last executing test programs: 31m48.372183193s ago: executing program 32 (id=202): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31m30.670958194s ago: executing program 33 (id=217): r0 = io_uring_setup(0x7a90, &(0x7f0000000080)={0x0, 0x6d46, 0x40, 0x1, 0x800025e}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x11, &(0x7f00000002c0)=[0x2, 0xffff], 0x2) 27m50.805002121s ago: executing program 34 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4a080) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r2, &(0x7f0000001dc0), 0x40000a6, 0x48850) 27m1.459034964s ago: executing program 35 (id=509): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r1, r1, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 23m45.372503147s ago: executing program 36 (id=677): r0 = getuid() syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRESHEX, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000002c0)={[{@test_dummy_encryption}], [{@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@fowner_gt={'fowner>', r0}}, {@pcr={'pcr', 0x3d, 0x9}}, {@subj_user={'subj_user', 0x3d, '}'}}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000380)=""/212) sendto$inet(r4, &(0x7f0000000240)="f7", 0x1, 0x4008005, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000b80)="cd7d134ae722c137f39d680f2a089c652d79fc427202e7968f78a28642edb7506ac18f1eb8f3395c6303549bde9fe6e5d0cdd7a490ff08283dcfbad692a27162c81eb685a12bdc56267a8b17b0cb1a5c0af7dae547e7d7dd5551576b000f9bab5b7baf5d2dd5ddfbc1512af0cdd73df22ef126d49eed18712808208bec47ba429c742a68eb07109f9eebb4595b257bc8e44181e1f4ea2201d9cd2234fddcf9ac70a5184dfbf0bcb28bb3b2b60e2979c8bbdab71a80263bbd385e9f7a4879805c07b0aea1e50d62588ae102eff1d100380b1f96da7650043c0240910154e6181252b8", 0xe2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 20m17.09072365s ago: executing program 37 (id=927): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088cda5"], 0x60}}, 0x200040c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 19m42.740242507s ago: executing program 38 (id=971): r0 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) setpgid(r1, r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) 16m13.036583099s ago: executing program 39 (id=1197): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000040)={0x407, 0x4, 0x9}) 15m39.201256969s ago: executing program 40 (id=1224): openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2d, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 13m12.874355282s ago: executing program 2 (id=943): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1e, @multicast2}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0xfffffffa, 0x80000001}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) close(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) r3 = gettid() capset(&(0x7f0000000040)={0x399f1316, r3}, &(0x7f0000000140)={0xcc9e, 0x26cc82c8, 0x7, 0x12518a60, 0x7, 0x9}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) getdents(r2, &(0x7f0000000300)=""/233, 0xe9) ioctl$BLKCRYPTOGENERATEKEY(r2, 0xc030128a, &(0x7f00000002c0)={&(0x7f0000000400)=""/84, 0x54}) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000145f405e04bd84b689010203010902240001000000000904ed0002ff5d010009050303000000050009058a03"], 0x0) 13m5.231574046s ago: executing program 2 (id=1365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000006c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13m3.654327419s ago: executing program 2 (id=1368): sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x4884) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) 13m2.07898342s ago: executing program 2 (id=1369): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 13m0.443880469s ago: executing program 2 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4000003e, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) 12m52.712813566s ago: executing program 41 (id=1362): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x15, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 12m51.080142549s ago: executing program 2 (id=1380): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x15031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 12m33.093070252s ago: executing program 42 (id=1380): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x15031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 12m0.264602532s ago: executing program 3 (id=1414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r7 = dup2(r6, r6) fcntl$notify(r7, 0x402, 0x3f) close_range(r6, 0xffffffffffffffff, 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 11m54.095858807s ago: executing program 3 (id=1416): socket$netlink(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 11m52.092679986s ago: executing program 3 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 11m50.672900299s ago: executing program 3 (id=1420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea66", 0x29, 0x840, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x100a, 0x0, 0x0}, &(0x7f0000000080)=0x40) 11m46.951378652s ago: executing program 3 (id=1421): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1e, @multicast2}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000240)={0xfffffffa, 0x80000001}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) close(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) r3 = gettid() capset(&(0x7f0000000040)={0x399f1316, r3}, &(0x7f0000000140)={0xcc9e, 0x26cc82c8, 0x7, 0x12518a60, 0x7, 0x9}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) getdents(r2, &(0x7f0000000300)=""/233, 0xe9) ioctl$BLKCRYPTOGENERATEKEY(r2, 0xc030128a, &(0x7f00000002c0)={&(0x7f0000000400)=""/84, 0x54}) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000145f405e04bd84b689010203010902240001000000000904ed0002ff5d010009050303000000050009058a03"], 0x0) 11m43.265350498s ago: executing program 3 (id=1422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007", @ANYRES32, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11m26.732550104s ago: executing program 43 (id=1422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007", @ANYRES32, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7m37.421518485s ago: executing program 1 (id=1676): syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a860000102030109025d00020105e00409f7052400d4137bf1aae76c4e53897209c4fffff523"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000001c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @initial, @device_b, @broadcast, {0x1, 0x1}}, @a_msdu=[{@device_a, @device_b}, {@device_a, @device_b, 0x37, "bc3ba9bf2cdf0bdac11f9b3e28da1882950401ed0e893ab462363595234455eae7a05c2af5b9639ce07f7972dd5e1736bb18b4682fe2ab"}, {}, {@broadcast, @broadcast, 0x3, "77c80f"}, {@device_a, @broadcast, 0x27, "84176599d9ebe735b6a38bfb8153a573d8999fc40f8e7e276f28a436018fee3156b4c127377457"}, {@broadcast, @broadcast, 0x3, "ecacb0"}, {@broadcast, @broadcast, 0x73, "b2b7f59ef76dd2fc5e34954e71366fade16ebf81c306c49f04beee4bfe08ef74d96590d2e5aa37a3120874b2e0bf4731a4915ed6ddb0a4133f4ae7014eae7a1e122877124d2c62295510b061d1e22667964bea9bbd6f1e4a4e2e20a862ce1c891ea2ef821b8206f89fdebcf810cd5af6c5a363"}, {@broadcast, @broadcast, 0xdb, "7c2eb8ce5a02117523848997917cc983743b900096de67b9f0dd65d2f283ad2ef1f031c9652996e9e81cdb8c1eb03a4a54db5c124cbd76481e391bcc40127b552a88025a991522b7e26c765a2ebad7c7ea6787160a89e74ea31a689b837eb0b4ada01004352ab14f601a66a41506b4676184f9de818411b59572bf793647bdea0575b50c8411f72820c9e218be5049918b40ef5f5cd5ab6ecfa907274f7d8b4c4e4a7144f127a99bcb728dfa0a79bff2d51087ca923f867836db2bf73e9cb0255916c9d29c6fafd88c3dec7a39b0aa240ed1bf5985ab9740adbc26"}, {@device_a, @device_a, 0xc7, "deb7b2bed8aa271c1d3e04a41f1fc4b0144188439eb0b5920985811b84a31329ac39dd5aa1c6730a236a505134963b1a1a3d7e159c6324dbc0a41cef66ea42ba7effa83dfc38c039d600930fae7fd11f9feb5d33062232f4c8601ef1ce2492052edfa573883675d55adc12f70979ccf63bbcce229a5939bd12dc4ce0ec913f91bc07bf538293bf0607140e6765f0069d859dd97841659dcf893f314a6c1bde1672a4b7d39127d109291b2e4caa616cfe617600f709b1f7ea91c8e5d87197e5bf7135c1427f4d8e"}, {@device_b}]}, 0x338) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m36.566164304s ago: executing program 0 (id=1678): unshare(0x2c020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xa) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) 7m36.550302485s ago: executing program 5 (id=1679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0xb, 0x2002) close(0x3) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, 0x0}, 0x138) socket(0x2, 0x3, 0x67) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000000c0)={0x9, 0x4, 0x8a, 0xd, 0x0, "7117e1464020dca189bf594a7e1c15babfbf87"}) 7m35.820387071s ago: executing program 1 (id=1680): r0 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) r1 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000044000)) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) fcntl$addseals(r0, 0x409, 0xe) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) connect$tipc(r2, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000600)=0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f000000c440)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000c400)={&(0x7f000000c500)=@newtfilter={0x68, 0x2c, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xfff2}, {0xffe0, 0x2}, {0xb, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xbdc3}, @TCA_RATE={0x6, 0x5, {0x5, 0xd9}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x47b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x53}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) r9 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) r10 = io_uring_setup(0x712e, &(0x7f0000000440)={0x0, 0x41e28, 0x80, 0x4, 0x3c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff1f00000000000001"]) io_uring_register$IORING_REGISTER_FILES(r10, 0x1e, &(0x7f0000000000)=[r9], 0x1) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00000006c0)={{r7, r8+10000000}, {r11, r12+10000000}}, 0x0) mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x300000d, 0x13, r0, 0x7fa4a000) 7m35.538124137s ago: executing program 0 (id=1681): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b770212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd5edeac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147cca3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc"], 0x564) 7m34.774837692s ago: executing program 5 (id=1682): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8028000000040007"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002a000701fcffffffffdbdf25037c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 7m34.088108488s ago: executing program 0 (id=1683): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413", 0x11}], 0x1}, 0x0) socket$kcm(0x23, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x810) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 7m33.855450886s ago: executing program 5 (id=1684): statx(0xffffffffffffffff, &(0x7f0000002440)='./file0\x00', 0x100, 0x0, &(0x7f0000002480)) getegid() r0 = getuid() setreuid(0xee00, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)) ppoll(&(0x7f0000000100)=[{r1, 0x412}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 7m33.716070259s ago: executing program 1 (id=1685): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x3, 0x8, 0x1, 0x0, 0x0, 0xfffe]}}]}]}]}, 0x38}}, 0x40004) 7m32.614605133s ago: executing program 0 (id=1686): pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404801c}, 0x4000080) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m32.516861605s ago: executing program 1 (id=1687): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "392cda"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e1e, @multicast2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) close(0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) getdents(r1, &(0x7f0000000300)=""/233, 0xe9) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7m32.239551659s ago: executing program 5 (id=1688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x7ef, 0x1ff, 0xb5315241, 0x5, 0x3, [{}, {0xffffffff}, {}, {0x0, 0x76dfbff1}, {}, {0x0, 0x7}, {}, {0x3}], 0x0, 0x1d}}) unshare(0x2c020400) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465"], 0xf4}}, 0x10) 7m29.207162897s ago: executing program 0 (id=1689): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) 7m29.195476182s ago: executing program 1 (id=1690): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x1c) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x23, 0x3, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f0000000000), 0xa8303, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) pread64$ublk_bdev(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000, 0xffffffff80000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_io_uring_setup(0x2d64, 0x0, &(0x7f0000000400), &(0x7f0000011000), 0x0) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) 7m29.18166087s ago: executing program 5 (id=1691): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b770212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd5edeac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147cca3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc2f929b4c2beb9a592c577287b6021bfeec24146c7f95608bb60a736207a09d"], 0x564) 7m26.262564591s ago: executing program 1 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 7m26.214456446s ago: executing program 5 (id=1693): r0 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) r1 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000044000)) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) fcntl$addseals(r0, 0x409, 0xe) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) connect$tipc(r2, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000600)) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 7m25.706129735s ago: executing program 0 (id=1694): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413", 0x11}], 0x1}, 0x0) socket$kcm(0x23, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x810) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb70067", 0x5c) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 7m9.253777656s ago: executing program 44 (id=1694): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413", 0x11}], 0x1}, 0x0) socket$kcm(0x23, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x810) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb70067", 0x5c) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 7m6.74061917s ago: executing program 45 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 7m6.144091683s ago: executing program 46 (id=1693): r0 = memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x7) r1 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000044000)) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) fcntl$addseals(r0, 0x409, 0xe) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) connect$tipc(r2, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) timer_create(0x2, &(0x7f00000005c0)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000000600)) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 2m49.521667987s ago: executing program 7 (id=1890): r0 = semget$private(0x0, 0x6, 0x0) semget$private(0x0, 0x20000000102, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 2m48.935205403s ago: executing program 7 (id=1893): socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0xce, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"6ec26a96d1d8cbc81406dffdd9109f2fd95a8825ee9dead6195ca50000000000000000537ddcd3080f1ee2c9ffeac934ed0a530a1cb40aaaa34898291e47aea3ee27b7e900f08207521dc4ce3feca880868c5eb45fb1f8174c7656f310f1646f67b0b021fa1fe7778f78c31d08c4d4de58f8d0593ab46fed2adaac7246c577a10d5245397facf9acf144a39c6ec6baae5a6b3173181c129d"}}}}}}, 0x0) 2m48.41366603s ago: executing program 7 (id=1895): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000700)) 2m47.680911372s ago: executing program 7 (id=1898): r0 = socket(0xa, 0x3, 0xff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x800, 0x40) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) 2m47.162886669s ago: executing program 7 (id=1900): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$inet6(0xa, 0x803, 0x6) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.107511461s ago: executing program 7 (id=1903): io_uring_setup(0x521, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$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") syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\\x00\x00\x00'], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0200000001000100000000000400000000000000100002000000000020"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000011c0)={{}, "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"}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000040)={0x5, 0x401, 0x1}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 2m29.767473529s ago: executing program 47 (id=1903): io_uring_setup(0x521, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$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") syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\\x00\x00\x00'], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0200000001000100000000000400000000000000100002000000000020"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000011c0)={{}, "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"}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000040)={0x5, 