last executing test programs: 13m42.449535205s ago: executing program 32 (id=992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 11m55.118106617s ago: executing program 33 (id=1192): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x40, 0x7, 0x6837, 0x8000, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x8001, 0x0, 0x1, 0x2f, 0x0, @empty, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000c3b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m50.14725959s ago: executing program 34 (id=1200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000540), 0x7, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0x9, {0x101, 0x80000001, 0x0, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x20, 0x12, 0xa01, 0x70bd28, 0x0, {0x19}, [@generic="4ca2b2274d87665152"]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 11m31.082377428s ago: executing program 35 (id=1222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d14, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0ba1fd572a2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) 11m26.461513314s ago: executing program 36 (id=1228): syz_mount_image$ntfs3(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8c0, &(0x7f0000028800)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0xa2, 0x0, 0x400004, 0x2, 0x1e4440, 0x0, 0x2401}) 7m34.991528031s ago: executing program 37 (id=1654): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='ufshcd_auto_bkops_state\x00', r0}, 0x18) syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) listen(r3, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) 7m31.312961498s ago: executing program 38 (id=1663): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000600)={0x20, 0x14, 0x1, '|'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m3.6703485s ago: executing program 7 (id=1841): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000740)=0x80, &(0x7f0000000780)=0x4) 6m2.539054962s ago: executing program 9 (id=1845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x94) 6m2.288419152s ago: executing program 9 (id=1846): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8100}, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000380)=0x200000000) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$vhost_msg_v2(r5, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xffffffd9, 0x0, 0x0, 0x2}}, 0x48) 6m1.155367054s ago: executing program 9 (id=1847): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 6m1.098084898s ago: executing program 7 (id=1848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040), 0x4) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) 6m0.182434973s ago: executing program 7 (id=1849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140000000020800024000000016054a6700000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r6, 0x7277, 0x0, 0x28, 0x0, 0x0) listen(r5, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) 6m0.148728545s ago: executing program 9 (id=1850): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00'}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 5m58.918161885s ago: executing program 9 (id=1851): socket$kcm(0x2, 0x3, 0x84) sched_setscheduler(0x0, 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0xc0000042) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000899000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000740)={0xfffffffc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$TCSETSF(r3, 0x5432, 0x0) socket$inet6(0xa, 0x2, 0x3a) 5m57.268136408s ago: executing program 9 (id=1856): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000740)=0x80, &(0x7f0000000780)=0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c040) 5m55.153693829s ago: executing program 39 (id=1856): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000740)=0x80, &(0x7f0000000780)=0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c040) 5m55.14500371s ago: executing program 7 (id=1859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00'}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 5m51.493316386s ago: executing program 8 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140000000020800024000000016054a6700000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r6, 0x7277, 0x0, 0x28, 0x0, 0x0) listen(r5, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) 5m50.622427706s ago: executing program 7 (id=1869): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001000)="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"/466, 0x1d2}, {&(0x7f00000007c0)="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", 0x263}], 0x2}, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 5m48.72221899s ago: executing program 8 (id=1870): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0x3}}, 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) 5m47.35901485s ago: executing program 8 (id=1873): socket$kcm(0x2, 0x3, 0x84) sched_setscheduler(0x0, 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0xc0000042) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000899000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000740)={0xfffffffc, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$TCSETSF(r3, 0x5432, 0x0) socket$inet6(0xa, 0x2, 0x3a) 5m46.37325641s ago: executing program 8 (id=1876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00'}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 5m44.037624949s ago: executing program 8 (id=1879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r3, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xfdef) sendto$inet6(r3, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) syz_clone3(0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x6, &(0x7f00000005c0)=""/58) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5m42.987170924s ago: executing program 7 (id=1880): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) 5m42.509614253s ago: executing program 40 (id=1880): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) 5m42.456684257s ago: executing program 8 (id=1882): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$qrtr(r4, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newae={0x64, 0x1e, 0x101, 0x70bd2b, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d5, 0xa, 0x2b}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xb413, 0x34ff}, [@lifetime_val={0x24, 0x9, {0x786, 0x1, 0xfffffffffffffe00, 0x9}}]}, 0x64}}, 0x20008000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000b148b0a28bd7001fbdbdfa5080001000000"], 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x3ff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x4000000) 5m41.743924945s ago: executing program 41 (id=1882): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$qrtr(r4, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newae={0x64, 0x1e, 0x101, 0x70bd2b, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d5, 0xa, 0x2b}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xb413, 0x34ff}, [@lifetime_val={0x24, 0x9, {0x786, 0x1, 0xfffffffffffffe00, 0x9}}]}, 0x64}}, 0x20008000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000b148b0a28bd7001fbdbdfa5080001000000"], 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x3ff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x4000000) 4m15.187297969s ago: executing program 0 (id=2057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m14.671278991s ago: executing program 0 (id=2061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) 4m14.155196972s ago: executing program 0 (id=2065): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, 0x0) read$msr(r0, &(0x7f00000008c0)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xa}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5ed}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x400000, 0x0, 0xf3d7, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x191}, {0x0, 0xa24, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x6}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x401}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 4m11.243167588s ago: executing program 2 (id=2071): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) chdir(0x0) chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 4m8.187293656s ago: executing program 0 (id=2074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00'}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 4m6.849350234s ago: executing program 0 (id=2076): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8100}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000380)=0x200000000) r5 = dup2(r3, r3) write$vhost_msg_v2(r5, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xffffffd9, 0x0, 0x0, 0x2}}, 0x48) 4m6.747168982s ago: executing program 2 (id=2077): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) write$UHID_INPUT(r0, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x1006) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 4m6.207237936s ago: executing program 2 (id=2079): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x490}, {r1, 0x1074}], 0x2, 0x0, 0x0, 0x0) 4m6.087312435s ago: executing program 0 (id=2081): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4m4.587603487s ago: executing program 42 (id=2081): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4m3.823422399s ago: executing program 2 (id=2084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00'}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 4m2.687215371s ago: executing program 2 (id=2085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0xfa1c, @dev={0xfe, 0x80, '\x00', 0x26}, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000002c0)="f4a7758f2d7ae8fbdd961572ee90f4ec1d6b4eff531de9a14b490eacdf78e39e323f82ab0600e2e53c7982835fa1824cfe53b834228bb6a4c50e52b0a736fc94ae1a9b7f4318df7efcf32b7a2c65e9d7e1214ded248fc7a75d6b24d80ada7de871f5afdf0b12a005e90d0ed7a5f52aa4d768dd49b410f168af74a167b73ff0744ee30a2510cfa4fa166b47ae8d709d1097f033b8d1302929f213b944945e49041d6dc475bcdb2698d7fa468d683092a24a1ca39bb14191f7460151d8898177f87c4eb99aef71c11a3a11b263dc0b620289f9", 0xd2}, {&(0x7f00000003c0)="088fc2b7ee2edbdccf3ae5d5d22d5753bcd22256558bd9ab7745e5dd2e4710748a87f6aee3b0c2c63a378bd436339b9171c9342e0a9954ac40ae593bce0c9d5e486b98a09acd66844de961cbf224fec8158f7f802683bb00b5686fa103639888b555c6889b22f9b588c9526dcf0198527943b14471e66ffeff2f1e189e5c3dc40bdd1c038703102a07bc4f95da0379dff739cc2c5f311f44fe4b6616816b0219b7e2a3a7332c46", 0xa7}, {&(0x7f0000000540)="f1aa3ff1f8fe91c637ddf5bc5c5fcbd4ce556de6876d65831c6c682eac", 0x1d}], 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x270}}], 0x1, 0x20040) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) 4m2.115333407s ago: executing program 2 (id=2087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a", 0x23}], 0x1}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4m1.438315082s ago: executing program 43 (id=2087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a", 0x23}], 0x1}, 0x0) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2m37.369781285s ago: executing program 1 (id=2236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00'}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x109041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 2m35.870095546s ago: executing program 1 (id=2241): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x20, 0x5, 0x2, ',I'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000200)={0x40, 0x3, 0x2, '3D'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m31.74309454s ago: executing program 1 (id=2247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8100}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000380)=0x200000000) r6 = dup2(r4, r4) write$vhost_msg_v2(r6, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xffffffd9, 0x0, 0x0, 0x2}}, 0x48) 2m30.628018681s ago: executing program 1 (id=2249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00'}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 2m29.38970267s ago: executing program 1 (id=2255): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x20, 0x5, 0x2, ',I'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000200)={0x40, 0x3, 0x2, '3D'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m28.03322667s ago: executing program 1 (id=2257): r0 = socket(0x2a, 0x2, 0x9) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffb, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m26.792580211s ago: executing program 44 (id=2257): r0 = socket(0x2a, 0x2, 0x9) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffb, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.357069724s ago: executing program 4 (id=2506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket(0x2, 0x3, 0xff) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x40, @local}, 0x10) r3 = epoll_create(0xeb5) r4 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, 0x0) quotactl_fd$Q_GETFMT(r4, 0x2, r5, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x24044010) 15.68937s ago: executing program 6 (id=2510): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlink(&(0x7f0000000280)='./file1\x00') 14.906204703s ago: executing program 6 (id=2512): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) mknod$loop(0x0, 0x800, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14.387264415s ago: executing program 6 (id=2514): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2000082, &(0x7f0000000480)={[{@utf8no}, {@shortname_mixed}, {@numtail}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@utf8}, {@fat=@check_strict}, {@fat=@usefree}, {@utf8}, {@utf8}]}, 0x9, 0x353, &(0x7f0000006280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus/file0\x00', 0x34f843, 0x108) 14.183274552s ago: executing program 4 (id=2515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0xfec3) keyctl$read(0xb, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000000c0)={0x3, r4, 0x2000000, 0x401, 0xa, 0x1ff, 0x1}) 12.063212623s ago: executing program 6 (id=2518): socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mknod$loop(0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x65b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000700)) 11.653914356s ago: executing program 5 (id=2519): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0xa40040, &(0x7f0000000c00), 0x1, 0xb9f, &(0x7f0000001e80)="$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") socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x41, "75f4a7660fc1a1ddd71eb61b938d5ad3099feaaffc41e5fbcc298ef9dcdb5002dbefc2d09dfdfb767d55eafad13c5f0144fa56bce5d74a4abc7d3cd63dbde649c3"}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 10.861826081s ago: executing program 5 (id=2521): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1477, 0x1021, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000b40)=ANY=[@ANYRES16=r3, @ANYBLOB="c529e99f73bdf9746ab525d0d3d45b6d084d0555df67a9fc92f172cf122ab138cf685f40d595a4284aaf7d0d0b432ab0566f02f0ec1cff45dc182067ddf24aed2e7b978316ab043660191b93bac2976405e3"], 0x8) 9.611561831s ago: executing program 4 (id=2522): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) symlink(0x0, 0x0) mkdir(0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a00)) 8.500147902s ago: executing program 3 (id=2523): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/84) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.648647891s ago: executing program 5 (id=2524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 6.980288365s ago: executing program 3 (id=2525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 6.511505843s ago: executing program 6 (id=2526): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 6.510842373s ago: executing program 5 (id=2527): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.563199059s ago: executing program 3 (id=2528): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlink(&(0x7f0000000280)='./file1\x00') 5.319275809s ago: executing program 6 (id=2529): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(0x0, 0x0) setitimer(0x2, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x400201, 0x0) 4.731051447s ago: executing program 4 (id=2530): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8100}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000380)=0x200000000) r6 = dup2(r4, r4) write$vhost_msg_v2(r6, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xffffffd9, 0x0, 0x0, 0x2}}, 0x48) 4.114667437s ago: executing program 3 (id=2531): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000001c0)='./bus\x00', 0x810, &(0x7f0000000000)=ANY=[], 0xfd, 0x1067a, &(0x7f0000010ac0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f0000000440)=ANY=[], 0x37, 0x0) 3.745302306s ago: executing program 4 (id=2532): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1477, 0x1021, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000b40)=ANY=[@ANYRES16=r3, @ANYBLOB="c529e99f73bdf9746ab525d0d3d45b6d084d0555df67a9fc92f172cf122ab138cf685f40d595a4284aaf7d0d0b432ab0566f02f0ec1cff45dc182067ddf24aed2e7b978316ab043660191b93bac2976405e3"], 0x8) 2.062719872s ago: executing program 5 (id=2533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001a40)=""/102392, 0xfec3) keyctl$read(0xb, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000000c0)={0x3, r4, 0x2000000, 0x401, 0xa, 0x1ff, 0x1}) 746.775319ms ago: executing program 5 (id=2534): socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mknod$loop(0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x65b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000700)) 571.289573ms ago: executing program 3 (id=2535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000002c0)=[{r1, 0xa20b}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) 512.432258ms ago: executing program 4 (id=2536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa0000b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1, 0x551c, &(0x7f00000005c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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") mount$overlay(0x0, 0x0, 0x0, 0x1204801, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x10) syz_open_dev$vim2m(&(0x7f0000000580), 0xc, 0x2) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a0080", @ANYRES64=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}, 0x0) 0s ago: executing program 3 (id=2537): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): T28] audit: type=1800 audit(1754478882.514:73): pid=14538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1772" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1078.544964][T14562] loop9: detected capacity change from 0 to 1024 [ 1078.715421][T11593] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.643213][T14580] loop9: detected capacity change from 0 to 4096 [ 1080.944835][T14588] loop8: detected capacity change from 0 to 128 [ 1080.959110][T14580] ntfs3: loop9: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 1080.959110][T14580] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 1080.959110][T14580] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 1081.016221][T14580] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1081.048852][T14580] ntfs3: loop9: Failed to load $BadClus (-95). [ 1081.536137][T14588] FAT-fs (loop8): Directory bread(block 414) failed [ 1081.567280][T14588] FAT-fs (loop8): Directory bread(block 415) failed [ 1081.605886][T14588] FAT-fs (loop8): Directory bread(block 416) failed [ 1081.616687][T14588] FAT-fs (loop8): Directory bread(block 417) failed [ 1081.626203][T14588] FAT-fs (loop8): Directory bread(block 418) failed [ 1081.643011][T14588] FAT-fs (loop8): Directory bread(block 419) failed [ 1081.676190][T14588] FAT-fs (loop8): Directory bread(block 420) failed [ 1081.687239][T14588] FAT-fs (loop8): Directory bread(block 421) failed [ 1081.759576][T14588] FAT-fs (loop8): Directory bread(block 414) failed [ 1081.789535][T14588] FAT-fs (loop8): Directory bread(block 415) failed [ 1081.802522][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1786'. [ 1081.831036][T14588] syz.8.1783: attempt to access beyond end of device [ 1081.831036][T14588] loop8: rw=3, sector=478, nr_sectors = 2 limit=128 [ 1081.844714][T14588] syz.8.1783: attempt to access beyond end of device [ 1081.844714][T14588] loop8: rw=2051, sector=480, nr_sectors = 6 limit=128 [ 1082.511845][T14600] loop7: detected capacity change from 0 to 1024 [ 1082.634403][T14600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.652174][T14609] loop9: detected capacity change from 0 to 1024 [ 1083.792284][ T28] audit: type=1800 audit(1754478889.234:74): pid=14600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1786" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1084.675529][T11546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.781356][T14633] loop9: detected capacity change from 0 to 4096 [ 1084.920279][T14633] ntfs3: loop9: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 1084.920279][T14633] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 1084.920279][T14633] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 1084.971032][T14639] loop8: detected capacity change from 0 to 128 [ 1084.987819][T14633] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1085.009611][T14633] ntfs3: loop9: Failed to load $BadClus (-95). [ 1085.047582][T14639] FAT-fs (loop8): Directory bread(block 414) failed [ 1085.587789][T14647] loop7: detected capacity change from 0 to 512 [ 1085.936359][T14647] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1086.192180][T14639] FAT-fs (loop8): Directory bread(block 415) failed [ 1086.224933][T14639] FAT-fs (loop8): Directory bread(block 416) failed [ 1086.261618][T14639] FAT-fs (loop8): Directory bread(block 417) failed [ 1086.310994][T14639] FAT-fs (loop8): Directory bread(block 418) failed [ 1086.326025][T14639] FAT-fs (loop8): Directory bread(block 419) failed [ 1086.363500][T14639] FAT-fs (loop8): Directory bread(block 420) failed [ 1086.394136][T14639] FAT-fs (loop8): Directory bread(block 421) failed [ 1086.457703][T14639] FAT-fs (loop8): Directory bread(block 414) failed [ 1086.536239][T14639] FAT-fs (loop8): Directory bread(block 415) failed [ 1086.714877][T14639] syz.8.1796: attempt to access beyond end of device [ 1086.714877][T14639] loop8: rw=3, sector=478, nr_sectors = 2 limit=128 [ 1087.144147][T14639] syz.8.1796: attempt to access beyond end of device [ 1087.144147][T14639] loop8: rw=2051, sector=480, nr_sectors = 6 limit=128 [ 1087.503924][T14658] loop7: detected capacity change from 0 to 4096 [ 1087.643093][T14658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.004797][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1802'. [ 1088.105427][T14676] loop9: detected capacity change from 0 to 1024 [ 1088.186087][T14676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.225620][T11546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.354306][ T28] audit: type=1800 audit(1754478893.794:75): pid=14672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1802" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1089.055241][T13865] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.225766][T14126] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1089.448023][T14126] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.503234][T14126] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.536002][T14126] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1089.574228][T14126] usb 9-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1090.473912][T14126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.567771][T14126] usb 9-1: config 0 descriptor?? [ 1090.653795][T14710] loop7: detected capacity change from 0 to 128 [ 1090.705569][T14710] FAT-fs (loop7): Directory bread(block 414) failed [ 1090.729954][T14710] FAT-fs (loop7): Directory bread(block 415) failed [ 1090.740086][T14710] FAT-fs (loop7): Directory bread(block 416) failed [ 1090.758889][T14710] FAT-fs (loop7): Directory bread(block 417) failed [ 1090.767783][T14712] loop9: detected capacity change from 0 to 4096 [ 1090.782008][T14710] FAT-fs (loop7): Directory bread(block 418) failed [ 1090.796810][T14710] FAT-fs (loop7): Directory bread(block 419) failed [ 1090.833067][T14710] FAT-fs (loop7): Directory bread(block 420) failed [ 1090.840349][T14710] FAT-fs (loop7): Directory bread(block 421) failed [ 1090.849400][ T7900] I/O error, dev loop9, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1090.880326][T14710] FAT-fs (loop7): Directory bread(block 414) failed [ 1090.908741][T14710] FAT-fs (loop7): Directory bread(block 415) failed [ 1091.010668][T14126] usbhid 9-1:0.0: can't add hid device: -71 [ 1091.118166][T14710] syz.7.1809: attempt to access beyond end of device [ 1091.118166][T14710] loop7: rw=3, sector=478, nr_sectors = 2 limit=128 [ 1091.131450][T14710] syz.7.1809: attempt to access beyond end of device [ 1091.131450][T14710] loop7: rw=2051, sector=480, nr_sectors = 6 limit=128 [ 1091.149342][T14126] usbhid: probe of 9-1:0.0 failed with error -71 [ 1091.192902][T14126] usb 9-1: USB disconnect, device number 10 [ 1092.111055][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 1094.208695][T14735] loop9: detected capacity change from 0 to 512 [ 1094.220214][T14735] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1094.353075][T14735] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 1094.585998][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1818'. [ 1094.649317][T14738] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1818'. [ 1094.921929][T14742] loop8: detected capacity change from 0 to 8192 [ 1094.934986][T14744] loop9: detected capacity change from 0 to 4096 [ 1094.968895][T14742] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1094.983364][T14742] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 1095.141276][T14742] REISERFS (device loop8): using ordered data mode [ 1095.181923][T14742] reiserfs: using flush barriers [ 1095.220200][T14742] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1095.237892][T14742] REISERFS (device loop8): checking transaction log (loop8) [ 1095.286264][T13868] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1095.296389][T14742] REISERFS (device loop8): Using r5 hash to sort names [ 1095.315912][ T5876] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1095.429581][T14742] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 1095.517168][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.686775][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.987419][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1096.230739][ T5876] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1096.296001][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.347089][ T5876] usb 1-1: config 0 descriptor?? [ 1096.904471][ T5876] usbhid 1-1:0.0: can't add hid device: -71 [ 1096.936050][T13868] usb 8-1: Using ep0 maxpacket: 8 [ 1097.014727][ T5876] usbhid: probe of 1-1:0.0 failed with error -71 [ 1097.210728][ T5876] usb 1-1: USB disconnect, device number 12 [ 1097.335997][T13868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1097.353874][T13868] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1097.373323][T13868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.396833][T13868] usb 8-1: config 0 descriptor?? [ 1098.149998][T13868] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1098.169909][T13868] usb 8-1: USB disconnect, device number 12 [ 1099.734159][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1830'. [ 1099.828350][T14791] loop7: detected capacity change from 0 to 1024 [ 1099.956243][T14791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1102.095733][ T28] audit: type=1800 audit(1754478907.524:76): pid=14785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1830" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1103.846526][T11546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.485132][T14840] netdevsim netdevsim0: Direct firmware load for @ failed with error -2 [ 1106.590922][T14840] netdevsim netdevsim0: Falling back to sysfs fallback for: @ [ 1107.597287][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1849'. [ 1108.216111][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 1108.572206][T14880] loop7: detected capacity change from 0 to 1024 [ 1108.590155][T14858] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1108.613374][T14858] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1108.625151][T14858] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1108.758726][T14880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.911554][T14858] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1108.941565][T14858] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1109.723145][T14858] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1109.730491][T14858] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1109.850620][T14858] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1109.865878][ T28] audit: type=1800 audit(1754478915.304:77): pid=14880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1849" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1110.695997][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 1111.131073][T12098] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.192854][T11546] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.806001][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 1112.079148][T12098] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.242919][T12098] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.473522][T12098] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.677617][ T5857] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1113.765892][ T5857] usb 9-1: Using ep0 maxpacket: 8 [ 1113.773506][ T5857] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1113.788756][ T5857] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1113.798213][ T5857] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.815994][ T5857] usb 9-1: Product: syz [ 1113.820256][ T5857] usb 9-1: Manufacturer: syz [ 1113.835872][ T5857] usb 9-1: SerialNumber: syz [ 1113.856368][ T5857] usb 9-1: config 0 descriptor?? [ 1113.886549][T11088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1113.898211][T11088] Bluetooth: hci1: command 0x0c1a tx timeout [ 1113.906623][T11088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1113.920480][T11088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1113.931411][ T5857] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1113.959717][T11088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1113.976185][T11088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1113.985188][T11088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1113.993950][ T5857] usb 9-1: setting power ON [ 1114.001014][ T5857] dvb-usb: bulk message failed: -22 (2/0) [ 1114.032848][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1114.079503][ T5857] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1114.083700][T14914] dvb-usb: bulk message failed: -22 (3/0) [ 1114.135297][ T5857] usb 9-1: media controller created [ 1114.431746][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1114.642611][ T5857] usb 9-1: selecting invalid altsetting 6 [ 1114.649468][ T5857] usb 9-1: digital interface selection failed (-22) [ 1114.656590][ T5857] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1114.667061][ T5857] usb 9-1: setting power OFF [ 1114.672541][ T5857] dvb-usb: bulk message failed: -22 (2/0) [ 1114.701410][ T5857] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1114.725699][ T5857] (NULL device *): no alternate interface [ 1114.882044][ T5857] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1114.911672][ T5857] usb 9-1: USB disconnect, device number 11 [ 1115.965914][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 1116.046386][ T5798] Bluetooth: hci3: command tx timeout [ 1116.149295][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1868'. [ 1116.224149][T14965] loop8: detected capacity change from 0 to 1024 [ 1116.487844][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.495892][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.538498][T14965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.583324][T14931] chnl_net:caif_netlink_parms(): no params data found [ 1116.632573][ T28] audit: type=1800 audit(1754478922.074:78): pid=14965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1868" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1117.537602][T14931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.564383][T14931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.603358][T14931] bridge_slave_0: entered allmulticast mode [ 1117.648568][T14931] bridge_slave_0: entered promiscuous mode [ 1117.741327][T14931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.755276][T14931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.772796][T14931] bridge_slave_1: entered allmulticast mode [ 1117.784689][T14931] bridge_slave_1: entered promiscuous mode [ 1117.831758][T12098] hsr_slave_0: left promiscuous mode [ 1117.839954][T12098] hsr_slave_1: left promiscuous mode [ 1117.849538][T12098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1117.857591][T12098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1117.865547][T12098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1117.878466][T12098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.897637][T12098] bridge_slave_1: left allmulticast mode [ 1117.909607][T12098] bridge_slave_1: left promiscuous mode [ 1117.924333][T12098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.953058][T12098] bridge_slave_0: left allmulticast mode [ 1117.965764][T12098] bridge_slave_0: left promiscuous mode [ 1117.977960][T12098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.040689][T12098] veth1_macvtap: left promiscuous mode [ 1118.057490][T12098] veth0_macvtap: left promiscuous mode [ 1118.063441][T12098] veth1_vlan: left promiscuous mode [ 1118.074259][T12098] veth0_vlan: left promiscuous mode [ 1118.126600][ T5798] Bluetooth: hci3: command tx timeout [ 1118.228822][T14960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1118.562505][T14960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1118.574710][T14960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1118.582763][T14960] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1118.604128][T14960] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1118.804960][T11593] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.086246][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 1120.619778][T11088] Bluetooth: hci1: command 0x0c1a tx timeout [ 1120.619796][ T5798] Bluetooth: hci3: command 0x0419 tx timeout [ 1121.988903][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 1122.164210][T12098] team0 (unregistering): Port device team_slave_1 removed [ 1122.498156][T12098] team0 (unregistering): Port device team_slave_0 removed [ 1122.685771][ T5798] Bluetooth: hci3: command 0x0419 tx timeout [ 1122.866397][T12098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.063149][T12098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.271607][T12098] bond0 (unregistering): Released all slaves [ 1124.532942][T14931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.559430][T14931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.766520][ T5798] Bluetooth: hci3: command 0x0419 tx timeout [ 1124.858436][T14931] team0: Port device team_slave_0 added [ 1124.867706][T14931] team0: Port device team_slave_1 added [ 1124.993278][T14931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.023702][T14931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.057658][T14931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.195298][T14931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.249413][T14931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.325114][T14931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.704933][T14931] hsr_slave_0: entered promiscuous mode [ 1125.734378][T14931] hsr_slave_1: entered promiscuous mode [ 1125.760063][T14931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1125.771504][T14931] Cannot create hsr debugfs directory [ 1126.108636][T12098] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.140952][T15035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1126.160374][T15035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1126.206955][T11088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1126.217524][T11088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1126.227857][T11088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1126.276130][T11088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1126.306131][T11088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1126.321544][T11088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1126.403414][T12098] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.697121][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 1127.009590][T12098] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.029428][T11088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1127.055372][T11088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1127.079518][T11088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1127.090711][T11088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1127.109411][T11088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1127.116919][T11088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1128.058371][T12098] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.206189][ T5798] Bluetooth: hci3: command 0x0419 tx timeout [ 1128.447784][ T5798] Bluetooth: hci0: command tx timeout [ 1129.154471][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 1129.176340][ T5798] Bluetooth: hci2: command tx timeout [ 1130.344359][T14931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1130.430445][T14931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1130.466412][T14931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1130.519088][T15106] smc: net device bond0 applied user defined pnetid SYZ2 [ 1130.526448][ T5798] Bluetooth: hci0: command tx timeout [ 1130.604562][T14931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1130.713311][T15063] chnl_net:caif_netlink_parms(): no params data found [ 1130.728740][T15051] chnl_net:caif_netlink_parms(): no params data found [ 1130.916274][T11560] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1131.128775][T11560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.142648][T11560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.144619][T15051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.160957][T15051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.163489][T11560] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.168407][T15051] bridge_slave_0: entered allmulticast mode [ 1131.170289][T15051] bridge_slave_0: entered promiscuous mode [ 1131.201553][T11560] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1131.211301][T11560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.241089][T11560] usb 1-1: config 0 descriptor?? [ 1131.252821][ T5798] Bluetooth: hci2: command tx timeout [ 1131.265457][T15063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.281513][T15063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.298496][T15063] bridge_slave_0: entered allmulticast mode [ 1131.308341][T15063] bridge_slave_0: entered promiscuous mode [ 1131.320006][T15063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.327381][T15063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.335152][T15063] bridge_slave_1: entered allmulticast mode [ 1131.343811][T15063] bridge_slave_1: entered promiscuous mode [ 1131.353163][T15051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.364397][T15051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.373464][T15051] bridge_slave_1: entered allmulticast mode [ 1131.388827][T15051] bridge_slave_1: entered promiscuous mode [ 1131.602466][T15051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.632724][T15063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.684052][T11560] usbhid 1-1:0.0: can't add hid device: -71 [ 1131.700673][T11560] usbhid: probe of 1-1:0.0 failed with error -71 [ 1131.710821][T15051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.725345][T11560] usb 1-1: USB disconnect, device number 13 [ 1131.800958][T15063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.852092][T15051] team0: Port device team_slave_0 added [ 1131.861886][T15051] team0: Port device team_slave_1 added [ 1131.908052][T12098] hsr_slave_0: left promiscuous mode [ 1131.921929][T12098] hsr_slave_1: left promiscuous mode [ 1131.928850][T12098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.945261][T12098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.962965][T12098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.973536][T12098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.984007][T12098] bridge_slave_1: left allmulticast mode [ 1131.991529][T12098] bridge_slave_1: left promiscuous mode [ 1131.997923][T12098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.008061][T12098] bridge_slave_0: left allmulticast mode [ 1132.013858][T12098] bridge_slave_0: left promiscuous mode [ 1132.020813][T12098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.060753][T12098] veth1_macvtap: left promiscuous mode [ 1132.066663][T12098] veth0_macvtap: left promiscuous mode [ 1132.072378][T12098] veth1_vlan: left promiscuous mode [ 1132.078524][T12098] veth0_vlan: left promiscuous mode [ 1132.617560][ T5798] Bluetooth: hci0: command tx timeout [ 1133.303417][T12098] team0 (unregistering): Port device team_slave_1 removed [ 1133.335878][ T5798] Bluetooth: hci2: command tx timeout [ 1133.393499][T12098] team0 (unregistering): Port device team_slave_0 removed [ 1133.458499][T12098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.578443][T12098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.638357][T12098] bond0 (unregistering): Released all slaves [ 1134.691268][ T5798] Bluetooth: hci0: command tx timeout [ 1134.949810][T15051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.958248][T15051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.987703][T15051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.003306][T15051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.011658][T15051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.039603][T15051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.089879][T15063] team0: Port device team_slave_0 added [ 1135.111346][T15063] team0: Port device team_slave_1 added [ 1135.316943][T15161] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1135.340628][T15063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.355950][T15063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.366973][T15161] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1135.388832][T15161] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1135.394976][T15161] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1135.404296][T15161] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1135.423460][ T5798] Bluetooth: hci2: command tx timeout [ 1135.432897][T15161] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1135.445826][T15161] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1135.457199][T15063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.498380][T15161] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1135.572330][T15063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.592688][T15063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.711217][T15063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.762499][T14931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.921102][T15051] hsr_slave_0: entered promiscuous mode [ 1135.941990][T15051] hsr_slave_1: entered promiscuous mode [ 1135.951019][T15051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1135.959620][T15051] Cannot create hsr debugfs directory [ 1135.984492][T12098] IPVS: stop unused estimator thread 0... [ 1136.171088][T15063] hsr_slave_0: entered promiscuous mode [ 1136.192057][T15063] hsr_slave_1: entered promiscuous mode [ 1136.206687][T15063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1136.214373][T15063] Cannot create hsr debugfs directory [ 1136.350055][T14931] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.432583][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.439845][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.512181][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.519439][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.085948][ T5798] Bluetooth: hci1: command 0x0c1a tx timeout [ 1137.406296][T11088] Bluetooth: hci3: command 0x0419 tx timeout [ 1137.412611][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 1137.441179][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 1137.486548][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 1139.478624][T14931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.487830][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 1139.615414][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 1139.865317][T14931] veth0_vlan: entered promiscuous mode [ 1139.948547][T14931] veth1_vlan: entered promiscuous mode [ 1140.149224][T15063] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1140.161438][T15063] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1140.177048][T15063] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1140.458238][T15228] syz.0.1895 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1140.686933][T15063] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1140.845161][T15228] netlink: 'syz.0.1895': attribute type 21 has an invalid length. [ 1140.855959][T15228] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 1140.871831][T15228] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1895'. [ 1141.291150][T14931] veth0_macvtap: entered promiscuous mode [ 1141.326619][T14931] veth1_macvtap: entered promiscuous mode [ 1141.574215][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 1141.696241][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 1142.302911][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.349354][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.361514][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.372968][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.411032][T14931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.449562][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.461833][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.484880][T14931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.553710][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.581457][T14931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.273292][T14931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.340048][T14931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.385089][T14931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.425312][T14931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.594798][T15063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.624621][T15051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1143.645200][T15051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1143.674171][T15051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1143.722904][T15051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1143.813056][T15063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.880921][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.888192][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.914300][T14080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.921535][T14080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1143.976894][T11721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.984955][T11721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.153785][T10361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.183845][T10361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.265808][T14126] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1144.347312][T15051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.392506][T15051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.454785][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.462215][T11721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.480596][T14126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.519827][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.527303][T11721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.535493][T14126] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1144.565710][T14126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.629612][T14126] usb 1-1: config 0 descriptor?? [ 1144.713006][T15063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.821089][T15051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1145.159748][T14126] lua 0003:1E7D:2C2E.