last executing test programs: 6m38.77785196s ago: executing program 3 (id=194): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) 6m37.717770964s ago: executing program 3 (id=196): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948e"]) 6m33.966475106s ago: executing program 3 (id=204): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4, 0x4}, [{0x3, 0xffffffc0, 0x8001, 0x7, 0x6, 0x101, 0x10000009, 0x8}]}, 0x58) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 6m32.416926101s ago: executing program 3 (id=208): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4091, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000800)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x34, 0xb, 0x73, 0x7, 0x4, 0xf9, 0x2, 0x6f, 0x8, 0x7, 0xb, 0x3, 0x6, 0x3}, 0xe) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31830000000000000000190000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0xffffff21}, 0x0) recvmsg(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x100) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}}, 0x108) r6 = socket(0x10, 0x3, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000001100)={"36fb313a82ed75f4d860e07d097993970759a3a150cf9e233a4a568d22ed0af5"}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x24058094) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') 6m30.266917088s ago: executing program 3 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x400, 0x0, 0x4}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0/../file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x103, 0x51964420, 0x0, 0x7ff, 0x1000000, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) 6m28.51393499s ago: executing program 3 (id=216): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948e"]) 6m11.403992535s ago: executing program 32 (id=216): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948e"]) 3m39.717891912s ago: executing program 1 (id=550): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x7fff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r1, 0x1f) write$FUSE_ATTR(r0, &(0x7f0000000600)={0x78}, 0x78) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001a40)="a1"}) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 3m37.485240112s ago: executing program 1 (id=554): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000400)="6768c3d642afe6004589124d30570417f61593588dadc0de052073cedd4923896820c02ed68049318c7a3e8a23528cd317633bf5806428094d56158a43a934a005034edc8660459aa65eb322e27dda4d20ffeb80ceaed7", 0x57}, {&(0x7f0000000480)="acebb143eec0e927d35de36ef65e0ce440d6", 0x12}, {&(0x7f0000000580)="9a1d45dee080ba273da77d3dc62a77c1a454a8ffa51f2974710b2b4ad7f80bc5384654041c7347eeae5c43827ef717c76c88afd1067f71c4b2f22cf59d627a56c3779db8fefa61037a6de9666782fd4f4916914fe5983b765cf26287", 0x5c}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004680)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_retopts={{0x10}}], 0x30}}], 0x4, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3m36.827026386s ago: executing program 1 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x809b000}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet(0x2, 0x802, 0x1) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) write(r4, &(0x7f0000000080)="08008edf77", 0x5) readv(r4, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x6}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000bc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x30b080, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) 3m30.406026217s ago: executing program 1 (id=567): prlimit64(0x0, 0xe, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3m23.951259748s ago: executing program 1 (id=584): fanotify_init(0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$eJzs3U1rG9caAOB3xnbifNxrB0K4t4tiyKIpaaTY7kcKXaTL0oYG2n0qbMUEy1Gw5BC7gSaLZtNNCYVSGijtvvsuQ/9Af0WgDYQSTLvoxmXkkaPEki078kei54Gxz5kZ+ZxXM+/xGY2EAuhbY9mPNOL/EfF1EjHSsm0w8o1jq/stP745lS1JrKx88mcSSb6uuX+S/z6SV/4XEb9+GXE6Xd9ubXFptlSplOfzejGSa8Xa4tKZK3OlmfJM+erE5OS5tyYn3n3n7Z7F+vrFv7/7+P4H5746ufztzw+P3U3ifBzNt7XG8RxutVbGYix/Tobi/DM7jvegsf0k2esOsC0DeZ4PRTYGjMRAnvVtrYzsZteAHfZFltZAn0rkP/Sp5jygeW3fo+vgF8aj91cvgNbHP7j62kgMN66NDi8nT10ZZde7oz1oP2vjlz/u3c2W6N3rEACbunU7Is4ODq4f/5J8/Nu+s13s82wbxj/YPfez+c8b7eY/6dr8J9rMf460yd3t2Dz/04c9aKajbP73Xtv579pNq9GBvPafxpxvKLl8pVLOxrb/RsSpGDqY1Te4n/NZuvxgpdPG1vlftmTtN+eCeT8eDh58+jHTpXrpuYJu8eh2xCtt57/J2vFP2hz/7Pm42GUbJ8r3Xu20bfP4d9bKjxGvtT3+T+5oZaVifa7T/cli43woNs+K9f66c+K3Tu3vdfzZ8T+8cfyjSev92trW2/hh+J9yp23bPf8PJJ82ygfydTdK9fr8eMSB5KP16yeePLZZb+6fxX/q5MbjX7vz/1CW2F3Gf+f4ndZdh7cW/87K4p/e0vHfeuHBh59/36n97o7/m43SqXxNN+Nftx18nucOAAAAAAAA9ps0Io5GkhbWymlaKKy+v+N4HE4r1Vr99OXqwtXpaHxWdjSG0uad7pGW90OM5++HbdYnnqlPRsSxiPhm4FCjXpiqVqb3OngAAAAAAAAAAAAAAAAAAADYJ45EDLf7/H/m94G97h2w4zb4ym/gJdc5//MtvfimJ2Bfas3/g3vYD2D3mf9D/+oi/9Pd6Aew+/z/h/4l/6F/yX/oX/If+tdW8v+nCzvYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAHg5XLxwIVtWlh/fnMrq09cXF2ar189Ml2uzhbmFqcJUdf5aYaZanamUC1PVuc3+XqVavTY+EQs3ivVyrV6sLS5dmqsuXK1fujJXmilfKg/tSlQAAAAAAAAAAAAAAAAAAADwYqktLs2WKpXyvILCtgqD+6MbnQppfqLvl/68MIU9HpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMW/AQAA//+LGzah") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2111844, &(0x7f0000000100)=ANY=[@ANYBLOB='G\"\x00\x00', @ANYRESOCT, @ANYRES32], 0xf5, 0x2e5, &(0x7f0000000540)="$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") 3m20.915822587s ago: executing program 0 (id=589): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0xc0) 3m20.915534319s ago: executing program 1 (id=590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 3m20.674804883s ago: executing program 0 (id=592): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x20008016) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x700, 0x8000, 0x815b, 0x1ff, {{0xb, 0x4, 0x1, 0x2, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010100, {[@cipso={0x86, 0xb, 0xffffffffffffffff, [{0x2, 0x5, "bb2194"}]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0x8, [0xff]}, @generic={0x7, 0x3, "87"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) 3m19.855829056s ago: executing program 0 (id=593): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x809b000}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$inet(0x2, 0x802, 0x1) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) write(r4, &(0x7f0000000080)="08008edf77", 0x5) readv(r4, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x6}, 0x8) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000bc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x30b080, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) 3m13.395523428s ago: executing program 0 (id=606): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f00000001c0)={[{@dioread_lock}, {@nogrpid}, {@test_dummy_encryption}, {@debug}, {@nobarrier}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000500)="$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") open(&(0x7f00000004c0)='./bus\x00', 0x1430c3, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYRES64], 0x1001, 0x0) 3m10.839083171s ago: executing program 0 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2002000, 0x0) 3m8.405520457s ago: executing program 0 (id=614): openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4091, &(0x7f0000001040)=0xffb) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000800)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x34, 0xb, 0x73, 0x7, 0x4, 0xf9, 0x2, 0x6f, 0x8, 0x7, 0xb, 0x3, 0x6, 0x3}, 0xe) ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10) r4 = socket$inet6(0xa, 0x80001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31830000000000000000190000000c00"], 0x20}, 0x1, 0x0, 0x0, 0xffffff21}, 0x0) recvmsg(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x100) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}}, 0x108) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000001100)={"36fb313a82ed75f4d860e07d097993970759a3a150cf9e233a4a568d22ed0af5"}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10) io_uring_setup(0x2c38, &(0x7f0000001080)={0x0, 0x3888, 0x80, 0x2, 0x2be}) 3m4.632671544s ago: executing program 33 (id=590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 2m52.221399605s ago: executing program 34 (id=614): openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4091, &(0x7f0000001040)=0xffb) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000800)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x34, 0xb, 0x73, 0x7, 0x4, 0xf9, 0x2, 0x6f, 0x8, 0x7, 0xb, 0x3, 0x6, 0x3}, 0xe) ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10) r4 = socket$inet6(0xa, 0x80001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31830000000000000000190000000c00"], 0x20}, 0x1, 0x0, 0x0, 0xffffff21}, 0x0) recvmsg(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x100) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}}, 0x108) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000001100)={"36fb313a82ed75f4d860e07d097993970759a3a150cf9e233a4a568d22ed0af5"}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10) io_uring_setup(0x2c38, &(0x7f0000001080)={0x0, 0x3888, 0x80, 0x2, 0x2be}) 2m35.630889128s ago: executing program 6 (id=662): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0xffffffff) socket$inet_dccp(0x2, 0x6, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) io_setup(0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='gfs2\x00', 0x0, &(0x7f0000000980)='norecovery') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001005000000000000000000000000000a5c000000140a01010000000000000000000000040900010073797a30000000000900010073797a31000000000900020073797a31000000000900020073797a30000000000900010073797a31000000000900020073797a32002bab34e1697d467dd2f76860205034a0000000140000001000010000000000000000000200000ae08cccbcee786b9e9b1505d12860571bf0110c8de2cb3f48d5016b305c195d0c70b95f40af92bab6b003c91fafbdb7bed501107d2c527f2326518e38ec732a6c36dee18656f6f54b25c685b446fcfc6987cd65b6400f1757a4bc30fca78dcef2f1d64e927515ca94bdd9752e5729206c6bedd48a9e8ccd668e44a46e6419f0ebc1e38d4b21d0f0fcdb4f834f1d7720091f45edcea351406546c64feec651706715d1ddb12347beb81fcf3a5934d5c43923841918d6a7b892f4f13021d61a9ff98905d0b85d7cfb", @ANYRES16=r1], 0x84}, 0x1, 0x0, 0x0, 0x4044810}, 0x4000014) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x18) getpriority(0x1, 0x0) 2m34.531436272s ago: executing program 6 (id=664): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2m34.192576849s ago: executing program 6 (id=668): keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100)={0x0, 0x48, 0x85}, 0x0, &(0x7f00000004c0)="e2165a3d343d764ebf68e938a76cd1e47158e231ea8d7472a366d448d066b376d04feecdcdc191c521b4c284d6eb091897f75ddc84d842a0654801fc6821c081fb38b7742bb20031", &(0x7f0000000640)="b2df825767b8e33a1c9d74adab0d634e44f94e7a29eb7d6b928967fbe82173fd5835113d8d45442ed9a82041ef518e6d1d07b80229520c0bc4015130d476c4eb08c7e07756849607bc675b5cdbc5e712247e0f4fb041af78e949ad49ae1a79d08148409ef97f71997a4eeb8cc79e65697cca5e5d7faa5721966df39e8db1a48c4af923f28b") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 2m33.712998134s ago: executing program 6 (id=670): open(0x0, 0x60142, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x1001, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x0, 0x0) 2m31.321234612s ago: executing program 6 (id=673): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x200844, &(0x7f0000000540)={[{@uni_xlate}, {@shortname_winnt}, {@fat=@quiet}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@uni_xlateno}, {@utf8}, {@fat=@umask={'umask', 0x3d, 0xffffffffffffffff}}, {@utf8no}]}, 0x0, 0x274, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 2m29.804081322s ago: executing program 6 (id=676): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="41000000010001", 0x7) 2m13.391379355s ago: executing program 35 (id=676): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="41000000010001", 0x7) 1m58.230716336s ago: executing program 7 (id=738): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) 1m54.426497482s ago: executing program 7 (id=748): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000540)="31d4c25d2c2772f5ae276b5aef004df082f81a4b8232a60e1b29b92bfdebf1b5f222436f58bbaed651af61f70625bdf39ebd11422958a12b72af7368cca2d038afb8553d767b370928e1c36e3b026ca2c0f7455a29e8661e83420393dd7abf88a6157df28dc4b7a8ed44833c7b71007ef7e281685c518ae60e8946af57ae7989b91d2cd4386b589949efd56323024b20b063ea29d2a6aec79a1d172253a58058e6e13d6f083c48b6dbd98c29fec3642623c28cb14969f7094c7f2fecb42851404a71d91c", 0x1, 0x0, 0x2cb}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) chdir(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x4, 0xc, 0x4, 0xfff, 0x0, [{0x1, 0xb, 0x9d, '\x00', 0x94}, {0x6, 0x81, 0xc4, '\x00', 0x6}, {0xda, 0x8, 0x40, '\x00', 0x1}, {0x40, 0x3, 0xc0, '\x00', 0x4}, {0x4, 0xa, 0x1, '\x00', 0x3}, {0x3, 0xe, 0xb2, '\x00', 0x8}, {0xb, 0x6, 0xfc, '\x00', 0xe}, {0xb8, 0x7, 0x80, '\x00', 0x8}, {0xad, 0x6, 0x4}, {0x8e, 0x6, 0x4, '\x00', 0x8}, {0x3, 0x1, 0x20, '\x00', 0x80}, {0x6, 0x6, 0x2, '\x00', 0xdd}, {0x4, 0x6, 0x3, '\x00', 0xfa}, {0x2, 0x7, 0x5, '\x00', 0x5}, {0x9, 0x4, 0x6, '\x00', 0x5}, {0x1, 0xe7, 0x2, '\x00', 0x57}, {0x0, 0xd2, 0x9, '\x00', 0xb}, {0x5, 0x7, 0x8, '\x00', 0x8}, {0x3c, 0x7, 0x7f, '\x00', 0x4}, {0x5, 0x0, 0x3, '\x00', 0x90}, {0x9, 0xb, 0x9, '\x00', 0x4}, {0x27, 0x94, 0x0, '\x00', 0x8}, {0x4, 0x2b, 0x8, '\x00', 0x4}, {0x2, 0x8, 0x0, '\x00', 0x5}]}}) 1m53.22673111s ago: executing program 7 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x402) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000014c0)={0x1, 0x7f, 0x40, 0x10000, 0xa, 0x4}) 1m51.976042206s ago: executing program 7 (id=753): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m47.467496448s ago: executing program 7 (id=762): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x119, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0xb, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r8 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) kcmp(0x0, r8, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 1m44.844342662s ago: executing program 7 (id=764): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) 1m28.373506228s ago: executing program 36 (id=764): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r5 = dup(r4) sendfile(r4, r5, 0x0, 0x80006) 50.913138991s ago: executing program 4 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 38.233436466s ago: executing program 2 (id=887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) get_robust_list(0x0, &(0x7f0000000140)=0x0, 0x0) 37.8061972s ago: executing program 4 (id=890): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x119, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0xb, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r8 = getpgid(0x0) kcmp(r8, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 37.453847063s ago: executing program 2 (id=892): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_vlan\x00'}) socket$inet6(0xa, 0x80002, 0x0) unshare(0x62040200) gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtaction={0x48, 0x30, 0x201, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) 36.186900778s ago: executing program 2 (id=894): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r2 = socket(0x2b, 0x80000, 0x1) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000700)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x38, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfcc4, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004895}, 0x2404c0c4) 34.793346002s ago: executing program 4 (id=897): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) setgroups(0x24, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x2b, 0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) fcntl$setpipe(r3, 