0x401, 0x1}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 1m48.185585499s ago: executing program 6 (id=2007): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf000000000008000300014fa504236902a460e3e5751aa5c0de56d701f6a1672824139fc9fb6428ef987b3ce26e06528925cf4ca26d55c66e9275101346866adb785d05706093f654bce6f6475f71b65f748409548f84fe63c64e08f09310c4c26ccf0c965bfab89080ea193af954d6e2bb7469786a476a6776e650fa90190e6c907d89c388", @ANYRES32=r8, @ANYBLOB="0800b700f60000000800260080090000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) listen(r0, 0x400021) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1m43.057787083s ago: executing program 6 (id=2017): socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0xbc, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}, {"6ec26a96d1d8cbc81406dffdd9109f2fd95a8825ee9dead6195ca50000000000000000537ddcd3080f1ee2c9ffeac934ed0a530a1cb40aaaa34898291e47aea3ee27b7e900f08207521dc4ce3feca880868c5eb45fb1f8174c7656f310f1646f67b0b021fa1fe7778f78c31d08c4d4de58f8"}}}}}}, 0x0) 1m42.157788497s ago: executing program 6 (id=2018): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000001c0), 0xff, 0x556, &(0x7f0000002ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x3a) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x1, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x3, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, 0xa4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe41}) r6 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) r7 = creat(&(0x7f0000000040)='./file1\x00', 0xd) write$P9_RUNLINKAT(r7, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2) fallocate(r4, 0x10, 0x3, 0x7c27) io_setup(0x1, &(0x7f00000004c0)=0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, 0x0, &(0x7f0000000340)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x7, r10, &(0x7f0000000140)='i', 0x1, 0x9fd}]) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendmsg$qrtr(r3, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x1420, 0x810}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x53500, 0x30) fsmount(r11, 0x0, 0x0) 1m39.892629309s ago: executing program 6 (id=2022): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf000000000008000300014fa504236902a460e3e5751aa5c0de56d701f6a1672824139fc9fb6428ef987b3ce26e06528925cf4ca26d55c66e9275101346866adb785d05706093f654bce6f6475f71b65f748409548f84fe63c64e08f09310c4c26ccf0c965bfab89080ea193af954d6e2bb7469786a476a6776e650fa90190e6c907d89c388", @ANYRES32=r8, @ANYBLOB="0800b700f60000000800260080090000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) mount$nfs(&(0x7f0000000040)='@\a', &(0x7f0000000340)='./file1\x00', 0x0, 0x20887b, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) listen(r0, 0x400021) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) ppoll(&(0x7f0000000100)=[{r0, 0x412}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 1m33.382221329s ago: executing program 48 (id=2028): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) ppoll(&(0x7f0000000100)=[{r0, 0x412}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 35.637480429s ago: executing program 9 (id=2129): socket$netlink(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x208a00, 0x5f) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 34.99628162s ago: executing program 9 (id=2131): prctl$PR_GET_TSC(0x43, &(0x7f0000000400)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 32.969119174s ago: executing program 9 (id=2138): socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0xe0, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}, {"6ec26a96d1d8cbc81406dffdd9109f2fd95a8825ee9dead6195ca50000000000000000537ddcd3080f1ee2c9ffeac934ed0a530a1cb40aaaa34898291e47aea3ee27b7e900f08207521dc4ce3feca880868c5eb45fb1f8174c7656f310f1646f67b0b021fa1fe7778f78c31d08c4d4de58f8d0593ab46fed2adaac7246c577a10d5245397facf9acf144a39c6ec6baae5a6b3173181c"}}}}}}, 0x0) 32.333686535s ago: executing program 9 (id=2141): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000001c0), 0xff, 0x556, &(0x7f0000002ac0)="$eJzs3U9rVFcbAPDnTibRV31rBBHaRQl1UYt1YpL+sdCFXZZWKrR7OyTXIJk4kpmISYXqom66KVIopULpB+i+S+kX6KcQWkGKhHbRzZQ7uWNGZyaJk9HEzu8HN55zz82ce+bc53junBsmgKE1kf0oRLwcEd8kEYfbyoqRF06sH7f28PpstiXRaHz6ZxJJvq91fJL/e7CVKUb8+lXEycJjVY5nP2orqwvlSiVdyndO1hevTNZWVk9dWizPp/Pp5emZmTNvz0y/9+47A2vrG+f//v6Tux+e+fr42nc/3z9yO4mzcSgva2/HDtxoz0zERP6ejMbZJw6cGkBle0my2ydAX0byOB+NbAw4HCN51AP/fV9GRAMYUon4hyHVmge07u0HdB/8wnjwwfoNUGf7i+ufjcT+5r3RgbXksTujpPVBxg5ldfzyx53b2RaD+xwCYEs3bkbE6WKxc/xL8vGvf6e3ccyTdRj/4Pm5m81/3uw2/yk8mv9El/nPwS6x24+t479wfwDV9JTN/97vOv/NF63GY3wkz/2/mR1NLl6qpNnY9lJEnIjRfVl+s/WcM2v3Gr3K2ud/2ZbV35oL5udxv7jv8d+ZK9fLO2v1hgc3I17pOv9NHvV/0qX/s/fj/DbrOJbeebVX2dbtf7YaP0W83rX/N1a0ks3XJyeb18Nk66ro9NetY7/1qn+325/1/4HN2z+etK/X1p6+jh/3/5P2Kuv3+h9LPmumx/J918r1+tJUxFjycef+6Y3fbeVbx2ftP3F88/Gv2/X/v4j4fJvtv3X0Vs9Dd9T/A1h0zdo/91T9//SJex998UP/7c/6/61m6kS+p2P8G+t83e2e4E7fPwAAAAAAANhLChFxKJJC6VG6UCiV1p/vOBoHCpVqrX7yYvW1aJY1n38otFa6D7c9DzGVPw/byk8/kZ+JiCMR8e1IsZkvzVYrc7vdeAAAAAAAAAAAAAAAAAAAANgjDvb4+//M7yO7fXbAM+crv2F4bRn/g/imJ2BP8v8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAwUOfPncu2xtrD67NZfu7qyvJC9eqpubS2UFpcni3NVpeulOar1flKWpqtLm71epVq9crUdCxfm6yntfpkbWX1wmJ1+XL9wqXF8nx6IR19Lq0CAAAAAAAAAAAAAAAAAACAF0ttZXWhXKmkSxISfSWKe+M0JAac2O2RCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BsAAP//G2Q3oA==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x3a) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x1, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x3, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, 0xa4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe41}) r6 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) r7 = creat(&(0x7f0000000040)='./file1\x00', 0xd) write$P9_RUNLINKAT(r7, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2) fallocate(r4, 0x10, 0x3, 0x7c27) io_setup(0x1, &(0x7f00000004c0)=0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, 0x0, &(0x7f0000000340)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x7, r10, &(0x7f0000000140)='i', 0x1, 0x9fd}]) r11 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendmsg$qrtr(r3, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x1420, 0x810}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x53500, 0x30) 30.170062467s ago: executing program 9 (id=2146): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) 21.714157315s ago: executing program 9 (id=2155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 20.054239346s ago: executing program 49 (id=2155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 7.393668965s ago: executing program 4 (id=2176): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5.997296731s ago: executing program 8 (id=2178): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000001a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0xa6}}, @enum, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x3e}, 0x28) 5.657673497s ago: executing program 8 (id=2179): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/233, 0xe9) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.818759822s ago: executing program 4 (id=2180): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) 2.366443281s ago: executing program 8 (id=2181): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) 1.968031919s ago: executing program 4 (id=2182): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.656679197s ago: executing program 8 (id=2183): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x20000, 0x0) close(r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0x419e6b756b15f75, 0xc9100114, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x40d}, 0x20}}, 0x0) 1.38029401s ago: executing program 4 (id=2184): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x20a, &(0x7f0000000480)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}}, {{&(0x7f0000005840)=@file={0x1, './file2\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 1.03493329s ago: executing program 8 (id=2185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x1, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) 1.028899318s ago: executing program 4 (id=2186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) 733.751418ms ago: executing program 4 (id=2187): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 0s ago: executing program 8 (id=2188): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/233, 0xe9) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r3, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): dget_register_driver returned -16 [ 2041.898724][ T8715] usb 5-1: USB disconnect, device number 20 [ 2042.063319][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.070975][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.640501][T12241] team0 (unregistering): Port device team_slave_1 removed [ 2043.499259][T12241] team0 (unregistering): Port device team_slave_0 removed [ 2043.533774][T17443] loop4: detected capacity change from 0 to 1024 [ 2043.570958][T17443] hfsplus: failed to load extents file [ 2043.980375][T13094] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2044.114560][T17449] loop4: detected capacity change from 0 to 512 [ 2044.171302][T13094] usb 9-1: Using ep0 maxpacket: 32 [ 2044.243087][T13094] usb 9-1: config index 0 descriptor too short (expected 3659, got 75) [ 2044.288456][T17449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2044.315000][T13094] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2044.411013][T17449] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2044.422022][T13094] usb 9-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 2044.422168][T13094] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.422286][T13094] usb 9-1: Product: syz [ 2044.422379][T13094] usb 9-1: Manufacturer: syz [ 2044.422473][T13094] usb 9-1: SerialNumber: syz [ 2044.462491][T13094] usb 9-1: config 0 descriptor?? [ 2044.551021][T13094] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 2044.730642][T17453] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 2044.802377][T17453] EXT4-fs (loop4): Remounting filesystem read-only [ 2044.836542][T16235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2046.068980][T17258] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.094515][T17258] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.114355][T17258] bridge_slave_0: entered allmulticast mode [ 2046.147651][T17258] bridge_slave_0: entered promiscuous mode [ 2046.225280][T17258] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.233627][T17258] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.259272][T17258] bridge_slave_1: entered allmulticast mode [ 2046.307588][T17258] bridge_slave_1: entered promiscuous mode [ 2046.407723][T13094] gspca_sunplus: reg_r err -32 [ 2046.423859][T13094] sunplus 9-1:0.0: probe with driver sunplus failed with error -32 [ 2046.486702][T13094] usb 9-1: USB disconnect, device number 16 [ 2046.589494][T17258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2046.690402][T17258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2046.868088][T17258] team0: Port device team_slave_0 added [ 2046.965070][T17258] team0: Port device team_slave_1 added [ 2047.339491][T17050] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2047.668182][T17483] fuse: Unknown parameter '0x0000000000000003' [ 2048.063290][T17478] loop8: detected capacity change from 0 to 32768 [ 2048.083379][T17050] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2048.096703][T17050] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2048.104005][T17478] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1807 (17478) [ 2048.129250][T17478] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2048.139970][T17478] BTRFS info (device loop8): using sha256 checksum algorithm [ 2048.170997][T17050] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2048.204681][T17258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2048.231205][T17258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2048.259806][T17258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2048.274266][T17050] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2048.321960][T17478] BTRFS info (device loop8): setting nodatasum [ 2048.328318][T17478] BTRFS info (device loop8): enabling ssd optimizations [ 2048.336715][T17478] BTRFS info (device loop8): turning on async discard [ 2048.343798][T17478] BTRFS info (device loop8): enabling free space tree [ 2048.398937][T17050] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2048.453584][T17258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2048.514293][T17258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2048.681665][T17258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2048.745519][T17050] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2048.882357][T17050] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2049.420571][ T8715] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2049.518921][T17047] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2049.566304][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2049.625771][ T8715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2049.671971][ T8715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2049.688400][T17047] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2049.708349][ T8715] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2049.741766][ T8715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.757178][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2049.791684][ T8715] usb 5-1: config 0 descriptor?? [ 2049.838125][T17258] hsr_slave_0: entered promiscuous mode [ 2049.882686][T17258] hsr_slave_1: entered promiscuous mode [ 2049.916954][T17047] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2050.013763][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2050.077268][T17047] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2050.130753][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2050.270964][ T8715] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 2050.365995][ T8715] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 2050.499457][ T8715] cp2112 0003:10C4:EA90.0012: error requesting version [ 2050.584009][T17518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.632293][T17518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.710969][T17510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.725738][ T8715] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -32 [ 2050.758979][T17510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.840932][ T8715] usb 5-1: USB disconnect, device number 21 [ 2051.132801][T17517] fido_id[17517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2052.842951][ T5586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2052.855628][ T5586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2052.866394][ T5586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2052.888789][ T5586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2052.912037][ T5586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2053.276430][ T5586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2053.294172][ T5586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2053.304068][ T5586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2053.321311][ T5586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2053.344182][ T5586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2053.750026][T13094] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2053.768382][T17258] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2053.882995][T17258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2053.933952][T17258] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2053.977038][T13094] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.025430][T13094] usb 5-1: config 0 has no interfaces? [ 2054.036594][T17258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2054.084864][T13094] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 2054.094463][T17258] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2054.127539][T13094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.167877][T13094] usb 5-1: Product: syz [ 2054.196622][T13094] usb 5-1: Manufacturer: syz [ 2054.203757][T17258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2054.228867][T13094] usb 5-1: SerialNumber: syz [ 2054.264821][T17258] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2054.267498][T13094] usb 5-1: config 0 descriptor?? [ 2054.407305][T17258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2054.588073][ T8715] usb 5-1: USB disconnect, device number 22 [ 2055.001037][ T5586] Bluetooth: hci3: command tx timeout [ 2055.402606][ T5586] Bluetooth: hci4: command tx timeout [ 2056.358471][T17258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2057.034906][T17258] 8021q: adding VLAN 0 to HW filter on device team0 [ 2057.080714][ T5586] Bluetooth: hci3: command tx timeout [ 2057.264561][T16184] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2057.491764][ T5586] Bluetooth: hci4: command tx timeout [ 2057.507218][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.514771][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2057.536375][T10353] bridge_slave_1: left allmulticast mode [ 2057.572359][T10353] bridge_slave_1: left promiscuous mode [ 2057.615837][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.652295][T10353] bridge_slave_0: left allmulticast mode [ 2057.673637][T10353] bridge_slave_0: left promiscuous mode [ 2057.686742][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.001426][T10180] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2058.089271][T10353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2058.134072][T10353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2058.164901][T10353] bond0 (unregistering): Released all slaves [ 2058.182764][T10180] usb 5-1: Using ep0 maxpacket: 32 [ 2058.209371][T10180] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 2058.225909][T10180] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.263671][T10180] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 2058.300021][T10180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.320009][T10180] usb 5-1: Product: syz [ 2058.329229][T10180] usb 5-1: Manufacturer: syz [ 2058.342908][T10180] usb 5-1: SerialNumber: syz [ 2058.370918][T10180] usb 5-1: config 0 descriptor?? [ 2058.428522][T10180] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 2058.587999][T10353] hsr_slave_0: left promiscuous mode [ 2058.607028][T10353] hsr_slave_1: left promiscuous mode [ 2058.624347][T10353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2058.647885][T10353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2059.161411][ T5586] Bluetooth: hci3: command tx timeout [ 2059.422474][T10353] team0 (unregistering): Port device team_slave_1 removed [ 2059.517128][T10353] team0 (unregistering): Port device team_slave_0 removed [ 2059.565514][ T5586] Bluetooth: hci4: command tx timeout [ 2060.064267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.071915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2060.250007][T10180] gspca_sunplus: reg_r err -32 [ 2060.255265][T10180] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 2060.280985][T10180] usb 5-1: USB disconnect, device number 23 [ 2060.633747][T17598] fuse: Unknown parameter '0x0000000000000003' [ 2061.251392][ T5586] Bluetooth: hci3: command tx timeout [ 2061.461497][T12956] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2061.634041][T12956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2061.646006][ T5586] Bluetooth: hci4: command tx timeout [ 2061.729589][T12956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2061.784464][T12956] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2061.847016][T12956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.919360][T12956] usb 5-1: config 0 descriptor?? [ 2062.395853][T17623] loop8: detected capacity change from 0 to 512 [ 2062.424796][T12956] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 2062.501251][T12956] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 2062.577538][T17623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2062.719929][T17623] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2062.731233][T12956] cp2112 0003:10C4:EA90.0013: error requesting version [ 2062.819199][T17630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.898956][T17630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.023173][T17608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.032845][T12956] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -32 [ 2063.048955][T10353] bridge_slave_1: left allmulticast mode [ 2063.055067][T17608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.074030][T10353] bridge_slave_1: left promiscuous mode [ 2063.109396][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.150363][T14518] usb 5-1: USB disconnect, device number 24 [ 2063.178318][T10353] bridge_slave_0: left allmulticast mode [ 2063.211025][T10353] bridge_slave_0: left promiscuous mode [ 2063.236654][T16184] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2063.270719][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.288840][T17629] fido_id[17629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2064.414712][T17634] loop8: detected capacity change from 0 to 32768 [ 2064.418891][T17634] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1820 (17634) [ 2064.427362][T17634] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2064.427510][T17634] BTRFS info (device loop8): using sha256 checksum algorithm [ 2064.598053][T10353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2064.614920][T17634] BTRFS info (device loop8): setting nodatasum [ 2064.615027][T17634] BTRFS info (device loop8): enabling ssd optimizations [ 2064.615123][T17634] BTRFS info (device loop8): turning on async discard [ 2064.615213][T17634] BTRFS info (device loop8): enabling free space tree [ 2065.281254][T10353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2065.332385][T10353] bond0 (unregistering): Released all slaves [ 2065.643636][T17664] loop4: detected capacity change from 0 to 8 [ 2065.646092][T17531] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.699355][T17531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.741122][T17664] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2065.752630][T17531] bridge_slave_0: entered allmulticast mode [ 2065.781641][T17664] SQUASHFS error: Failed to read block 0x82: -5 [ 2065.815439][T17531] bridge_slave_0: entered promiscuous mode [ 2065.824435][T17664] SQUASHFS error: Unable to read metadata cache entry [80] [ 2065.824634][T17664] SQUASHFS error: Unable to read inode 0x11f [ 2065.956436][T17531] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.988935][T17531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.040354][T17531] bridge_slave_1: entered allmulticast mode [ 2066.095834][T17531] bridge_slave_1: entered promiscuous mode [ 2066.237538][T10353] hsr_slave_0: left promiscuous mode [ 2066.259207][T10353] hsr_slave_1: left promiscuous mode [ 2066.286298][T10353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2066.338440][T10353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2067.273947][T10353] team0 (unregistering): Port device team_slave_1 removed [ 2067.397064][T10353] team0 (unregistering): Port device team_slave_0 removed [ 2067.901423][T10180] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2068.080104][T10180] usb 5-1: Using ep0 maxpacket: 32 [ 2068.107863][T10180] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 2068.137999][T10180] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2068.161537][T17531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2068.196085][T10180] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 2068.220560][T10180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.234668][T10180] usb 5-1: Product: syz [ 2068.239169][T10180] usb 5-1: Manufacturer: syz [ 2068.245470][T10180] usb 5-1: SerialNumber: syz [ 2068.258749][T10180] usb 5-1: config 0 descriptor?? [ 2068.293061][T10180] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 2068.374605][T17531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2068.458152][T17536] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.467621][T17536] bridge0: port 1(bridge_slave_0) entered disabled state [ 2068.486886][T17536] bridge_slave_0: entered allmulticast mode [ 2068.501910][T17536] bridge_slave_0: entered promiscuous mode [ 2068.591551][T17531] team0: Port device team_slave_0 added [ 2068.613443][T17536] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.624612][T17536] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.651455][T17536] bridge_slave_1: entered allmulticast mode [ 2068.675219][T17536] bridge_slave_1: entered promiscuous mode [ 2068.843738][T17531] team0: Port device team_slave_1 added [ 2069.033028][T17536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2069.108708][T17531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2069.116480][T17531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2069.170350][T17531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2069.254674][T17536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2069.267556][T17531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2069.285107][T17531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2069.349995][T17531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2069.672388][T17536] team0: Port device team_slave_0 added [ 2069.793802][T17536] team0: Port device team_slave_1 added [ 2070.035043][T17531] hsr_slave_0: entered promiscuous mode [ 2070.045795][T17531] hsr_slave_1: entered promiscuous mode [ 2070.056505][T17531] debugfs: 'hsr0' already exists in 'hsr' [ 2070.079851][T17531] Cannot create hsr debugfs directory [ 2070.097904][T17536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2070.119320][T17536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2070.127382][T10180] gspca_sunplus: reg_r err -32 [ 2070.167527][T10180] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 2070.197997][T17536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2070.222040][T10180] usb 5-1: USB disconnect, device number 25 [ 2070.295319][T17258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2070.324274][T17536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2070.355756][T17536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2070.455240][T17536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2070.549937][T16184] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2071.473660][T17536] hsr_slave_0: entered promiscuous mode [ 2071.540287][T17536] hsr_slave_1: entered promiscuous mode [ 2071.555358][T17536] debugfs: 'hsr0' already exists in 'hsr' [ 2071.578081][T17536] Cannot create hsr debugfs directory [ 2073.821923][T17536] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2073.953684][T17536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2074.049515][T17536] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2074.126364][T17536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2074.175232][T17536] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2074.225711][T17536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2074.348147][T17536] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2074.414607][T17536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2074.602318][T10180] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2074.812064][T10180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2074.843310][T10180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2074.864887][T10180] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2074.935732][T10180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.977516][T10180] usb 5-1: config 0 descriptor?? [ 2075.238917][T17258] veth0_vlan: entered promiscuous mode [ 2075.384371][T17531] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2075.438426][T17725] binder: 17724:17725 ioctl c0306201 0 returned -14 [ 2075.461811][T10180] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 2075.464706][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2075.513797][T17531] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2075.518246][T10180] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 2075.579359][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2075.615136][T17531] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2075.660106][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2075.672890][T17531] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2075.682082][T10180] cp2112 0003:10C4:EA90.0014: error requesting version [ 2075.705140][T17531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2075.709107][T10180] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -32 [ 2075.727650][T17713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2075.744352][T17258] veth1_vlan: entered promiscuous mode [ 2075.757918][T17713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.174480][T17731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.207508][T17731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.453572][T17258] veth0_macvtap: entered promiscuous mode [ 2076.583639][T17258] veth1_macvtap: entered promiscuous mode [ 2076.654082][T17536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2076.933336][T17536] 8021q: adding VLAN 0 to HW filter on device team0 [ 2076.966697][T17258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2077.069875][T11127] bridge0: port 1(bridge_slave_0) entered blocking state [ 2077.077651][T11127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2077.105066][T17258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2077.184416][T10353] bridge0: port 2(bridge_slave_1) entered blocking state [ 2077.192037][T10353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2077.383578][T11127] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2077.420822][T11127] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2077.467625][T11127] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2077.490522][T11127] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2077.626181][T14520] usb 5-1: USB disconnect, device number 26 [ 2077.856660][T17531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2078.398797][T17531] 8021q: adding VLAN 0 to HW filter on device team0 [ 2078.502469][T17742] loop8: detected capacity change from 0 to 32768 [ 2078.526204][T17742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1832 (17742) [ 2078.549961][T17742] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2078.562206][T17742] BTRFS info (device loop8): using sha256 checksum algorithm [ 2078.673898][T10353] bridge0: port 1(bridge_slave_0) entered blocking state [ 2078.681439][T10353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2078.705957][T17742] BTRFS info (device loop8): setting nodatasum [ 2078.712645][T17742] BTRFS info (device loop8): enabling ssd optimizations [ 2078.719941][T17742] BTRFS info (device loop8): turning on async discard [ 2078.730052][T17742] BTRFS info (device loop8): enabling free space tree [ 2079.042724][T12241] bridge0: port 2(bridge_slave_1) entered blocking state [ 2079.050290][T12241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2080.088364][T17773] loop4: detected capacity change from 0 to 128 [ 2080.165336][T17773] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 2080.356812][T17773] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2080.453909][T17773] ext2 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2081.136830][T16235] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2081.791321][T17790] loop4: detected capacity change from 0 to 1024 [ 2081.862661][T17790] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 2081.927650][T17790] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2082.005252][T17790] EXT4-fs (loop4): invalid journal inode [ 2082.063010][T17790] EXT4-fs (loop4): can't get journal size [ 2082.127295][T17790] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 17104912: comm syz.4.1836: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 2082.155843][T17790] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 2082.157591][T17790] EXT4-fs (loop4): failed to initialize system zone (-117) [ 2082.167066][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 2082.167157][ C1] EXT4-fs (loop4): initial error at time 1780760194: ext4_map_blocks:791: inode 3: block 17104912 [ 2082.167346][ C1] EXT4-fs (loop4): last error at time 1780760194: ext4_map_blocks:791: inode 3: block 17104912 [ 2082.301285][T17790] EXT4-fs (loop4): mount failed [ 2084.029026][T17536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2084.771483][T17531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2084.796521][ T5232] 8021q: adding VLAN 0 to HW filter on device eth17 [ 2086.438467][T17536] veth0_vlan: entered promiscuous mode [ 2086.530488][T17536] veth1_vlan: entered promiscuous mode [ 2087.065392][T17536] veth0_macvtap: entered promiscuous mode [ 2087.182103][T17536] veth1_macvtap: entered promiscuous mode [ 2087.420061][T16239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2087.434725][T16239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2087.446847][T16239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2087.474625][T16239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2087.499382][T16239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2087.528667][T17536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2087.705882][T17536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2088.153402][T12245] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.366431][ T14] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.411310][ T14] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.455809][T16184] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2088.531872][T12245] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.641904][ T14] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.674761][ T14] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2088.824267][T12245] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.916962][T17531] veth0_vlan: entered promiscuous mode [ 2089.077241][T12245] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2089.193074][ T5232] 8021q: adding VLAN 0 to HW filter on device eth19 [ 2089.302173][T17531] veth1_vlan: entered promiscuous mode [ 2089.560760][T16239] Bluetooth: hci2: command tx timeout [ 2089.826851][T12245] bridge_slave_1: left allmulticast mode [ 2089.849355][T12245] bridge_slave_1: left promiscuous mode [ 2089.868436][T12245] bridge0: port 2(bridge_slave_1) entered disabled state [ 2089.938023][T12245] bridge_slave_0: left allmulticast mode [ 2089.959230][T12245] bridge_slave_0: left promiscuous mode [ 2089.990457][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.935670][T12245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2090.992945][T12245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2091.027331][T12245] bond0 (unregistering): Released all slaves [ 2091.450898][T12245] hsr_slave_0: left promiscuous mode [ 2091.496453][T12245] hsr_slave_1: left promiscuous mode [ 2091.532758][T12245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2091.563515][T12245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2091.605526][T12245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2091.633177][T12245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2091.641513][T16239] Bluetooth: hci2: command tx timeout [ 2091.697621][T12245] veth1_macvtap: left promiscuous mode [ 2091.727221][T12245] veth0_macvtap: left promiscuous mode [ 2091.741578][T12245] veth1_vlan: left promiscuous mode [ 2091.747160][T12245] veth0_vlan: left promiscuous mode [ 2092.361852][ T8715] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2092.555052][ T8715] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2092.587147][ T8715] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2092.618335][ T8715] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2092.654936][ T8715] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.732390][ T8715] usb 9-1: config 0 descriptor?? [ 2093.028242][T12245] team0 (unregistering): Port device team_slave_1 removed [ 2093.078583][T12245] team0 (unregistering): Port device team_slave_0 removed [ 2093.199059][ T8715] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 2093.251880][ T8715] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 2093.423147][ T8715] cp2112 0003:10C4:EA90.0015: error requesting version [ 2093.497951][T17913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2093.532470][T17913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2093.568602][T17913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2093.616086][ T8715] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -32 [ 2093.645196][T17913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2093.713562][ T8715] usb 9-1: USB disconnect, device number 17 [ 2093.720422][T16239] Bluetooth: hci2: command tx timeout [ 2093.892254][T17912] fido_id[17912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2093.900781][ T5232] 8021q: adding VLAN 0 to HW filter on device eth20 [ 2094.091457][T17531] veth0_macvtap: entered promiscuous mode [ 2094.418189][T17531] veth1_macvtap: entered promiscuous mode [ 2095.197385][T17531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2095.466328][T17531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2095.731253][ T5924] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2095.778220][T17931] loop8: detected capacity change from 0 to 32768 [ 2095.784550][ T5924] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2095.794816][T17931] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1851 (17931) [ 2095.812410][T16239] Bluetooth: hci2: command tx timeout [ 2095.829477][ T5924] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2095.839905][T17931] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2095.850425][T17931] BTRFS info (device loop8): using sha256 checksum algorithm [ 2095.866665][ T5924] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2095.977181][T17931] BTRFS info (device loop8): setting nodatasum [ 2095.983746][T17931] BTRFS info (device loop8): enabling ssd optimizations [ 2095.991151][T17931] BTRFS info (device loop8): turning on async discard [ 2095.998103][T17931] BTRFS info (device loop8): enabling free space tree [ 2096.239459][T17958] netlink: 592 bytes leftover after parsing attributes in process `syz.4.1853'. [ 2098.537336][ T5232] 8021q: adding VLAN 0 to HW filter on device eth21 [ 2098.866224][T17856] bridge0: port 1(bridge_slave_0) entered blocking state [ 2098.908253][T17856] bridge0: port 1(bridge_slave_0) entered disabled state [ 2098.936129][T17856] bridge_slave_0: entered allmulticast mode [ 2098.974827][T17856] bridge_slave_0: entered promiscuous mode [ 2099.048661][T17856] bridge0: port 2(bridge_slave_1) entered blocking state [ 2099.084378][T17856] bridge0: port 2(bridge_slave_1) entered disabled state [ 2099.119216][T17856] bridge_slave_1: entered allmulticast mode [ 2099.164537][T17856] bridge_slave_1: entered promiscuous mode [ 2099.590865][T17856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2099.675562][T17856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2100.105552][T17856] team0: Port device team_slave_0 added [ 2100.155787][T17856] team0: Port device team_slave_1 added [ 2100.188289][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2100.224755][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2100.555777][T17856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2100.580053][T17856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2100.641250][T17856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2100.703392][T17856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2100.744383][T17856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2100.812518][T17856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2100.934347][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2100.981453][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2101.333774][T17856] hsr_slave_0: entered promiscuous mode [ 2101.379199][T17856] hsr_slave_1: entered promiscuous mode [ 2101.724450][T18018] Bluetooth: MGMT ver 1.23 [ 2101.745945][T18018] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 2102.534168][ T5232] 8021q: adding VLAN 0 to HW filter on device eth22 [ 2103.965008][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2103.971759][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2107.097081][T12242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2107.113322][T12242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2107.122110][T17856] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2107.321088][T17856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2107.494415][T17856] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2107.628948][T17856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2107.768856][T17856] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2107.895338][T17856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2107.969113][T17856] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2108.152991][T17856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2108.237307][T11129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2108.271963][T11129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2108.438845][T18058] loop6: detected capacity change from 0 to 164 [ 2109.906977][T16184] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2110.299086][ T5232] 8021q: adding VLAN 0 to HW filter on device eth23 [ 2110.492213][T18076] loop7: detected capacity change from 0 to 256 [ 2110.608516][T17856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2110.938501][T17856] 8021q: adding VLAN 0 to HW filter on device team0 [ 2111.268916][T12242] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.276478][T12242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2111.347529][T12242] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.355095][T12242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2112.644751][T12928] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2112.955304][T12928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2113.063488][T12928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2113.163731][T12928] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2113.205665][T12928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.290349][T12928] usb 8-1: config 0 descriptor?? [ 2113.668332][T18098] fuse: Bad value for 'fd' [ 2113.821584][T12928] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 2113.902093][T12928] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 2114.065339][T12928] cp2112 0003:10C4:EA90.0016: error requesting version [ 2114.182593][T18103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2114.247484][T18103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2114.340433][T18089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2114.382712][T12928] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -32 [ 2114.413184][T18089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2114.413689][T18105] loop8: detected capacity change from 0 to 1024 [ 2114.491487][T12956] usb 8-1: USB disconnect, device number 7 [ 2114.523152][T18105] EXT4-fs: Ignoring removed oldalloc option [ 2114.579374][T18105] EXT4-fs: Ignoring removed nobh option [ 2114.618448][T18105] EXT4-fs: Ignoring removed orlov option [ 2114.669558][T18105] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 2114.848698][T18105] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2114.970333][T18105] EXT4-fs error (device loop8): __ext4_new_inode:1079: comm syz.8.1871: reserved inode found cleared - inode=18 [ 2115.442676][T16184] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2115.974639][T18100] fido_id[18100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2117.514876][T18136] loop6: detected capacity change from 0 to 256 [ 2120.716347][ T5232] 8021q: adding VLAN 0 to HW filter on device eth24 [ 2120.946901][T17856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2126.223206][T18201] loop7: detected capacity change from 0 to 32768 [ 2126.235686][T18201] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1903 (18201) [ 2126.316553][T18201] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2126.329980][T18201] BTRFS info (device loop7): using sha256 checksum algorithm [ 2126.525563][T18201] BTRFS info (device loop7): setting nodatasum [ 2126.532150][T18201] BTRFS info (device loop7): enabling ssd optimizations [ 2126.539274][T18201] BTRFS info (device loop7): turning on async discard [ 2126.550418][T18201] BTRFS info (device loop7): enabling free space tree [ 2127.319022][T17856] veth0_vlan: entered promiscuous mode [ 2127.551144][ T5232] 8021q: adding VLAN 0 to HW filter on device eth25 [ 2127.684051][T17856] veth1_vlan: entered promiscuous mode [ 2127.874516][T18233] loop6: detected capacity change from 0 to 512 [ 2127.916028][T18232] fuse: fd is not a fuse device [ 2127.961643][T18233] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 2128.032208][T18233] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2128.144336][T18233] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1907: invalid indirect mapped block 9 (level 0) [ 2128.470382][T18233] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 2128.476240][T18233] EXT4-fs (loop6): 1 truncate cleaned up [ 2128.485897][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 2128.485998][ C0] EXT4-fs (loop6): initial error at time 1780760240: ext4_free_branches:1023: inode 11 [ 2128.486157][ C0] EXT4-fs (loop6): last error at time 1780760240: ext4_free_branches:1023: inode 11 [ 2128.588634][T17856] veth0_macvtap: entered promiscuous mode [ 2128.885219][T17856] veth1_macvtap: entered promiscuous mode [ 2128.929483][T18233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2129.044560][ T29] audit: type=1107 audit(1780760241.375:56): pid=18235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2130.355580][T17536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2131.348153][T17856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2131.610209][T17856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2131.883651][T10353] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2131.957471][T10353] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.085659][T10353] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.183063][ T5924] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.881955][T18281] loop6: detected capacity change from 0 to 512 [ 2138.094101][T18281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2138.541816][T17536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2138.712078][ T5232] 8021q: adding VLAN 0 to HW filter on device eth26 [ 2139.220801][T18296] loop6: detected capacity change from 0 to 1024 [ 2139.352096][T18296] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2139.402120][T18296] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2139.546715][ T29] audit: type=1804 audit(1780760251.885:57): pid=18296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1920" name="/newroot/18/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 2139.571964][T18296] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.1920: Freeing blocks not in datazone - block = 0, count = 16 [ 2139.668107][T18296] EXT4-fs (loop6): Remounting filesystem read-only [ 2139.955799][T17536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2141.897292][ T5586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2141.930692][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2141.941551][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2141.959304][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2141.974411][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2144.131351][T16239] Bluetooth: hci1: command tx timeout [ 2144.597424][T12241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2144.689170][T12241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2144.946881][T18227] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2145.261166][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2145.318047][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2145.662411][ T5232] 8021q: adding VLAN 0 to HW filter on device eth27 [ 2146.200388][T16239] Bluetooth: hci1: command tx timeout [ 2146.565439][ T56] tipc: Subscription rejected, illegal request [ 2146.932659][T12928] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2147.180135][T12928] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 2147.211200][T12928] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.279245][T12928] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2147.307225][T12928] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2147.338830][T12928] usb 9-1: Product: syz [ 2147.348944][T12928] usb 9-1: Manufacturer: syz [ 2147.384259][T12928] usb 9-1: SerialNumber: syz [ 2147.392805][T18376] loop9: detected capacity change from 0 to 164 [ 2147.448039][T12928] usb 9-1: config 0 descriptor?? [ 2147.469208][T12928] hub 9-1:0.0: bad descriptor, ignoring hub [ 2147.527314][T12928] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2148.280334][T16239] Bluetooth: hci1: command tx timeout [ 2148.841074][T12928] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2149.005364][T12928] usb 9-1: USB disconnect, device number 18 [ 2149.488467][T17863] udevd[17863]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2150.371089][T16239] Bluetooth: hci1: command tx timeout [ 2152.020358][T18413] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1942'. [ 2152.095481][T18413] unsupported nlmsg_type 40 [ 2152.116691][ T78] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2152.449468][ T78] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2152.778474][ T78] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2152.970190][T17737] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2152.995120][ T78] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.138113][T17737] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.298356][T17737] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.333478][T17737] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2153.369933][T17737] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.420454][T17737] usb 10-1: config 0 descriptor?? [ 2153.874978][ T5232] 8021q: adding VLAN 0 to HW filter on device eth28 [ 2153.954007][T17737] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 2154.070362][T17737] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 2154.248240][T17737] cp2112 0003:10C4:EA90.0017: error requesting version [ 2154.266679][ T78] bridge_slave_1: left allmulticast mode [ 2154.319326][ T78] bridge_slave_1: left promiscuous mode [ 2154.393213][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 2154.423660][T18430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.491346][T18430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.563179][ T78] bridge_slave_0: left allmulticast mode [ 2154.621791][T17737] cp2112 0003:10C4:EA90.0017: probe with driver cp2112 failed with error -32 [ 2154.633770][T18420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.642992][ T78] bridge_slave_0: left promiscuous mode [ 2154.694089][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 2154.725877][T18420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.852410][T17737] usb 10-1: USB disconnect, device number 4 [ 2155.375467][T18431] fido_id[18431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 2156.722843][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2156.787820][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2156.836863][ T78] bond0 (unregistering): Released all slaves [ 2159.438040][ T78] hsr_slave_0: left promiscuous mode [ 2159.522559][ T78] hsr_slave_1: left promiscuous mode [ 2159.606590][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2159.700611][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2160.162494][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2160.260900][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2160.507952][ T78] veth1_macvtap: left promiscuous mode [ 2160.547092][ T78] veth0_macvtap: left promiscuous mode [ 2160.578044][ T78] veth1_vlan: left promiscuous mode [ 2160.635514][ T78] veth0_vlan: left promiscuous mode [ 2161.277843][T18471] loop6: detected capacity change from 0 to 512 [ 2161.410150][T17737] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2161.468437][T18471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2161.579100][T18471] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2161.707208][T17737] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.750177][T17737] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2161.768632][T18471] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.1956: iget: bad i_size value: 2533274857506816 [ 2161.803304][T17737] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2161.829457][T17737] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.864819][T17737] usb 10-1: config 0 descriptor?? [ 2163.253466][ T78] team0 (unregistering): Port device team_slave_1 removed [ 2163.311357][T17536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2163.469520][ T78] team0 (unregistering): Port device team_slave_0 removed [ 2163.789541][T18483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.865263][T18483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.017468][T17737] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 2164.046874][T17737] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 2164.354265][T18484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.418749][T18484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.480482][T17737] cp2112 0003:10C4:EA90.0018: error requesting version [ 2164.528595][T17737] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -32 [ 2164.933183][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2164.949282][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.022590][T18327] bridge0: port 1(bridge_slave_0) entered blocking state [ 2165.066062][T18327] bridge0: port 1(bridge_slave_0) entered disabled state [ 2165.114081][T18327] bridge_slave_0: entered allmulticast mode [ 2165.170442][T18327] bridge_slave_0: entered promiscuous mode [ 2165.237968][T18327] bridge0: port 2(bridge_slave_1) entered blocking state [ 2165.296845][T18327] bridge0: port 2(bridge_slave_1) entered disabled state [ 2165.330413][T18327] bridge_slave_1: entered allmulticast mode [ 2165.362815][T18327] bridge_slave_1: entered promiscuous mode [ 2165.700971][ T8715] usb 10-1: USB disconnect, device number 5 [ 2165.751997][T18327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2165.826123][T18327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2166.246991][T18327] team0: Port device team_slave_0 added [ 2166.337422][T18327] team0: Port device team_slave_1 added [ 2166.751531][T18327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2166.779076][T18327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2166.885503][T18327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2166.961830][T18327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2166.985904][T18327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2167.059086][T18327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2167.498511][T18489] loop6: detected capacity change from 0 to 32768 [ 2167.501110][T18327] hsr_slave_0: entered promiscuous mode [ 2167.537318][T18327] hsr_slave_1: entered promiscuous mode [ 2167.568200][T18327] debugfs: 'hsr0' already exists in 'hsr' [ 2167.586840][T18327] Cannot create hsr debugfs directory [ 2167.626358][T18489] JBD2: Ignoring recovery information on journal [ 2167.900281][T18489] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 2167.981113][T18489] ocfs2: Unmounting device (7,6) on (node local) [ 2168.447080][T18514] netlink: 'syz.4.1968': attribute type 1 has an invalid length. [ 2168.564867][T18514] bridge0: port 3(syz_tun) entered blocking state [ 2168.589076][T18514] bridge0: port 3(syz_tun) entered disabled state [ 2168.620625][T18514] syz_tun: entered allmulticast mode [ 2168.634587][T18514] syz_tun: entered promiscuous mode [ 2168.643476][T18514] bridge0: port 3(syz_tun) entered blocking state [ 2168.650594][T18514] bridge0: port 3(syz_tun) entered forwarding state [ 2170.462618][T18327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2170.561049][T18327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2170.580286][T18327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2170.638756][T18327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2170.677760][T18327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2170.758531][T18327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2170.798347][T18327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2170.853432][T18327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2171.247405][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 2171.288833][T18542] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2171.358703][T18544] netlink: 620 bytes leftover after parsing attributes in process `syz.9.1978'. [ 2172.057667][T18549] netlink: 51 bytes leftover after parsing attributes in process `syz.9.1980'. [ 2172.072416][T18327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2172.396164][T18327] 8021q: adding VLAN 0 to HW filter on device team0 [ 2172.493549][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 2172.501147][ T8059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2172.619298][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 2172.626893][ T8059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2172.752029][T18560] overlayfs: failed to clone upperpath [ 2173.498706][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1988'. [ 2173.760906][T18578] overlay: Unknown parameter 'dont_measure' [ 2173.765619][T18577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2173.866396][T18567] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2174.197436][T18582] netlink: 620 bytes leftover after parsing attributes in process `syz.8.1989'. [ 2175.314440][T18597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2176.981549][T18620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1998'. [ 2177.245504][T16239] Bluetooth: hci4: command 0x0406 tx timeout [ 2177.929491][T18327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2178.911390][T18635] netlink: 620 bytes leftover after parsing attributes in process `syz.9.2000'. [ 2179.493944][T18327] veth0_vlan: entered promiscuous mode [ 2179.687788][T18327] veth1_vlan: entered promiscuous mode [ 2179.840781][T12928] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 2179.897772][T18640] loop8: detected capacity change from 0 to 2048 [ 2179.947909][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2003'. [ 2180.005266][T18640] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2180.051190][T12928] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2180.104780][T12928] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2180.170136][T12928] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2180.185712][T18327] veth0_macvtap: entered promiscuous mode [ 2180.210894][T12928] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.232042][T18640] UDF-fs: error (device loop8): udf_read_inode: (ino 1345) failed !bh [ 2180.278712][T12928] usb 10-1: config 0 descriptor?? [ 2180.315176][T18327] veth1_macvtap: entered promiscuous mode [ 2180.739355][T18327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2180.837275][T12928] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 2180.965969][T12928] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 2180.995720][T18327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2181.101061][T12928] cp2112 0003:10C4:EA90.0019: error requesting version [ 2181.176277][T18651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2181.208735][T18654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.267618][T10352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.283529][T18654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.342551][T10352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.387910][T18639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.420201][T12928] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -32 [ 2181.442222][T10352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.445258][T18639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.483517][T10352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2181.516349][ T38] usb 10-1: USB disconnect, device number 6 [ 2181.925293][T18656] fido_id[18656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 2182.934908][T18673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2183.621996][T17737] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2183.810477][T17737] usb 10-1: Using ep0 maxpacket: 8 [ 2183.898672][T17737] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2183.989409][T17737] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.145347][T17737] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2184.328729][T17737] usb 10-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 2184.460614][T17737] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.565569][T17737] usb 10-1: Product: syz [ 2184.619348][T17737] usb 10-1: Manufacturer: syz [ 2184.673064][T17737] usb 10-1: SerialNumber: syz [ 2184.896919][T17737] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 2186.290896][T17737] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2186.441260][T17737] snd_usb_podhd 10-1:1.0: Line 6 POD HD500 found [ 2186.563470][T17737] usb 10-1: selecting invalid altsetting 1 [ 2186.640482][T17737] snd_usb_podhd 10-1:1.0: set_interface failed [ 2186.741010][T17737] snd_usb_podhd 10-1:1.0: Line 6 POD HD500 now disconnected [ 2186.854507][T17737] snd_usb_podhd 10-1:1.0: probe with driver snd_usb_podhd failed with error -22 [ 2187.201318][T17737] usb 10-1: USB disconnect, device number 7 [ 2187.421340][T17863] udevd[17863]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2187.471053][T18696] loop8: detected capacity change from 0 to 4129 [ 2188.442892][T18714] loop6: detected capacity change from 0 to 1024 [ 2188.653630][T18714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 2188.800685][T18721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2188.971736][T18714] loop6: detected capacity change from 1024 to 64 [ 2189.525906][ T29] audit: type=1800 audit(1780760301.865:58): pid=18728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2018" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 2190.816721][T12245] kworker/u8:31: attempt to access beyond end of device [ 2190.816721][T12245] loop6: rw=1, sector=224, nr_sectors = 2 limit=64 [ 2190.899122][T12245] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 112) [ 2190.950512][ T56] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2190.976367][T12245] EXT4-fs (loop6): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 2191.041818][T12245] Buffer I/O error on device loop6, logical block 112 [ 2191.077838][T12245] kworker/u8:31: attempt to access beyond end of device [ 2191.077838][T12245] loop6: rw=1, sector=286, nr_sectors = 66 limit=64 [ 2191.147714][T18747] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 2191.178825][T12245] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 143) [ 2191.224206][ T56] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.257639][T12245] EXT4-fs (loop6): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 2191.338994][T12245] Buffer I/O error on device loop6, logical block 143 [ 2191.373224][T12245] Buffer I/O error on device loop6, logical block 144 [ 2191.380179][T12245] Buffer I/O error on device loop6, logical block 145 [ 2191.387086][T12245] Buffer I/O error on device loop6, logical block 146 [ 2191.393987][T12245] Buffer I/O error on device loop6, logical block 147 [ 2191.497864][ T56] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.545433][T12245] Buffer I/O error on device loop6, logical block 148 [ 2191.552411][T12245] Buffer I/O error on device loop6, logical block 149 [ 2191.559320][T12245] Buffer I/O error on device loop6, logical block 150 [ 2191.566228][T12245] Buffer I/O error on device loop6, logical block 151 [ 2191.740219][T17536] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 2191.740542][ T56] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.773358][T18718] kmmpd-loop6: attempt to access beyond end of device [ 2192.773358][T18718] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 2192.915236][T18718] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 2193.940741][ T56] bridge_slave_1: left allmulticast mode [ 2193.976920][ T56] bridge_slave_1: left promiscuous mode [ 2194.004246][T18764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2194.038611][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 2194.113623][ T56] bridge_slave_0: left allmulticast mode [ 2194.158091][ T56] bridge_slave_0: left promiscuous mode [ 2194.195235][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.485031][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2195.558290][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2195.636219][ T56] bond0 (unregistering): Released all slaves [ 2196.413735][ T56] hsr_slave_0: left promiscuous mode [ 2196.443380][ T56] hsr_slave_1: left promiscuous mode [ 2196.472400][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2196.512557][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2196.545776][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2196.577684][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2196.657934][ T56] veth1_macvtap: left promiscuous mode [ 2196.692546][ T56] veth0_macvtap: left promiscuous mode [ 2196.760280][ T56] veth1_vlan: left promiscuous mode [ 2196.782523][ T56] veth0_vlan: left promiscuous mode [ 2197.188632][T18780] fuse: fd is not a fuse device [ 2198.805507][ T5586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2198.815226][ T5586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2198.828503][ T5586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2198.850711][T16177] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2198.862449][T16177] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2199.823283][ T56] team0 (unregistering): Port device team_slave_1 removed [ 2199.982553][ T56] team0 (unregistering): Port device team_slave_0 removed [ 2200.921585][T16239] Bluetooth: hci3: command tx timeout [ 2203.170615][T16239] Bluetooth: hci3: command tx timeout [ 2203.387370][T18811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2204.748036][T18822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2205.124660][T16177] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2205.134232][T16177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2205.145523][T16177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2205.173843][T16177] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2205.218309][T16177] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2205.241194][T16177] Bluetooth: hci3: command tx timeout [ 2207.304615][ T38] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 2207.323175][T16239] Bluetooth: hci4: command tx timeout [ 2207.325299][T16177] Bluetooth: hci3: command tx timeout [ 2207.568436][ T38] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.638082][ T38] usb 10-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 2207.672142][ T38] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.727942][ T38] usb 10-1: config 0 descriptor?? [ 2207.791174][T11127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.800919][ T38] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2208.084126][ T38] usb 10-1: USB disconnect, device number 8 [ 2208.258482][T11127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2208.449549][T11127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.361519][T11127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2209.401272][T16177] Bluetooth: hci4: command tx timeout [ 2210.879000][T18883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2211.298624][T18881] loop9: detected capacity change from 0 to 4096 [ 2211.480384][T16239] Bluetooth: hci4: command tx timeout [ 2211.521421][T18881] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 2211.818675][T18881] ntfs3(loop9): Failed