x0, 0x0}) 808.282855ms ago: executing program 9 (id=638): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2a, 0x7f, 0x3, 0x5, 0x9, 0x3, 0x90, 0x67, 0x17, 0x40, 0x1, 0xfb, 0x7, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000240)=0x52) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0xfff, 0x0, 0x1, 0x60cc, r1}, 0x10) 714.833056ms ago: executing program 9 (id=639): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @private2, @private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x0, 0x4}}) 629.221176ms ago: executing program 9 (id=640): socket$kcm(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = openat$vsock(0xffffff9c, 0x0, 0x40101, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0xc00000}, 0x5, [0x3, 0x3, 0x9, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x80000000, 0xfffffffffffffffb, 0x400000000000001]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 492.236967ms ago: executing program 9 (id=641): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 340.963698ms ago: executing program 7 (id=642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 143.588729ms ago: executing program 7 (id=643): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x4000, 0x4) 272.94µs ago: executing program 7 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000140)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40bd434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a904100500fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff32863e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b743d42a89449a3e1b6be8953a2765148638387ffff486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd322cd00475a56cdf3cc7158bf8c559bf1a900"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x0, 0x0, 0xeffffdff, 0x0, [{}, {0x0, 0x9, 0x0, '\x00', 0xff}, {0x0, 0x12}, {0x0, 0x6}, {}, {0x0, 0x0, 0x4}, {}, {0x4}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {}, {0x4}, {0x0, 0x0, 0x2, '\x00', 0x68}, {0x0, 0x1, 0x7}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x9}, {0xe, 0x0, 0x6}, {}, {0x0, 0x80}, {0x0, 0x4}, {0x0, 0xd}, {0x0, 0x2, 0x3}]}}) 0s ago: executing program 8 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x2, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000305000000defbffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) kernel console output (not intermixed with test programs): ][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.024345][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.074898][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.144086][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.172535][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.245615][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.269264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.313780][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.370263][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.372320][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.393314][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.428478][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.519252][ T444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.558359][ T444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.653631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.872503][ T4277] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.18'. [ 62.976664][ T4277] netlink: 8454 bytes leftover after parsing attributes in process `syz.1.18'. [ 63.065859][ T1327] Bluetooth: hci0: command 0x0419 tx timeout [ 63.071994][ T1327] Bluetooth: hci1: command 0x0419 tx timeout [ 63.081405][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 63.087663][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 63.095220][ T1327] Bluetooth: hci4: command 0x0419 tx timeout [ 63.471217][ T4296] netlink: 'syz.4.25': attribute type 1 has an invalid length. [ 63.500488][ T4296] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.25'. [ 63.853848][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.862167][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.963983][ T4308] device bridge_slave_1 left promiscuous mode [ 64.003154][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.036209][ T4308] device bridge_slave_0 left promiscuous mode [ 64.047774][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.096476][ T4316] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.34'. [ 64.113454][ T4316] netlink: zone id is out of range [ 64.769086][ T4346] syz.2.48[4346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.769246][ T4346] syz.2.48[4346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.881481][ T4350] netlink: 187308 bytes leftover after parsing attributes in process `syz.1.51'. [ 64.963464][ T4350] openvswitch: netlink: Message has 25612 unknown bytes. [ 64.967771][ T4352] netlink: 'syz.2.52': attribute type 10 has an invalid length. [ 65.024791][ T4352] netlink: 156 bytes leftover after parsing attributes in process `syz.2.52'. [ 65.271683][ T4369] loop3: detected capacity change from 0 to 128 [ 66.765289][ T4398] loop2: detected capacity change from 0 to 512 [ 66.842968][ T4398] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 66.952330][ T4413] loop3: detected capacity change from 0 to 128 [ 66.959400][ T4398] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.73: iget: bad i_size value: -67835469387268086 [ 66.989680][ T4398] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.73: couldn't read orphan inode 15 (err -117) [ 67.030091][ T4398] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.066645][ T4398] ext2 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.125680][ T4450] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.210013][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.216600][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.348472][ T4464] loop0: detected capacity change from 0 to 512 [ 71.482349][ T4464] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 71.590851][ T4464] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.93: iget: bad i_size value: -67835469387268086 [ 71.827233][ T4464] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.93: couldn't read orphan inode 15 (err -117) [ 71.887890][ T4464] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.064345][ T4464] ext2 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.743513][ T4485] ipt_CLUSTERIP: Please specify destination IP [ 74.226183][ T4504] loop0: detected capacity change from 0 to 128 [ 74.242636][ T4505] loop4: detected capacity change from 0 to 512 [ 74.423060][ T4505] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.465066][ T4505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.563074][ T4505] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 74.580470][ T4505] System zones: 1-12 [ 74.593054][ T4505] EXT4-fs (loop4): 1 truncate cleaned up [ 74.598972][ T4505] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 74.872681][ T4178] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 75.793569][ T4525] device bond1 entered promiscuous mode [ 75.799496][ T4525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.389322][ T4434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.607485][ T4434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.805089][ T4434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.946834][ T4434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.630357][ T4547] chnl_net:caif_netlink_parms(): no params data found [ 79.638536][ T4564] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 80.838276][ T4260] Bluetooth: hci2: command 0x0409 tx timeout [ 81.055306][ T4593] device pim6reg1 entered promiscuous mode [ 81.127271][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.140886][ T4547] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.155514][ T4547] device bridge_slave_0 entered promiscuous mode [ 81.288103][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.301902][ T4547] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.317830][ T4547] device bridge_slave_1 entered promiscuous mode [ 81.632761][ T1108] cfg80211: failed to load regulatory.db [ 82.287169][ T4547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.299548][ T4606] loop2: detected capacity change from 0 to 128 [ 83.301032][ T4210] Bluetooth: hci2: command 0x041b tx timeout [ 83.342309][ T4547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.830840][ T4620] Zero length message leads to an empty skb [ 83.996796][ T4547] team0: Port device team_slave_0 added [ 84.065860][ T4547] team0: Port device team_slave_1 added [ 84.242836][ C0] sched: RT throttling activated [ 85.679296][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 85.687062][ T4547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.695241][ T4547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.759080][ T4547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.910579][ T4649] loop3: detected capacity change from 0 to 1024 [ 87.011720][ T4547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.065353][ T4547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.445282][ T4649] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 87.590146][ T4547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.742973][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 88.012503][ T4656] loop1: detected capacity change from 0 to 512 [ 88.335060][ T4656] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 88.536377][ T4656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 88.559957][ T4547] device hsr_slave_0 entered promiscuous mode [ 88.580277][ T4656] System zones: 1-12 [ 88.590252][ T4656] EXT4-fs (loop1): 1 truncate cleaned up [ 88.601441][ T4656] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 88.742337][ T4547] device hsr_slave_1 entered promiscuous mode [ 88.802240][ T4547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.823179][ T4547] Cannot create hsr debugfs directory [ 88.871094][ T4665] loop2: detected capacity change from 0 to 512 [ 89.020552][ T4172] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 89.056277][ T4665] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.923873][ T4665] EXT4-fs (loop2): 1 truncate cleaned up [ 89.929565][ T4665] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.273757][ T4434] device hsr_slave_0 left promiscuous mode [ 91.634596][ T4434] device hsr_slave_1 left promiscuous mode [ 91.676710][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.692072][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.702557][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.710097][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.727594][ T4434] device bridge_slave_1 left promiscuous mode [ 91.758044][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.808726][ T4434] device bridge_slave_0 left promiscuous mode [ 91.829854][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.867875][ T4434] device veth1_macvtap left promiscuous mode [ 91.877823][ T4434] device veth0_macvtap left promiscuous mode [ 91.884590][ T4434] device veth1_vlan left promiscuous mode [ 91.898766][ T4434] device veth0_vlan left promiscuous mode [ 92.930134][ T4434] team0 (unregistering): Port device team_slave_1 removed [ 92.959293][ T4434] team0 (unregistering): Port device team_slave_0 removed [ 92.993889][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.015223][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.122037][ T4434] bond0 (unregistering): Released all slaves [ 93.782616][ T4547] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.811716][ T4547] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.874389][ T4547] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.898965][ T4547] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.184366][ T4547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.307309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.344667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.411243][ T4547] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.554930][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.570170][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.596626][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.603769][ T4241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.624041][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.643243][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.662653][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.669874][ T4241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.723341][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.762574][ T4734] netlink: 'syz.3.155': attribute type 4 has an invalid length. [ 94.811932][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.867809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.050171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.105746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.150975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.162310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.198489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.239642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.303930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.347595][ T4744] loop3: detected capacity change from 0 to 1024 [ 95.353348][ T4547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.396304][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.423032][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.439825][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.462442][ T4725] chnl_net:caif_netlink_parms(): no params data found [ 95.528794][ T4744] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 95.677546][ T4752] syz.2.159 uses obsolete (PF_INET,SOCK_PACKET) [ 96.269233][ T4751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.538574][ T2362] Bluetooth: hci1: command 0x0409 tx timeout [ 96.721161][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.733130][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.761675][ T4725] device bridge_slave_0 entered promiscuous mode [ 96.954434][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.961917][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.122509][ T4725] device bridge_slave_1 entered promiscuous mode [ 97.807124][ T4698] Bluetooth: hci5: command 0x0409 tx timeout [ 97.831623][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.856074][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.867995][ T4547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.974915][ T4725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.046379][ T4725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.196212][ T4747] chnl_net:caif_netlink_parms(): no params data found [ 98.228812][ T4725] team0: Port device team_slave_0 added [ 98.279891][ T4725] team0: Port device team_slave_1 added [ 98.455375][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.462493][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.503700][ T4786] loop3: detected capacity change from 0 to 8192 [ 98.540799][ T4725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.591990][ T4786] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.623258][ T4698] Bluetooth: hci1: command 0x041b tx timeout [ 98.650336][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.666532][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.686505][ T26] audit: type=1800 audit(1733175976.764:2): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.162" name="bus" dev="loop3" ino=1048590 res=0 errno=0 [ 98.695980][ T4725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.925366][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.951964][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.984952][ T4725] device hsr_slave_0 entered promiscuous mode [ 99.001280][ T4778] loop2: detected capacity change from 0 to 40427 [ 99.005454][ T4725] device hsr_slave_1 entered promiscuous mode [ 99.053288][ T4778] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 99.060703][ T4778] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 99.096108][ T4778] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 99.258816][ T4778] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 99.269692][ T4778] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.281119][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.317564][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.342722][ T4747] device bridge_slave_0 entered promiscuous mode [ 99.367151][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.384766][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.411630][ T4547] device veth0_vlan entered promiscuous mode [ 99.472681][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.480675][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.493692][ T4747] device bridge_slave_1 entered promiscuous mode [ 99.501133][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.548980][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.579359][ T4547] device veth1_vlan entered promiscuous mode [ 99.729589][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.781465][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.860691][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.875200][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.903083][ T4213] Bluetooth: hci5: command 0x041b tx timeout [ 99.942999][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.952355][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.983764][ T4547] device veth0_macvtap entered promiscuous mode [ 100.009629][ T4747] team0: Port device team_slave_0 added [ 100.020029][ T4747] team0: Port device team_slave_1 added [ 100.030359][ T4822] netlink: 3 bytes leftover after parsing attributes in process `syz.3.164'. [ 100.043958][ T4547] device veth1_macvtap entered promiscuous mode [ 100.098092][ T26] audit: type=1800 audit(1733175978.194:3): pid=4824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.161" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 100.155762][ T4824] attempt to access beyond end of device [ 100.155762][ T4824] loop2: rw=2049, want=53376, limit=40427 [ 100.173539][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.180512][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.240892][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.299826][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.307597][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.338768][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.387731][ T4434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.459252][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.480066][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.500744][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.521768][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.542273][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.562885][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.582864][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.602325][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.614341][ T4547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.632108][ T4434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.671263][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.701034][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.709976][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 100.726094][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.739338][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.759711][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.771067][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.792796][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.812923][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.829292][ T4547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.850406][ T4547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.873457][ T4547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.899834][ T4747] device hsr_slave_0 entered promiscuous mode [ 100.915707][ T4747] device hsr_slave_1 entered promiscuous mode [ 100.929987][ T4747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.945254][ T4747] Cannot create hsr debugfs directory [ 100.964513][ T4434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.009162][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.034515][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.057608][ T4547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.067574][ T4547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.083011][ T4547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.101938][ T4547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.166453][ T4434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.314134][ T4181] attempt to access beyond end of device [ 101.314134][ T4181] loop2: rw=2049, want=45112, limit=40427 [ 101.478408][ T4662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.505224][ T4434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.529800][ T4662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.567674][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.633012][ T4434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.665075][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.679825][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.722616][ T4434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.764858][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.845405][ T4434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.974121][ T4213] Bluetooth: hci5: command 0x040f tx timeout [ 102.064565][ T4848] loop5: detected capacity change from 0 to 1024 [ 102.078755][ T4725] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.126922][ T4725] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.257592][ T4725] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.310777][ T4725] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.349664][ T4747] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 102.374734][ T4848] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 103.247815][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 104.544284][ T4875] binder: 4866:4875 ioctl 54e3 0 returned -22 [ 104.567741][ T4875] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.579435][ T4875] F2FS-fs (loop7): Unable to read 1th superblock [ 104.587476][ T4875] blk_update_request: I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.598782][ T4875] F2FS-fs (loop7): Unable to read 2th superblock [ 105.025084][ T2362] Bluetooth: hci5: command 0x0419 tx timeout [ 105.163820][ T4747] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 105.355349][ T4885] IPv6: addrconf: prefix option has invalid lifetime [ 105.532890][ T4879] netlink: 72 bytes leftover after parsing attributes in process `syz.3.173'. [ 105.569497][ T4747] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 105.633108][ T4747] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 105.838184][ T4725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.875388][ T4725] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.910251][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.928607][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.938244][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.949995][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.008562][ T4902] overlayfs: failed to resolve './file1': -2 [ 106.043016][ T4460] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.050251][ T4460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.511054][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.665715][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.700353][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.728756][ T4460] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.736016][ T4460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.785750][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.797378][ T4905] netlink: 36 bytes leftover after parsing attributes in process `syz.2.176'. [ 106.814790][ T4909] loop3: detected capacity change from 0 to 512 [ 107.054472][ T4909] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 107.060214][ T4917] loop2: detected capacity change from 0 to 1024 [ 107.081282][ T4909] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.211796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.424699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.507055][ T4917] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 107.674287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.778881][ T26] audit: type=1800 audit(1733175985.874:4): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.178" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 107.817832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.937032][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.208356][ T4725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.279541][ T4926] binder: 4922:4926 ioctl 54e3 0 returned -22 [ 108.940007][ T4725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.024244][ T4747] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.058224][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.078752][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.089096][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.104237][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.113196][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.121808][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.131178][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.139323][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.147380][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.269018][ T4747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.308709][ T4747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.340052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.420952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.462688][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.469858][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.569600][ T4941] loop3: detected capacity change from 0 to 512 [ 109.589965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.651987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.698292][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.705479][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.738701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.752111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.761510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.772109][ T4941] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.774254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.790839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.800783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.820629][ T4941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 