0x407, 0xff27) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0xffffff4c, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r5}) write$tun(r0, &(0x7f0000000880)={@val={0x0, 0x6006}, @val={0x1, 0x1, 0x5, 0x0, 0xc, 0x7}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x15, 0x24, 0x67, 0x0, 0x2d, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @local}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x8}}}}}, 0x32) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 33.212914562s ago: executing program 4 (id=898): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 31.223034791s ago: executing program 2 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 31.219382277s ago: executing program 4 (id=901): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000600)={[{@fat=@nfs}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@shortname_win95}, {@fat=@check_normal}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7}}]}, 0x0, 0x274, &(0x7f0000000280)="$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") io_setup(0xd, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 29.312579377s ago: executing program 4 (id=904): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x4, 0x72}, @typed={0x4, 0x43}]}]}, 0x1c}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e, 0x100}}) 24.230556249s ago: executing program 2 (id=913): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x119, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0xb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r7 = getpgid(r6) kcmp(r7, r6, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 22.193352862s ago: executing program 2 (id=916): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 12.595240786s ago: executing program 37 (id=904): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x1c, 0x21, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x4, 0x72}, @typed={0x4, 0x43}]}]}, 0x1c}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e, 0x100}}) 12.559836216s ago: executing program 9 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffd8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000040), 0x7f, 0x20000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 12.559425696s ago: executing program 8 (id=929): open(0x0, 0x60142, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x1001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x0, 0x0) 12.510748769s ago: executing program 5 (id=930): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4, 0x4}, [{0x3, 0xffffffc0, 0x8001, 0x7, 0x6, 0x101, 0x10000009, 0x8}]}, 0x58) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 10.44272353s ago: executing program 5 (id=931): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000000) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)={0x14, r1, 0x10, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 10.193460697s ago: executing program 8 (id=932): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x4082, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 10.085765834s ago: executing program 9 (id=933): syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee200009010902240001000000000904000000ff0100000724"], 0x0) 9.048106494s ago: executing program 5 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 8.774817601s ago: executing program 8 (id=935): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000002c0)={0x0, 0xd22e, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket$inet6(0xa, 0x6, 0xffffffff) socket$inet_dccp(0x2, 0x6, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) io_setup(0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='gfs2\x00', 0x0, &(0x7f0000000980)='norecovery') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r2], 0x84}, 0x1, 0x0, 0x0, 0x4044810}, 0x4000014) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x18) getpriority(0x1, 0x0) 8.378586316s ago: executing program 8 (id=936): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 8.014782214s ago: executing program 9 (id=937): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x10, &(0x7f00000014c0), 0x1, 0x79d, &(0x7f0000000800)="$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") syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x185) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 6.746463848s ago: executing program 9 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) 5.601099455s ago: executing program 38 (id=916): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 5.584836179s ago: executing program 5 (id=940): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 4.609498243s ago: executing program 5 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x400, 0x0, 0x4}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0/../file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x103, 0x51964420, 0x0, 0x7ff, 0x1000000, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) 2.428442873s ago: executing program 5 (id=942): socket(0x2, 0x80805, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r5, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) 2.246837226s ago: executing program 8 (id=943): finit_module(0xffffffffffffffff, 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000000) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)={0x14, r1, 0x10, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.582460012s ago: executing program 9 (id=944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x4082, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 214.100305ms ago: executing program 8 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x2400c0d8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="af74", 0x2}, {&(0x7f0000000440)="ed15eb7a3f717631b261f387472eea5a0cd1da499969042cfd4447fc3880da68da36e777d79f84b8c8750ab7a07e06928f2e", 0x32}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44000}, 0x80) recvmmsg$unix(r5, &(0x7f0000001540), 0x0, 0x2001, 0x0) 0s ago: executing program 9 (id=946): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") chdir(&(0x7f0000000400)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./bus\x00') kernel console output (not intermixed with test programs): d [ 156.949938][ T5837] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 157.059818][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 157.217186][ T977] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 158.172927][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.269935][ T977] usb 4-1: Product: syz [ 158.290662][ T977] usb 4-1: Manufacturer: syz [ 158.295351][ T977] usb 4-1: SerialNumber: syz [ 158.313108][ T977] usb 4-1: config 0 descriptor?? [ 158.547374][ T977] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 159.102238][ T6317] Invalid ELF header len 8 [ 159.601516][ T5838] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.820166][ T977] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 159.882346][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.213195][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.249013][ T5838] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 160.269463][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.407077][ T5838] usb 5-1: config 0 descriptor?? [ 160.423891][ T5838] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 161.116284][ T5838] usb 4-1: USB disconnect, device number 3 [ 161.519454][ T6338] geneve2: entered promiscuous mode [ 161.525039][ T6338] geneve2: entered allmulticast mode [ 162.243149][ T5837] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 162.338722][ T25] usb 5-1: USB disconnect, device number 3 [ 162.767804][ T6349] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 165.224633][ T977] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 165.356448][ T6370] geneve2: entered promiscuous mode [ 165.362004][ T6370] geneve2: entered allmulticast mode [ 165.669553][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.700934][ T5933] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.709171][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.740941][ T977] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 165.766000][ T977] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 165.778981][ T977] usb 2-1: Manufacturer: syz [ 165.798470][ T977] usb 2-1: config 0 descriptor?? [ 165.879761][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 165.897770][ T5933] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 165.918816][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.935923][ T5933] usb 4-1: Product: syz [ 165.946373][ T5933] usb 4-1: Manufacturer: syz [ 165.960389][ T5933] usb 4-1: SerialNumber: syz [ 165.993267][ T5933] usb 4-1: config 0 descriptor?? [ 166.231416][ T5933] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 166.559231][ T977] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 166.720839][ T6381] syz.2.140: attempt to access beyond end of device [ 166.720839][ T6381] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 166.734403][ T6381] gfs2: error -5 reading superblock [ 167.332009][ T977] usb 2-1: USB disconnect, device number 3 [ 167.735272][ T5933] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 167.860403][ T46] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.371374][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 169.293413][ T46] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.881388][ T46] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.908614][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 170.135718][ T46] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 170.215140][ T46] usb 5-1: Product: syz [ 170.244395][ T46] usb 5-1: Manufacturer: syz [ 170.463246][ T46] usb 5-1: can't set config #4, error -71 [ 170.603875][ T46] usb 5-1: USB disconnect, device number 4 [ 170.604487][ T8] usb 4-1: USB disconnect, device number 4 [ 170.946090][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 171.921071][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 175.486356][ T5905] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 175.614883][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 175.810171][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 175.851591][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 175.906441][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.938743][ T8] usb 2-1: Product: syz [ 175.953923][ T8] usb 2-1: Manufacturer: syz [ 175.964009][ T8] usb 2-1: SerialNumber: syz [ 175.982572][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.023161][ T8] usb 2-1: config 0 descriptor?? [ 176.023465][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 176.070180][ T5882] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.089398][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.131966][ T5905] usb 3-1: config 0 descriptor?? [ 176.146081][ T5905] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 176.235134][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 176.257890][ T5882] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.273608][ T5882] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.273872][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 176.287079][ T5882] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 176.304300][ T5882] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 176.314448][ T5882] usb 4-1: Product: syz [ 176.318764][ T5882] usb 4-1: Manufacturer: syz [ 176.412060][ T5882] hub 4-1:4.0: USB hub found [ 176.614064][ T5882] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 176.735287][ T6446] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 176.743356][ T6446] netlink: 224 bytes leftover after parsing attributes in process `syz.0.161'. [ 176.843219][ T5882] usb 4-1: USB disconnect, device number 5 [ 177.330951][ T8] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 177.481358][ T6460] syz.4.166: attempt to access beyond end of device [ 177.481358][ T6460] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 177.494532][ T6460] exFAT-fs (nbd4): unable to read boot sector [ 177.500952][ T6460] exFAT-fs (nbd4): failed to read boot sector [ 177.507126][ T6460] exFAT-fs (nbd4): failed to recognize exfat type [ 178.381844][ T5933] usb 3-1: USB disconnect, device number 3 [ 178.490481][ T5882] usb 2-1: USB disconnect, device number 4 [ 179.922381][ T5837] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 180.469993][ T6484] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 180.626796][ T6484] netlink: 224 bytes leftover after parsing attributes in process `syz.2.172'. [ 181.950409][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.150217][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 182.163070][ T5905] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.208567][ T5905] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.250023][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 182.263717][ T5905] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 182.318484][ T5905] usb 3-1: Product: syz [ 182.335869][ T5905] usb 3-1: Manufacturer: syz [ 182.360153][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 182.387100][ T5905] hub 3-1:4.0: USB hub found [ 182.529837][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 182.548761][ T8] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 182.563349][ T8] usb 1-1: config 0 has no interface number 0 [ 182.590223][ T5905] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 182.613667][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 182.625793][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.663654][ T8] usb 1-1: Product: syz [ 182.688537][ T8] usb 1-1: Manufacturer: syz [ 182.699469][ T8] usb 1-1: SerialNumber: syz [ 182.707264][ T5905] usb 3-1: USB disconnect, device number 4 [ 182.724618][ T8] usb 1-1: config 0 descriptor?? [ 182.737741][ T8] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 182.972618][ T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 183.038965][ T8] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 183.054539][ T6501] veth1_vlan: left promiscuous mode [ 183.123643][ T6501] netlink: 'syz.1.180': attribute type 2 has an invalid length. [ 183.472840][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 183.510102][ T8] usb 1-1: USB disconnect, device number 2 [ 183.871137][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 183.888397][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 183.965493][ T8] quatech2 1-1:0.51: device disconnected [ 184.098119][ T6508] Invalid ELF header len 8 [ 184.807917][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 184.985274][ T6514] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 184.993062][ T6514] netlink: 224 bytes leftover after parsing attributes in process `syz.4.184'. [ 190.440608][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 190.500632][ T46] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.866434][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 190.880110][ T46] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 190.889273][ T46] usb 4-1: config 0 has no interface number 0 [ 190.900938][ T46] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 190.910399][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.918523][ T46] usb 4-1: Product: syz [ 190.939545][ T46] usb 4-1: Manufacturer: syz [ 190.965973][ T46] usb 4-1: SerialNumber: syz [ 190.984677][ T46] usb 4-1: config 0 descriptor?? [ 191.016289][ T46] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 191.162414][ T6560] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 191.170492][ T6560] netlink: 224 bytes leftover after parsing attributes in process `syz.2.198'. [ 191.258411][ T46] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 