to load $Extend (-22). [ 2211.825192][T18881] ntfs3(loop9): Failed to initialize $Extend. [ 2212.152107][T18881] loop9: detected capacity change from 4096 to 128 [ 2212.184331][T18895] ntfs3(loop9): failed to read block 429 [ 2212.473912][T11127] bridge_slave_1: left allmulticast mode [ 2212.507083][T11127] bridge_slave_1: left promiscuous mode [ 2212.543262][T11127] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.660325][T11127] bridge_slave_0: left allmulticast mode [ 2212.694126][T11127] bridge_slave_0: left promiscuous mode [ 2212.727928][T11127] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.080022][T16239] Bluetooth: hci2: command 0x0406 tx timeout [ 2213.560531][T16177] Bluetooth: hci4: command tx timeout [ 2214.028888][T11127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2214.130671][T11127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2214.183993][T11127] bond0 (unregistering): Released all slaves [ 2215.255926][T18788] bridge0: port 1(bridge_slave_0) entered blocking state [ 2215.289438][T18788] bridge0: port 1(bridge_slave_0) entered disabled state [ 2215.320214][T18788] bridge_slave_0: entered allmulticast mode [ 2215.347563][T18788] bridge_slave_0: entered promiscuous mode [ 2215.410156][T11127] hsr_slave_0: left promiscuous mode [ 2215.428628][T11127] hsr_slave_1: left promiscuous mode [ 2215.451263][T11127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2215.493450][T11127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2215.542010][T11127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2215.565737][T11127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2215.634633][T11127] veth1_macvtap: left promiscuous mode [ 2215.649451][T11127] veth0_macvtap: left promiscuous mode [ 2215.672021][T11127] veth1_vlan: left promiscuous mode [ 2215.687294][T11127] veth0_vlan: left promiscuous mode [ 2218.943721][T18935] loop8: detected capacity change from 0 to 4096 [ 2219.205979][T18935] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 2219.453406][T18935] ntfs3(loop8): Failed to load $Extend (-22). [ 2219.470046][T18935] ntfs3(loop8): Failed to initialize $Extend. [ 2220.418815][T11127] team0 (unregistering): Port device team_slave_1 removed [ 2220.540440][T11127] team0 (unregistering): Port device team_slave_0 removed [ 2221.201366][T18962] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2221.249379][T18788] bridge0: port 2(bridge_slave_1) entered blocking state [ 2221.275375][T18788] bridge0: port 2(bridge_slave_1) entered disabled state [ 2221.304382][T18788] bridge_slave_1: entered allmulticast mode [ 2221.333634][T18788] bridge_slave_1: entered promiscuous mode [ 2221.728254][T18788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2221.809231][T18788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2222.256587][T18788] team0: Port device team_slave_0 added [ 2222.420006][T18788] team0: Port device team_slave_1 added [ 2223.977258][T18982] netlink: 'syz.8.2072': attribute type 4 has an invalid length. [ 2224.043162][T18788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2224.082762][T18788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2224.160891][T18788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2224.240381][T18788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2224.302155][T18788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2224.490032][T18788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2224.862605][T18988] loop8: detected capacity change from 0 to 16 [ 2224.933876][T18988] erofs (device loop8): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 2224.981725][T18988] erofs (device loop8): mounted with root inode @ nid 36. [ 2225.098181][T18988] erofs (device loop8): not enough plain data on disk @ la 1024 of nid 36 [ 2225.111941][T18788] hsr_slave_0: entered promiscuous mode [ 2225.143169][T18988] erofs (device loop8): read error -117 @ 0 of nid 36 [ 2225.175107][T18788] hsr_slave_1: entered promiscuous mode [ 2225.195874][T18991] erofs (device loop8): not enough plain data on disk @ la 1024 of nid 36 [ 2225.216933][T18788] debugfs: 'hsr0' already exists in 'hsr' [ 2225.237860][T18991] erofs (device loop8): read error -117 @ 0 of nid 36 [ 2225.249419][T18788] Cannot create hsr debugfs directory [ 2226.121439][T12928] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2226.164815][T18828] bridge0: port 1(bridge_slave_0) entered blocking state [ 2226.186526][T18828] bridge0: port 1(bridge_slave_0) entered disabled state [ 2226.201967][T18828] bridge_slave_0: entered allmulticast mode [ 2226.223022][T18828] bridge_slave_0: entered promiscuous mode [ 2226.284313][T18828] bridge0: port 2(bridge_slave_1) entered blocking state [ 2226.305028][T18828] bridge0: port 2(bridge_slave_1) entered disabled state [ 2226.319975][T12928] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2226.345446][T12928] usb 9-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 2226.351740][T18828] bridge_slave_1: entered allmulticast mode [ 2226.365042][T12928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.391947][T18828] bridge_slave_1: entered promiscuous mode [ 2226.399293][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.407479][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2226.437842][T12928] usb 9-1: config 0 descriptor?? [ 2226.528112][T12928] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2226.709757][T12928] usb 9-1: USB disconnect, device number 19 [ 2226.912957][T18828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2227.035657][T18828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2227.085791][T18986] loop9: detected capacity change from 0 to 32768 [ 2227.137690][T18986] XFS (loop9): DAX unsupported by block device. Turning off DAX. [ 2227.178170][T18986] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2227.752831][T18828] team0: Port device team_slave_0 added [ 2227.757562][T18986] XFS (loop9): Ending clean mount [ 2227.784405][T19014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2227.813996][T18986] XFS (loop9): Quotacheck needed: Please wait. [ 2227.906742][T18828] team0: Port device team_slave_1 added [ 2227.977510][T18986] XFS (loop9): Quotacheck: Done. [ 2228.274371][T17856] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2228.409235][T18828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2228.447472][T18828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2228.518154][T18828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2228.706161][T18828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2228.751724][T18828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2228.890316][T18828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2229.502209][T18828] hsr_slave_0: entered promiscuous mode [ 2229.530843][T18828] hsr_slave_1: entered promiscuous mode [ 2229.566378][T18828] debugfs: 'hsr0' already exists in 'hsr' [ 2229.586295][T18828] Cannot create hsr debugfs directory [ 2229.608466][T19036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2230.060977][T18788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2230.117182][T18788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2230.257542][T18788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2230.324106][T18788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2230.435559][T18788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2230.551700][T18788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2231.374586][T18788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2231.432896][T18788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2232.300352][T17737] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2232.480857][T17737] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2232.527981][T17737] usb 9-1: config 0 has no interfaces? [ 2232.557337][T17737] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2232.585946][T17737] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.622279][T17737] usb 9-1: config 0 descriptor?? [ 2232.979286][ T5232] 8021q: adding VLAN 0 to HW filter on device eth18 [ 2233.097556][T18828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2233.181284][T18828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2233.214477][T18828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2233.278695][T18828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2233.320936][T18828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2233.413095][T18828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2233.455272][T18828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2233.516657][T18828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2233.531741][T19065] loop9: detected capacity change from 0 to 32768 [ 2233.579597][T19065] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2086 (19065) [ 2233.608704][T19065] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2233.619167][T19065] BTRFS info (device loop9): using crc32c checksum algorithm [ 2233.739132][T19065] BTRFS info (device loop9): enabling ssd optimizations [ 2233.746404][T19065] BTRFS info (device loop9): turning on flush-on-commit [ 2233.753892][T19065] BTRFS info (device loop9): enabling free space tree [ 2233.766246][T19065] BTRFS info (device loop9): force zlib compression, level 3 [ 2233.773976][T19065] BTRFS info (device loop9): max_inline set to 4096 [ 2234.312300][T19065] infiniband syz1: set active [ 2234.317195][T19065] infiniband syz1: added syz_tun [ 2234.325605][T19065] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 2234.333560][T19065] infiniband syz1: Couldn't open port 1 [ 2234.348364][T19065] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 2234.363910][T19065] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 2234.387203][T19065] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 2234.425235][T19065] RDS/IB: syz1: added [ 2234.429444][T19065] smc: adding ib device syz1 with port count 1 [ 2234.436035][T19065] smc: ib device syz1 port 1 has no pnetid [ 2234.722846][T19091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2234.870836][T12928] usb 9-1: USB disconnect, device number 20 [ 2235.049190][T18788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2235.495532][T18788] 8021q: adding VLAN 0 to HW filter on device team0 [ 2236.173006][T11127] bridge0: port 1(bridge_slave_0) entered blocking state [ 2236.180649][T11127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2238.183856][T17856] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2238.499336][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 2238.507087][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2240.800161][T14520] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2241.009250][T14520] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2241.057596][T14520] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2241.108107][T14520] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2241.147383][T14520] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2241.169986][T14520] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2241.198595][T14520] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2241.270629][T14520] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2241.295421][T14520] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2241.316874][T14520] usb 9-1: Product: syz [ 2241.341055][T14520] usb 9-1: Manufacturer: syz [ 2241.485045][T18828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2241.492839][T19105] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2241.533788][T14520] cdc_wdm 9-1:1.0: skipping garbage [ 2241.576285][T14520] cdc_wdm 9-1:1.0: skipping garbage [ 2241.622526][T14520] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 2241.655415][T14520] cdc_wdm 9-1:1.0: Unknown control protocol [ 2241.799400][T19105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2241.857460][T19105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2241.985000][T18828] 8021q: adding VLAN 0 to HW filter on device team0 [ 2242.029498][T19105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.093053][T19105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2242.152798][T17737] usb 9-1: USB disconnect, device number 21 [ 2242.159733][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 2242.160056][ T8059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2242.335810][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 2242.343388][T10352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2242.838106][T19127] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 2245.309420][T19133] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2247.718763][T19171] loop9: detected capacity change from 0 to 64 [ 2247.833315][T19173] binder: BINDER_SET_CONTEXT_MGR already set [ 2247.864981][T19173] binder: 19172:19173 ioctl 4018620d 200000004a80 returned -16 [ 2247.980090][T19171] overlayfs: upper fs needs to support d_type. [ 2248.027024][T19176] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2248.078229][T19171] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2248.128892][T19171] overlayfs: failed to set xattr on upper [ 2248.163098][T19171] overlayfs: ...falling back to redirect_dir=nofollow. [ 2248.168500][T18788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2248.965277][T19184] netlink: 'syz.8.2113': attribute type 10 has an invalid length. [ 2249.048033][T19182] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2113'. [ 2249.069192][T19184] bond0: (slave syzkaller0): Enslaving as an active interface with an up link [ 2249.138349][T19171] overlayfs: ...falling back to index=off. [ 2249.161182][T19171] overlayfs: ...falling back to uuid=null. [ 2249.175202][T19171] overlayfs: conflicting lowerdir path [ 2249.175799][T19185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2249.387316][T19179] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2249.537419][T18788] veth0_vlan: entered promiscuous mode [ 2249.673352][T18788] veth1_vlan: entered promiscuous mode [ 2249.957843][T18828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2250.971966][T18788] veth0_macvtap: entered promiscuous mode [ 2251.298372][T18788] veth1_macvtap: entered promiscuous mode [ 2251.987754][T19210] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2252.036432][T18788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2252.070669][T18828] veth0_vlan: entered promiscuous mode [ 2252.106757][T19203] netlink: 1028 bytes leftover after parsing attributes in process `syz.4.2118'. [ 2252.228000][T18788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2252.397292][T18828] veth1_vlan: entered promiscuous mode [ 2252.470904][T11127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2252.520930][T11127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2253.231164][T19216] loop8: detected capacity change from 0 to 32768 [ 2253.247002][T19216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2122 (19216) [ 2253.269406][T12245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2253.287550][T19216] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2253.299116][T19216] BTRFS info (device loop8): using crc32c checksum algorithm [ 2253.328156][T12245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2253.435245][T19216] BTRFS info (device loop8): enabling ssd optimizations [ 2253.442853][T19216] BTRFS info (device loop8): turning on flush-on-commit [ 2253.450169][T19216] BTRFS info (device loop8): enabling free space tree [ 2253.457108][T19216] BTRFS info (device loop8): force zlib compression, level 3 [ 2253.464919][T19216] BTRFS info (device loop8): max_inline set to 4096 [ 2253.546773][T19216] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2253.659302][T16184] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2253.788983][ T5232] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2254.282577][T18828] veth0_macvtap: entered promiscuous mode [ 2254.467560][T18828] veth1_macvtap: entered promiscuous mode [ 2254.697846][T19253] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 2254.880527][T18828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2255.038854][T18828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2255.220021][T18863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.260545][T18863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.378099][T18863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.428878][T18863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2256.264315][T19276] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2258.241721][T19301] loop9: detected capacity change from 0 to 1024 [ 2258.389020][T19301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 2258.501233][T16239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2258.514754][T16239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2258.526092][T16239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2258.546201][T16239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2258.561872][T16239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2258.792226][T19301] loop9: detected capacity change from 1024 to 64 [ 2259.334021][ T29] audit: type=1800 