109.823984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.846420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.862087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.874102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.013386][ T4941] System zones: 1-12 [ 110.040807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.049358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.058455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.074939][ T4941] EXT4-fs (loop3): 1 truncate cleaned up [ 110.145256][ T4957] overlayfs: failed to resolve './file1': -2 [ 110.273272][ T4941] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 110.918963][ T4966] loop5: detected capacity change from 0 to 128 [ 110.996159][ T4965] loop2: detected capacity change from 0 to 512 [ 111.028115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.105251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.114841][ T4725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.177832][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 111.213102][ T4965] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.519870][ T26] audit: type=1800 audit(1733175989.604:5): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.190" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 112.084380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.092426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.148776][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.202717][ T4986] loop3: detected capacity change from 0 to 1024 [ 112.408190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.428112][ T4986] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 112.480117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.546663][ T4725] device veth0_vlan entered promiscuous mode [ 112.561074][ T4725] device veth1_vlan entered promiscuous mode [ 112.589671][ T4725] device veth0_macvtap entered promiscuous mode [ 112.635430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.665548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.977031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.163867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.233237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.290679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.359263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.390646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.399597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.410502][ T4725] device veth1_macvtap entered promiscuous mode [ 113.571803][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.594909][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.628500][ T5010] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 113.711729][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.743051][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.782855][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.819947][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.871455][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.902558][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.931189][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.009651][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.045965][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.349395][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.558404][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.847864][ T4993] loop2: detected capacity change from 0 to 40427 [ 115.989250][ T5031] loop5: detected capacity change from 0 to 512 [ 116.169935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.183113][ T5031] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 116.195127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.209620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.219016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.264395][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.275371][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.285658][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.297813][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.299180][ T5031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 116.307777][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.307800][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.307812][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.307827][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.358132][ T4725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.369322][ T4725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.381819][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.390914][ T5031] System zones: 1-12 [ 116.404646][ T4747] device veth0_vlan entered promiscuous mode [ 116.413127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.437200][ T5031] EXT4-fs (loop5): 1 truncate cleaned up [ 116.449837][ T5031] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 116.459930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.490156][ T5036] loop3: detected capacity change from 0 to 512 [ 116.504006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.543956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.564296][ T4725] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.587631][ T5036] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 116.602892][ T4725] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.607821][ T5036] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.661506][ T4725] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.670356][ T4725] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.682470][ T26] audit: type=1800 audit(1733175994.784:6): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.200" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 116.949523][ T5043] overlayfs: failed to resolve './file0': -2 [ 117.231124][ T5046] loop5: detected capacity change from 0 to 128 [ 117.252131][ T4747] device veth1_vlan entered promiscuous mode [ 117.268468][ T5048] loop3: detected capacity change from 0 to 1024 [ 117.426198][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.465485][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.498993][ T4747] device veth0_macvtap entered promiscuous mode [ 117.523942][ T5048] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 117.550728][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.550796][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.554469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.574967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.764923][ T4747] device veth1_macvtap entered promiscuous mode [ 118.285949][ T4434] device hsr_slave_0 left promiscuous mode [ 118.330542][ T4434] device hsr_slave_1 left promiscuous mode [ 118.354691][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.412338][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.467044][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.543758][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.560530][ T4434] device bridge_slave_1 left promiscuous mode [ 118.587462][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.656930][ T4434] device bridge_slave_0 left promiscuous mode [ 118.675914][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.760225][ T4434] device hsr_slave_0 left promiscuous mode [ 118.794077][ T4434] device hsr_slave_1 left promiscuous mode [ 118.814424][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.839623][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.858679][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.871156][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.889795][ T4434] device bridge_slave_1 left promiscuous mode [ 118.907473][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.935220][ T4434] device bridge_slave_0 left promiscuous mode [ 118.948744][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.996687][ T4434] device veth1_macvtap left promiscuous mode [ 119.013702][ T4434] device veth0_macvtap left promiscuous mode [ 119.031080][ T4434] device veth1_vlan left promiscuous mode [ 119.051997][ T4434] device veth0_vlan left promiscuous mode [ 119.075100][ T4434] device veth1_macvtap left promiscuous mode [ 119.081256][ T4434] device veth0_macvtap left promiscuous mode [ 119.103425][ T4434] device veth1_vlan left promiscuous mode [ 119.119800][ T4434] device veth0_vlan left promiscuous mode [ 119.930640][ T4434] team0 (unregistering): Port device team_slave_1 removed [ 119.991081][ T4434] team0 (unregistering): Port device team_slave_0 removed [ 120.032679][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.078570][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.271032][ T4434] bond0 (unregistering): Released all slaves [ 120.493937][ T5081] loop2: detected capacity change from 0 to 40427 [ 120.559711][ T4434] team0 (unregistering): Port device team_slave_1 removed [ 120.587683][ T4434] team0 (unregistering): Port device team_slave_0 removed [ 120.613241][ T5081] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 120.619610][ T5081] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 120.646819][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.670016][ T5081] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 120.690803][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.748992][ T5081] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 120.762941][ T5081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.918565][ T4434] bond0 (unregistering): Released all slaves [ 121.203206][ T5089] attempt to access beyond end of device [ 121.203206][ T5089] loop2: rw=2049, want=53376, limit=40427 [ 121.463264][ T26] audit: type=1800 audit(1733175999.294:7): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.206" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 121.639718][ T4662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.670821][ T4662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.718193][ T5092] sctp: [Deprecated]: syz.3.208 (pid 5092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.718193][ T5092] Use struct sctp_sack_info instead [ 121.897544][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.906664][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.939438][ T5094] loop3: detected capacity change from 0 to 512 [ 121.947749][ T4181] attempt to access beyond end of device [ 121.947749][ T4181] loop2: rw=2049, want=45112, limit=40427 [ 122.034971][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.043802][ T5094] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.046454][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.066384][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.079369][ T5094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 122.087446][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.097668][ T5094] System zones: 1-12 [ 122.103784][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.115668][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.126897][ T5094] EXT4-fs (loop3): 1 truncate cleaned up [ 122.132556][ T5094] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 122.149681][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.164907][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.177666][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.190594][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.220711][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.230725][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.241338][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.251300][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.261763][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.271712][ T4747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.284334][ T4747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.297438][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.306937][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.333485][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.342291][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.352046][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.404105][ T4747] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.422875][ T4747] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.438591][ T4747] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.461852][ T4747] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.742300][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.832530][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.846610][ T4662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.856424][ T4662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.876652][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.980464][ T5113] overlayfs: failed to resolve './file0': -2 [ 123.214111][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.290007][ T5121] loop6: detected capacity change from 0 to 128 [ 123.811078][ T5127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 124.645446][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 125.308193][ T5165] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.222'. [ 126.412988][ T5170] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.420552][ T5170] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.776866][ T5178] overlayfs: failed to resolve './file0': -2 [ 127.534457][ T5190] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.562337][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 127.584578][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 127.607699][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 