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 1145.418225][ T5790] usb 1-1: USB disconnect, device number 14 [ 1145.512114][T15296] fido_id[15296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1145.640500][T15051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.865939][T15051] veth0_vlan: entered promiscuous mode [ 1145.921402][T15051] veth1_vlan: entered promiscuous mode [ 1145.940067][T15063] veth0_vlan: entered promiscuous mode [ 1146.090426][T15063] veth1_vlan: entered promiscuous mode [ 1146.137478][T15051] veth0_macvtap: entered promiscuous mode [ 1146.319517][T15051] veth1_macvtap: entered promiscuous mode [ 1146.466194][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.478087][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.489079][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.502439][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.537757][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.591032][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.637122][T15051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.858722][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.885724][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.920621][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.948125][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.962295][T15051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.980296][T15051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.005130][T15051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.066397][T15051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.101940][T15051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.124991][T15051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.157543][T15051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.257396][T15063] veth0_macvtap: entered promiscuous mode [ 1147.359336][T15063] veth1_macvtap: entered promiscuous mode [ 1147.494798][T15063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.560200][T15063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.589597][T15063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.601217][T15063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.623092][T15063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.634827][T15063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.645387][T15063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.678281][T15063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.777243][T15063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.902539][T15063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.924112][T15063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.968858][T15063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1148.025786][T15063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.072741][T15063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1148.120552][T15063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.159766][T15063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1148.176060][T15063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.200464][T15063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.480656][T15063] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.532324][T15063] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.556738][T15063] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.565553][T15063] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.584562][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.617992][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.788324][T11721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.825313][T11721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.022028][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.073085][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.177052][ T3433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.184954][ T3433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.292484][T15343] loop3: detected capacity change from 0 to 256 [ 1149.361534][T15343] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1150.909292][T15367] loop4: detected capacity change from 0 to 512 [ 1150.932470][T15367] EXT4-fs: Ignoring removed bh option [ 1150.959013][T15367] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1151.166427][ T5876] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1151.408033][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.436242][T15367] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 1151.449560][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.475945][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1151.499689][ T5876] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1151.524373][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.094558][ T5876] usb 1-1: config 0 descriptor?? [ 1152.312099][T15367] loop4: detected capacity change from 0 to 16 [ 1152.346646][T15367] erofs: (device loop4): mounted with root inode @ nid 36. [ 1152.623048][ T5876] usbhid 1-1:0.0: can't add hid device: -71 [ 1152.651178][ T5876] usbhid: probe of 1-1:0.0 failed with error -71 [ 1152.714639][ T5876] usb 1-1: USB disconnect, device number 15 [ 1156.656059][ T5828] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1159.689305][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 1159.748724][T15457] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1933'. [ 1160.056663][ T1194] IPVS: starting estimator thread 0... [ 1160.066254][ T5828] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1160.176046][T15465] IPVS: using max 22 ests per chain, 52800 per kthread [ 1160.298689][ T5828] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1160.315783][ T5828] usb 3-1: config 0 has no interface number 0 [ 1160.338767][ T5828] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1160.355848][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.386041][ T5828] usb 3-1: Product: syz [ 1160.395257][ T5828] usb 3-1: Manufacturer: syz [ 1160.418649][ T5828] usb 3-1: SerialNumber: syz [ 1160.428990][ T5828] usb 3-1: config 0 descriptor?? [ 1161.674516][ T5828] usb 3-1: Firmware version (0.0) predates our first public release. [ 1161.693343][ T5828] usb 3-1: Please update to version 0.2 or newer [ 1161.875475][ T5828] usb 3-1: Firmware: build 3D [ 1162.129682][ T5828] usb 3-1: USB disconnect, device number 23 [ 1163.120714][T15491] loop4: detected capacity change from 0 to 4096 [ 1163.202131][T15491] ntfs3: loop4: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 1163.202131][T15491] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 1163.202131][T15491] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 1163.270188][T15491] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1163.282952][T15491] ntfs3: loop4: Failed to load $BadClus (-95). [ 1163.814471][T15505] loop4: detected capacity change from 0 to 256 [ 1164.338025][ T5798] Bluetooth: hci3: unexpected event for opcode 0x080d [ 1165.214649][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'. [ 1165.229011][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'. [ 1167.457826][T15546] loop4: detected capacity change from 0 to 4096 [ 1167.622008][T15546] ntfs3: loop4: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 1167.622008][T15546] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 1167.622008][T15546] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 1167.711469][T15546] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1167.726058][T15551] binder: 15550:15551 ioctl c0306201 200000000680 returned -14 [ 1167.746339][T15546] ntfs3: loop4: Failed to load $BadClus (-95). [ 1168.369777][ T5798] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1168.378933][ T5798] Bluetooth: hci3: Injecting HCI hardware error event [ 1168.394790][T11088] Bluetooth: hci3: hardware error 0x00 [ 1170.113534][ T5798] Bluetooth: hci1: unexpected event for opcode 0x080d [ 1170.535898][T11088] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1170.700182][T15566] loop3: detected capacity change from 0 to 1024 [ 1172.151028][T15590] loop2: detected capacity change from 0 to 256 [ 1173.924736][T15597] loop3: detected capacity change from 0 to 4096 [ 1173.980284][T15597] ntfs3: loop3: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 1173.980284][T15597] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 1173.980284][T15597] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 1174.082994][T15597] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1174.099950][T15597] ntfs3: loop3: Failed to load $BadClus (-95). [ 1174.127181][T11088] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1174.137164][T11088] Bluetooth: hci1: Injecting HCI hardware error event [ 1174.149308][ T5798] Bluetooth: hci1: hardware error 0x00 [ 1175.654463][T15615] input: syz1 as /devices/virtual/input/input8 [ 1176.205811][ T5798] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1178.134915][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.141820][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.797027][T15708] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1994'. [ 1182.955791][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1183.125800][ T9] usb 1-1: device descriptor read/64, error -71 [ 1183.426097][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1184.081286][ T9] usb 1-1: device descriptor read/64, error -71 [ 1184.208460][ T9] usb usb1-port1: attempt power cycle [ 1184.646588][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1184.909079][ T9] usb 1-1: device descriptor read/8, error -71 [ 1185.315916][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1185.346447][ T9] usb 1-1: device descriptor read/8, error -71 [ 1185.473331][ T9] usb usb1-port1: unable to enumerate USB device [ 1187.320232][T15758] loop4: detected capacity change from 0 to 128 [ 1188.348254][ T3433] kworker/u4:7: attempt to access beyond end of device [ 1188.348254][ T3433] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1191.257511][T14126] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1191.548690][T14126] usb 3-1: device descriptor read/64, error -71 [ 1193.219226][T14126] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1193.426719][T14126] usb 3-1: device descriptor read/64, error -71 [ 1194.246351][T14126] usb usb3-port1: attempt power cycle [ 1194.522819][T15826] loop2: detected capacity change from 0 to 256 [ 1194.620528][T15821] loop4: detected capacity change from 0 to 4096 [ 1195.743402][T15826] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1195.809809][T15821] ntfs3: loop4: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 1195.809809][T15821] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 1195.809809][T15821] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 1195.922661][T15821] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1196.048049][T15821] ntfs3: loop4: Failed to load $BadClus (-95). [ 1199.475205][T15860] loop3: detected capacity change from 0 to 64 [ 1200.398487][T14126] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1200.595792][T14126] usb 1-1: device descriptor read/64, error -71 [ 1200.875738][T14126] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1201.057591][T14126] usb 1-1: device descriptor read/64, error -71 [ 1201.176867][T14126] usb usb1-port1: attempt power cycle [ 1201.611843][T14126] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1201.674527][T14126] usb 1-1: device descriptor read/8, error -71 [ 1201.975761][T14126] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1202.046429][T14126] usb 1-1: device descriptor read/8, error -71 [ 1202.173476][T15897] loop3: detected capacity change from 0 to 256 [ 1202.191381][T14126] usb usb1-port1: unable to enumerate USB device [ 1202.271029][T15897] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1202.331267][T15895] loop2: detected capacity change from 0 to 4096 [ 1202.440629][T15895] ntfs3: loop2: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 1202.440629][T15895] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 1202.440629][T15895] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 1202.504072][T15895] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1202.537843][T15895] ntfs3: loop2: Failed to load $BadClus (-95). [ 1202.946317][T15906] loop2: detected capacity change from 0 to 256 [ 1206.512317][T15939] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2040'. [ 1207.192638][T15940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1207.413928][T15925] loop2: detected capacity change from 0 to 256 [ 1207.442862][T15947] loop3: detected capacity change from 0 to 256 [ 1207.455185][T15947] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1209.826987][T15962] loop3: detected capacity change from 0 to 2048 [ 1209.889776][T15962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1210.911766][T14931] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.148417][T15976] loop4: detected capacity change from 0 to 256 [ 1211.190591][T15972] loop2: detected capacity change from 0 to 256 [ 1211.277110][T15972] FAT-fs (loop2): Directory bread(block 64) failed [ 1211.283779][T15972] FAT-fs (loop2): Directory bread(block 65) failed [ 1211.327720][T15972] FAT-fs (loop2): Directory bread(block 66) failed [ 1211.334334][T15972] FAT-fs (loop2): Directory bread(block 67) failed [ 1211.464668][T15972] FAT-fs (loop2): Directory bread(block 68) failed [ 1212.111375][T15972] FAT-fs (loop2): Directory bread(block 69) failed [ 1212.129490][T15972] FAT-fs (loop2): Directory bread(block 70) failed [ 1212.139173][T15972] FAT-fs (loop2): Directory bread(block 71) failed [ 1212.158420][T15984] syz.3.2051 (15984): drop_caches: 2 [ 1212.160782][T15972] FAT-fs (loop2): Directory bread(block 72) failed [ 1212.202100][T15972] FAT-fs (loop2): Directory bread(block 73) failed [ 1212.731522][T15993] loop4: detected capacity change from 0 to 64 [ 1217.311549][T16036] loop2: detected capacity change from 0 to 512 [ 1217.392590][T16036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1217.465001][T16036] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1219.707236][T16055] loop3: detected capacity change from 0 to 256 [ 1219.716564][ T5828] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1220.065716][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 1220.585087][ T5828] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1220.668536][ T5828] usb 5-1: config 0 has no interface number 0 [ 1220.674741][ T5828] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1220.699296][T15051] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.709475][ T5828] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1220.725173][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.734488][ T5828] usb 5-1: Product: syz [ 1220.756031][ T5828] usb 5-1: Manufacturer: syz [ 1220.776250][ T5828] usb 5-1: SerialNumber: syz [ 1220.797736][ T5828] usb 5-1: config 0 descriptor?? [ 1220.827791][ T5828] smsc75xx v1.0.0 [ 1220.832705][ T5828] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1220.865846][ T5828] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 1221.071667][T16063] serio: Serial port ptm0 [ 1221.596330][ T5828] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1221.692658][ T1134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.947334][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 1222.098303][ T5828] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1222.274891][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1222.381038][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1222.453255][ T5828] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1222.522556][ T5828] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1222.551983][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.628794][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.638203][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.711496][ T1134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.790473][ T5828] usb 3-1: GET_CAPABILITIES returned 0 [ 1222.806622][ T5828] usbtmc 3-1:16.0: can't read capabilities [ 1222.924708][ T1134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.013347][ T5828] usb 3-1: USB disconnect, device number 27 [ 1223.276150][ T1134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.272762][T11088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1224.289477][T11088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1224.299566][T11088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1224.308180][T11088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1224.328171][T11088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1224.344598][T11088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1224.959534][T14126] usb 