audit(1780760371.665:59): pid=19319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2141" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 2259.644211][ T5232] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2260.351649][T10352] smc: removing ib device syz1 [ 2260.432941][T19118] syz1: Port: 1 Link DOWN [ 2260.448557][T19334] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2260.600763][T16239] Bluetooth: hci1: command tx timeout [ 2260.703868][T10352] smbdirect: ib_dev[syz1] removed [ 2262.026217][T10353] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2262.506873][T10353] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2262.700203][T16239] Bluetooth: hci1: command tx timeout [ 2262.881872][T10353] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.238844][T10353] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.402558][T19304] kmmpd-loop9: attempt to access beyond end of device [ 2263.402558][T19304] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 2263.472037][T19304] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 2263.551576][T19304] EXT4-fs error (device loop9): kmmpd:182: comm kmmpd-loop9: Error writing to MMP block [ 2264.176106][T16177] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2264.196127][T16177] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2264.208999][T16177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2264.240898][T16177] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2264.257110][T16177] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2264.763093][T16177] Bluetooth: hci1: command tx timeout [ 2265.566268][T18455] kworker/u8:3: attempt to access beyond end of device [ 2265.566268][T18455] loop9: rw=1, sector=224, nr_sectors = 2 limit=64 [ 2265.623764][T18455] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 112) [ 2265.636054][T18455] EXT4-fs (loop9): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 2265.649528][T18455] buffer_io_error: 24 callbacks suppressed [ 2265.649601][T18455] Buffer I/O error on device loop9, logical block 112 [ 2265.664406][T18455] kworker/u8:3: attempt to access beyond end of device [ 2265.664406][T18455] loop9: rw=1, sector=286, nr_sectors = 58 limit=64 [ 2265.680369][T18455] EXT4-fs warning (device loop9): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 143) [ 2265.704829][T18455] EXT4-fs (loop9): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 2265.981669][T18455] Buffer I/O error on device loop9, logical block 143 [ 2265.988952][T18455] Buffer I/O error on device loop9, logical block 144 [ 2265.995884][T18455] Buffer I/O error on device loop9, logical block 145 [ 2266.002798][T18455] Buffer I/O error on device loop9, logical block 146 [ 2266.009705][T18455] Buffer I/O error on device loop9, logical block 147 [ 2266.166908][T18455] Buffer I/O error on device loop9, logical block 148 [ 2266.173873][T18455] Buffer I/O error on device loop9, logical block 149 [ 2266.180794][T18455] Buffer I/O error on device loop9, logical block 150 [ 2266.187704][T18455] Buffer I/O error on device loop9, logical block 151 [ 2266.430600][T16177] Bluetooth: hci2: command tx timeout [ 2266.841432][T16177] Bluetooth: hci1: command tx timeout [ 2267.320520][T17856] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 2267.967936][T19304] kmmpd-loop9: attempt to access beyond end of device [ 2267.967936][T19304] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 2268.056659][T19304] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 2268.207528][T10353] bridge_slave_1: left allmulticast mode [ 2268.277133][T10353] bridge_slave_1: left promiscuous mode [ 2268.307244][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 2268.440422][T16177] Bluetooth: hci2: command tx timeout [ 2268.440956][T10353] bridge_slave_0: left allmulticast mode [ 2268.506433][T10353] bridge_slave_0: left promiscuous mode [ 2268.545577][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.335177][T10353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2269.359376][T10353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2269.380440][T10353] bond0 (unregistering): Released all slaves [ 2269.419876][ T5232] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2269.687212][T10353] hsr_slave_0: left promiscuous mode [ 2269.722121][T10353] hsr_slave_1: left promiscuous mode [ 2269.743935][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2269.757703][T10353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2269.796486][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2269.831605][T10353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2269.901950][T10353] veth1_macvtap: left promiscuous mode [ 2269.931888][T10353] veth0_macvtap: left promiscuous mode [ 2269.944081][T10353] veth1_vlan: left promiscuous mode [ 2269.958626][T10353] veth0_vlan: left promiscuous mode [ 2270.340429][T14518] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2270.522266][T16177] Bluetooth: hci2: command tx timeout [ 2270.547947][T14518] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2270.586107][T14518] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2270.631201][T14518] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2270.660031][T14518] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.698939][T14518] usb 9-1: config 0 descriptor?? [ 2271.073967][T16239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2271.092285][T16239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2271.110928][T16239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2271.141482][T16239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2271.158832][T16239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2271.235171][T14518] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 2271.304806][T14518] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 2271.427732][T19390] netlink: 'syz.8.2157': attribute type 28 has an invalid length. [ 2271.466391][T19390] netlink: 'syz.8.2157': attribute type 3 has an invalid length. [ 2271.525487][T19390] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2157'. [ 2271.526520][T14518] cp2112 0003:10C4:EA90.001A: error requesting version [ 2271.536102][T19405] cp2112 0003:10C4:EA90.001A: pid 19405 passed too short report [ 2271.576873][T10353] team0 (unregistering): Port device team_slave_1 removed [ 2271.677747][T14518] cp2112 0003:10C4:EA90.001A: probe with driver cp2112 failed with error -32 [ 2271.697812][T10353] team0 (unregistering): Port device team_slave_0 removed [ 2272.601728][T16177] Bluetooth: hci2: command tx timeout [ 2272.754320][ T5232] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2272.769324][T19415] bridge0: port 3(syz_tun) entered disabled state [ 2272.776631][T19415] bridge0: port 2(bridge_slave_1) entered disabled state [ 2272.785049][T19415] bridge0: port 1(bridge_slave_0) entered disabled state [ 2272.839220][T19415] bridge0: entered allmulticast mode [ 2273.194043][T10353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2273.255710][T16177] Bluetooth: hci3: command tx timeout [ 2273.300034][ T8715] usb 9-1: USB disconnect, device number 22 [ 2273.306606][T19418] syz_tun: left allmulticast mode [ 2273.323602][T19418] syz_tun: left promiscuous mode [ 2273.329745][T19418] bridge0: port 3(syz_tun) entered disabled state [ 2273.378911][T19418] bridge_slave_1: left allmulticast mode [ 2273.415965][T19418] bridge_slave_1: left promiscuous mode [ 2273.437285][T19418] bridge0: port 2(bridge_slave_1) entered disabled state [ 2273.494425][T19418] bridge_slave_0: left allmulticast mode [ 2273.504281][T19418] bridge_slave_0: left promiscuous mode [ 2273.523876][T19418] bridge0: port 1(bridge_slave_0) entered disabled state [ 2273.808624][T10353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2274.577143][T10353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.051943][T10353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.650485][T16177] Bluetooth: hci3: command tx timeout [ 2276.932234][T10353] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.975935][T19308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.010068][T19308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2277.026254][T19308] bridge_slave_0: entered allmulticast mode [ 2277.036969][T19308] bridge_slave_0: entered promiscuous mode [ 2277.170738][T19308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.183778][T19308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2277.193289][T19308] bridge_slave_1: entered allmulticast mode [ 2277.239756][T19308] bridge_slave_1: entered promiscuous mode [ 2277.407158][T10353] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2277.612235][T12928] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2277.659182][T19308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2277.721177][T16177] Bluetooth: hci3: command tx timeout [ 2277.732008][T19308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2277.775617][T12928] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2277.825497][T12928] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2277.842389][T12928] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2277.857891][T10353] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2277.870060][T12928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.900517][T12928] usb 9-1: config 0 descriptor?? [ 2278.125523][T10353] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.217747][T19308] team0: Port device team_slave_0 added [ 2278.322578][T19308] team0: Port device team_slave_1 added [ 2278.345526][T12928] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 2278.392265][T12928] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 2278.551238][T19461] netlink: 'syz.8.2168': attribute type 28 has an invalid length. [ 2278.583643][T19461] netlink: 'syz.8.2168': attribute type 3 has an invalid length. [ 2278.623924][T19461] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2168'. [ 2278.627875][T12928] cp2112 0003:10C4:EA90.001B: error requesting version [ 2278.643838][T19466] cp2112 0003:10C4:EA90.001B: pid 19466 passed too short report [ 2278.697725][T12928] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -32 [ 2278.750640][T19359] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.780673][T19359] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.788724][T19359] bridge_slave_0: entered allmulticast mode [ 2278.812883][T19359] bridge_slave_0: entered promiscuous mode [ 2278.873067][T19308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2278.889485][T19308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2278.932618][T19308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2278.954612][T19308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2278.963789][T19308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2279.014352][T19308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2279.035987][T19359] bridge0: port 2(bridge_slave_1) entered blocking state [ 2279.069558][T19359] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.110239][T19359] bridge_slave_1: entered allmulticast mode [ 2279.147544][T19359] bridge_slave_1: entered promiscuous mode [ 2279.753911][T19359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2279.801242][T16177] Bluetooth: hci3: command tx timeout [ 2279.954170][T19359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2280.062581][T19308] hsr_slave_0: entered promiscuous mode [ 2280.078708][T19308] hsr_slave_1: entered promiscuous mode [ 2280.088060][T19308] debugfs: 'hsr0' already exists in 'hsr' [ 2280.096252][T19308] Cannot create hsr debugfs directory [ 2280.215287][T10353] bridge_slave_1: left allmulticast mode [ 2280.223878][T10353] bridge_slave_1: left promiscuous mode [ 2280.235333][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.256414][T10353] bridge_slave_0: left allmulticast mode [ 2280.266898][T10353] bridge_slave_0: left promiscuous mode [ 2280.278899][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.316658][T10353] bridge_slave_1: left allmulticast mode [ 2280.323133][T10353] bridge_slave_1: left promiscuous mode [ 2280.367520][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.426584][T10353] bridge_slave_0: left allmulticast mode [ 2280.441481][T10353] bridge_slave_0: left promiscuous mode [ 2280.456992][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.472696][ T5682] usb 9-1: USB disconnect, device number 23 [ 2282.549359][T10353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2282.595568][T10353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2282.606373][T19496] loop8: detected capacity change from 0 to 16 [ 2282.623975][T19496] erofs (device loop8): mounted with root inode @ nid 36. [ 2282.654703][T19496] erofs (device loop8): not enough plain data on disk @ la 1024 of nid 36 [ 2282.666665][T19496] erofs (device loop8): read error -117 @ 0 of nid 36 [ 2282.682877][T19496] erofs (device loop8): not enough plain data on disk @ la 1024 of nid 36 [ 2282.687666][T10353] bond0 (unregistering): Released all slaves [ 2282.706790][T19496] erofs (device loop8): read error -117 @ 0 of nid 36 [ 2283.186808][T10353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2283.206158][T10353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2283.239479][T10353] bond0 (unregistering): Released all slaves [ 2283.329050][T19359] team0: Port device team_slave_0 added [ 2283.526633][T19359] team0: Port device team_slave_1 added [ 2283.786371][T19359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2283.816230][T19359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2283.845855][T19359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2284.076264][T19359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2284.096666][T19359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2284.157697][T19359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2284.656252][T10353] hsr_slave_0: left promiscuous mode [ 2284.666210][T10353] hsr_slave_1: left promiscuous mode [ 2284.675626][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2284.686266][T10353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2284.694322][T10180] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2284.715073][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2284.723738][T10353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2284.750440][T10353] hsr_slave_0: left promiscuous mode [ 2284.760675][T10353] hsr_slave_1: left promiscuous mode [ 2284.768625][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2284.785538][T10353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2284.798914][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2284.808125][T10353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2284.847169][T10353] veth1_macvtap: left promiscuous mode [ 2284.853343][T10353] veth0_macvtap: left promiscuous mode [ 2284.866688][T10353] veth1_vlan: left promiscuous mode [ 2284.873305][T10353] veth0_vlan: left promiscuous mode [ 2284.886410][T10180] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2284.900247][T10353] veth1_macvtap: left promiscuous mode [ 2284.905990][T10353] veth0_macvtap: left promiscuous mode [ 2284.913036][T10180] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2284.923626][T10353] veth1_vlan: left promiscuous mode [ 2284.930576][T10180] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2284.940837][T10180] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.941890][T10353] veth0_vlan: left promiscuous mode [ 2284.961241][T10180] usb 9-1: config 0 descriptor?? [ 2285.419812][T10180] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 2285.458745][T10180] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 2285.632530][T10180] cp2112 0003:10C4:EA90.001C: error requesting version [ 2285.641124][T19509] cp2112 0003:10C4:EA90.001C: pid 19509 passed too short report [ 2285.668866][T10180] cp2112 0003:10C4:EA90.001C: probe with driver cp2112 failed with error -32 [ 2286.469124][T10353] team0 (unregistering): Port device team_slave_1 removed [ 2286.554916][T10353] team0 (unregistering): Port device team_slave_0 removed [ 2287.263949][T10353] team0 (unregistering): Port device team_slave_1 removed [ 2287.290824][T10353] team0 (unregistering): Port device team_slave_0 removed [ 2287.588079][ T8715] usb 9-1: USB disconnect, device number 24 [ 2287.825832][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2287.832795][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2287.907817][T19516] loop8: detected capacity change from 0 to 64 [ 2288.148462][ T29] audit: type=1800 audit(1780760400.485:60): pid=19516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2181" name="file7" dev="loop8" ino=30 res=0 errno=0 [ 2288.317206][T19359] hsr_slave_0: entered promiscuous mode [ 2288.380742][T19359] hsr_slave_1: entered promiscuous mode [ 2288.713913][T19523] random: crng reseeded on system resumption [ 2289.104051][T19399] bridge0: port 1(bridge_slave_0) entered blocking state [ 2289.122024][T19399] bridge0: port 1(bridge_slave_0) entered disabled state [ 2289.130391][T19399] bridge_slave_0: entered allmulticast mode [ 2289.139591][T19399] bridge_slave_0: entered promiscuous mode [ 2289.281923][T19399] bridge0: port 2(bridge_slave_1) entered blocking state [ 