127.625926][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 127.643569][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 127.658654][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 127.675739][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 128.143298][ T5189] loop2: detected capacity change from 0 to 128 [ 129.364735][ T5203] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.233'. [ 130.687930][ T5219] fuse: Bad value for 'fd' [ 130.865866][ T5221] loop7: detected capacity change from 0 to 512 [ 130.959861][ T5221] ======================================================= [ 130.959861][ T5221] WARNING: The mand mount option has been deprecated and [ 130.959861][ T5221] and is ignored by this kernel. Remove the mand [ 130.959861][ T5221] option from the mount to silence this warning. [ 130.959861][ T5221] ======================================================= [ 131.375765][ T5221] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled [ 131.460576][ T5221] EXT4-fs (loop7): Mount option "dax=inode" incompatible with ext2 [ 131.485261][ T5233] loop2: detected capacity change from 0 to 128 [ 133.441221][ T5237] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.244'. [ 133.478876][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.353534][ T5262] netlink: 16 bytes leftover after parsing attributes in process `syz.6.249'. [ 135.397667][ T5273] netlink: 'syz.6.254': attribute type 10 has an invalid length. [ 135.651749][ T5273] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.705412][ T5273] bond0: (slave team0): Enslaving as an active interface with an up link [ 135.725880][ T5281] loop3: detected capacity change from 0 to 512 [ 135.758787][ T5285] loop7: detected capacity change from 0 to 128 [ 135.821386][ T5281] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 136.061378][ T5281] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.256: iget: bad i_size value: -67835469387268086 [ 136.190987][ T5281] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.256: couldn't read orphan inode 15 (err -117) [ 136.568742][ T5281] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.841579][ T5281] ext2 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.113326][ T5297] loop2: detected capacity change from 0 to 512 [ 137.203515][ T5297] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 137.233179][ T5297] EXT4-fs (loop2): Mount option "dax=inode" incompatible with ext2 [ 137.279771][ T5305] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.258'. [ 137.989922][ T4208] Bluetooth: hci0: command 0x0409 tx timeout [ 138.049889][ T5276] infiniband syz2: set active [ 138.096426][ T5282] chnl_net:caif_netlink_parms(): no params data found [ 138.176186][ T5276] infiniband syz2: added bond0 [ 138.315367][ T5276] infiniband syz2: Couldn't open port 1 [ 138.499897][ T5276] RDS/IB: syz2: added [ 138.518793][ T5276] smc: adding ib device syz2 with port count 1 [ 138.544905][ T5276] smc: ib device syz2 port 1 has pnetid [ 138.546392][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 138.744223][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.785253][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.808992][ T5282] device bridge_slave_0 entered promiscuous mode [ 138.840952][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.899056][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.959068][ T5282] device bridge_slave_1 entered promiscuous mode [ 140.139311][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 140.316105][ T5282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.420952][ T4434] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.485891][ T5282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.690904][ T4434] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.782083][ T5282] team0: Port device team_slave_0 added [ 140.806092][ T5282] team0: Port device team_slave_1 added [ 140.853952][ T4434] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.913891][ T5282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.942972][ T5282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.043588][ T5282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.114263][ T5282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.121404][ T5282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.213173][ T5282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.256114][ T4434] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.428453][ T5282] device hsr_slave_0 entered promiscuous mode [ 141.472060][ T5282] device hsr_slave_1 entered promiscuous mode [ 141.511647][ T5282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.523379][ T5282] Cannot create hsr debugfs directory [ 142.480284][ T4855] Bluetooth: hci0: command 0x040f tx timeout [ 142.691985][ T5378] loop2: detected capacity change from 0 to 512 [ 142.806967][ T5378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 142.867006][ T5378] EXT4-fs (loop2): 1 truncate cleaned up [ 142.872983][ T5378] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.162870][ T5282] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 144.415117][ T5282] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 144.471534][ T5282] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 144.480083][ T5401] tipc: Failed to remove unknown binding: 66,1,1/0:2783032382/2783032384 [ 144.531546][ T5282] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 144.549845][ T5402] tipc: Failed to remove unknown binding: 66,1,1/0:2783032382/2783032384 [ 144.621851][ T2362] Bluetooth: hci0: command 0x0419 tx timeout [ 145.021446][ T5282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.085358][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.109207][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.146906][ T5414] wlan1 speed is unknown, defaulting to 1000 [ 145.149951][ T5282] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.210369][ T5414] wlan1 speed is unknown, defaulting to 1000 [ 145.234243][ T5414] wlan1 speed is unknown, defaulting to 1000 [ 145.353597][ T5414] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.381967][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.407018][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.438251][ T5414] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 146.446924][ T4662] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.454056][ T4662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.163406][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.220395][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.308467][ T4662] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.315664][ T4662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.335890][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.352652][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.624577][ T5443] loop3: detected capacity change from 0 to 16 [ 147.633108][ T5414] wlan1 speed is unknown, defaulting to 1000 [ 147.769805][ T5444] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.781179][ T5444] F2FS-fs (loop15): Unable to read 1th superblock [ 147.788671][ T5444] blk_update_request: I/O error, dev loop15, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.799930][ T5444] F2FS-fs (loop15): Unable to read 2th superblock [ 148.490515][ T5414] wlan1 speed is unknown, defaulting to 1000 [ 148.562588][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.591101][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.656323][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.838710][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.879056][ T5414] wlan1 speed is unknown, defaulting to 1000 [ 148.894892][ T5443] erofs: (device loop3): mounted with root inode @ nid 36. [ 148.914237][ T5414] wlan1 speed is unknown, defaulting to 1000 [ 148.916494][ T5440] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 148.921280][ T5414] wlan1 speed is unknown, defaulting to 1000 [ 148.941082][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.965950][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.000023][ T5450] netlink: 32 bytes leftover after parsing attributes in process `syz.7.288'. [ 149.009612][ T5414] wlan1 speed is unknown, defaulting to 1000 [ 149.162477][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.171956][ T5414] wlan1 speed is unknown, defaulting to 1000 [ 149.260757][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.337196][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.348294][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.359802][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.346621][ T5474] loop6: detected capacity change from 0 to 512 [ 150.487161][ T5474] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 150.685124][ T5474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 150.700013][ T5474] System zones: 1-12 [ 150.707110][ T5474] EXT4-fs (loop6): 1 truncate cleaned up [ 150.713229][ T5474] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 151.607461][ T5494] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.619286][ T5494] F2FS-fs (loop5): Unable to read 1th superblock [ 151.628439][ T5494] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.640284][ T5494] F2FS-fs (loop5): Unable to read 2th superblock [ 152.595766][ T5500] loop7: detected capacity change from 0 to 512 [ 152.656156][ T4725] EXT4-fs error (device loop6): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /21/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 152.802889][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.812152][ T4725] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 152.846633][ T5500] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 152.863144][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.875140][ T4725] EXT4-fs error (device loop6): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /21/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 152.904885][ T5282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.929936][ T4725] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 152.959322][ T5500] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.298: iget: bad i_size value: -67835469387268086 [ 153.024303][ T5509] loop2: detected capacity change from 0 to 16 [ 153.371160][ T5500] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.298: couldn't read orphan inode 15 (err -117) [ 153.418958][ T4725] EXT4-fs error (device loop6): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /21/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 153.606356][ T5509] erofs: (device loop2): mounted with root inode @ nid 36. [ 153.620492][ T4725] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 153.620770][ T5503] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 153.695151][ T4725] EXT4-fs error (device loop6): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /21/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 153.717060][ T5500] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.730924][ T5500] ext2 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.744747][ T4725] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 153.930272][ T4725] EXT4-fs error (device loop6): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /21/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 154.008725][ T4725] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 154.364900][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.398823][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.510140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.524372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.572123][ T5282] device veth0_vlan entered promiscuous mode [ 154.671281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.690154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.725756][ T5282] device veth1_vlan entered promiscuous mode [ 154.899879][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.923695][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.224798][ T4434] device hsr_slave_0 left promiscuous mode [ 155.235359][ T4434] device hsr_slave_1 left promiscuous mode [ 155.256479][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.271595][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.298655][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.322333][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.345583][ T4434] device bridge_slave_1 left promiscuous mode [ 155.352032][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.366472][ T4434] device bridge_slave_0 left promiscuous mode [ 155.378990][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.396210][ T4434] device veth1_macvtap left promiscuous mode [ 155.402490][ T4434] device veth0_macvtap left promiscuous mode [ 155.417167][ T4434] device veth1_vlan left promiscuous mode [ 155.426547][ T4434] device veth0_vlan left promiscuous mode [ 155.662742][ T5565] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.674100][ T5565] F2FS-fs (loop15): Unable to read 1th superblock [ 155.681459][ T5565] blk_update_request: I/O error, dev loop15, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.692981][ T5565] F2FS-fs (loop15): Unable to read 2th superblock [ 156.419407][ T4434] team0 (unregistering): Port device team_slave_1 removed [ 156.436348][ T4434] team0 (unregistering): Port device team_slave_0 removed [ 156.450074][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.465282][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.540944][ T4434] bond0 (unregistering): Released all