5-1: USB disconnect, device number 6 [ 1225.442518][T16099] chnl_net:caif_netlink_parms(): no params data found [ 1226.446245][T11088] Bluetooth: hci1: command tx timeout [ 1226.715929][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.732049][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.785223][T16099] bridge_slave_0: entered allmulticast mode [ 1226.817490][T16099] bridge_slave_0: entered promiscuous mode [ 1226.835558][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.891599][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.935948][T16099] bridge_slave_1: entered allmulticast mode [ 1226.948085][T16099] bridge_slave_1: entered promiscuous mode [ 1227.112766][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.176894][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.215194][ T1134] hsr_slave_0: left promiscuous mode [ 1227.230986][ T1134] hsr_slave_1: left promiscuous mode [ 1227.245577][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.258644][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.282664][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.290322][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.303095][ T1134] bridge_slave_1: left allmulticast mode [ 1227.315753][ T1134] bridge_slave_1: left promiscuous mode [ 1227.323287][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.345421][ T1134] bridge_slave_0: left allmulticast mode [ 1227.353431][ T1134] bridge_slave_0: left promiscuous mode [ 1227.359511][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.441072][ T1134] veth1_macvtap: left promiscuous mode [ 1227.451833][ T1134] veth0_macvtap: left promiscuous mode [ 1227.460669][ T1134] veth1_vlan: left promiscuous mode [ 1227.468928][ T1134] veth0_vlan: left promiscuous mode [ 1228.134703][T16119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1228.146876][T16119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1228.188978][T16119] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1228.209712][T16119] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1228.279511][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1228.291729][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1228.302732][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1228.311447][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1228.319496][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1228.326994][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1228.446366][ T5798] Bluetooth: hci2: command 0x0c1a tx timeout [ 1228.525881][ T5828] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1228.719743][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 1228.768063][ T5828] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1228.806083][ T5828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1228.845685][ T5828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1228.870706][ T5828] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1228.937363][ T5828] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1228.971110][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.346935][ T5828] usb 4-1: GET_CAPABILITIES returned 0 [ 1229.352890][ T5828] usbtmc 4-1:16.0: can't read capabilities [ 1230.040366][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 1230.181790][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 1230.221735][ T5798] Bluetooth: hci1: command 0x040f tx timeout [ 1230.268190][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.358614][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.396230][ T5828] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1230.469602][ T5798] Bluetooth: hci0: command tx timeout [ 1230.606629][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 1230.615457][ T5828] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1230.632090][ T5828] usb 5-1: config 0 has no interface number 0 [ 1230.639270][ T5828] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1230.650589][ T5828] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1230.667189][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.676877][ T5828] usb 5-1: Product: syz [ 1230.681814][ T5828] usb 5-1: Manufacturer: syz [ 1230.687138][ T5828] usb 5-1: SerialNumber: syz [ 1230.701761][ T5828] usb 5-1: config 0 descriptor?? [ 1230.711261][ T5828] smsc75xx v1.0.0 [ 1230.715277][ T5828] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1230.731272][ T5828] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 1230.883230][ T5903] usb 4-1: USB disconnect, device number 16 [ 1231.475163][ T5903] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1231.528229][T16178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.537790][T16178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.622925][ T1134] bond0 (unregistering): Released all slaves [ 1231.691918][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 1231.700080][ T5903] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1231.709545][ T5903] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1231.720061][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1231.731466][ T5903] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1231.742978][ T5903] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1231.756426][ T5903] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1231.765716][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.831196][T16177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.839067][T16177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.864745][ T5790] usb 5-1: USB disconnect, device number 7 [ 1231.983389][T16099] team0: Port device team_slave_0 added [ 1232.021773][ T5903] usb 4-1: GET_CAPABILITIES returned 0 [ 1232.030983][T16099] team0: Port device team_slave_1 added [ 1232.036777][ T5903] usbtmc 4-1:16.0: can't read capabilities [ 1232.160187][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.167411][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.197411][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.229979][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.242670][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.280689][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.292045][ T5798] Bluetooth: hci1: command 0x040f tx timeout [ 1232.333452][ T5790] usb 4-1: USB disconnect, device number 17 [ 1232.347660][T16176] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 1232.536063][ T5798] Bluetooth: hci0: command tx timeout [ 1232.774433][T16099] hsr_slave_0: entered promiscuous mode [ 1232.805710][T16099] hsr_slave_1: entered promiscuous mode [ 1233.613901][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2097'. [ 1233.716272][T16207] loop3: detected capacity change from 0 to 1024 [ 1234.018566][ T1134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.162276][T16221] loop4: detected capacity change from 0 to 256 [ 1234.271839][T16219] loop3: detected capacity change from 0 to 4096 [ 1234.341017][T16219] ntfs3: loop3: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 1234.341017][T16219] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 1234.341017][T16219] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 1234.378456][ T5798] Bluetooth: hci1: command 0x040f tx timeout [ 1234.397185][T16219] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1234.426509][T16219] ntfs3: loop3: Failed to load $BadClus (-95). [ 1234.478183][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2102'. [ 1234.597559][T16226] loop4: detected capacity change from 0 to 1024 [ 1234.676105][ T5798] Bluetooth: hci0: command tx timeout [ 1234.771216][T16226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.851378][T16231] loop3: detected capacity change from 0 to 256 [ 1235.365653][ T28] audit: type=1800 audit(1754479040.804:79): pid=16225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2102" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1235.669095][ T1134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.026681][T15063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.081801][ T1134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.361358][T16143] chnl_net:caif_netlink_parms(): no params data found [ 1236.446089][ T5798] Bluetooth: hci1: command 0x040f tx timeout [ 1236.506327][ T1134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.596348][ T28] audit: type=1326 audit(1754479042.034:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18718ebe9 code=0x7ffc0000 [ 1236.654397][ T28] audit: type=1326 audit(1754479042.044:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18718ebe9 code=0x7ffc0000 [ 1236.700863][ T5798] Bluetooth: hci0: command tx timeout [ 1237.230308][T16143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.243126][T16143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.272309][T16143] bridge_slave_0: entered allmulticast mode [ 1237.298907][T16143] bridge_slave_0: entered promiscuous mode [ 1237.433873][T16143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.450907][T16143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.461248][T16143] bridge_slave_1: entered allmulticast mode [ 1237.479240][T16143] bridge_slave_1: entered promiscuous mode [ 1237.622035][T16265] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1237.629136][T16265] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1237.677218][T16265] vhci_hcd vhci_hcd.0: Device attached [ 1237.686161][T16267] vhci_hcd: connection closed [ 1237.722498][T11721] vhci_hcd: stop threads [ 1237.738000][T16143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.744970][T11721] vhci_hcd: release socket [ 1237.757546][T11721] vhci_hcd: disconnect device [ 1237.830122][T16099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1237.851819][T16143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.864810][T16099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1238.080677][T16143] team0: Port device team_slave_0 added [ 1238.097872][T16099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1238.179744][T16099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1238.249153][T16143] team0: Port device team_slave_1 added [ 1238.527342][ T5798] Bluetooth: hci1: command 0x040f tx timeout [ 1238.543455][T16284] loop3: detected capacity change from 0 to 4096 [ 1238.563545][T16143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.644905][T16143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.947582][T16143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.009138][T16284] ntfs3: loop3: This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 1239.009138][T16284] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 1239.009138][T16284] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 1239.150236][T16143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.220840][T16143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.288457][T16284] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1239.295849][T16143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.306619][T16284] ntfs3: loop3: Failed to load $BadClus (-95). [ 1239.333446][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.340005][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.310278][T16143] hsr_slave_0: entered promiscuous mode [ 1241.348638][T16143] hsr_slave_1: entered promiscuous mode [ 1241.383210][T16143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1241.403460][T16143] Cannot create hsr debugfs directory [ 1241.427525][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 1244.114560][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.185080][ T1134] hsr_slave_0: left promiscuous mode [ 1244.232653][ T1134] hsr_slave_1: left promiscuous mode [ 1244.267165][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.285386][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.318050][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.362342][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.386645][ T1134] bridge_slave_1: left allmulticast mode [ 1244.392496][ T1134] bridge_slave_1: left promiscuous mode [ 1244.418734][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.457154][ T1134] bridge_slave_0: left allmulticast mode [ 1244.462870][ T1134] bridge_slave_0: left promiscuous mode [ 1244.475935][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.540799][ T1134] veth1_macvtap: left promiscuous mode [ 1244.553833][ T1134] veth0_macvtap: left promiscuous mode [ 1244.577491][ T1134] veth1_vlan: left promiscuous mode [ 1244.605341][ T1134] veth0_vlan: left promiscuous mode [ 1245.499500][T16356] loop3: detected capacity change from 0 to 256 [ 1245.522982][T16356] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1247.497900][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 1247.675945][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 1247.936880][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.116535][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.725411][T16371] mmap: syz.3.2125 (16371) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1249.892058][ T1134] bond0 (unregistering): Released all slaves [ 1251.725766][T16348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1251.731867][T16348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1251.758623][T16348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1251.776033][T16348] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1251.799881][T16348] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1251.940400][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.020104][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.027387][T11721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.079175][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.086460][T11721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.357297][T16385] (null): rxe_set_mtu: Set mtu to 1024 [ 1253.048561][T16143] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1253.097412][T16143] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1253.147280][T16143] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1253.177651][T16143] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1253.382511][T16385] infiniband syz!: set active [ 1253.396319][T16385] infiniband syz!: added team_slave_0 [ 1253.433455][T16099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.452083][T16385] syz!: rxe_create_cq: returned err = -12 [ 1253.472873][T16385] infiniband syz!: Couldn't create ib_mad CQ [ 1253.482967][T16385] infiniband syz!: Couldn't open port 1 [ 1253.601822][T16385] RDS/IB: syz!: added [ 1253.625039][T16385] smc: adding ib device syz! with port count 1 [ 1253.632776][T16385] smc: ib device syz! port 1 has pnetid [ 1253.727700][T16099] veth0_vlan: entered promiscuous mode [ 1253.805966][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 1253.813305][T14936] Bluetooth: hci1: command 0x040f tx timeout [ 1253.819784][T11088] Bluetooth: hci2: command 0x0c1a tx timeout [ 1253.845860][T16143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.864212][T16099] veth1_vlan: entered promiscuous mode [ 1254.053008][T16143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.109064][T14080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.116350][T14080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.182140][T16099] veth0_macvtap: entered promiscuous mode [ 1254.231124][T14080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.238407][T14080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.304386][T16099] veth1_macvtap: entered promiscuous mode [ 1254.439920][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.471930][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.482902][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.494159][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.519570][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.542108][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.555192][T16099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.619784][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.663672][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.694007][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.724096][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.741765][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.754727][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.788251][T16099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.789269][T16417] loop3: detected capacity change from 0 to 256 [ 1254.844299][T16099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.887340][T16099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.973711][T16099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.006341][T16099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.272560][T16424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1255.396350][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.414815][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.504626][T14080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.506041][ T5857] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1255.521460][T14080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.598569][T16143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.745782][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 1255.769348][ T5857] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1255.806569][ T5857] usb 4-1: config 0 has no interface number 0 [ 1255.841058][ T5857] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1255.875998][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.884086][ T5857] usb 4-1: Product: syz [ 1255.896317][T11088] Bluetooth: hci0: command 0x0c1a tx timeout [ 1255.956100][ T5857] usb 4-1: Manufacturer: syz [ 1255.960802][ T5857] usb 4-1: SerialNumber: syz [ 1256.178988][ T5857] usb 4-1: config 0 descriptor?? [ 1256.250219][ T5857] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1256.607041][ T5857] gspca_spca1528: reg_w err -71 [ 1256.647834][ T5857] spca1528: probe of 4-1:0.1 failed with error -71 [ 1256.675127][ T5857] usb 4-1: USB disconnect, device number 18 [ 1256.828036][T16451] ipvlan2: entered allmulticast mode [ 1256.833404][T16451] syz_tun: entered allmulticast mode [ 1257.070721][T16143] veth0_vlan: entered promiscuous mode [ 1257.102503][T16143] veth1_vlan: entered promiscuous mode [ 1257.195452][T16143] veth0_macvtap: entered promiscuous mode [ 1257.225351][T16143] veth1_macvtap: entered promiscuous mode [ 1257.309041][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.345714][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.371364][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.390511][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.416498][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.435956][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.457366][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.486377][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.513246][T16143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1257.596204][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.616438][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.652499][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.678597][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.689014][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.701988][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.726011][T16143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.750850][T16143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.764132][T16143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1257.814982][T16143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.837967][T16143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.879786][T16467] loop1: detected capacity change from 0 to 1024 [ 1257.885188][T16143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.925842][T16143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.976263][T11088] Bluetooth: hci0: command 0x0c1a tx timeout [ 1258.435081][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.483207][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.713654][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.890739][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1259.704730][T16464] loop4: detected capacity change from 0 to 32768 [ 1259.851477][T16484] loop3: detected capacity change from 0 to 256 [ 1259.938252][T16484] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1260.155806][T16464] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1260.409726][T16500] loop1: detected capacity change from 0 to 1024 [ 1260.440444][T16464] XFS (loop4): Ending clean mount [ 1261.418988][T16464] XFS (loop4): Quotacheck needed: Please wait. [ 1261.537364][ T5979] hfsplus: b-tree write err: -5, ino 4 [ 1261.750044][T16464] XFS (loop4): Quotacheck: Done. [ 1261.941625][T15063] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1261.975486][T16518] loop1: detected capacity change from 0 to 256 [ 1269.127070][T16583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1270.735105][T16606] sd 0:0:1:0: PR command failed: 1026 [ 1270.751311][T16606] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1270.765665][T16606] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1275.533057][ T5857] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1275.870776][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 1275.884753][ T5857] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1275.931050][T16642] ksmbd: Unknown IPC event: 6, ignore. [ 1277.526186][ T5857] usb 4-1: config 0 has no interface number 0 [ 1278.643891][ T5857] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1278.796650][ T5857] usb 4-1: string descriptor 0 read error: -71 [ 1278.803173][ T5857] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1278.848265][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.872628][ T5857] usb 4-1: config 0 descriptor?? [ 1278.880832][ T5857] usb 4-1: can't set config #0, error -71 [ 1278.904128][ T5857] usb 4-1: USB disconnect, device number 19 [ 1280.378958][T16664] loop3: detected capacity change from 0 to 512 [ 1281.987475][T16664] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 1281.995451][T16664] FAT-fs (loop3): Filesystem has been set read-only [ 1285.375731][ T5857] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1285.414986][T16697] loop5: detected capacity change from 0 to 64 [ 1285.653841][T16697] minix_free_block (loop5:1): bit already cleared [ 1285.926021][T16697] minix_free_block (loop5:4): bit already cleared [ 1285.968789][T16697] minix_free_block (loop5:3): bit already cleared [ 1285.977626][T16697] minix_free_block (loop5:2): bit already cleared [ 1285.984238][T16697] minix_free_block (loop5:1): bit already cleared [ 1286.445899][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 1286.461036][ T5857] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1286.502047][ T5857] usb 5-1: config 0 has no interface number 0 [ 1286.528462][ T5857] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1286.557346][ T5857] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1286.581873][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.594006][ T5857] usb 5-1: Product: syz [ 1286.598931][ T5857] usb 5-1: Manufacturer: syz [ 1286.603688][ T5857] usb 5-1: SerialNumber: syz [ 1286.603881][T16705] capability: warning: `syz.5.2187' uses 32-bit capabilities (legacy support in use) [ 1286.628107][ T5857] usb 5-1: config 0 descriptor?? [ 1286.640630][ T5857] smsc75xx v1.0.0 [ 1286.644347][ T5857] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1286.656972][ T5857] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 1287.420562][T16714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.431560][T16714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.934816][ T5903] usb 5-1: USB disconnect, device number 8 [ 1294.434809][T16783] loop5: detected capacity change from 0 to 256 [ 1294.443099][T16783] FAT-fs (loop5): Unrecognized mount option "shortname=" or missing value [ 1294.498724][T15195] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1296.772013][T16804] loop3: detected capacity change from 0 to 32768 [ 1296.779252][T16804] XFS: noikeep mount option is deprecated. [ 1296.785521][T16804] XFS: ikeep mount option is deprecated. [ 1297.066281][T16804] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1297.905687][ T27] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1297.994002][T16804] XFS (loop3): Ending clean mount [ 1298.095688][ T27] usb 2-1: device descriptor read/64, error -71 [ 1298.396382][ T27] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1298.448308][T16829] autofs4:pid:16829:autofs_fill_super: called with bogus options [ 1298.575693][ T27] usb 2-1: device descriptor read/64, error -71 [ 1298.738798][ T27] usb usb2-port1: attempt power cycle [ 1299.825749][ T27] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1299.886232][ T27] usb 2-1: device descriptor read/8, error -71 [ 1299.899822][T14931] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1300.156342][ T27] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1300.463340][ T27] usb 2-1: device descriptor read/8, error -71 [ 1300.587547][ T27] usb usb2-port1: unable to enumerate USB device [ 1300.793526][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.861795][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.429896][T16873] loop5: detected capacity change from 0 to 256 [ 1303.456958][T16873] FAT-fs (loop5): Unrecognized mount option "shortname=" or missing value [ 1304.431583][T15195] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1305.565697][ T27] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1305.725746][ T27] usb 4-1: device descriptor read/64, error -71 [ 1306.663326][ T27] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1306.856209][ T27] usb 4-1: device descriptor read/64, error -71 [ 1306.986160][ T27] usb usb4-port1: attempt power cycle [ 1308.265694][ T27] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1308.325735][ T27] usb 4-1: device descriptor read/8, error -71 [ 1310.931488][T16945] netlink: 'syz.3.2237': attribute type 12 has an invalid length. [ 1310.979111][T16945] netlink: 'syz.3.2237': attribute type 29 has an invalid length. [ 1311.012295][T16945] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2237'. [ 1312.976481][ T5876] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1313.466468][ T5876] usb 2-1: device descriptor read/64, error -71 [ 1313.815752][ T5876] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1314.848354][ T5876] usb 2-1: device descriptor read/64, error -71 [ 1314.987103][ T5876] usb usb2-port1: attempt power cycle [ 1317.155995][T17001] loop3: detected capacity change from 0 to 4096 [ 1317.293606][T17008] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1319.196095][ T28] audit: type=1800 audit(1754479124.634:82): pid=17001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2250" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1319.539518][T14080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.240700][T14080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.460099][T14080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.588092][T14080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.491535][T17055] loop4: detected capacity change from 0 to 256 [ 1323.509188][T17055] exfat: Deprecated parameter 'namecase' [ 1323.822024][T17055] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 1323.913195][T17054] exFAT-fs (loop4): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 1323.929713][T17054] exFAT-fs (loop4): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 1323.976080][ T5156] udevd[5156]: worker [15195] terminated by signal 33 (Unknown signal 33) [ 1323.998226][ T5156] udevd[5156]: worker [15195] failed while handling '/devices/virtual/block/loop4' [ 1324.088198][T14936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1324.101305][T14936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1324.110445][T14936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1324.120832][T14936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1324.129259][T14936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1324.137150][T14936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1326.205775][T11088] Bluetooth: hci1: command tx timeout [ 1327.815790][T17080] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1327.822272][T11088] Bluetooth: hci2: command 0x0c1a tx timeout [ 1327.868673][T17080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1327.906298][T17080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1327.912348][T17080] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1328.089457][T17080] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1329.075022][T17058] chnl_net:caif_netlink_parms(): no params data found [ 1329.954864][T11088] Bluetooth: hci0: command 0x0c1a tx timeout [ 1329.976183][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1330.292147][T14080] hsr_slave_0: left promiscuous mode [ 1330.683810][T14080] hsr_slave_1: left promiscuous mode [ 1331.171207][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.214616][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.248631][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.284927][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.335003][T14080] bridge_slave_1: left allmulticast mode [ 1331.364885][T14080] bridge_slave_1: left promiscuous mode [ 1331.384189][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.394610][T14080] bridge_slave_0: left allmulticast mode [ 1331.409368][T14080] bridge_slave_0: left promiscuous mode [ 1331.416465][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.547553][T14080] veth1_macvtap: left promiscuous mode [ 1331.553194][T14080] veth0_macvtap: left promiscuous mode [ 1331.635848][T14080] veth1_vlan: left promiscuous mode [ 1331.641279][T14080] veth0_vlan: left promiscuous mode [ 1332.058236][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1334.170916][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1336.516158][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1337.051056][T17173] loop4: detected capacity change from 0 to 256 [ 1337.091112][T17173] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1337.715957][T17177] loop3: detected capacity change from 0 to 40427 [ 1337.824441][T17177] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 1337.833115][T17177] F2FS-fs (loop3): Image doesn't support compression [ 1337.839977][T17177] F2FS-fs (loop3): Image doesn't support compression [ 1338.011597][T17177] F2FS-fs (loop3): invalid crc value [ 1338.033639][T17177] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1338.523310][T17183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2282'. [ 1338.722752][T14936] Bluetooth: hci1: command 0x040f tx timeout [ 1339.432922][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1339.544342][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1339.636149][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1339.746595][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.687701][T14080] bond0 (unregistering): Released all slaves [ 1340.810176][T17058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.818024][T17058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.825401][T17058] bridge_slave_0: entered allmulticast mode [ 1340.833797][T17058] bridge_slave_0: entered promiscuous mode [ 1340.856461][T17058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.871986][T17058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.885215][T17058] bridge_slave_1: entered allmulticast mode [ 1340.893922][T17058] bridge_slave_1: entered promiscuous mode [ 1340.972158][T17058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.023719][T17058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.118886][T17058] team0: Port device team_slave_0 added [ 1341.157651][T17058] team0: Port device team_slave_1 added [ 1341.227227][T17058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.249566][T17058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.295442][T17058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.317882][T17058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.325112][T17058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.353307][T17058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.439405][T17180] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1341.454480][T17058] hsr_slave_0: entered promiscuous mode [ 1341.462358][T17180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1341.473555][T17058] hsr_slave_1: entered promiscuous mode [ 1341.477256][T17180] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1343.007926][T14936] Bluetooth: hci2: command 0x0c1a tx timeout [ 1343.595657][T14936] Bluetooth: hci1: command 0x040f tx timeout [ 1343.601775][T14936] Bluetooth: hci0: command 0x0c1a tx timeout [ 1343.681431][T17213] loop4: detected capacity change from 0 to 512 [ 1344.056709][T14080] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.265328][T17213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1344.277378][T17213] System zones: 1-12 [ 1344.295221][T17213] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.2286: Directory hole found for htree index block 0 [ 1344.340059][T17213] EXT4-fs (loop4): Remounting filesystem read-only [ 1344.383010][T17213] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 1344.435694][T17213] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1344.475844][T17213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1344.648248][T14080] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.681834][T17213] EXT4-fs (loop4): can't enable nombcache during remount [ 1344.706099][T17220] loop5: detected capacity change from 0 to 4096 [ 1344.943066][T15063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.065470][T14080] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.440913][T17233] loop4: detected capacity change from 0 to 512 [ 1345.451728][T14080] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.487964][T17233] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1345.619608][T17233] EXT4-fs (loop4): 1 truncate cleaned up [ 1345.690326][T17233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.764096][T17233] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2290'. [ 1346.354690][T17238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1346.724757][T15063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.806569][ T5903] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1347.025853][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 1347.058449][ T5903] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1347.096761][ T5903] usb 6-1: config 0 has no interface number 0 [ 1347.166612][ T5903] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1347.196593][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.221868][ T5903] usb 6-1: Product: syz [ 1347.227412][T14080] tipc: Left network mode [ 1348.040528][ T5903] usb 6-1: Manufacturer: syz [ 1348.045231][ T5903] usb 6-1: SerialNumber: syz [ 1348.105968][ T5903] usb 6-1: config 0 descriptor?? [ 1348.180671][ T5903] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1348.346990][ T5903] gspca_spca1528: reg_w err -71 [ 1348.375735][ T5903] spca1528: probe of 6-1:0.1 failed with error -71 [ 1348.405905][ T5903] usb 6-1: USB disconnect, device number 10 [ 1348.656427][T17058] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1348.668115][T17058] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1348.679598][T17058] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1348.689774][T17058] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1349.988875][T17268] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1350.002384][T17058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.016099][T17268] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1350.022279][T17268] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1350.502844][T17287] loop4: detected capacity change from 0 to 1024 [ 1350.766083][T11088] Bluetooth: hci2: command 0x0c1a tx timeout [ 1350.807063][T17058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.894061][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.901352][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.146424][T14080] bond0: (slave wlan1): Releasing backup interface [ 1351.231813][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.239120][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.518769][ T58] hfsplus: b-tree write err: -5, ino 3 [ 1351.542999][T15063] hfsplus: node 4:3 still has 2 user(s)! [ 1352.047156][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1352.053352][T14936] Bluetooth: hci0: command 0x0c1a tx timeout [ 1352.142122][T17313] input: syz0 as /devices/virtual/input/input9 [ 1352.150510][T17311] loop4: detected capacity change from 0 to 512 [ 1352.241616][T17311] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2302: iget: bad extended attribute block 1 [ 1352.329989][T17311] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2302: couldn't read orphan inode 15 (err -117) [ 1352.471714][T17311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1352.558330][T14080] hsr_slave_0: left promiscuous mode [ 1352.584980][T14080] hsr_slave_1: left promiscuous mode [ 1352.676563][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.684084][T14080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.748299][T15063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.769989][T14080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1352.802979][T14080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.819843][T14080] bridge_slave_1: left allmulticast mode [ 1352.827447][T14080] bridge_slave_1: left promiscuous mode [ 1352.833326][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.867772][T14080] bridge_slave_0: left allmulticast mode [ 1352.873657][T14080] bridge_slave_0: left promiscuous mode [ 1352.912845][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.690774][T14080] veth1_macvtap: left promiscuous mode [ 1353.707618][T14080] veth0_macvtap: left promiscuous mode [ 1353.714203][T14080] veth1_vlan: left promiscuous mode [ 1354.028777][T14080] veth0_vlan: left promiscuous mode [ 1354.501835][T14080] bond1 (unregistering): (slave vlan2): Releasing active interface [ 1354.530813][T17308] loop3: detected capacity change from 0 to 40427 [ 1354.570429][T17308] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 1354.595305][T17308] F2FS-fs (loop3): Image doesn't support compression [ 1354.615390][T17308] F2FS-fs (loop3): Image doesn't support compression [ 1354.693804][T17308] F2FS-fs (loop3): invalid crc value [ 1354.717329][T17308] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1355.678196][T17346] loop4: detected capacity change from 0 to 1024 [ 1355.784119][T14080] bond1 (unregistering): Released all slaves [ 1355.935227][T16645] hfsplus: b-tree write err: -5, ino 3 [ 1355.972856][T15063] hfsplus: node 4:3 still has 2 user(s)! [ 1358.459514][T17380] loop4: detected capacity change from 0 to 40427 [ 1358.479625][T14080] team0 (unregistering): Port device team_slave_1 removed [ 1358.489707][T17380] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1358.519786][T17380] F2FS-fs (loop4): Image doesn't support compression [ 1358.527383][T17380] F2FS-fs (loop4): Image doesn't support compression [ 1358.602186][T17380] F2FS-fs (loop4): invalid crc value [ 1358.611770][T17380] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1358.748745][T14080] team0 (unregistering): Port device team_slave_0 removed [ 1358.859376][T14080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.020236][T14080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.233453][T17380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2316'. [ 1359.422265][T17390] loop4: detected capacity change from 0 to 256 [ 1359.447730][T17390] FAT-fs (loop4): Unrecognized mount option "shortname=" or missing value [ 1360.445287][T14080] bond0 (unregistering): Released all slaves [ 1360.658561][T17058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1360.676508][T17375] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1360.701584][T17375] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1360.724736][T17375] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1361.373000][T14080] IPVS: stop unused estimator thread 0... [ 1362.233720][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.244344][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.707833][T11088] Bluetooth: hci2: command 0x0c1a tx timeout [ 1362.790633][T14936] Bluetooth: hci0: command 0x0c1a tx timeout [ 1362.790654][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1362.915017][T17058] veth0_vlan: entered promiscuous mode [ 1363.048553][T17058] veth1_vlan: entered promiscuous mode [ 1364.157938][T17058] veth0_macvtap: entered promiscuous mode [ 1364.199261][T17058] veth1_macvtap: entered promiscuous mode [ 1364.281581][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.310834][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.326783][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.341214][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.364979][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.387676][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.406421][T17058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.434132][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.450677][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.463410][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.482355][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.511411][T17058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.534713][T17058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.564508][T17058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.581050][T17058] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.595341][T17058] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.627597][T17058] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.641759][T17058] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.825186][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.840043][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.849750][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1364.960987][T10361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.023301][T10361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.157898][T17455] loop3: detected capacity change from 0 to 256 [ 1365.177268][T17455] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1366.371630][T17442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1367.596896][T17442] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1367.696248][T17442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1368.362970][T17482] fuse: Bad value for 'fd' [ 1368.872521][T14936] Bluetooth: hci2: command 0x0c1a tx timeout [ 1369.675801][T11088] Bluetooth: hci0: command 0x0c1a tx timeout [ 1369.735866][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1369.968312][T17500] loop6: detected capacity change from 0 to 256 [ 1369.985045][T17500] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1373.071066][T17531] loop3: detected capacity change from 0 to 256 [ 1374.748920][T11993] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1375.095906][T11993] usb 7-1: device descriptor read/64, error -71 [ 1375.595789][T11993] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1375.700706][T17560] loop4: detected capacity change from 0 to 256 [ 1375.795655][T11993] usb 7-1: device descriptor read/64, error -71 [ 1375.842815][T17560] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1375.925686][T11993] usb usb7-port1: attempt power cycle [ 1376.365837][T11993] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1377.198732][T17579] loop5: detected capacity change from 0 to 131072 [ 1377.246373][T11993] usb 7-1: device descriptor read/8, error -71 [ 1377.273179][T17579] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 1377.280081][T17579] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1377.422957][T17579] F2FS-fs (loop5): invalid crc value [ 1377.460923][T17579] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1377.998891][T17579] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1378.006088][T17579] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1378.043975][T17579] F2FS-fs (loop5): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 1378.062366][T11993] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1378.099104][T11993] usb 7-1: Using ep0 maxpacket: 16 [ 1378.120142][T11993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.184318][T11993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.206351][T11993] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1378.226178][T11993] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1378.260341][T11993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.294828][T11993] usb 7-1: config 0 descriptor?? [ 1378.454396][T17600] loop4: detected capacity change from 0 to 256 [ 1378.472012][T17600] FAT-fs (loop4): Unrecognized mount option "shortname=" or missing value [ 1378.794218][T17605] 9pnet_fd: Insufficient options for proto=fd [ 1378.794494][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1378.877596][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1378.912222][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1378.958016][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1378.995944][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.035736][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.055742][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.081022][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.117158][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.151792][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.176159][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.199585][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.225953][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.250263][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.273541][T11993] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 1379.381674][T11993] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0003/input/input10 [ 1379.453091][T11993] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1379.539580][T11993] usb 7-1: USB disconnect, device number 10 [ 1379.705423][T17590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1379.751712][T17590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1379.779963][T17590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1379.832108][T17611] fido_id[17611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1380.445971][T11088] Bluetooth: hci2: command 0x0c1a tx timeout [ 1381.806083][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1381.811200][T14936] Bluetooth: hci0: command 0x0c1a tx timeout [ 1382.055912][ T5790] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1382.245682][ T5790] usb 7-1: device descriptor read/64, error -71 [ 1383.475712][ T5790] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1383.646739][ T5790] usb 7-1: device descriptor read/64, error -71 [ 1383.791964][ T5790] usb usb7-port1: attempt power cycle [ 1384.318596][ T5790] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1384.390063][ T5790] usb 7-1: device descriptor read/8, error -71 [ 1384.685823][ T5790] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1385.036779][ T5790] usb 7-1: device descriptor read/8, error -71 [ 1385.176063][ T5790] usb usb7-port1: unable to enumerate USB device [ 1386.865264][T17686] loop6: detected capacity change from 0 to 256 [ 1386.918163][T17686] FAT-fs (loop6): Unrecognized mount option "shortname=" or missing value [ 1389.706155][T14936] Bluetooth: hci2: command 0x0c1a tx timeout [ 1390.012918][T17690] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1390.035904][T17690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1390.585799][T17690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1390.798641][T17719] loop3: detected capacity change from 0 to 256 [ 1392.275671][T14936] Bluetooth: hci0: command 0x0c1a tx timeout [ 1392.658838][T14936] Bluetooth: hci1: command 0x040f tx timeout [ 1393.842253][T17743] loop5: detected capacity change from 0 to 40427 [ 1393.957899][T17743] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 1393.966488][T17743] F2FS-fs (loop5): Image doesn't support compression [ 1393.973266][T17743] F2FS-fs (loop5): Image doesn't support compression [ 1393.996068][T17743] F2FS-fs (loop5): invalid crc value [ 1394.011722][T17743] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1394.286026][T17756] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2385'. [ 1396.533362][T17773] loop6: detected capacity change from 0 to 2048 [ 1396.631305][T17777] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1396.710970][T17773] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 12 [ 1396.775651][T17773] Remounting filesystem