2289.295239][T19399] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.318317][T19399] bridge_slave_1: entered allmulticast mode [ 2289.329151][T19399] bridge_slave_1: entered promiscuous mode [ 2289.603416][T19399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2289.703691][T19399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2289.949518][T19399] team0: Port device team_slave_0 added [ 2290.052699][T19399] team0: Port device team_slave_1 added [ 2290.340724][T19399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2290.350517][T19399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2290.378718][T19399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2290.397364][T19399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2290.409009][T19399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2290.436256][ T8715] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 2290.436403][T19399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2290.698419][T19399] hsr_slave_0: entered promiscuous mode [ 2290.708988][T19399] hsr_slave_1: entered promiscuous mode [ 2290.718456][T19399] debugfs: 'hsr0' already exists in 'hsr' [ 2290.724737][T19399] Cannot create hsr debugfs directory [ 2291.567631][ T8715] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2292.117145][T19308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2292.178195][T19308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2292.293080][ T8715] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2292.303387][ T8715] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2292.312761][ T8715] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.340217][T19308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2292.351183][ T8715] usb 9-1: config 0 descriptor?? [ 2292.403298][T19308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2292.517894][T19308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2292.628434][T19308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2292.656222][T19308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2292.838357][T19308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2292.852694][ T8715] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 2292.918946][ T8715] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 2293.073645][ T8715] cp2112 0003:10C4:EA90.001D: error requesting version [ 2293.083672][T19534] cp2112 0003:10C4:EA90.001D: pid 19534 passed too short report [ 2293.147982][ T8715] cp2112 0003:10C4:EA90.001D: probe with driver cp2112 failed with error -32 [ 2293.496583][T19359] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2293.543884][T19359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2293.577442][T19359] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2293.637729][T19359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2293.669529][T19359] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2293.717935][T19359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2293.809082][T19359] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2293.881075][T19359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2294.257741][T19399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2294.301680][T12956] usb 9-1: USB disconnect, device number 25 [ 2294.388802][T19399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2294.446917][T19399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2294.533228][T19399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2294.598384][T19399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2294.675249][T19399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2294.695867][T19399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2294.767463][T19399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2295.224492][T19308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2295.426966][T19308] 8021q: adding VLAN 0 to HW filter on device team0 [ 2295.535613][T12242] bridge0: port 1(bridge_slave_0) entered blocking state [ 2295.543200][T12242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2295.704515][T19359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2295.748294][T12242] bridge0: port 2(bridge_slave_1) entered blocking state [ 2295.755870][T12242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2296.027460][T19359] 8021q: adding VLAN 0 to HW filter on device team0 [ 2296.115090][T19399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2296.142766][T18270] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.150314][T18270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2296.252315][T18270] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.259856][T18270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2296.458524][T19399] 8021q: adding VLAN 0 to HW filter on device team0 [ 2296.663679][T18455] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.671312][T18455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2296.703665][T18455] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.711224][T18455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2299.202802][T19308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2299.514977][T19359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2299.607587][T19308] veth0_vlan: entered promiscuous mode [ 2299.718561][T19308] veth1_vlan: entered promiscuous mode [ 2300.126674][T19359] veth0_vlan: entered promiscuous mode [ 2300.187983][T19399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2300.218738][T19308] veth0_macvtap: entered promiscuous mode [ 2300.273308][T19308] veth1_macvtap: entered promiscuous mode [ 2300.328749][T19359] veth1_vlan: entered promiscuous mode [ 2300.439456][T19308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2300.557705][T19308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2300.666026][T18270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.678614][T18270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.735044][T18270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.747690][T18270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.818766][T19359] veth0_macvtap: entered promiscuous mode [ 2300.971704][T19399] veth0_vlan: entered promiscuous mode [ 2300.981933][T19359] veth1_macvtap: entered promiscuous mode [ 2301.105654][T19399] veth1_vlan: entered promiscuous mode [ 2301.177243][T19359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2301.322064][T19359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2301.432751][T11127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.446463][T11127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.484793][T11127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.532667][T12242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.774536][T19399] veth0_macvtap: entered promiscuous mode [ 2301.875510][T19399] veth1_macvtap: entered promiscuous mode [ 2302.096992][T19399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2302.185312][T19399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2302.293322][ T8059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.310363][ T8059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.364925][ T8059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.395332][ T8059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2305.039026][T18270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2305.055363][T18270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2305.248066][ T8059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2305.267203][ T8059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2305.656535][T19727] loop3: detected capacity change from 0 to 1024 [ 2305.758731][T19727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 2305.864550][T12244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2305.916743][T12244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2306.020663][T19727] loop3: detected capacity change from 1024 to 64 [ 2306.103250][T12244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2306.151362][T12244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2307.146793][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2307.184312][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2307.200126][T18270] kworker/u8:2: attempt to access beyond end of device [ 2307.200126][T18270] loop3: rw=1, sector=224, nr_sectors = 2 limit=64 [ 2307.253821][T18270] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 112) [ 2307.266984][T18270] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 2307.297154][T18270] buffer_io_error: 20 callbacks suppressed [ 2307.297232][T18270] Buffer I/O error on device loop3, logical block 112 [ 2307.317774][T18455] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.331640][T18270] kworker/u8:2: attempt to access beyond end of device [ 2307.331640][T18270] loop3: rw=1, sector=286, nr_sectors = 42 limit=64 [ 2307.357934][T18270] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 143) [ 2307.375216][T18270] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 2307.419865][T18270] Buffer I/O error on device loop3, logical block 143 [ 2307.440013][T12242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2307.446543][T18270] Buffer I/O error on device loop3, logical block 144 [ 2307.454825][T18270] Buffer I/O error on device loop3, logical block 145 [ 2307.460115][T12242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2307.461708][T18270] Buffer I/O error on device loop3, logical block 146 [ 2307.461781][T18270] Buffer I/O error on device loop3, logical block 147 [ 2307.484574][T18270] Buffer I/O error on device loop3, logical block 148 [ 2307.491494][T18270] Buffer I/O error on device loop3, logical block 149 [ 2307.498425][T18270] Buffer I/O error on device loop3, logical block 150 [ 2307.505371][T18270] Buffer I/O error on device loop3, logical block 151 [ 2307.543316][T19308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 2307.562761][T18455] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.624310][T19728] kmmpd-loop3: attempt to access beyond end of device [ 2307.624310][T19728] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 2307.648743][T19728] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 2307.734807][T18455] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.943983][T18455] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.473253][T18455] bridge_slave_1: left allmulticast mode [ 2308.492864][T18455] bridge_slave_1: left promiscuous mode [ 2308.519230][T18455] bridge0: port 2(bridge_slave_1) entered disabled state [ 2308.556501][T18455] bridge_slave_0: left allmulticast mode [ 2308.580089][T18455] bridge_slave_0: left promiscuous mode [ 2308.586674][T18455] bridge0: port 1(bridge_slave_0) entered disabled state [ 2309.395641][T18455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2309.439857][T18455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2309.478761][T18455] bond0 (unregistering): Released all slaves [ 2309.926094][T18455] hsr_slave_0: left promiscuous mode [ 2309.936592][T18455] hsr_slave_1: left promiscuous mode [ 2309.948517][T18455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2309.957467][T18455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2309.968946][T18455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2309.977720][T18455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2310.003952][T18455] veth1_macvtap: left promiscuous mode [ 2310.009867][T18455] veth0_macvtap: left promiscuous mode [ 2310.015799][T18455] veth1_vlan: left promiscuous mode [ 2310.023986][T18455] veth0_vlan: left promiscuous mode [ 2310.333278][T19759] infiniband syz1: set active [ 2310.340228][T19759] infiniband syz1: added syz_tun [ 2310.348377][T19759] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 2310.372121][T19759] infiniband syz1: Couldn't open port 1 [ 2310.395468][T19759] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 2310.415049][T19759] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 2310.437341][T19759] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 2310.488702][T19759] RDS/IB: syz1: added [ 2310.509615][T19759] smc: adding ib device syz1 with port count 1 [ 2310.518405][T19759] smc: ib device syz1 port 1 has no pnetid [ 2310.787948][T18455] team0 (unregistering): Port device team_slave_1 removed [ 2310.832239][T18455] team0 (unregistering): Port device team_slave_0 removed [ 2325.863381][ T5232] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2326.688500][ T5232] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2327.534404][ T5232] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2328.380540][ T5232] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2329.208877][ T5232] 8021q: adding VLAN 0 to HW filter on device eth29 [ 2330.065532][ T5232] 8021q: adding VLAN 0 to HW filter on device eth30 [ 2330.911357][ T5232] 8021q: adding VLAN 0 to HW filter on device eth31 [ 2331.748524][ T5232] 8021q: adding VLAN 0 to HW filter on device eth32 [ 2332.596101][ T5232] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2333.457849][ T5232] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2334.325788][ T5232] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2335.182660][ T5232] 8021q: adding VLAN 0 to HW filter on device eth12 [ 2349.262390][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.277155][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2387.160135][T16239] Bluetooth: hci2: command 0x0406 tx timeout [ 2397.400509][T16239] Bluetooth: hci3: command 0x0406 tx timeout [ 2410.695025][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2410.701786][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.137209][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.158184][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2485.912291][T22578] ===================================================== [ 2485.919581][T22578] BUG: KMSAN: kernel-infoleak in irqentry_exit+0x48b/0xa00 [ 2485.926942][T22578] irqentry_exit+0x48b/0xa00 [ 2485.931626][T22578] exc_page_fault+0x7e/0xb0 [ 2485.936218][T22578] asm_exc_page_fault+0x2b/0x30 [ 2485.941172][T22578] [ 2485.943518][T22578] Local variable end_time.i.i created at: [ 2485.949259][T22578] __x64_sys_poll+0x87/0x540 [ 2485.953927][T22578] x64_sys_call+0x3130/0x3ea0 [ 2485.958682][T22578] [ 2485.961027][T22578] Bytes 0-3 of 4 are uninitialized [ 2485.966166][T22578] Memory access of size 4 starts at ffff8880441efe88 [ 2485.972889][T22578] Data copied to user address 00007ff8be998ac0 [ 2485.979112][T22578] [ 2485.981490][T22578] CPU: 0 UID: 0 PID: 22578 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(lazy) [ 2485.991450][T22578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2486.001551][T22578] ===================================================== [ 2486.008515][T22578] Disabling lock debugging due to kernel taint [ 2486.014699][T22578] Kernel panic - not syncing: kmsan.panic set ... [ 2486.021175][T22578] CPU: 0 UID: 0 PID: 22578 Comm: dhcpcd-run-hook Tainted: G B syzkaller #0 PREEMPT(lazy) [ 2486.032633][T22578] Tainted: [B]=BAD_PAGE [ 2486.036811][T22578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2486.046920][T22578] Call Trace: [ 2486.050232][T22578] [ 2486.053198][T22578] __dump_stack+0x26/0x30 [ 2486.057628][T22578] dump_stack_lvl+0x50/0x1c0 [ 2486.062292][T22578] ? dump_stack+0x12/0x25 [ 2486.066692][T22578] dump_stack+0x1e/0x25 [ 2486.070932][T22578] vpanic+0x7b4/0x1430 [ 2486.075173][T22578] panic+0x15d/0x160 [ 2486.079187][T22578] kmsan_report+0x31a/0x320 [ 2486.083795][T22578] ? kmsan_get_metadata+0xf1/0x160 [ 2486.088998][T22578] ? kmsan_internal_check_memory+0x1e8/0x240 [ 2486.095063][T22578] ? kmsan_copy_to_user+0xef/0x190 [ 2486.100260][T22578] ? irqentry_exit+0x48b/0xa00 [ 2486.105116][T22578] ? exc_page_fault+0x7e/0xb0 [ 2486.109885][T22578] ? asm_exc_page_fault+0x2b/0x30 [ 2486.114987][T22578] ? handle_mm_fault+0x2eb0/0x6ee0 [ 2486.120271][T22578] ? kmsan_get_metadata+0xf1/0x160 [ 2486.125564][T22578] ? kmsan_get_metadata+0xf1/0x160 [ 2486.130774][T22578] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2486.137196][T22578] kmsan_internal_check_memory+0x1e8/0x240 [ 2486.143109][T22578] kmsan_copy_to_user+0xef/0x190 [ 2486.148152][T22578] irqentry_exit+0x48b/0xa00 [ 2486.152859][T22578] exc_page_fault+0x7e/0xb0 [ 2486.157464][T22578] asm_exc_page_fault+0x2b/0x30 [ 2486.162391][T22578] RIP: 0033:0x7ff8beabe720 [ 2486.166862][T22578] Code: 54 c8 c0 48 8b 4c 24 08 48 8b 54 24 10 4c 8b 54 24 18 48 8b 44 24 60 48 89 4c 24 38 48 8d 0d a7 c4 12 00 e9 3c e8 ff ff 66 90 <41> 57 49 89 f7 41 56 41 55 49 89 d5 41 54 55 53 48 89 fb 4c 89 ff [ 2486.186560][T22578] RSP: 002b:00007ffebb136f48 EFLAGS: 00010246 [ 2486.192708][T22578] RAX: 0000000000000018 RBX: 00007ffebb136f50 RCX: 0000000000000000 [ 2486.200737][T22578] RDX: 00007ffebb137010 RSI: 00007ff8bece186a RDI: 00007ffebb136f50 [ 2486.208766][T22578] RBP: 00007ffebb137100 R08: 000055ecf3178ea2 R09: 0000000000000001 [ 2486.216787][T22578] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000201 [ 2486.224820][T22578] R13: 000055ecf3178ea1 R14: 0000000000000001 R15: 000055ecf3164c30 [ 2486.232892][T22578] [ 2486.236378][T22578] Kernel Offset: disabled [ 2486.240792][T22578] Rebooting in 86400 seconds..