slaves [ 156.609560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.621174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.678423][ T5282] device veth0_macvtap entered promiscuous mode [ 156.718934][ T5282] device veth1_macvtap entered promiscuous mode [ 156.817335][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.971638][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.018901][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.029503][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.039883][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.050358][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.060209][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.070680][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.173902][ T5582] loop3: detected capacity change from 0 to 16 [ 157.371302][ T5582] erofs: (device loop3): mounted with root inode @ nid 36. [ 157.404666][ T5582] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 157.516087][ T5282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.774430][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.813532][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.865763][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.890409][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.918084][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.939028][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.984051][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.003681][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.015256][ T5282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.032059][ T5282] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.046086][ T5282] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.055746][ T5282] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.071322][ T5282] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.082362][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.135481][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.148645][ T5593] loop2: detected capacity change from 0 to 512 [ 158.174317][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.184008][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.231442][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.344698][ T5593] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 158.502398][ T5593] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.317: iget: bad i_size value: -67835469387268086 [ 158.531353][ T5593] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.317: couldn't read orphan inode 15 (err -117) [ 158.577084][ T5593] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.686515][ T5593] ext2 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.715630][ T4435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.752957][ T4435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.832323][ T5613] netlink: 'syz.7.322': attribute type 1 has an invalid length. [ 159.692494][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.714183][ T5613] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.322'. [ 159.786515][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.918691][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.939468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.062906][ T4855] Bluetooth: hci1: command 0x0409 tx timeout [ 160.251595][ T5589] wlan1 speed is unknown, defaulting to 1000 [ 161.125650][ T5638] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.326'. [ 162.137856][ T4855] Bluetooth: hci1: command 0x041b tx timeout [ 162.302480][ T5639] loop2: detected capacity change from 0 to 8192 [ 162.858071][ T5639] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.981678][ T5589] chnl_net:caif_netlink_parms(): no params data found [ 163.143069][ T26] audit: type=1800 audit(1733176041.164:8): pid=5639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.323" name="bus" dev="loop2" ino=1048600 res=0 errno=0 [ 163.685827][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.737880][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.773904][ T5676] loop7: detected capacity change from 0 to 512 [ 163.784606][ T5589] device bridge_slave_0 entered promiscuous mode [ 163.846554][ T5676] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 164.010906][ T5676] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.332: iget: bad i_size value: -67835469387268086 [ 164.052072][ T5676] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.332: couldn't read orphan inode 15 (err -117) [ 164.162286][ T5676] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.280952][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.431437][ T5676] ext2 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.529011][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.807179][ T5589] device bridge_slave_1 entered promiscuous mode [ 164.888528][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 165.094839][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.162564][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.587129][ T5589] team0: Port device team_slave_0 added [ 165.766219][ T5699] loop3: detected capacity change from 0 to 16 [ 165.983177][ T5589] team0: Port device team_slave_1 added [ 166.601199][ T5699] erofs: (device loop3): mounted with root inode @ nid 36. [ 166.616780][ T5698] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 166.662352][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.702598][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.932679][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.945370][ T4855] Bluetooth: hci1: command 0x0419 tx timeout [ 167.002320][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.020898][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.067738][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.496368][ T5589] device hsr_slave_0 entered promiscuous mode [ 167.514439][ T5589] device hsr_slave_1 entered promiscuous mode [ 167.530333][ T5733] loop3: detected capacity change from 0 to 512 [ 167.547259][ T5589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.585747][ T5589] Cannot create hsr debugfs directory [ 167.619397][ T5733] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 167.659778][ T5733] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.345: iget: bad i_size value: -67835469387268086 [ 167.779829][ T5733] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.345: couldn't read orphan inode 15 (err -117) [ 167.853379][ T5733] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.920928][ T5733] ext2 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.405293][ T5589] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 168.445908][ T5589] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 168.503767][ T5589] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 168.560173][ T5589] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 168.633799][ T5742] loop2: detected capacity change from 0 to 8192 [ 168.737687][ T5763] loop3: detected capacity change from 0 to 16 [ 169.456841][ T5763] erofs: (device loop3): mounted with root inode @ nid 36. [ 169.471798][ T5762] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 169.524517][ T5742] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.571991][ T26] audit: type=1800 audit(1733176047.664:9): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.347" name="bus" dev="loop2" ino=1048601 res=0 errno=0 [ 169.893400][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.956627][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.985780][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.051720][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.089776][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.111736][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.161440][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.168598][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.229205][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.248657][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.267446][ T4855] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 170.282782][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.295081][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.302211][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.317155][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.349566][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.389699][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.416116][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.460367][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.479903][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.513683][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.523571][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.540937][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.549519][ T4855] usb 9-1: Using ep0 maxpacket: 8 [ 170.568015][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.592703][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.672629][ T5589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.684470][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.692412][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.701559][ T4855] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.719132][ T5785] device bridge_slave_1 left promiscuous mode [ 170.722654][ T4855] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 170.747061][ T4855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.753237][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.779720][ T4855] usb 9-1: config 0 descriptor?? [ 170.803721][ T5785] device bridge_slave_0 left promiscuous mode [ 170.810245][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.842096][ T4855] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 171.130495][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.160539][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.178814][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.493721][ T4209] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 171.591848][ T5815] loop7: detected capacity change from 0 to 512 [ 171.688667][ T5815] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 171.707293][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.723704][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.766166][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.786042][ T5815] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.359: iget: bad i_size value: -67835469387268086 [ 171.811355][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.837759][ T5815] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.359: couldn't read orphan inode 15 (err -117) [ 171.868186][ T5589] device veth0_vlan entered promiscuous mode [ 171.888217][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.905890][ T5815] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.920595][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.941394][ T5815] ext2 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.975870][ T5589] device veth1_vlan entered promiscuous mode [ 172.030177][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.102376][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.123231][ T4855] gspca_vc032x: reg_w err -71 [ 172.127999][ T4855] vc032x: probe of 9-1:0.0 failed with error -71 [ 172.166064][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.182395][ T4855] usb 9-1: USB disconnect, device number 2 [ 172.192159][ T5589] device veth0_macvtap entered promiscuous mode [ 172.222630][ T5589] device veth1_macvtap entered promiscuous mode [ 172.283471][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.315236][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.334193][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.546179][ T5851] loop2: detected capacity change from 0 to 16 [ 172.703586][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.909451][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.075998][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.131150][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.160006][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.332478][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.440495][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.452036][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.466584][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.493283][ T5851] erofs: (device loop2): mounted with root inode @ nid 36. [ 173.510922][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.522549][ T5849] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 173.551389][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.587738][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.744912][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.792915][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.813183][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.837114][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.849821][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.872998][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.889914][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.909929][ T5864] loop8: detected capacity change from 0 to 512 [ 173.917391][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.927966][ T5589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.939079][ T5589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.951450][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.971381][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.985961][ T5864] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 174.026131][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.071210][ T5589] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.078852][ T5864] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.370: iget: bad i_size value: -67835469387268086 [ 174.110795][ T5589] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.123140][ T5864] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.370: couldn't read orphan inode 15 (err -117) [ 174.171346][ T5589] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.192450][ T5864] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.253347][ T5589] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.262356][ T5864] ext2 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.396501][ T5876] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.372'. [ 175.726440][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.813248][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.903000][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.959828][ T4460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.997245][ T4460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.192233][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.314378][ T5913] loop3: detected capacity change from 0 to 16 [ 177.394115][ T5913] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.423748][ T5913] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 178.315700][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 178.324970][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 178.622842][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #142!!! [ 178.633431][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 178.662886][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 178.671818][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 178.680803][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 178.690221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 178.703086][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 178.704483][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 178.712062][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 178.802928][ T1111] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 179.163205][ T1111] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 179.177764][ T1111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.201113][ T1111] usb 10-1: config 0 descriptor?? [ 179.318259][ T5943] device ipvlan2 entered promiscuous mode [ 179.350128][ T5943] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 179.811522][ T5959] loop7: detected capacity change from 0 to 16 [ 180.017026][ T5959] erofs: (device loop7): mounted with root inode @ nid 36. [ 180.045325][ T5959] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 180.651092][ T5965] device vlan0 entered promiscuous mode [ 180.662902][ T5965] device vlan0 left promiscuous mode [ 180.773480][ T4870] Bluetooth: hci4: command 0x0406 tx timeout [ 180.785217][ T4698] Bluetooth: hci3: command 0x0406 tx timeout [ 180.903204][ T1111] usb 10-1: Cannot set autoneg [ 180.911351][ T1111] MOSCHIP usb-ethernet driver: probe of 10-1:0.0 failed with error -71 [ 180.965976][ T1111] usb 10-1: USB disconnect, device number 2 [ 181.496504][ T6002] loop8: detected capacity change from 0 to 16 [ 181.554316][ T6002] erofs: (device loop8): mounted with root inode @ nid 36. [ 181.575758][ T6002] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 183.623019][ T4855] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 183.873133][ T6037] loop3: detected capacity change from 0 to 1024 [ 183.902915][ T4855] usb 9-1: Using ep0 maxpacket: 32 [ 184.042266][ T6037] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 184.069831][ T4855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.101746][ T4855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 184.113087][ T4855] usb 9-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 184.122138][ T4855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.158665][ T4855] usb 9-1: config 0 descriptor?? [ 184.441243][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.8.403'. [ 184.552947][ T6055] loop2: detected capacity change from 0 to 16 [ 185.706329][ T6055] erofs: (device loop2): mounted with root inode @ nid 36. [ 185.722536][ T6051] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 185.750458][ T4855] usbhid 9-1:0.0: can't add hid device: -71 [ 185.766031][ T4855] usbhid: probe of 9-1:0.0 failed with error -71 [ 185.792261][ T4855] usb 9-1: USB disconnect, device number 3 [ 186.198340][ T6064] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 186.486435][ T6078] loop9: detected capacity change from 0 to 512 [ 186.562259][ T6081] tipc: Started in network mode [ 186.594068][ T6081] tipc: Node identity , cluster identity 4711 [ 186.638821][ T6081] tipc: Failed to obtain node identity [ 187.003289][ T6078] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 187.027426][ T6081] tipc: Enabling of bearer rejected, failed to enable media [ 187.445210][ T6078] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.423: iget: bad i_size value: -67835469387268086 [ 187.511148][ T6078] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.423: couldn't read orphan inode 15 (err -117) [ 187.620861][ T6078] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.705968][ T6078] ext2 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.846038][ T6106] loop2: detected capacity change from 0 to 16 [ 188.366014][ T6106] erofs: (device loop2): mounted with root inode @ nid 36. [ 188.383977][ T6104] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 188.497310][ T6101] loop3: detected capacity change from 0 to 8192 [ 188.659833][ T6101] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.807776][ T26] audit: type=1800 audit(1733176066.904:10): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.429" name="bus" dev="loop3" ino=1048604 res=0 errno=0 [ 188.903042][ T4870] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 189.142893][ T4870] usb 8-1: Using ep0 maxpacket: 8 [ 189.263247][ T4870] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.288650][ T4870] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 189.325671][ T4870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.373403][ T4870] usb 8-1: config 0 descriptor?? [ 189.425138][ T4870] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 190.940828][ T4870] usb 8-1: USB disconnect, device number 2 [ 192.312904][ T1108] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 192.441626][ T6178] loop7: detected capacity change from 0 to 512 [ 192.552921][ T1108] usb 9-1: Using ep0 maxpacket: 16 [ 192.570953][ T6178] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 192.643631][ T4698] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 192.683443][ T1108] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.720062][ T6178] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.447: iget: bad i_size value: -67835469387268086 [ 192.789010][ T6178] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.447: couldn't read orphan inode 15 (err -117) [ 192.811759][ T6178] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.878707][ T6178] ext2 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.903355][ T1108] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.934937][ T1108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.982925][ T4698] usb 3-1: Using ep0 maxpacket: 32 [ 193.132982][ T1108] usb 9-1: Product: syz [ 193.137190][ T1108] usb 9-1: Manufacturer: syz [ 193.141803][ T1108] usb 9-1: SerialNumber: syz [ 193.210616][ T1108] usb 9-1: config 0 descriptor?? [ 193.243496][ T4698] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 193.252421][ T4698] usb 3-1: config 0 has no interface number 0 [ 193.287753][ T1108] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.327770][ T1108] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 193.504214][ T4698] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 193.522937][ T4698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.552214][ T4698] usb 3-1: Product: syz [ 193.590463][ T4698] usb 3-1: Manufacturer: syz [ 193.595683][ T4698] usb 3-1: SerialNumber: syz [ 193.618748][ T4698] usb 3-1: config 0 descriptor?? [ 193.678308][ T4698] smsc95xx v2.0.0 [ 193.946262][ T1108] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 194.057736][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.533476][ T4698] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 194.544480][ T1108] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 194.563025][ T1108] em28xx 9-1:0.0: board has no eeprom [ 194.570534][ T4698] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 194.633161][ T4698] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 194.661156][ T4698] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 194.694808][ T4698] usb 3-1: USB disconnect, device number 2 [ 194.943111][ T1108] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 194.950977][ T1108] em28xx 9-1:0.0: dvb set to bulk mode. [ 194.990990][ T4698] em28xx 9-1:0.0: Binding DVB extension [ 195.021097][ T1108] usb 9-1: USB disconnect, device number 4 [ 195.048137][ T1108] em28xx 9-1:0.0: Disconnecting em28xx [ 195.310895][ T4698] em28xx 9-1:0.0: Registering input extension [ 196.776625][ T1108] em28xx 9-1:0.0: Closing input extension [ 196.838429][ T6227] netlink: 'syz.9.453': attribute type 10 has an invalid length. [ 196.898019][ T1108] em28xx 9-1:0.0: Freeing device [ 196.976003][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.983504][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.105326][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.112491][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.120709][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.127843][ T6227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.169762][ T6227] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 197.216658][ T6233] netlink: 'syz.9.453': attribute type 10 has an invalid length. [ 197.248900][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.256413][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.549549][ T1111] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 198.123074][ T1111] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 198.198244][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.482982][ T1111] usb 3-1: config 0 has no interface number 0 [ 198.551634][ T1111] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 198.606739][ T1111] usb 3-1: config 0 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 199.043470][ T1111] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 199.402891][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.426746][ T1111] usb 3-1: Product: syz [ 199.430947][ T1111] usb 3-1: Manufacturer: syz [ 199.520013][ T1111] usb 3-1: SerialNumber: syz [ 199.587260][ T1111] usb 3-1: config 0 descriptor?? [ 199.643261][ T6242] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.916484][ T1111] ath6kl: Failed to submit usb control message: -71 [ 199.932966][ T1111] ath6kl: unable to send the bmi data to the device: -71 [ 200.121211][ T1111] ath6kl: Unable to send get target info: -71 [ 200.149099][ T1111] ath6kl: Failed to init ath6kl core: -71 [ 201.522248][ T1111] ath6kl_usb: probe of 3-1:0.109 failed with error -71 [ 201.542016][ T1111] usb 3-1: USB disconnect, device number 3 [ 202.588947][ T6335] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.476'. [ 204.780162][ T6366] loop9: detected capacity change from 0 to 512 [ 204.797991][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'. [ 204.833115][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 205.019661][ T6366] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 205.393286][ T6366] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.481: iget: bad i_size value: -67835469387268086 [ 205.825435][ T6366] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.481: couldn't read orphan inode 15 (err -117) [ 205.913364][ T6366] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.973924][ T6386] loop2: detected capacity change from 0 to 128 [ 205.991588][ T6366] ext2 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.441121][ T6389] overlayfs: missing 'lowerdir' [ 207.232905][ T1108] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.241986][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.161891][ T1108] usb 4-1: config 0 descriptor?? [ 209.846295][ T6416] blk_update_request: I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.858151][ T6416] F2FS-fs (loop17): Unable to read 1th superblock [ 209.864792][ T6416] blk_update_request: I/O error, dev loop17, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.875812][ T6416] F2FS-fs (loop17): Unable to read 2th superblock [ 209.997309][ T6419] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.490'. [ 210.158772][ T1108] usb 4-1: can't set config #0, error -71 [ 210.167000][ T1108] usb 4-1: USB disconnect, device number 2 [ 210.907660][ T6449] loop8: detected capacity change from 0 to 512 [ 210.912027][ T1111] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 211.107383][ T6449] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 211.169380][ T6449] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.499: iget: bad i_size value: -67835469387268086 [ 211.193303][ T1111] usb 10-1: Using ep0 maxpacket: 8 [ 211.259607][ T6449] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.499: couldn't read orphan inode 15 (err -117) [ 211.313261][ T1111] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 211.327271][ T6449] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.349748][ T1111] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 211.389077][ T6449] ext2 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.410465][ T1111] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 11965, setting to 1024 [ 211.471054][ T1111] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 212.003412][ T1111] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 212.184931][ T1111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 212.214871][ T1111] usb 10-1: SerialNumber: syz [ 212.248613][ T1111] usb 10-1: config 0 descriptor?? [ 212.289343][ T6420] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.307634][ T6420] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.117574][ T1111] usb 10-1: USB disconnect, device number 3 [ 213.133553][ T1108] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 213.791223][ T6492] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.505'. [ 214.173249][ T1108] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.196758][ T1108] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 214.237392][ T1108] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.262209][ T6505] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.273477][ T6505] F2FS-fs (loop15): Unable to read 1th superblock [ 214.280051][ T6505] blk_update_request: I/O error, dev loop15, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.291781][ T6505] F2FS-fs (loop15): Unable to read 2th superblock [ 214.307451][ T1108] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.357452][ T1108] usb 9-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 214.411784][ T1108] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.544567][ T1108] usb 9-1: config 0 descriptor?? [ 214.597216][ T1108] usb 9-1: MIDIStreaming interface descriptor not found [ 214.642948][ T1111] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 214.802562][ T4698] usb 9-1: USB disconnect, device number 5 [ 215.223053][ T1111] usb 10-1: Using ep0 maxpacket: 32 [ 215.347526][ T1111] usb 10-1: config 0 has no interfaces? [ 216.047826][ T6518] loop7: detected capacity change from 0 to 512 [ 216.062946][ T1111] usb 10-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=37.cb [ 216.072159][ T1111] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.606911][ T1111] usb 10-1: Product: syz [ 216.611371][ T1111] usb 10-1: Manufacturer: syz [ 216.616899][ T1111] usb 10-1: SerialNumber: syz [ 217.888921][ T1111] usb 10-1: config 0 descriptor?? [ 218.310374][ T6535] overlayfs: missing 'lowerdir' [ 218.512098][ T1111] usb 10-1: can't set config #0, error -71 [ 218.533930][ T6518] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 218.595123][ T1111] usb 10-1: USB disconnect, device number 4 [ 218.626914][ T6518] EXT4-fs: failed to create workqueue [ 218.662979][ T6518] EXT4-fs (loop7): mount failed [ 219.400678][ T6564] loop3: detected capacity change from 0 to 8192 [ 219.585949][ T6564] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.702945][ T26] audit: type=1800 audit(1733176098.784:11): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.517" name="bus" dev="loop3" ino=1048606 res=0 errno=0 [ 220.758020][ T6605] loop7: detected capacity change from 0 to 512 [ 221.110736][ T6605] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 221.205255][ T6612] overlayfs: missing 'lowerdir' [ 221.234837][ T6605] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.526: iget: bad i_size value: -67835469387268086 [ 221.393047][ T6605] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.526: couldn't read orphan inode 15 (err -117) [ 221.489614][ T6605] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.533024][ T6610] kvm [6609]: vcpu0, guest rIP: 0x19d disabled perfctr wrmsr: 0xc2 data 0x8000 [ 221.663350][ T6605] ext2 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.238610][ T6644] fuse: Unknown parameter 'grou00000000000000000000' [ 224.747922][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 225.133925][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.502186][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.512738][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 225.522349][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.532175][ T23] usb 3-1: config 0 descriptor?? [ 225.541534][ T6642] loop8: detected capacity change from 0 to 40427 [ 226.323012][ T6682] loop3: detected capacity change from 0 to 16 [ 226.493300][ T23] appletouch 3-1:0.0: Failed to read mode from device. [ 226.537620][ T6682] erofs: (device loop3): mounted with root inode @ nid 36. [ 226.557902][ T6682] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 226.621608][ T23] appletouch: probe of 3-1:0.0 failed with error -5 [ 226.841972][ T23] usb 3-1: USB disconnect, device number 4 [ 227.377973][ T6696] overlayfs: missing 'lowerdir' [ 227.568652][ T4243] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 227.853010][ T4243] usb 8-1: Using ep0 maxpacket: 32 [ 227.975502][ T4243] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 228.000742][ T4243] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 228.048619][ T4243] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 228.158119][ T6690] loop9: detected capacity change from 0 to 8192 [ 228.218476][ T4243] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.228327][ T4243] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 228.238342][ T4243] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.251977][ T4243] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 228.261254][ T4243] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.293090][ T13] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 228.366222][ T4243] usb 8-1: config 0 descriptor?? [ 228.426406][ T6690] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.572914][ T13] usb 9-1: Using ep0 maxpacket: 8 [ 228.614923][ T26] audit: type=1800 audit(1733176106.714:12): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.541" name="bus" dev="loop9" ino=1048607 res=0 errno=0 [ 228.647138][ T4243] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 229.110935][ T4243] usb 8-1: USB disconnect, device number 3 [ 229.146223][ T4243] usblp0: removed [ 229.333589][ T13] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 229.341874][ T13] usb 9-1: config 179 has no interface number 0 [ 229.348360][ T13] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 229.361668][ T13] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 229.382832][ T13] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.412872][ T13] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 229.445295][ T13] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 229.512385][ T13] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 229.537561][ T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.603397][ T6705] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 229.698328][ T6736] loop2: detected capacity change from 0 to 512 [ 229.799736][ T6736] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 229.870362][ T6736] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.550: iget: bad i_size value: -67835469387268086 [ 230.250035][ T6736] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.550: couldn't read orphan inode 15 (err -117) [ 230.346997][ T23] usb 9-1: USB disconnect, device number 6 [ 230.647734][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 230.656563][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 230.743405][ T6736] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.773084][ T6736] ext2 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.107242][ T6765] overlayfs: missing 'lowerdir' [ 232.719376][ T6746] loop7: detected capacity change from 0 to 40427 [ 232.908932][ T6746] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 232.944273][ T6746] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 233.011658][ T6746] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 233.228307][ T6746] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 233.247408][ T6746] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 234.003119][ T1111] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 234.482842][ T1111] usb 9-1: Using ep0 maxpacket: 32 [ 234.603081][ T1111] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 234.636818][ T1111] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.679823][ T1111] usb 9-1: config 0 descriptor?? [ 234.725463][ T1111] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 235.113145][ T6819] process 'syz.3.563' launched '/dev/fd/8' with NULL argv: empty string added [ 235.905434][ T6847] overlayfs: missing 'lowerdir' [ 236.672935][ T1111] gspca_nw80x: reg_w err -71 [ 236.677644][ T1111] nw80x: probe of 9-1:0.0 failed with error -71 [ 236.811196][ T1111] usb 9-1: USB disconnect, device number 7 [ 236.949655][ T6838] loop7: detected capacity change from 0 to 8192 [ 237.062901][ T1108] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 237.063852][ T6838] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.182611][ T26] audit: type=1800 audit(1733176115.274:13): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.567" name="bus" dev="loop7" ino=1048609 res=0 errno=0 [ 237.534070][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.562472][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.617907][ T6868] blk_update_request: I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.715973][ T6868] F2FS-fs (loop17): Unable to read 1th superblock [ 237.772728][ T6868] blk_update_request: I/O error, dev loop17, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.773100][ T1108] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.795524][ T6868] F2FS-fs (loop17): Unable to read 2th superblock [ 237.866432][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.950967][ T1108] usb 3-1: Product: syz [ 237.990591][ T1108] usb 3-1: Manufacturer: syz [ 238.076313][ T1108] usb 3-1: SerialNumber: syz [ 238.339615][ T6855] loop9: detected capacity change from 0 to 40427 [ 238.441640][ T6855] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 238.453163][ T1108] usb 3-1: 0:2 : does not exist [ 238.483052][ T6855] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 238.517942][ T1108] usb 3-1: USB disconnect, device number 5 [ 238.550894][ T6855] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 238.562916][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.672618][ T6855] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 238.679995][ T6855] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 238.926668][ T23] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 238.962923][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.975396][ T4162] udevd[4162]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.020160][ T23] usb 4-1: config 0 descriptor?? [ 239.150716][ T6900] attempt to access beyond end of device [ 239.150716][ T6900] loop9: rw=2049, want=53376, limit=40427 [ 239.233238][ T26] audit: type=1800 audit(1733176117.214:14): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.571" name="bus" dev="loop9" ino=14 res=0 errno=0 [ 239.618995][ T6908] loop7: detected capacity change from 0 to 512 [ 239.657667][ T5589] attempt to access beyond end of device [ 239.657667][ T5589] loop9: rw=2049, want=45112, limit=40427 [ 239.706669][ T6908] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 239.776523][ T6908] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.576: iget: bad i_size value: -67835469387268086 [ 239.843359][ T6908] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.576: couldn't read orphan inode 15 (err -117) [ 239.955895][ T6908] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.983174][ T6908] ext2 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.017077][ T1111] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 241.340540][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.9.589'. [ 241.381349][ T6968] netlink: 56 bytes leftover after parsing attributes in process `syz.9.589'. [ 241.433091][ T1111] usb 9-1: unable to get BOS descriptor or descriptor too short [ 241.493215][ T1111] usb 9-1: not running at top speed; connect to a high speed hub [ 241.583049][ T1111] usb 9-1: config 4 has an invalid interface number: 86 but max is 0 [ 241.600048][ T1111] usb 9-1: config 4 has no interface number 0 [ 241.612864][ T1111] usb 9-1: config 4 interface 86 has no altsetting 0 [ 241.783170][ T1111] usb 9-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=99.ad [ 241.792271][ T1111] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.810953][ T1111] usb 9-1: Product: syz [ 241.815896][ T1111] usb 9-1: Manufacturer: syz [ 241.820847][ T1111] usb 9-1: SerialNumber: syz [ 242.156391][ T1111] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 242.173439][ T1111] pctv452e: pctv452e_power_ctrl: 1 [ 242.173439][ T1111] [ 242.203025][ T23] pegasus 4-1:0.0: setup Pegasus II specific registers [ 242.210243][ T1111] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 242.210243][ T1111] [ 242.246764][ T1111] dvb-usb: bulk message failed: -22 (5/0) [ 242.287059][ T1111] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 242.412340][ T1111] dvb-usb: PCTV HDTV USB error while loading driver (-19) [ 