191.334511][ T46] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 191.987256][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 191.999267][ T8] usb 4-1: USB disconnect, device number 6 [ 192.021931][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 192.471669][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 192.711438][ T8] quatech2 4-1:0.51: device disconnected [ 193.298435][ T6576] Invalid ELF header len 8 [ 196.277793][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 196.902565][ T6596] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 196.910442][ T6596] netlink: 224 bytes leftover after parsing attributes in process `syz.0.210'. [ 199.392138][ T1023] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.452873][ T6617] netlink: 'syz.1.217': attribute type 12 has an invalid length. [ 199.658199][ T1023] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.687609][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.694131][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.884933][ T1023] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.253425][ T1023] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.609859][ T6629] syz.2.220: attempt to access beyond end of device [ 201.609859][ T6629] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 201.623759][ T6629] gfs2: error -5 reading superblock [ 202.660386][ T1023] bridge_slave_1: left allmulticast mode [ 202.689703][ T1023] bridge_slave_1: left promiscuous mode [ 202.818453][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.768008][ T6642] netlink: 'syz.1.222': attribute type 1 has an invalid length. [ 203.775858][ T6642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.222'. [ 203.987628][ T1023] bridge_slave_0: left allmulticast mode [ 203.999816][ T1023] bridge_slave_0: left promiscuous mode [ 204.020034][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.296601][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.333450][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.370381][ T1023] bond0 (unregistering): Released all slaves [ 208.573325][ T6682] trusted_key: syz.0.229 sent an empty control message without MSG_MORE. [ 208.928992][ T6689] syz.2.231: attempt to access beyond end of device [ 208.928992][ T6689] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 208.942835][ T6689] gfs2: error -5 reading superblock [ 209.870078][ T8] IPVS: starting estimator thread 0... [ 210.000532][ T6695] IPVS: using max 21 ests per chain, 50400 per kthread [ 210.599346][ T6706] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 210.612970][ T6706] netlink: 224 bytes leftover after parsing attributes in process `syz.2.234'. [ 211.250784][ T1023] hsr_slave_0: left promiscuous mode [ 211.338083][ T1023] hsr_slave_1: left promiscuous mode [ 211.357586][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.403440][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.443213][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.479115][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.591491][ T1023] veth1_macvtap: left promiscuous mode [ 211.597619][ T1023] veth0_macvtap: left promiscuous mode [ 211.634146][ T1023] veth1_vlan: left promiscuous mode [ 211.653414][ T1023] veth0_vlan: left promiscuous mode [ 217.123281][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 217.129384][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 217.136246][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 217.456793][ T6752] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 217.464556][ T6752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.247'. [ 217.478636][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 217.669301][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 217.839981][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.849216][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.859293][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.871891][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.881361][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.899793][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.521771][ T6763] overlayfs: failed to resolve './file0': -2 [ 219.572037][ T6726] batman_adv: batadv0: Adding interface: dummy0 [ 219.578521][ T6726] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.604303][ T6726] batman_adv: batadv0: Interface activated: dummy0 [ 219.629166][ T6727] batadv0: mtu less than device minimum [ 219.653203][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.666299][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.678973][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.691695][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.704356][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.717036][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.729765][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.742564][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 219.755235][ T6727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 220.037177][ T5834] Bluetooth: hci2: command tx timeout [ 220.215559][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 221.867041][ T6759] chnl_net:caif_netlink_parms(): no params data found [ 222.180776][ T5834] Bluetooth: hci2: command tx timeout [ 224.083471][ T6801] netlink: 'syz.2.258': attribute type 1 has an invalid length. [ 224.091193][ T6801] netlink: 224 bytes leftover after parsing attributes in process `syz.2.258'. [ 224.251214][ T5834] Bluetooth: hci2: command tx timeout [ 224.525976][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.555549][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.579974][ T6759] bridge_slave_0: entered allmulticast mode [ 224.892704][ T6821] syz.0.259 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 224.906840][ T6759] bridge_slave_0: entered promiscuous mode [ 225.651580][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.731220][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.738512][ T6759] bridge_slave_1: entered allmulticast mode [ 225.750030][ T6759] bridge_slave_1: entered promiscuous mode [ 226.316281][ T5834] Bluetooth: hci2: command tx timeout [ 226.652169][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.264'. [ 226.976617][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.019596][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.633145][ T6759] team0: Port device team_slave_0 added [ 227.654786][ T6759] team0: Port device team_slave_1 added [ 228.543039][ T6850] can0: slcan on ttyS3. [ 228.680531][ T6851] can0 (unregistered): slcan off ttyS3. [ 230.133270][ T6863] netlink: 'syz.4.269': attribute type 1 has an invalid length. [ 230.141140][ T6863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.269'. [ 230.152444][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.183259][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.257991][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.306756][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.337913][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.659783][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.922143][ T6759] hsr_slave_0: entered promiscuous mode [ 230.970599][ T6759] hsr_slave_1: entered promiscuous mode [ 230.977852][ T6759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.306824][ T6759] Cannot create hsr debugfs directory [ 232.178619][ T6891] netlink: 48 bytes leftover after parsing attributes in process `syz.2.275'. [ 232.896871][ T6892] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.657633][ T6898] netlink: 256 bytes leftover after parsing attributes in process `syz.2.276'. [ 233.719935][ T6898] netlink: 48 bytes leftover after parsing attributes in process `syz.2.276'. [ 233.989736][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.029744][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.134122][ T6759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.220245][ T6759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.261197][ T6759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.331922][ T6759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.903338][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.085980][ T6759] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.192564][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.199838][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.272591][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.279884][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.515677][ T6919] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 237.523914][ T6919] netlink: 224 bytes leftover after parsing attributes in process `syz.1.282'. [ 239.084696][ T6942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.285'. [ 239.898695][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.900636][ T6973] lo speed is unknown, defaulting to 1000 [ 242.906782][ T6973] lo speed is unknown, defaulting to 1000 [ 242.915669][ T6973] lo speed is unknown, defaulting to 1000 [ 242.929962][ T6973] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 242.947847][ T6973] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 242.987221][ T6973] lo speed is unknown, defaulting to 1000 [ 242.994643][ T6973] lo speed is unknown, defaulting to 1000 [ 243.002651][ T6973] lo speed is unknown, defaulting to 1000 [ 243.010434][ T6973] lo speed is unknown, defaulting to 1000 [ 243.017522][ T6973] lo speed is unknown, defaulting to 1000 [ 243.129787][ T6979] syz.2.292: attempt to access beyond end of device [ 243.129787][ T6979] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 243.143456][ T6979] gfs2: error -5 reading superblock [ 243.347087][ T6759] veth0_vlan: entered promiscuous mode [ 243.470998][ T6759] veth1_vlan: entered promiscuous mode [ 243.992749][ T6759] veth0_macvtap: entered promiscuous mode [ 244.055530][ T6759] veth1_macvtap: entered promiscuous mode [ 244.164414][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.236800][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.266903][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.299729][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.354779][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.379847][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.417937][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.446183][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.484084][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.526477][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.579687][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.631750][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.678753][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.719567][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.750258][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.769771][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.795897][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.093885][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.321325][ T7008] netlink: 48 bytes leftover after parsing attributes in process `syz.4.297'. [ 245.568838][ T6759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.795430][ T6759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.843813][ T6759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.882485][ T6759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.154020][ T7007] netlink: 'syz.1.298': attribute type 12 has an invalid length. [ 246.346168][ T7017] 9pnet_fd: Insufficient options for proto=fd [ 246.502687][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.515137][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.648117][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.680878][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.773654][ T7049] syz.4.305: attempt to access beyond end of device [ 249.773654][ T7049] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 249.787458][ T7049] gfs2: error -5 reading superblock [ 250.771408][ T7067] netlink: 48 bytes leftover after parsing attributes in process `syz.5.309'. [ 255.254944][ T7093] netlink: 'syz.1.315': attribute type 12 has an invalid length. [ 255.969780][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 256.122284][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.158533][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.198962][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 256.229503][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.301076][ T8] usb 6-1: config 0 descriptor?? [ 256.786112][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 256.971041][ T8] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 257.153083][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 257.359977][ T8] usb 6-1: USB disconnect, device number 2 [ 257.527802][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 257.579036][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.639803][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 257.652034][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.731239][ T25] usb 3-1: config 0 descriptor?? [ 257.777934][ T25] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 259.273399][ T5187] bcm5974 3-1:0.0: could not read from device [ 259.680398][ T5187] bcm5974 3-1:0.0: could not read from device [ 259.720979][ T25] usb 3-1: USB disconnect, device number 5 [ 260.585957][ T7145] syz.1.326: attempt to access beyond end of device [ 260.585957][ T7145] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 260.599773][ T7145] exFAT-fs (nbd1): unable to read boot sector [ 260.605897][ T7145] exFAT-fs (nbd1): failed to read boot sector [ 260.612268][ T7145] exFAT-fs (nbd1): failed to recognize exfat type [ 261.117024][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.123512][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.885407][ T7216] syz.1.343: attempt to access beyond end of device [ 267.885407][ T7216] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 267.925059][ T7216] gfs2: error -5 reading superblock [ 272.224336][ T7246] lo speed is unknown, defaulting to 1000 [ 273.690520][ T7272] syz.4.356: attempt to access beyond end of device [ 273.690520][ T7272] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 273.703661][ T7272] gfs2: error -5 reading superblock [ 273.709266][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 273.720492][ T7273] syz.0.355: attempt to access beyond end of device [ 273.720492][ T7273] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 273.735469][ T7273] exFAT-fs (nbd0): unable to read boot sector [ 273.741636][ T7273] exFAT-fs (nbd0): failed to read boot sector [ 273.747722][ T7273] exFAT-fs (nbd0): failed to recognize exfat type [ 273.876650][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.913482][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.949016][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 273.979322][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.017163][ T8] usb 6-1: config 0 descriptor?? [ 275.261633][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 275.279318][ T8] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 275.302528][ T8] usb 6-1: USB disconnect, device number 3 [ 275.382630][ T7292] lo speed is unknown, defaulting to 1000 [ 278.175396][ T7342] syz.1.369: attempt to access beyond end of device [ 278.175396][ T7342] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 278.188361][ T7342] exFAT-fs (nbd1): unable to read boot sector [ 278.196977][ T7342] exFAT-fs (nbd1): failed to read boot sector [ 278.203173][ T7342] exFAT-fs (nbd1): failed to recognize exfat type [ 282.479734][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.381'. [ 