read-only [ 1398.098320][T17794] loop3: detected capacity change from 0 to 256 [ 1398.132584][T17794] FAT-fs (loop3): Unrecognized mount option "shortname=" or missing value [ 1399.615053][T17787] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1399.649071][T17787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1399.670184][T17787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1400.125701][T14936] Bluetooth: hci2: command 0x0c1a tx timeout [ 1401.725651][T14936] Bluetooth: hci1: command 0x040f tx timeout [ 1401.733219][T14936] Bluetooth: hci0: command 0x0c1a tx timeout [ 1405.520084][T17876] loop6: detected capacity change from 0 to 2048 [ 1405.635881][ T27] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1405.888352][ T27] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 1405.918954][ T27] usb 4-1: config 0 has no interface number 0 [ 1405.934409][ T27] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1405.964270][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.986489][ T27] usb 4-1: Product: syz [ 1406.001960][ T27] usb 4-1: Manufacturer: syz [ 1406.020924][ T27] usb 4-1: SerialNumber: syz [ 1406.048534][ T27] usb 4-1: config 0 descriptor?? [ 1406.457307][T17898] loop5: detected capacity change from 0 to 256 [ 1406.482126][T17898] FAT-fs (loop5): Unrecognized mount option "shortname=" or missing value [ 1408.466458][ T5790] usb 4-1: USB disconnect, device number 24 [ 1408.750339][T17929] netlink: 'syz.5.2420': attribute type 21 has an invalid length. [ 1408.758481][T17929] netlink: 'syz.5.2420': attribute type 1 has an invalid length. [ 1408.766287][T17929] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2420'. [ 1408.926907][T11088] Bluetooth: hci2: command 0x0c1a tx timeout [ 1408.937594][T17904] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1409.359015][T17904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1409.370475][T17904] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1410.079835][T17950] loop3: detected capacity change from 0 to 256 [ 1410.102894][T17950] FAT-fs (loop3): Unrecognized mount option "shortname=" or missing value [ 1410.879994][T17957] loop4: detected capacity change from 0 to 128 [ 1411.087741][T11088] Bluetooth: hci0: command 0x0c1a tx timeout [ 1411.214045][T17962] netlink: 'syz.5.2430': attribute type 21 has an invalid length. [ 1411.222485][T17962] netlink: 'syz.5.2430': attribute type 1 has an invalid length. [ 1411.230539][T17962] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2430'. [ 1411.495673][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1413.628286][T17973] loop4: detected capacity change from 0 to 8192 [ 1415.094405][T17994] syz.6.2436 (17994): drop_caches: 2 [ 1416.736764][T18011] netlink: 'syz.3.2441': attribute type 21 has an invalid length. [ 1416.744858][T18011] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 1416.755031][T18011] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2441'. [ 1416.861920][T18019] loop5: detected capacity change from 0 to 256 [ 1416.895062][T18019] FAT-fs (loop5): Unrecognized mount option "shortname=" or missing value [ 1418.413732][T18035] loop3: detected capacity change from 0 to 256 [ 1419.357185][T18023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1419.487297][T18023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1419.518461][T18023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1420.321965][T11088] Bluetooth: hci2: command 0x0c1a tx timeout [ 1420.986379][ T5790] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1421.198298][ T5790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.230085][ T5790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.265684][ T5790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1421.299069][ T5790] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1421.355659][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.377911][ T5790] usb 4-1: config 0 descriptor?? [ 1421.615824][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1421.623759][T11088] Bluetooth: hci0: command 0x0c1a tx timeout [ 1421.991807][T18071] netlink: 'syz.6.2452': attribute type 21 has an invalid length. [ 1422.034732][ T5790] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1422.066056][T18071] netlink: 'syz.6.2452': attribute type 1 has an invalid length. [ 1422.134521][T18071] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2452'. [ 1422.286928][ T5790] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1423.133961][ C0] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (syz.4.2453) [ 1423.239265][T18085] loop5: detected capacity change from 0 to 256 [ 1423.345768][ T5790] usb 4-1: USB disconnect, device number 25 [ 1424.157110][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.163645][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.584165][T18097] lo speed is unknown, defaulting to 1000 [ 1424.596317][T18097] lo speed is unknown, defaulting to 1000 [ 1424.604005][T18097] lo speed is unknown, defaulting to 1000 [ 1424.617629][T18097] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1424.659108][T18097] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1424.893581][T18097] lo speed is unknown, defaulting to 1000 [ 1424.913155][T18097] lo speed is unknown, defaulting to 1000 [ 1424.972662][T18097] lo speed is unknown, defaulting to 1000 [ 1425.008197][T18097] lo speed is unknown, defaulting to 1000 [ 1425.710340][T18101] loop5: detected capacity change from 0 to 256 [ 1425.718166][T18101] FAT-fs (loop5): Unrecognized mount option "shortname=" or missing value [ 1425.772018][T18104] loop3: detected capacity change from 0 to 256 [ 1427.831206][T18104] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1428.549153][T18132] netlink: 'syz.6.2463': attribute type 21 has an invalid length. [ 1428.562552][T18132] netlink: 'syz.6.2463': attribute type 1 has an invalid length. [ 1428.768366][T18132] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2463'. [ 1430.314811][T18125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1430.399058][T18125] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1430.433929][T18125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1431.085707][T14936] Bluetooth: hci2: command 0x0c1a tx timeout [ 1432.368191][T18175] loop3: detected capacity change from 0 to 256 [ 1432.421177][T18175] FAT-fs (loop3): Unrecognized mount option "shortname=" or missing value [ 1432.456314][T14936] Bluetooth: hci1: command 0x040f tx timeout [ 1432.456348][T11088] Bluetooth: hci0: command 0x0c1a tx timeout [ 1434.049599][T18191] loop3: detected capacity change from 0 to 256 [ 1434.201359][T18191] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1434.391904][T18200] netlink: 'syz.5.2474': attribute type 21 has an invalid length. [ 1434.446405][T18200] netlink: 'syz.5.2474': attribute type 1 has an invalid length. [ 1434.464472][T18200] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2474'. [ 1435.851099][T18221] random: crng reseeded on system resumption [ 1439.118419][T18226] loop4: detected capacity change from 0 to 32768 [ 1439.265119][T18226] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1439.442325][T18226] XFS (loop4): Ending clean mount [ 1439.462314][T18226] XFS (loop4): Quotacheck needed: Please wait. [ 1439.635298][T18226] XFS (loop4): Quotacheck: Done. [ 1440.095401][T15063] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1441.026104][T18279] netlink: 'syz.4.2485': attribute type 21 has an invalid length. [ 1441.034119][T18279] netlink: 'syz.4.2485': attribute type 1 has an invalid length. [ 1441.042077][T18279] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2485'. [ 1442.013063][T18285] loop6: detected capacity change from 0 to 4096 [ 1444.848282][T18320] loop3: detected capacity change from 0 to 40427 [ 1444.867151][T18320] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 1444.875637][T18320] F2FS-fs (loop3): Image doesn't support compression [ 1444.883411][T18320] F2FS-fs (loop3): Image doesn't support compression [ 1444.897118][T18320] F2FS-fs (loop3): invalid crc value [ 1444.923599][T18320] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1445.240488][T18320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2497'. [ 1445.336729][T18324] sd 0:0:1:0: PR command failed: 1026 [ 1445.342229][T18324] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1445.349206][T18324] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1447.281906][T18329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1447.351265][T18329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1447.425876][T18329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1447.765760][T18348] netlink: 'syz.6.2502': attribute type 21 has an invalid length. [ 1447.774579][T18348] netlink: 'syz.6.2502': attribute type 1 has an invalid length. [ 1447.783685][T18348] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2502'. [ 1448.184695][T18353] loop5: detected capacity change from 0 to 1024 [ 1448.285796][T11088] Bluetooth: hci2: command 0x0c1a tx timeout [ 1448.423567][ T1116] hfsplus: b-tree write err: -5, ino 3 [ 1448.491708][T16143] hfsplus: node 4:3 still has 1 user(s)! [ 1449.326020][T11088] Bluetooth: hci0: command 0x0c1a tx timeout [ 1449.485810][T11088] Bluetooth: hci1: command 0x040f tx timeout [ 1450.915615][ T5876] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1451.115672][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 1451.129215][ T5876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.155901][ T5876] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1451.180468][ T5876] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1451.192569][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.212618][ T5876] usb 6-1: Product: syz [ 1451.224550][ T5876] usb 6-1: Manufacturer: syz [ 1451.247981][ T5876] usb 6-1: SerialNumber: syz [ 1451.274923][ T5876] usb 6-1: config 0 descriptor?? [ 1451.513666][ T5876] usb 6-1: USB disconnect, device number 11 [ 1452.811756][T18404] loop6: detected capacity change from 0 to 1024 [ 1453.026193][ T1134] hfsplus: b-tree write err: -5, ino 3 [ 1453.041125][T18410] netlink: 'syz.3.2513': attribute type 21 has an invalid length. [ 1453.050667][T18410] netlink: 'syz.3.2513': attribute type 1 has an invalid length. [ 1453.061221][T18410] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1453.086058][T17058] hfsplus: node 4:3 still has 1 user(s)! [ 1453.356776][T18423] loop6: detected capacity change from 0 to 256 [ 1453.624060][T18423] FAT-fs (loop6): Directory bread(block 64) failed [ 1453.634702][T18423] FAT-fs (loop6): Directory bread(block 65) failed [ 1453.657014][T18423] FAT-fs (loop6): Directory bread(block 66) failed [ 1453.741046][T18423] FAT-fs (loop6): Directory bread(block 67) failed [ 1454.096239][T18423] FAT-fs (loop6): Directory bread(block 68) failed [ 1454.103127][T18423] FAT-fs (loop6): Directory bread(block 69) failed [ 1454.202538][T18423] FAT-fs (loop6): Directory bread(block 70) failed [ 1454.220062][T18423] FAT-fs (loop6): Directory bread(block 71) failed [ 1454.239404][T18423] FAT-fs (loop6): Directory bread(block 72) failed [ 1454.246447][T18423] FAT-fs (loop6): Directory bread(block 73) failed [ 1456.125421][T18443] loop5: detected capacity change from 0 to 4096 [ 1456.805708][ T27] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1457.802686][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 1457.872656][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.895645][ T27] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1457.918610][ T27] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1457.945799][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.954048][ T27] usb 4-1: Product: syz [ 1457.958363][ T27] usb 4-1: Manufacturer: syz [ 1457.963013][ T27] usb 4-1: SerialNumber: syz [ 1458.008073][ T27] usb 4-1: config 0 descriptor?? [ 1458.224280][ T27] usb 4-1: USB disconnect, device number 26 [ 1462.735772][T11088] Bluetooth: hci0: command 0x0c1a tx timeout [ 1462.842693][T18506] netlink: 'syz.6.2529': attribute type 21 has an invalid length. [ 1462.868182][T18506] netlink: 'syz.6.2529': attribute type 1 has an invalid length. [ 1462.904964][T18506] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2529'. [ 1467.337192][T18541] loop4: detected capacity change from 0 to 40427 [ 1467.371243][T18541] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1467.379736][T18541] F2FS-fs (loop4): Image doesn't support compression [ 1467.386560][T18541] F2FS-fs (loop4): Image doesn't support compression [ 1467.438456][T18541] F2FS-fs (loop4): invalid crc value [ 1467.467644][T18541] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1467.549189][T18547] BUG: assuming non migratable context at include/linux/filter.h:599 [ 1467.558396][T18547] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 18547, name: syz.3.2537 [ 1467.569146][T18547] 2 locks held by syz.3.2537/18547: [ 1467.574508][T18547] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: ip6_send_skb+0x10f/0x380 [ 1467.584994][T18547] #1: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: nf_hook+0x9e/0x370 [ 1467.596052][T18547] CPU: 0 PID: 18547 Comm: syz.3.2537 Not tainted 6.6.101-syzkaller #0 [ 1467.604283][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1467.614397][T18547] Call Trace: [ 1467.617716][T18547] [ 1467.620684][T18547] dump_stack_lvl+0x16c/0x230 [ 1467.625465][T18547] ? show_regs_print_info+0x20/0x20 [ 1467.630713][T18547] ? nf_nat_inet_fn+0x93e/0xbc0 [ 1467.635753][T18547] __cant_migrate+0x234/0x2e0 [ 1467.640488][T18547] ? __cant_sleep+0x210/0x210 [ 1467.645219][T18547] ? nf_nat_ipv6_fn+0x21b/0x2d0 [ 1467.650120][T18547] nf_hook_run_bpf+0x90/0x1e0 [ 1467.654907][T18547] ? ip6table_filter_table_init+0xb0/0xb0 [ 1467.660724][T18547] ? bpf_nf_link_attach+0x810/0x810 [ 1467.665965][T18547] ? nf_nat_ipv6_out+0x2f3/0x380 [ 1467.670945][T18547] ? bpf_nf_link_attach+0x810/0x810 [ 1467.676252][T18547] nf_hook_slow+0xbd/0x200 [ 1467.680783][T18547] nf_hook+0x215/0x370 [ 1467.684876][T18547] ? nf_hook+0x9e/0x370 [ 1467.689053][T18547] ? ip6_make_skb+0x4c0/0x4c0 [ 1467.693776][T18547] ? ip6_output+0x3b0/0x3b0 [ 1467.698385][T18547] ? ip6_dst_hoplimit+0x350/0x350 [ 1467.703487][T18547] ? ip6_setup_cork+0xa2f/0xfe0 [ 1467.708364][T18547] ? __ip6_local_out+0x880/0x880 [ 1467.713322][T18547] ? read_lock_is_recursive+0x20/0x20 [ 1467.718724][T18547] ip6_output+0x272/0x3b0 [ 1467.723086][T18547] ? ip6_output+0x3b0/0x3b0 [ 1467.727644][T18547] ? ip6_send_skb+0x10f/0x380 [ 1467.732369][T18547] ip6_send_skb+0x1d5/0x380 [ 1467.737014][T18547] udp_v6_send_skb+0xbbb/0x1860 [ 1467.742005][T18547] udpv6_sendmsg+0x1bb8/0x22f0 [ 1467.746826][T18547] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1467.751737][T18547] ? udp_v6_early_demux+0xf60/0xf60 [ 1467.756975][T18547] ? lock_chain_count+0x20/0x20 [ 1467.761918][T18547] ? _local_bh_enable+0xa0/0xa0 [ 1467.766794][T18547] ? inet_send_prepare+0x1b3/0x260 [ 1467.771968][T18547] ? inet_send_prepare+0x1b3/0x260 [ 1467.777108][T18547] ? inet6_sendmsg+0x5f/0xd0 [ 1467.781728][T18547] __sys_sendto+0x46a/0x620 [ 1467.786351][T18547] ? __ia32_sys_getpeername+0x90/0x90 [ 1467.791786][T18547] ? __lock_acquire+0x7c80/0x7c80 [ 1467.796862][T18547] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1467.802878][T18547] ? lock_chain_count+0x20/0x20 [ 1467.807760][T18547] __x64_sys_sendto+0xde/0xf0 [ 1467.812474][T18547] do_syscall_64+0x55/0xb0 [ 1467.816926][T18547] ? clear_bhb_loop+0x40/0x90 [ 1467.821716][T18547] ? clear_bhb_loop+0x40/0x90 [ 1467.826462][T18547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1467.832466][T18547] RIP: 0033:0x7fd3ffd8ebe9 [ 1467.836906][T18547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1467.856546][T18547] RSP: 002b:00007fd400b73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1467.865003][T18547] RAX: ffffffffffffffda RBX: 00007fd3fffb5fa0 RCX: 00007fd3ffd8ebe9 [ 1467.873007][T18547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1467.881004][T18547] RBP: 00007fd3ffe11e19 R08: 0000200000000300 R09: 000000000000001c [ 1467.888999][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1467.896993][T18547] R13: 00007fd3fffb6038 R14: 00007fd3fffb5fa0 R15: 00007fffa110fe38 [ 1467.905012][T18547] [ 1467.908223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1467.970379][T18541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2536'.