242.455092][ T1111] usb 9-1: USB disconnect, device number 8 [ 242.992647][ T7041] kvm: emulating exchange as write [ 243.153064][ T4211] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 243.373025][ T23] pegasus 4-1:0.0: can't locate MII phy, using default [ 243.402995][ T4211] usb 3-1: Using ep0 maxpacket: 16 [ 243.449806][ T23] pegasus 4-1:0.0: eth17, ELECOM USB Ethernet LD-USB20, 96:fc:59:85:6d:c2 [ 243.517317][ T23] usb 4-1: USB disconnect, device number 3 [ 243.523771][ T4211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 243.713228][ T4211] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.722930][ T4211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.730957][ T4211] usb 3-1: Product: syz [ 243.782896][ T4211] usb 3-1: Manufacturer: syz [ 243.795872][ T4211] usb 3-1: SerialNumber: syz [ 243.814668][ T4211] usb 3-1: config 0 descriptor?? [ 243.885203][ T4211] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.914612][ T4211] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 244.013349][ T4855] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 244.423206][ T4855] usb 10-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 244.446636][ T4855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.497183][ T4855] usb 10-1: config 0 descriptor?? [ 244.623051][ T4211] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 244.719565][ T4698] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 244.859166][ T2362] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 244.983214][ T4698] usb 8-1: Using ep0 maxpacket: 16 [ 244.991487][ T4176] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 245.001453][ T4176] CPU: 1 PID: 4176 Comm: kworker/u5:4 Not tainted 5.15.173-syzkaller #0 [ 245.009897][ T4176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 245.020137][ T4176] Workqueue: hci1 hci_rx_work [ 245.024889][ T4176] Call Trace: [ 245.028188][ T4176] [ 245.031130][ T4176] dump_stack_lvl+0x1e3/0x2d0 [ 245.036626][ T4176] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 245.042300][ T4176] ? panic+0x860/0x860 [ 245.046405][ T4176] ? sysfs_create_dir_ns+0x282/0x390 [ 245.051808][ T4176] sysfs_create_dir_ns+0x2c6/0x390 [ 245.056965][ T4176] ? sysfs_warn_dup+0xa0/0xa0 [ 245.061670][ T4176] ? do_raw_spin_unlock+0x137/0x8b0 [ 245.066905][ T4176] kobject_add_internal+0x6e0/0xe00 [ 245.072153][ T4176] kobject_add+0x14e/0x210 [ 245.076610][ T4176] ? device_add+0x3c2/0xfd0 [ 245.081159][ T4176] ? kobject_init+0x1d0/0x1d0 [ 245.085962][ T4176] ? __raw_spin_lock_init+0x41/0x100 [ 245.091282][ T4176] ? get_device_parent+0x128/0x400 [ 245.096437][ T4176] device_add+0x476/0xfd0 [ 245.100809][ T4176] hci_conn_add_sysfs+0xe4/0x1f0 [ 245.105783][ T4176] le_conn_complete_evt+0xc15/0x1500 [ 245.111113][ T4176] ? cs_le_create_conn+0x5f0/0x5f0 [ 245.116278][ T4176] hci_le_meta_evt+0xd86/0x3f50 [ 245.121160][ T4176] ? __lock_acquire+0x1ff0/0x1ff0 [ 245.126219][ T4176] ? __mutex_lock_common+0x444/0x25a0 [ 245.131626][ T4176] ? hci_remote_host_features_evt+0x280/0x280 [ 245.137718][ T4176] ? __mutex_unlock_slowpath+0x218/0x750 [ 245.143372][ T4176] ? hci_event_packet+0x3b4/0x1550 [ 245.148493][ T4176] ? mutex_unlock+0x10/0x10 [ 245.153008][ T4176] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 245.159004][ T4176] ? print_irqtrace_events+0x210/0x210 [ 245.164467][ T4176] hci_event_packet+0xc41/0x1550 [ 245.169415][ T4176] ? rcu_lock_release+0x20/0x20 [ 245.174289][ T4176] ? hci_send_to_monitor+0x99/0x4d0 [ 245.179490][ T4176] hci_rx_work+0x232/0x990 [ 245.183917][ T4176] process_one_work+0x8a1/0x10c0 [ 245.188868][ T4176] ? worker_detach_from_pool+0x260/0x260 [ 245.194506][ T4176] ? _raw_spin_lock_irqsave+0x120/0x120 [ 245.200053][ T4176] ? kthread_data+0x4e/0xc0 [ 245.204551][ T4176] ? wq_worker_running+0x97/0x170 [ 245.209573][ T4176] worker_thread+0xaca/0x1280 [ 245.214250][ T4176] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 245.220171][ T4176] kthread+0x3f6/0x4f0 [ 245.224234][ T4176] ? rcu_lock_release+0x20/0x20 [ 245.229082][ T4176] ? kthread_blkcg+0xd0/0xd0 [ 245.233671][ T4176] ret_from_fork+0x1f/0x30 [ 245.238098][ T4176] [ 245.250259][ T2362] usb 9-1: Using ep0 maxpacket: 8 [ 245.258532][ T4176] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 245.271893][ T4176] Bluetooth: hci1: failed to register connection device [ 245.303520][ T4698] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.320868][ T4698] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.343444][ T4855] pegasus: probe of 10-1:0.0 failed with error -71 [ 245.367819][ T4855] usb 10-1: USB disconnect, device number 5 [ 245.423417][ T2362] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.442938][ T2362] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 245.452357][ T2362] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.482131][ T2362] usb 9-1: config 0 descriptor?? [ 245.559838][ T2362] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 245.566603][ T4698] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.586170][ T4698] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.615477][ T4698] usb 8-1: Product: syz [ 245.630037][ T4698] usb 8-1: Manufacturer: syz [ 245.642865][ T4698] usb 8-1: SerialNumber: syz [ 245.703069][ T4211] em28xx 3-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 245.712417][ T4211] em28xx 3-1:0.0: failed to read eeprom (err=-5) [ 245.739061][ T4211] em28xx 3-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 245.879427][ T7143] binder: 7142:7143 ioctl c018620c 20000200 returned -1 [ 245.992904][ T4211] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 246.011033][ T4211] em28xx 3-1:0.0: dvb set to bulk mode. [ 246.049369][ T4211] usb 3-1: USB disconnect, device number 6 [ 246.080571][ T7152] device vlan2 entered promiscuous mode [ 246.083576][ T4211] em28xx 3-1:0.0: Disconnecting em28xx [ 246.111438][ T7152] device dummy0 entered promiscuous mode [ 246.116214][ T1111] em28xx 3-1:0.0: Binding DVB extension [ 246.126660][ T7152] device dummy0 left promiscuous mode [ 246.149815][ T1111] em28xx 3-1:0.0: Registering input extension [ 246.157373][ T4211] em28xx 3-1:0.0: Closing input extension [ 246.163343][ T4698] usb 8-1: 0:2 : does not exist [ 246.181182][ T4211] em28xx 3-1:0.0: Freeing device [ 246.449362][ T7169] fuse: Bad value for 'fd' [ 246.464126][ T7169] udc-core: couldn't find an available UDC or it's busy [ 246.471093][ T7169] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 246.626078][ T4698] usb 8-1: USB disconnect, device number 4 [ 246.823143][ T2362] gspca_vc032x: reg_r err -32 [ 246.828306][ T2362] vc032x: probe of 9-1:0.0 failed with error -32 [ 246.995023][ T4698] usb 9-1: USB disconnect, device number 9 [ 247.332912][ T1111] Bluetooth: hci1: command 0x2016 tx timeout [ 247.343157][ T4855] Bluetooth: hci5: command 0x0406 tx timeout [ 247.676263][ T7217] ------------[ cut here ]------------ [ 247.702401][ T7217] WARNING: CPU: 1 PID: 7217 at arch/x86/kvm/x86.c:10346 kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 247.721679][ T7223] device geneve0 entered promiscuous mode [ 247.724838][ T7217] Modules linked in: [ 247.732159][ T7217] CPU: 1 PID: 7217 Comm: syz.7.644 Not tainted 5.15.173-syzkaller #0 [ 247.753236][ T7223] device macsec1 entered promiscuous mode [ 247.759939][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 247.782041][ T7217] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 247.789411][ T7223] device geneve0 left promiscuous mode [ 247.796729][ T7217] Code: df e8 81 a7 ba 00 e9 e5 fa ff ff 89 d9 80 e1 07 38 c1 0f 8c 26 fb ff ff 48 89 df e8 67 a7 ba 00 e9 19 fb ff ff e8 4d cf 70 00 <0f> 0b e9 e0 fb ff ff 89 d9 80 e1 07 38 c1 0f 8c 63 fb ff ff 48 89 [ 247.843945][ T7217] RSP: 0018:ffffc900031afc60 EFLAGS: 00010283 [ 247.861810][ T7217] RAX: ffffffff810fa453 RBX: 0000000000000000 RCX: 0000000000080000 [ 247.873084][ T7217] RDX: ffffc90003d63000 RSI: 0000000000000407 RDI: 0000000000000408 [ 247.890044][ T7217] RBP: dffffc0000000000 R08: ffffffff8116c242 R09: fffffbfff1c14b16 [ 247.899347][ T7217] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027ce8000 [ 247.918411][ T7217] R13: ffff88805c754000 R14: ffff88805c7540f0 R15: ffff888066c4a000 [ 247.937624][ T7217] FS: 00007ff1175c76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 248.031797][ T7217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.102404][ T7217] CR2: 0000560fa60a3950 CR3: 000000004f1f9000 CR4: 00000000003526f0 [ 248.160547][ T7217] Call Trace: [ 248.176625][ T7217] [ 248.188996][ T7217] ? __warn+0x15b/0x300 [ 248.202394][ T7217] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 248.233007][ T7217] ? report_bug+0x1b7/0x2e0 [ 248.251582][ T7217] ? handle_bug+0x3d/0x70 [ 248.270132][ T7217] ? exc_invalid_op+0x16/0x40 [ 248.287653][ T7217] ? asm_exc_invalid_op+0x16/0x20 [ 248.307457][ T7217] ? kvm_lapic_hv_timer_in_use+0x62/0xc0 [ 248.325548][ T7217] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 248.341645][ T7217] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 248.390403][ T7217] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 248.402531][ T7217] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 248.410620][ T7217] ? __fget_files+0x413/0x480 [ 248.421225][ T7217] ? bpf_lsm_file_ioctl+0x5/0x10 [ 248.427571][ T7217] ? security_file_ioctl+0x7d/0xa0 [ 248.432872][ T7217] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 248.438708][ T7217] __se_sys_ioctl+0xf1/0x160 [ 248.450246][ T7217] do_syscall_64+0x3b/0xb0 [ 248.464131][ T7217] ? clear_bhb_loop+0x15/0x70 [ 248.468855][ T7217] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.485314][ T7217] RIP: 0033:0x7ff119750f19 [ 248.489762][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.517079][ T7217] RSP: 002b:00007ff1175c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.532420][ T7217] RAX: ffffffffffffffda RBX: 00007ff119916fa0 RCX: 00007ff119750f19 [ 248.545425][ T7217] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 248.557177][ T7217] RBP: 00007ff1197c4986 R08: 0000000000000000 R09: 0000000000000000 [ 248.569767][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.581434][ T7217] R13: 0000000000000000 R14: 00007ff119916fa0 R15: 00007ffcc9f83c38 [ 248.596539][ T7217] [ 248.599607][ T7217] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.606892][ T7217] CPU: 0 PID: 7217 Comm: syz.7.644 Not tainted 5.15.173-syzkaller #0 [ 248.614975][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.625040][ T7217] Call Trace: [ 248.628326][ T7217] [ 248.631270][ T7217] dump_stack_lvl+0x1e3/0x2d0 [ 248.635966][ T7217] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 248.641616][ T7217] ? panic+0x860/0x860 [ 248.645707][ T7217] ? kvm_arch_vcpu_ioctl_run+0x1d10/0x1f80 [ 248.651541][ T7217] ? kvm_arch_vcpu_ioctl_run+0x1d10/0x1f80 [ 248.657424][ T7217] panic+0x318/0x860 [ 248.661352][ T7217] ? __warn+0x16a/0x300 [ 248.665525][ T7217] ? fb_is_primary_device+0xd0/0xd0 [ 248.670765][ T7217] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 248.676588][ T7217] __warn+0x2b2/0x300 [ 248.680589][ T7217] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 248.686406][ T7217] report_bug+0x1b7/0x2e0 [ 248.690765][ T7217] handle_bug+0x3d/0x70 [ 248.694959][ T7217] exc_invalid_op+0x16/0x40 [ 248.699464][ T7217] asm_exc_invalid_op+0x16/0x20 [ 248.704313][ T7217] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 248.710728][ T7217] Code: df e8 81 a7 ba 00 e9 e5 fa ff ff 89 d9 80 e1 07 38 c1 0f 8c 26 fb ff ff 48 89 df e8 67 a7 ba 00 e9 19 fb ff ff e8 4d cf 70 00 <0f> 0b e9 e0 fb ff ff 89 d9 80 e1 07 38 c1 0f 8c 63 fb ff ff 48 89 [ 248.730414][ T7217] RSP: 0018:ffffc900031afc60 EFLAGS: 00010283 [ 248.736477][ T7217] RAX: ffffffff810fa453 RBX: 0000000000000000 RCX: 0000000000080000 [ 248.744439][ T7217] RDX: ffffc90003d63000 RSI: 0000000000000407 RDI: 0000000000000408 [ 248.752405][ T7217] RBP: dffffc0000000000 R08: ffffffff8116c242 R09: fffffbfff1c14b16 [ 248.760370][ T7217] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027ce8000 [ 248.768335][ T7217] R13: ffff88805c754000 R14: ffff88805c7540f0 R15: ffff888066c4a000 [ 248.776308][ T7217] ? kvm_lapic_hv_timer_in_use+0x62/0xc0 [ 248.781943][ T7217] ? kvm_arch_vcpu_ioctl_run+0x1d63/0x1f80 [ 248.787784][ T7217] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 248.792484][ T7217] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 248.798138][ T7217] ? __fget_files+0x413/0x480 [ 248.802831][ T7217] ? bpf_lsm_file_ioctl+0x5/0x10 [ 248.807774][ T7217] ? security_file_ioctl+0x7d/0xa0 [ 248.812897][ T7217] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 248.818539][ T7217] __se_sys_ioctl+0xf1/0x160 [ 248.823138][ T7217] do_syscall_64+0x3b/0xb0 [ 248.827555][ T7217] ? clear_bhb_loop+0x15/0x70 [ 248.832231][ T7217] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.838142][ T7217] RIP: 0033:0x7ff119750f19 [ 248.842556][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.862185][ T7217] RSP: 002b:00007ff1175c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.870616][ T7217] RAX: ffffffffffffffda RBX: 00007ff119916fa0 RCX: 00007ff119750f19 [ 248.878594][ T7217] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 248.886583][ T7217] RBP: 00007ff1197c4986 R08: 0000000000000000 R09: 0000000000000000 [ 248.894557][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.902544][ T7217] R13: 0000000000000000 R14: 00007ff119916fa0 R15: 00007ffcc9f83c38 [ 248.910525][ T7217] [ 248.913845][ T7217] Kernel Offset: disabled [ 248.918398][ T7217] Rebooting in 86400 seconds..