283.353322][ T7367] syz.1.377 (7367): drop_caches: 2 [ 289.650083][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 291.589552][ T7446] netlink: 'syz.0.392': attribute type 12 has an invalid length. [ 291.607224][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.393'. [ 296.600189][ T5933] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 296.790422][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 296.832895][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 297.025606][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 297.058817][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 297.085867][ T5933] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 297.105602][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.139790][ T5933] usb 2-1: Product: syz [ 297.144010][ T5933] usb 2-1: Manufacturer: syz [ 297.179747][ T5933] usb 2-1: SerialNumber: syz [ 297.277278][ T5933] usb 2-1: config 0 descriptor?? [ 297.331693][ T5933] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 297.409768][ T5933] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22 [ 297.469353][ T5933] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 299.803272][ T9] usb 2-1: USB disconnect, device number 5 [ 302.200142][ T5834] block nbd5: Receive control failed (result -32) [ 302.236133][ T5834] block nbd5: Receive control failed (result -32) [ 302.305817][ T7525] block nbd5: shutting down sockets [ 302.682413][ T7540] loop2: detected capacity change from 0 to 1024 [ 303.129845][ T5882] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 304.342036][ T5882] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 304.473748][ T5882] usb 3-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config [ 304.494218][ T5882] usb 3-1: config 0 has no interface number 0 [ 304.500910][ T5882] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 3845, setting to 64 [ 304.576351][ T5882] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.654752][ T5882] usb 3-1: config 0 interface 52 has no altsetting 0 [ 304.673738][ T5882] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 304.702077][ T5882] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 304.834246][ T5882] usb 3-1: Product: syz [ 304.839060][ T5882] usb 3-1: Manufacturer: syz [ 305.019985][ T5882] usb 3-1: SerialNumber: syz [ 305.046584][ T5882] usb 3-1: config 0 descriptor?? [ 305.614033][ T5882] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input6 [ 305.806164][ T5882] usb 3-1: USB disconnect, device number 6 [ 305.812138][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 306.741923][ T5958] hfsplus: b-tree write err: -5, ino 4 [ 307.460015][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 307.710013][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 307.969743][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.003777][ T9] usb 2-1: config 0 has no interfaces? [ 308.050666][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 308.079455][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.093227][ T7580] loop0: detected capacity change from 0 to 2048 [ 308.132022][ T9] usb 2-1: Product: syz [ 308.136252][ T9] usb 2-1: Manufacturer: syz [ 308.187235][ T9] usb 2-1: SerialNumber: syz [ 308.188458][ T7580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.285561][ T9] usb 2-1: config 0 descriptor?? [ 308.923443][ T5905] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 309.334464][ T5905] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 309.359755][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.411996][ T5905] usb 1-1: config 0 descriptor?? [ 309.457466][ T5905] usb 1-1: Invalid firmware size=18. [ 309.722319][ T5905] usb 1-1: USB disconnect, device number 3 [ 311.042896][ T5905] usb 2-1: USB disconnect, device number 6 [ 311.334056][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 312.523311][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.576855][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.658367][ T9] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 312.710299][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 312.718357][ T9] usb 3-1: Manufacturer: syz [ 312.808222][ T7619] netlink: 'syz.0.427': attribute type 12 has an invalid length. [ 312.834201][ T9] usb 3-1: config 0 descriptor?? [ 313.576667][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 313.604708][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 313.655405][ T9] usb 3-1: USB disconnect, device number 7 [ 315.060844][ T7631] syz.0.429 (7631): drop_caches: 2 [ 317.868881][ T7671] netlink: 'syz.0.439': attribute type 12 has an invalid length. [ 318.109943][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 318.302746][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.340814][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.362170][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 318.377232][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.409101][ T25] usb 5-1: config 0 descriptor?? [ 319.534849][ T7678] capability: warning: `syz.0.443' uses deprecated v2 capabilities in a way that may be insecure [ 319.659854][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 319.710654][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 319.735131][ T25] usb 5-1: USB disconnect, device number 5 [ 321.388721][ T7692] syz.0.447: attempt to access beyond end of device [ 321.388721][ T7692] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 321.405886][ T7692] gfs2: error -5 reading superblock [ 322.584342][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.072548][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.378635][ T7703] loop5: detected capacity change from 0 to 128 [ 323.409123][ T7703] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 323.692312][ T7703] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 323.906472][ T52] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 323.952066][ T7710] netlink: 'syz.0.453': attribute type 12 has an invalid length. [ 331.649741][ T5933] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 331.832663][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.570518][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.599759][ T5882] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 332.626211][ T5933] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 332.711154][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.760898][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 332.776795][ T5933] usb 6-1: config 0 descriptor?? [ 332.792224][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short [ 332.821623][ T5882] usb 2-1: config 5 has an invalid interface number: 39 but max is 0 [ 333.406623][ T5882] usb 2-1: config 5 has no interface number 0 [ 333.440003][ T5882] usb 2-1: config 5 interface 39 altsetting 74 endpoint 0xA has invalid wMaxPacketSize 0 [ 333.460755][ T5882] usb 2-1: config 5 interface 39 has no altsetting 0 [ 333.501981][ T5882] usb 2-1: New USB device found, idVendor=0403, idProduct=e0ed, bcdDevice=1f.1f [ 333.565728][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.575016][ T5882] usb 2-1: Product: syz [ 333.579456][ T5882] usb 2-1: Manufacturer: syz [ 333.614164][ T5882] usb 2-1: SerialNumber: syz [ 334.080220][ T5933] usbhid 6-1:0.0: can't add hid device: -71 [ 334.086349][ T5933] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 334.202941][ T5933] usb 6-1: USB disconnect, device number 4 [ 334.251367][ T5882] ftdi_sio 2-1:5.39: FTDI USB Serial Device converter detected [ 334.372523][ T5882] ftdi_sio ttyUSB0: unknown device type: 0x1f1f [ 334.518201][ T5882] usb 2-1: USB disconnect, device number 7 [ 334.536733][ T5882] ftdi_sio 2-1:5.39: device disconnected [ 336.984171][ T7804] syz.1.484: attempt to access beyond end of device [ 336.984171][ T7804] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 336.997723][ T7804] gfs2: error -5 reading superblock [ 337.929966][ T5905] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 338.101925][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 338.128247][ T5905] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.177192][ T5905] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.202903][ T5905] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 338.229927][ T5905] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 338.259686][ T5905] usb 1-1: Product: syz [ 338.264164][ T5905] usb 1-1: Manufacturer: syz [ 338.326110][ T5905] hub 1-1:4.0: USB hub found [ 338.799811][ T5905] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 339.001308][ T5905] usb 1-1: USB disconnect, device number 4 [ 340.192114][ T7824] loop0: detected capacity change from 0 to 1024 [ 340.560076][ T5933] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 341.079810][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 341.221529][ T5933] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 341.259770][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.321505][ T5933] usb 2-1: Product: syz [ 341.325723][ T5933] usb 2-1: Manufacturer: syz [ 341.362872][ T5933] usb 2-1: SerialNumber: syz [ 341.430298][ T5933] usb 2-1: config 0 descriptor?? [ 342.149886][ T7826] warning: `syz.1.491' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 342.257211][ T5933] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 342.329262][ T5933] usb 2-1: USB disconnect, device number 8 [ 342.463184][ T7841] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 345.110568][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 347.509168][ T7889] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 348.019845][ T7896] loop5: detected capacity change from 0 to 1024 [ 351.048815][ T7916] syz.1.518: attempt to access beyond end of device [ 351.048815][ T7916] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 351.080589][ T7916] gfs2: error -5 reading superblock [ 352.859833][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 353.204065][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 353.224301][ T25] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.288756][ T25] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.685440][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 354.472938][ T25] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 354.552347][ T25] usb 6-1: Product: syz [ 354.649694][ T25] usb 6-1: Manufacturer: syz [ 354.700431][ T25] usb 6-1: can't set config #4, error -71 [ 354.788633][ T7946] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 354.897827][ T25] usb 6-1: USB disconnect, device number 5 [ 361.737228][ T7985] loop4: detected capacity change from 0 to 256 [ 361.815982][ T7985] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0xd8e97c99, utbl_chksum : 0xe619d30d) [ 362.079675][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 362.260339][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 362.271383][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.289866][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.331547][ T7991] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 362.367051][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 362.400635][ T8] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 362.426970][ T8] usb 1-1: Product: syz [ 362.441232][ T8] usb 1-1: Manufacturer: syz [ 362.503538][ T8] hub 1-1:4.0: USB hub found [ 363.058123][ T7996] loop5: detected capacity change from 0 to 2048 [ 363.126714][ T7996] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.800706][ C0] hrtimer: interrupt took 35889 ns [ 364.590911][ T8] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 364.905876][ T8] usb 1-1: USB disconnect, device number 5 [ 365.276385][ T8] IPVS: starting estimator thread 0... [ 365.400595][ T8011] IPVS: using max 18 ests per chain, 43200 per kthread [ 368.775529][ T8025] loop1: detected capacity change from 0 to 2048 [ 368.947612][ T8025] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 368.992132][ T8025] UDF-fs: Scanning with blocksize 512 failed [ 369.070125][ T8025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.828048][ T5829] UDF-fs: warning (device loop1): udf_evict_inode: Inode 830 (mode 100000) has inode size 36352 different from extent length 36864. Filesystem need not be standards compliant. [ 369.895111][ T8033] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 371.849725][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 372.019723][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 372.037646][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.114443][ T8] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.168482][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 372.321801][ T8] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 372.359920][ T8] usb 2-1: Product: syz [ 372.364287][ T8] usb 2-1: Manufacturer: syz [ 372.846147][ T8] hub 2-1:4.0: USB hub found [ 375.869017][ T8069] 9pnet: p9_errstr2errno: server reported unknown error …u¼“d [ 376.748678][ T8] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 376.830777][ T8] usb 2-1: USB disconnect, device number 9 [ 377.901879][ T8092] loop2: detected capacity change from 0 to 2048 [ 378.316247][ T8092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.415848][ T8092] ======================================================= [ 378.415848][ T8092] WARNING: The mand mount option has been deprecated and [ 378.415848][ T8092] and is ignored by this kernel. Remove the mand [ 378.415848][ T8092] option from the mount to silence this warning. [ 378.415848][ T8092] ======================================================= [ 380.027138][ T8114] loop4: detected capacity change from 0 to 1024 [ 381.389735][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 381.518697][ T11] hfsplus: b-tree write err: -5, ino 4 [ 381.859752][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 381.873520][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.884846][ T8] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.932314][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 381.969075][ T8130] loop4: detected capacity change from 0 to 164 [ 381.976582][ T8] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 381.994934][ T8] usb 1-1: Product: syz [ 381.999145][ T8] usb 1-1: Manufacturer: syz [ 382.066548][ T8] hub 1-1:4.0: USB hub found [ 382.150265][ T8130] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 382.267796][ T8] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 382.413680][ T8] usb 1-1: USB disconnect, device number 6 [ 384.006885][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.014519][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.141179][ T8141] loop1: detected capacity change from 0 to 1024 [ 384.266409][ T8141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.809922][ T29] audit: type=1804 audit(1738949398.111:2): pid=8141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.584" name="/newroot/115/bus/file1" dev="loop1" ino=15 res=1 errno=0 [ 386.361152][ T5829] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /115/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 386.434213][ T5829] EXT4-fs error (device loop1): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 386.474096][ T8147] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 386.531093][ T5829] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 386.580207][ T5829] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /115/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 387.230326][ T5829] EXT4-fs error (device loop1): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 387.328842][ T5829] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 387.329456][ T5829] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /115/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 387.339502][ T5829] EXT4-fs error (device loop1): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 387.355794][ T5829] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 387.356364][ T5829] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /115/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 387.358948][ T5829] EXT4-fs error (device loop1): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 387.384364][ T5829] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 387.384979][ T5829] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /115/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 387.429392][ T5829] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 387.454723][ T5829] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 387.456384][ T5829] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 387.477192][ T5829] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 387.768042][ T5829] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 387.780626][ T5829] EXT4-fs warning (device loop1): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 388.069902][ T5884] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 388.123629][ T8175] netlink: 'syz.2.594': attribute type 3 has an invalid length. [ 388.259643][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 388.383285][ T5884] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.506350][ T5884] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.556182][ T5884] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 389.294807][ T5884] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 389.344925][ T5884] usb 1-1: Product: syz [ 389.349166][ T5884] usb 1-1: Manufacturer: syz [ 389.443066][ T5884] hub 1-1:4.0: USB hub found [ 389.565447][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.580897][ T8184] loop2: detected capacity change from 0 to 128 [ 389.642930][ T8184] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 389.686297][ T8184] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.890574][ T7183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.181915][ T8190] syz.4.599: attempt to access beyond end of device [ 390.181915][ T8190] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 390.217233][ T7183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.269697][ T8190] gfs2: error -5 reading superblock [ 391.766220][ T7183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.593672][ T7183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.525246][ T5884] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 393.810907][ T5884] usb 1-1: USB disconnect, device number 7 [ 394.449228][ T7183] bridge_slave_1: left allmulticast mode [ 394.486718][ T8217] loop0: detected capacity change from 0 to 512 [ 394.810662][ T8217] EXT4-fs (loop0): Test dummy encryption mode enabled [ 394.817467][ T8217] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 394.960634][ T8217] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 395.428985][ T7183] bridge_slave_1: left promiscuous mode [ 395.450055][ T8217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 395.458087][ T8217] System zones: 1-12 [ 395.471888][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.573787][ T7183] bridge_slave_0: left allmulticast mode [ 395.579493][ T7183] bridge_slave_0: left promiscuous mode [ 395.594029][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.669724][ T8217] EXT4-fs (loop0): 1 truncate cleaned up [ 395.699995][ T8217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.176085][ T8217] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4 [ 396.224521][ T8229] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 396.499014][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.731310][ T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 400.039725][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 400.055490][ T46] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.079464][ T7183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.092198][ T46] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.118436][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 400.187651][ T46] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 400.237622][ T46] usb 5-1: Product: syz [ 400.245435][ T7183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.252659][ T46] usb 5-1: Manufacturer: syz [ 400.331567][ T46] hub 5-1:4.0: USB hub found [ 400.371892][ T7183] bond0 (unregistering): Released all slaves [ 402.217366][ T7183] hsr_slave_0: left promiscuous mode [ 402.264254][ T7183] hsr_slave_1: left promiscuous mode [ 402.329016][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.377559][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.885605][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.934413][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.175746][ T7183] veth1_macvtap: left promiscuous mode [ 403.196255][ T7183] veth0_macvtap: left promiscuous mode [ 403.481467][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 403.511827][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 403.520327][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 403.532480][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 403.549459][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 403.557115][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 403.667478][ T46] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 403.800848][ T46] usb 5-1: USB disconnect, device number 6 [ 404.261265][ T8279] loop5: detected capacity change from 0 to 2048 [ 404.328415][ T8279] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.303161][ T7183] team0 (unregistering): Port device team_slave_1 removed [ 405.680239][ T5842] Bluetooth: hci0: command tx timeout [ 406.323642][ T7183] team0 (unregistering): Port device team_slave_0 removed [ 407.750060][ T5842] Bluetooth: hci0: command tx timeout [ 408.213140][ T8274] lo speed is unknown, defaulting to 1000 [ 409.415349][ T977] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 409.619411][ T977] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 409.727204][ T977] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.769819][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.839831][ T5842] Bluetooth: hci0: command tx timeout [ 409.845472][ T977] usb 3-1: Product: syz [ 409.885337][ T8274] chnl_net:caif_netlink_parms(): no params data found [ 409.892413][ T977] usb 3-1: Manufacturer: syz [ 409.922849][ T977] usb 3-1: SerialNumber: syz [ 410.157646][ T8304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 410.193542][ T7183] IPVS: stop unused estimator thread 0... [ 410.219818][ T5905] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 410.365857][ T8274] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.385142][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.397943][ T8274] bridge_slave_0: entered allmulticast mode [ 410.419079][ T8274] bridge_slave_0: entered promiscuous mode [ 410.429802][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 410.441836][ T8274] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.449696][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.456426][ T5905] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.457119][ T8274] bridge_slave_1: entered allmulticast mode [ 410.495299][ T8274] bridge_slave_1: entered promiscuous mode [ 410.521435][ T5905] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.581246][ T5905] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 410.606891][ T5905] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 410.635171][ T5905] usb 5-1: Product: syz [ 410.647921][ T5905] usb 5-1: Manufacturer: syz [ 410.701221][ T5905] hub 5-1:4.0: USB hub found [ 410.717087][ T8274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.755151][ T8274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.838747][ T8304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 411.037632][ T8274] team0: Port device team_slave_0 added [ 411.081791][ T977] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 411.120486][ T977] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 411.137157][ T8274] team0: Port device team_slave_1 added [ 411.150787][ T977] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 411.327976][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.362339][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.407120][ T8274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.554324][ T977] cdc_ncm 3-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 411.568027][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.575426][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.627827][ T977] usb 3-1: USB disconnect, device number 8 [ 411.644063][ T977] cdc_ncm 3-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 411.653660][ T5905] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 411.665146][ T8274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.781516][ T5905] usb 5-1: USB disconnect, device number 7 [ 411.920386][ T5842] Bluetooth: hci0: command tx timeout [ 412.054766][ T8274] hsr_slave_0: entered promiscuous mode [ 412.076786][ T8274] hsr_slave_1: entered promiscuous mode [ 412.112725][ T8274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.124871][ T8274] Cannot create hsr debugfs directory [ 412.394199][ T8338] loop2: detected capacity change from 0 to 256 [ 412.575895][ T8338] FAT-fs (loop2): Directory bread(block 64) failed [ 412.597666][ T8338] FAT-fs (loop2): Directory bread(block 65) failed [ 412.631788][ T8338] FAT-fs (loop2): Directory bread(block 66) failed [ 412.653738][ T8338] FAT-fs (loop2): Directory bread(block 67) failed [ 412.687968][ T8338] FAT-fs (loop2): Directory bread(block 68) failed [ 412.719410][ T8338] FAT-fs (loop2): Directory bread(block 69) failed [ 412.759089][ T8338] FAT-fs (loop2): Directory bread(block 70) failed [ 412.780660][ T8338] FAT-fs (loop2): Directory bread(block 71) failed [ 412.804987][ T8338] FAT-fs (loop2): Directory bread(block 72) failed [ 412.824295][ T8338] FAT-fs (loop2): Directory bread(block 73) failed [ 413.383881][ T8274] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 413.439011][ T8274] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 413.507554][ T8274] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 413.558076][ T8274] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 414.536941][ T8274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.537764][ T8356] Bluetooth: MGMT ver 1.23 [ 414.675504][ T8274] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.808014][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.815342][ T7183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.853493][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.860790][ T7183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.267290][ T8367] loop2: detected capacity change from 0 to 512 [ 415.476665][ T8367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.579882][ T8367] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.716784][ T29] audit: type=1800 audit(1738949429.131:3): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.634" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 416.436681][ T8367] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.630989][ T5834] Bluetooth: hci0: command 0x0401 tx timeout [ 416.631744][ T5842] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 416.854518][ T8274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.358250][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.371767][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.381362][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.390205][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.405106][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 417.412974][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.644583][ T8397] lo speed is unknown, defaulting to 1000 [ 417.929680][ T977] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 418.139785][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 418.189475][ T977] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.219792][ T977] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.258863][ T977] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 418.494834][ T977] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 418.614330][ T8417] loop4: detected capacity change from 0 to 2048 [ 418.622115][ T977] usb 3-1: Product: syz [ 418.645433][ T977] usb 3-1: Manufacturer: syz [ 418.691257][ T977] hub 3-1:4.0: USB hub found [ 418.739413][ T8417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.841586][ T8417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.153936][ T8397] chnl_net:caif_netlink_parms(): no params data found [ 419.288481][ T8274] veth0_vlan: entered promiscuous mode [ 419.510134][ T5842] Bluetooth: hci1: command tx timeout [ 419.646733][ T8432] 9pnet: p9_errstr2errno: server reported unknown error › ÑZ+†Tø [ 419.902147][ T8274] veth1_vlan: entered promiscuous mode [ 419.913955][ T8397] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.965865][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.987265][ T8397] bridge_slave_0: entered allmulticast mode [ 420.022005][ T8397] bridge_slave_0: entered promiscuous mode [ 420.078635][ T8397] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.105993][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.149462][ T8397] bridge_slave_1: entered allmulticast mode [ 420.316636][ T8397] bridge_slave_1: entered promiscuous mode [ 420.686864][ T977] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 420.879851][ T977] usb 3-1: USB disconnect, device number 9 [ 421.147456][ T8397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.170229][ T8441] loop4: detected capacity change from 0 to 512 [ 421.185354][ T8397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.219349][ T8441] ext4: Unknown parameter 'noacl' [ 421.399691][ T8] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 421.578112][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 421.579175][ T8397] team0: Port device team_slave_0 added [ 421.590167][ T5842] Bluetooth: hci1: command tx timeout [ 421.619838][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 421.622197][ T8397] team0: Port device team_slave_1 added [ 421.638072][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.659829][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 421.698561][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.720594][ T8] usb 3-1: config 0 descriptor?? [ 421.727710][ T8443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.937461][ T8456] loop5: detected capacity change from 0 to 8 [ 422.945278][ T8274] veth0_macvtap: entered promiscuous mode [ 422.987406][ T8397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.027956][ T8397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.061195][ T8456] SQUASHFS error: lzo decompression failed, data probably corrupt [ 423.069445][ T8456] SQUASHFS error: Failed to read block 0x91: -5 [ 423.101812][ T8] magicmouse 0003:05AC:0265.0002: ignoring exceeding usage max [ 423.109470][ T8456] SQUASHFS error: Unable to read metadata cache entry [8f] [ 423.120095][ T8397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.149635][ T8456] SQUASHFS error: Unable to read inode 0x11f [ 423.173548][ T8397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.181539][ T8] magicmouse 0003:05AC:0265.0002: hidraw0: USB HID v0.30 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 423.207125][ T8397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.309630][ T8397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.358356][ T8] usb 3-1: USB disconnect, device number 10 [ 423.423291][ T8274] veth1_macvtap: entered promiscuous mode [ 423.480835][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 423.641128][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 423.657562][ T8397] hsr_slave_0: entered promiscuous mode [ 423.672288][ T5842] Bluetooth: hci1: command tx timeout [ 423.675025][ T8397] hsr_slave_1: entered promiscuous mode [ 423.685024][ T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 423.704306][ T9] usb 6-1: config 0 has an invalid descriptor of length 205, skipping remainder of the config [ 423.716003][ T8397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.729646][ T9] usb 6-1: config 0 has no interface number 0 [ 423.744825][ T8397] Cannot create hsr debugfs directory [ 423.755026][ T9] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 423.780044][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.788124][ T9] usb 6-1: Product: syz [ 423.800235][ T9] usb 6-1: Manufacturer: syz [ 423.812163][ T9] usb 6-1: SerialNumber: syz [ 423.833053][ T9] usb 6-1: config 0 descriptor?? [ 423.855271][ T9] usb 6-1: Found UVC 0.00 device syz (046c:14e8) [ 423.872071][ T9] usb 6-1: No valid video chain found. [ 424.032424][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.069648][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.102438][ T9] usb 6-1: USB disconnect, device number 6 [ 424.123843][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.173546][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.198977][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.231860][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.253370][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.273318][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.291886][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.531196][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.557187][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.575106][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.615665][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.636833][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.657494][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.679168][ T8274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.696535][ T8274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.751640][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.812747][ T8274] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.842654][ T8274] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.861388][ T8274] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.893518][ T8274] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.760490][ T5842] Bluetooth: hci1: command tx timeout [ 425.899703][ T5882] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 426.129831][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 426.147331][ T5882] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.188081][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.222567][ T5882] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.261813][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.289069][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 426.299359][ T5882] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 426.324583][ T5882] usb 3-1: Product: syz [ 426.330112][ T5882] usb 3-1: Manufacturer: syz [ 426.395440][ T5882] hub 3-1:4.0: USB hub found [ 426.530183][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.575102][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.804539][ T8397] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 426.875831][ T8397] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 426.974490][ T8397] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 427.716962][ T8397] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 428.446592][ T8500] loop5: detected capacity change from 0 to 256 [ 428.469322][ T5882] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 429.384297][ T5882] usb 3-1: USB disconnect, device number 11 [ 429.416374][ T8500] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 429.532047][ T29] audit: type=1800 audit(1738949442.961:4): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.656" name="bus" dev="loop5" ino=114 res=0 errno=0 [ 429.658907][ T8397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.841730][ T8397] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.930854][ T8516] syz.2.658: attempt to access beyond end of device [ 429.930854][ T8516] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 429.944222][ T8516] exFAT-fs (nbd2): unable to read boot sector [ 429.952096][ T8516] exFAT-fs (nbd2): failed to read boot sector [ 429.959618][ T8516] exFAT-fs (nbd2): failed to recognize exfat type [ 431.067083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.074371][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.592908][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.600198][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.897734][ T8528] loop5: detected capacity change from 0 to 512 [ 432.002313][ T8397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.092737][ T8529] syz.6.662: attempt to access beyond end of device [ 432.092737][ T8529] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 432.110094][ T8529] gfs2: error -5 reading superblock [ 432.597639][ T8528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 432.629846][ T8528] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.199071][ T8544] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 433.265731][ T8547] fuse: Invalid rootmode [ 433.266264][ T6759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 433.313582][ T8547] veth0_to_team: entered promiscuous mode [ 433.319373][ T8547] veth0_to_team: entered allmulticast mode [ 433.536488][ T8397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.108423][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 434.130068][ T5884] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 434.671122][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 434.679314][ T5884] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.949692][ T5884] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.053274][ T8570] syz.6.670: attempt to access beyond end of device [ 435.053274][ T8570] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 435.068105][ T8570] exFAT-fs (nbd6): unable to read boot sector [ 435.075693][ T8570] exFAT-fs (nbd6): failed to read boot sector [ 435.081935][ T8570] exFAT-fs (nbd6): failed to recognize exfat type [ 436.540187][ T5884] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 436.549293][ T5884] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 436.579668][ T5884] usb 5-1: Product: syz [ 436.584041][ T5884] usb 5-1: Manufacturer: syz [ 437.285564][ T8583] loop6: detected capacity change from 0 to 128 [ 437.295400][ T8583] vfat: Bad value for 'umask' [ 437.574031][ T8587] loop2: detected capacity change from 0 to 256 [ 437.628046][ T5882] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 437.824495][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.877200][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.931252][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 438.021620][ T5882] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.091691][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.189894][ T5882] usb 6-1: config 0 descriptor?? [ 438.249751][ T5884] usb 5-1: can't set config #4, error -71 [ 438.289880][ T5884] usb 5-1: USB disconnect, device number 8 [ 438.544788][ T1143] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.634456][ T5882] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 438.635251][ T8598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 438.715962][ T5882] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 438.898055][ T1143] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.008050][ T8605] loop5: detected capacity change from 0 to 512 [ 439.050476][ T8605] EXT4-fs: Ignoring removed i_version option [ 439.056535][ T8605] EXT4-fs: Ignoring removed mblk_io_submit option [ 439.099756][ T8607] loop2: detected capacity change from 0 to 2048 [ 439.107590][ T1143] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.118798][ T8605] ext4: Unknown parameter 'euid' [ 439.135061][ T8607] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 439.173157][ T8607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.268080][ T1143] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.500331][ T8397] veth0_vlan: entered promiscuous mode [ 439.654833][ T8397] veth1_vlan: entered promiscuous mode [ 440.917099][ T8397] veth0_macvtap: entered promiscuous mode [ 440.923824][ T46] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 441.798083][ T5884] usb 6-1: USB disconnect, device number 7 [ 441.820997][ T8397] veth1_macvtap: entered promiscuous mode [ 442.033674][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.116965][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.181395][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.246543][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.291589][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.304103][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.319616][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.367905][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.443601][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.640378][ T5882] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 442.776706][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.968383][ T8397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.091402][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 443.126558][ T5882] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.190367][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.242509][ T5882] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.293482][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.339220][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 443.376650][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.391970][ T5882] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 443.416707][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.429695][ T5882] usb 5-1: Product: syz [ 443.433923][ T5882] usb 5-1: Manufacturer: syz [ 443.444051][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.459171][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.488786][ T5882] hub 5-1:4.0: USB hub found [ 443.505116][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.538665][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.550653][ T8397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.574011][ T8397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.606490][ T8397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.673987][ T8647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 443.708661][ T5882] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 443.722816][ T8397] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.772136][ T8397] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.789801][ T8397] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.802593][ T5882] usb 5-1: USB disconnect, device number 9 [ 443.821960][ T8397] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.855776][ T1143] bridge_slave_1: left allmulticast mode [ 443.877861][ T1143] bridge_slave_1: left promiscuous mode [ 443.901212][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.921337][ T1143] bridge_slave_0: left allmulticast mode [ 443.938224][ T1143] bridge_slave_0: left promiscuous mode [ 443.944534][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.446514][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.453455][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.307975][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 447.032703][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.131081][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.243001][ T1143] bond0 (unregistering): Released all slaves [ 448.435215][ T8682] overlayfs: missing 'workdir' [ 449.469889][ T8689] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 451.289681][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 452.128019][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.349631][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.470975][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 452.505567][ T25] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.540097][ T25] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.583037][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.591103][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 452.604635][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.616508][ T25] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 452.638003][ T25] usb 3-1: Product: syz [ 452.652027][ T25] usb 3-1: Manufacturer: syz [ 452.724511][ T25] hub 3-1:4.0: USB hub found [ 452.763720][ T1143] hsr_slave_0: left promiscuous mode [ 452.861422][ T1143] hsr_slave_1: left promiscuous mode [ 452.878058][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.929614][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.972420][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.001731][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.042183][ T8723] loop5: detected capacity change from 0 to 1024 [ 453.094409][ T1143] veth1_macvtap: left promiscuous mode [ 453.121777][ T8723] EXT4-fs: Ignoring removed orlov option [ 453.129669][ T1143] veth0_macvtap: left promiscuous mode [ 453.135489][ T1143] veth1_vlan: left promiscuous mode [ 453.157490][ T8723] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.192580][ T1143] veth0_vlan: left promiscuous mode [ 453.297695][ T8723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.695899][ T25] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 453.771907][ T25] usb 3-1: USB disconnect, device number 12 [ 454.259859][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 454.416807][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 454.470406][ T8] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 454.478554][ T8] usb 5-1: config 0 has no interface number 0 [ 454.509297][ T8] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 454.543543][ T8] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 454.583891][ T8] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 454.637703][ T8] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 454.733200][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.558649][ T8] usb 5-1: Product: syz [ 455.574964][ T8] usb 5-1: Manufacturer: syz [ 455.600899][ T8] usb 5-1: SerialNumber: syz [ 455.627313][ T8] usb 5-1: config 0 descriptor?? [ 455.650095][ T8732] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 455.669960][ T8732] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 455.845188][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.859660][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.878613][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.887948][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 455.897650][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 455.905416][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 456.318247][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 456.387094][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 457.248316][ T8743] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 457.440609][ T8745] lo speed is unknown, defaulting to 1000 [ 457.855224][ T25] usb 5-1: USB disconnect, device number 10 [ 457.989744][ T5842] Bluetooth: hci0: command tx timeout [ 458.665886][ T8] IPVS: starting estimator thread 0... [ 458.790393][ T8767] IPVS: using max 19 ests per chain, 45600 per kthread [ 460.306994][ T5842] Bluetooth: hci0: command tx timeout [ 461.567203][ T8745] chnl_net:caif_netlink_parms(): no params data found [ 462.389722][ T5842] Bluetooth: hci0: command tx timeout [ 463.175867][ T8801] loop4: detected capacity change from 0 to 8 [ 464.102623][ T8801] SQUASHFS error: Failed to read block 0x2d7: -5 [ 464.109031][ T8801] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 464.318650][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.368267][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.388590][ T8745] bridge_slave_0: entered allmulticast mode [ 464.436156][ T8745] bridge_slave_0: entered promiscuous mode [ 464.479831][ T5842] Bluetooth: hci0: command tx timeout [ 464.499147][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.520745][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.540684][ T8745] bridge_slave_1: entered allmulticast mode [ 464.588405][ T8745] bridge_slave_1: entered promiscuous mode [ 464.944079][ T8815] loop2: detected capacity change from 0 to 2048 [ 465.036689][ T8815] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 465.522132][ T8815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.355343][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.485046][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.830866][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.5.728'. [ 467.189315][ T8745] team0: Port device team_slave_0 added [ 467.304567][ T8745] team0: Port device team_slave_1 added [ 467.596118][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.640448][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.260504][ T8745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.283890][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.339662][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.484649][ T8745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.768819][ T8745] hsr_slave_0: entered promiscuous mode [ 468.807082][ T8745] hsr_slave_1: entered promiscuous mode [ 468.825299][ T8745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.844507][ T8745] Cannot create hsr debugfs directory [ 470.155824][ T8745] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 470.381800][ T8745] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 471.422731][ T8745] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 471.511773][ T8745] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 473.076642][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.204337][ T8745] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.294309][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.301670][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.379088][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.386373][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.579214][ T8745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.161859][ T8745] veth0_vlan: entered promiscuous mode [ 477.218334][ T8745] veth1_vlan: entered promiscuous mode [ 477.381466][ T8745] veth0_macvtap: entered promiscuous mode [ 477.421863][ T8745] veth1_macvtap: entered promiscuous mode [ 477.487916][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.886166][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.907247][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.957964][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.980217][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.039621][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.060219][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.092300][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.139570][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.169659][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.245851][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.275749][ T8973] netlink: 16 bytes leftover after parsing attributes in process `syz.5.758'. [ 478.839100][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.886091][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.929647][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.959786][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.979646][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.011758][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.042057][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.074820][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.105582][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.126942][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.171129][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.216567][ T8745] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.246380][ T8745] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.279648][ T8745] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.300486][ T8745] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.700423][ T7183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.708360][ T7183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.913503][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.078509][ T8986] loop7: detected capacity change from 0 to 256 [ 480.209348][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.387585][ T8397] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 482.432003][ T8397] FAT-fs (loop7): Filesystem has been set read-only [ 482.495248][ T8397] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 486.044100][ T9024] loop4: detected capacity change from 0 to 512 [ 486.150845][ T1143] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.249357][ T9024] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 486.433353][ T9024] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.770: invalid indirect mapped block 2683928664 (level 1) [ 486.521896][ T1143] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.567225][ T9024] EXT4-fs (loop4): Remounting filesystem read-only [ 486.657038][ T9024] EXT4-fs (loop4): 1 truncate cleaned up [ 486.731689][ T9024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.862011][ T1143] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.161103][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.203249][ T1143] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.386694][ T9043] loop8: detected capacity change from 0 to 256 [ 490.973654][ T1143] bridge_slave_1: left allmulticast mode [ 491.001223][ T1143] bridge_slave_1: left promiscuous mode [ 491.007030][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.123869][ T1143] bridge_slave_0: left allmulticast mode [ 491.146458][ T1143] bridge_slave_0: left promiscuous mode [ 491.191547][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.823640][ T9016] syz.2.766 (9016): drop_caches: 2 [ 492.860561][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.876865][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.889178][ T1143] bond0 (unregistering): Released all slaves [ 493.157862][ T9078] loop4: detected capacity change from 0 to 512 [ 493.201811][ T9067] lo speed is unknown, defaulting to 1000 [ 493.286934][ T9078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.320498][ T9078] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.781624][ T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 493.789438][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.217555][ T8] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 32 [ 494.234299][ T8] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 64 [ 494.244687][ T8] usb 9-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.284350][ T8] usb 9-1: config 1 interface 0 has no altsetting 0 [ 494.376764][ T8] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 494.502456][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.617855][ T8] usb 9-1: Product: syz [ 494.682759][ T8] usb 9-1: Manufacturer: syz [ 494.741616][ T8] usb 9-1: SerialNumber: syz [ 494.912550][ T9086] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 494.920909][ T9086] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 495.208753][ T1143] hsr_slave_0: left promiscuous mode [ 495.225908][ T1143] hsr_slave_1: left promiscuous mode [ 495.236781][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.247055][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.498405][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.499756][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.377513][ T1143] veth1_macvtap: left promiscuous mode [ 497.383442][ T1143] veth0_macvtap: left promiscuous mode [ 497.389378][ T1143] veth1_vlan: left promiscuous mode [ 497.396479][ T1143] veth0_vlan: left promiscuous mode [ 498.432974][ T8] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 498.482262][ T8] usb 9-1: USB disconnect, device number 2 [ 499.128751][ T9125] syz.8.789: attempt to access beyond end of device [ 499.128751][ T9125] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 499.181960][ T9125] gfs2: error -5 reading superblock [ 500.267886][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.280416][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.291514][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.330332][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.338372][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 500.346087][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.371702][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 500.916636][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 500.979959][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 501.204474][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 501.222423][ T8] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.251183][ T8] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.273114][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 501.286922][ T8] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 501.297464][ T8] usb 6-1: Product: syz [ 501.304841][ T8] usb 6-1: Manufacturer: syz [ 501.355518][ T8] hub 6-1:4.0: USB hub found [ 501.571352][ T8] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 501.630810][ T8] usb 6-1: USB disconnect, device number 8 [ 502.375517][ T9137] lo speed is unknown, defaulting to 1000 [ 502.470407][ T5834] Bluetooth: hci1: command tx timeout [ 504.600865][ T5834] Bluetooth: hci1: command tx timeout [ 506.472347][ T9137] chnl_net:caif_netlink_parms(): no params data found [ 506.672947][ T5842] Bluetooth: hci1: command tx timeout [ 507.524866][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.534647][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.425039][ T9187] 9pnet_fd: Insufficient options for proto=fd [ 508.805805][ T9184] netlink: 48 bytes leftover after parsing attributes in process `syz.2.801'. [ 508.900783][ T9189] loop4: detected capacity change from 0 to 512 [ 508.993007][ T9189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.040090][ T9189] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.229906][ T5882] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 509.413331][ T5882] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 509.453552][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.464177][ T5882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.498868][ T5882] usb 6-1: config 0 has no interface number 0 [ 509.513631][ T5842] Bluetooth: hci1: command 0x0419 tx timeout [ 509.539281][ T5882] usb 6-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 509.553385][ T9137] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.568838][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.578392][ T5882] usb 6-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 509.611116][ T9137] bridge_slave_0: entered allmulticast mode [ 509.628924][ T5882] usb 6-1: config 0 interface 48 has no altsetting 0 [ 509.658898][ T5882] usb 6-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 509.678979][ T9137] bridge_slave_0: entered promiscuous mode [ 509.710026][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.781775][ T9137] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.789029][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.851932][ T5882] usb 6-1: config 0 descriptor?? [ 509.863781][ T5882] usb 6-1: can't set config #0, error -71 [ 509.879707][ T9137] bridge_slave_1: entered allmulticast mode [ 509.945881][ T5882] usb 6-1: USB disconnect, device number 9 [ 509.952122][ T9137] bridge_slave_1: entered promiscuous mode [ 510.235899][ T9137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.297300][ T9137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.645303][ T9137] team0: Port device team_slave_0 added [ 510.674436][ T9137] team0: Port device team_slave_1 added [ 511.594894][ T5834] Bluetooth: hci1: command 0x0419 tx timeout [ 511.891269][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.988567][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.250840][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 512.285455][ T9137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.340000][ T9226] bridge_slave_1: left allmulticast mode [ 512.345708][ T9226] bridge_slave_1: left promiscuous mode [ 512.374458][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.453443][ T9226] bridge_slave_0: left allmulticast mode [ 512.475024][ T9226] bridge_slave_0: left promiscuous mode [ 512.515093][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.018722][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.036611][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.469241][ T9137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.482393][ T9238] netlink: 48 bytes leftover after parsing attributes in process `syz.8.813'. [ 514.802777][ T9137] hsr_slave_0: entered promiscuous mode [ 514.817283][ T9247] loop8: detected capacity change from 0 to 512 [ 514.833053][ T9137] hsr_slave_1: entered promiscuous mode [ 514.881189][ T9137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.889026][ T9137] Cannot create hsr debugfs directory [ 514.911062][ T9247] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 514.966070][ T9247] EXT4-fs (loop8): 1 truncate cleaned up [ 514.999614][ T5884] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 515.012484][ T9247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.219574][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.270179][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 515.340099][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.407962][ T8745] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.476098][ T5884] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 515.515853][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.600854][ T5884] usb 6-1: config 0 descriptor?? [ 515.632449][ T9244] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 516.117157][ T5884] hid-led 0003:27B8:01ED.0004: item fetching failed at offset 2/5 [ 516.178213][ T5884] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -22 [ 516.421225][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.781020][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.899331][ T46] usb 6-1: USB disconnect, device number 10 [ 518.995974][ T9137] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 520.142919][ T9137] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 520.705465][ T9137] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 520.773040][ T9295] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 520.807773][ T9137] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 522.159300][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.200051][ T9137] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.251026][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.258407][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.354953][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.364379][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.682313][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.8.832'. [ 524.220050][ T5905] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 525.144736][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.400762][ T5905] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 525.439675][ T5905] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.481414][ T5905] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 525.539029][ T5905] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 525.572278][ T5905] usb 9-1: Manufacturer: syz [ 525.610160][ T5905] usb 9-1: config 0 descriptor?? [ 526.799974][ T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 526.887751][ T5905] usbhid 9-1:0.0: can't add hid device: -71 [ 526.903003][ T5905] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 527.819645][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 527.854712][ T25] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.900142][ T5905] usb 9-1: USB disconnect, device number 3 [ 527.957682][ T25] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.058218][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 528.084795][ T25] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 528.113869][ T25] usb 6-1: Product: syz [ 528.220238][ T9368] vivid-008: disconnect [ 528.412323][ T25] usb 6-1: Manufacturer: syz [ 528.709132][ T25] hub 6-1:4.0: USB hub found [ 528.835446][ T9137] veth0_vlan: entered promiscuous mode [ 528.904716][ T9365] vivid-008: reconnect [ 528.931639][ T9137] veth1_vlan: entered promiscuous mode [ 528.948916][ T25] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 529.040691][ T25] usb 6-1: USB disconnect, device number 11 [ 529.137089][ T9137] veth0_macvtap: entered promiscuous mode [ 529.213867][ T9137] veth1_macvtap: entered promiscuous mode [ 529.364599][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.399817][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.419635][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.456460][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.467855][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.484225][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.510456][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.563619][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.579813][ T46] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 529.587888][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.587917][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.591786][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.684389][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.752211][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.775423][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.800843][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.822730][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.844609][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.858401][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.869721][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.880755][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.893649][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.906564][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.963969][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.975640][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.012005][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 531.031903][ T9137] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.059244][ T9137] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.074910][ T46] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 531.084200][ T9137] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.109433][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.120192][ T9137] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.145886][ T46] usb 5-1: config 0 descriptor?? [ 532.532171][ T46] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 532.854254][ T46] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 532.989679][ T46] usb 5-1: USB disconnect, device number 11 [ 533.043297][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.076850][ T5882] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 533.089715][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.235288][ T7183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.305289][ T7183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.317610][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.314496][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.194952][ T5882] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 535.236726][ T5882] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 535.272554][ T5882] usb 9-1: Manufacturer: syz [ 535.385676][ T9428] loop4: detected capacity change from 0 to 8 [ 535.494702][ T5882] usb 9-1: config 0 descriptor?? [ 535.991915][ T9428] SQUASHFS error: zlib decompression failed, data probably corrupt [ 535.999960][ T9428] SQUASHFS error: Failed to read block 0x9b: -5 [ 536.006288][ T9428] SQUASHFS error: Unable to read metadata cache entry [99] [ 536.013855][ T9428] SQUASHFS error: Unable to read inode 0x127 [ 536.148596][ T5882] usb 9-1: can't set config #0, error -71 [ 536.179921][ T5882] usb 9-1: USB disconnect, device number 4 [ 536.716657][ T9446] loop9: detected capacity change from 0 to 256 [ 541.936612][ T9480] netlink: 16 bytes leftover after parsing attributes in process `syz.8.870'. [ 542.605823][ T9492] syz.2.874: attempt to access beyond end of device [ 542.605823][ T9492] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 542.619566][ T9492] gfs2: error -5 reading superblock [ 549.312293][ T9541] netlink: 48 bytes leftover after parsing attributes in process `syz.9.886'. [ 549.746699][ T9550] loop4: detected capacity change from 0 to 256 [ 550.056125][ T9557] lo speed is unknown, defaulting to 1000 [ 550.136083][ T9558] netlink: 'syz.2.892': attribute type 2 has an invalid length. [ 552.473813][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 554.197569][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.896'. [ 556.423994][ T9605] loop4: detected capacity change from 0 to 128 [ 556.944507][ T9613] netlink: 48 bytes leftover after parsing attributes in process `syz.9.902'. [ 558.605464][ T1143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.018859][ T1143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.531483][ T9640] syz.9.910: attempt to access beyond end of device [ 560.531483][ T9640] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 560.544817][ T9640] exFAT-fs (nbd9): unable to read boot sector [ 560.551068][ T9640] exFAT-fs (nbd9): failed to read boot sector [ 560.557223][ T9640] exFAT-fs (nbd9): failed to recognize exfat type [ 561.541074][ T1143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.887999][ T1143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.123635][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.9.911'. [ 563.164953][ T9656] loop2: detected capacity change from 0 to 256 [ 565.328784][ T5844] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 565.709096][ T5844] FAT-fs (loop2): Filesystem has been set read-only [ 566.017525][ T5844] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 567.171685][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.184644][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.207513][ T1143] bond0 (unregistering): Released all slaves [ 567.992488][ T9692] loop9: detected capacity change from 0 to 2048 [ 568.055203][ T9692] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 568.101023][ T9692] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 568.166117][ T9692] UDF-fs: error (device loop9): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 568.337596][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.345589][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.806898][ T1143] hsr_slave_0: left promiscuous mode [ 568.829041][ T1143] hsr_slave_1: left promiscuous mode [ 568.858528][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.892526][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.927091][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.941053][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.982078][ T1143] veth1_macvtap: left promiscuous mode [ 568.987826][ T1143] veth0_macvtap: left promiscuous mode [ 569.006530][ T1143] veth1_vlan: left promiscuous mode [ 569.027418][ T1143] veth0_vlan: left promiscuous mode [ 569.943881][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.924'. [ 574.467760][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 574.666304][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 575.192674][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.9.928'. [ 575.213477][ T9730] syz.8.929: attempt to access beyond end of device [ 575.213477][ T9730] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 575.230090][ T9730] exFAT-fs (nbd8): unable to read boot sector [ 575.236226][ T9730] exFAT-fs (nbd8): failed to read boot sector [ 575.312474][ T9730] exFAT-fs (nbd8): failed to recognize exfat type [ 575.987417][ T9733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 575.998334][ T9733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 576.027160][ T9733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 576.037136][ T9733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 576.046717][ T9733] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 576.059780][ T9733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 577.490811][ T5905] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 577.493711][ T9731] lo speed is unknown, defaulting to 1000 [ 577.778675][ T5905] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.146376][ T5905] usb 10-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 578.187604][ T5905] usb 10-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 578.203722][ T5834] Bluetooth: hci3: command tx timeout [ 578.219272][ T5905] usb 10-1: Manufacturer: syz [ 578.260179][ T5905] usb 10-1: SerialNumber: syz [ 578.278220][ T5905] usb 10-1: config 0 descriptor?? [ 578.315894][ T5905] usb 10-1: Found UVC 0.00 device (046d:08c1) [ 578.613407][ T5905] usb 10-1: No valid video chain found. [ 578.656569][ T5905] usb 10-1: USB disconnect, device number 2 [ 578.743521][ T9752] syz.8.935: attempt to access beyond end of device [ 578.743521][ T9752] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 578.756685][ T9752] gfs2: error -5 reading superblock [ 579.208202][ T1143] IPVS: stop unused estimator thread 0... [ 579.304403][ T9731] chnl_net:caif_netlink_parms(): no params data found [ 579.447166][ T9763] loop9: detected capacity change from 0 to 2048 [ 579.547948][ T9763] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.928791][ T9731] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.939765][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.947123][ T9731] bridge_slave_0: entered allmulticast mode [ 580.005488][ T9731] bridge_slave_0: entered promiscuous mode [ 580.046729][ T9731] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.092144][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.127117][ T9731] bridge_slave_1: entered allmulticast mode [ 580.232520][ T9731] bridge_slave_1: entered promiscuous mode [ 580.249876][ T5842] Bluetooth: hci3: command tx timeout [ 580.539093][ T9137] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.550399][ T9731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.573065][ T9731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.634341][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 580.837435][ T9731] team0: Port device team_slave_0 added [ 580.873533][ T9731] team0: Port device team_slave_1 added [ 581.131247][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.151897][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.197777][ T9731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.235351][ T9731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.256607][ T9731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.309707][ T9731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.686058][ T9731] hsr_slave_0: entered promiscuous mode [ 581.706756][ T9731] hsr_slave_1: entered promiscuous mode [ 581.735935][ T9731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.759448][ T9731] Cannot create hsr debugfs directory [ 582.321659][ T5834] Bluetooth: hci3: command tx timeout [ 584.389811][ T5834] Bluetooth: hci3: command tx timeout [ 585.124073][ T6759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.945951][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.958023][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.968105][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.981179][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.989402][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 586.002022][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.467964][ T9823] loop9: detected capacity change from 0 to 512 [ 587.864697][ T9823] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.946: bad orphan inode 15 [ 588.130225][ T9823] ext4_test_bit(bit=14, block=5) = 0 [ 588.150629][ T5842] Bluetooth: hci2: command tx timeout [ 588.162858][ T9823] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.250827][ T9823] ------------[ cut here ]------------ [ 588.258440][ T9823] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 588.276388][ T9823] WARNING: CPU: 0 PID: 9823 at ./include/linux/fs.h:803 inode_set_cached_link+0xd0/0x110 [ 588.296469][ T9823] Modules linked in: [ 588.300997][ T9823] CPU: 0 UID: 0 PID: 9823 Comm: syz.9.946 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 588.311685][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 588.322481][ T9823] RIP: 0010:inode_set_cached_link+0xd0/0x110 [ 588.328522][ T9823] Code: 41 5f 5d c3 cc cc cc cc e8 4d e6 43 ff c6 05 eb 29 8a 0d 01 90 48 c7 c7 60 df 1d 8c 4c 89 f6 44 89 fa 89 e9 e8 41 8d 04 ff 90 <0f> 0b 90 90 e9 6a ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 7c a1 e8 [ 588.348426][ T9823] RSP: 0018:ffffc9000b3775f8 EFLAGS: 00010246 [ 588.354672][ T9823] RAX: c4e6cb3cf9ea1500 RBX: ffff88807aa53e20 RCX: 0000000000080000 [ 588.364444][ T9823] RDX: ffffc90004ab9000 RSI: 0000000000001d35 RDI: 0000000000001d36 [ 588.374503][ T9823] RBP: 000000000000001d R08: ffffffff81803292 R09: fffffbfff1cfa5b8 [ 588.382672][ T9823] R10: dffffc0000000000 R11: fffffbfff1cfa5b8 R12: ffff88807aa53e20 [ 588.391475][ T9823] R13: 00000000637cf1f7 R14: ffff88807aa53b70 R15: 0000000000000027 [ 588.400600][ T9823] FS: 00007f5f5a0256c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 588.410249][ T9823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.416877][ T9823] CR2: 00007f6b5615b3b0 CR3: 0000000067c02000 CR4: 00000000003526f0 [ 588.425587][ T9823] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.434429][ T9823] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 588.443493][ T9823] Call Trace: [ 588.446828][ T9823] [ 588.450477][ T9823] ? __warn+0x165/0x4d0 [ 588.454791][ T9823] ? inode_set_cached_link+0xd0/0x110 [ 588.462474][ T9823] ? report_bug+0x2b3/0x500 [ 588.467057][ T9823] ? inode_set_cached_link+0xd0/0x110 [ 588.474577][ T9823] ? handle_bug+0x60/0x90 [ 588.478999][ T9823] ? exc_invalid_op+0x1a/0x50 [ 588.484677][ T9823] ? asm_exc_invalid_op+0x1a/0x20 [ 588.490471][ T9823] ? __warn_printk+0x292/0x360 [ 588.495301][ T9823] ? inode_set_cached_link+0xd0/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 588.501496][ T9823] ? inode_set_cached_link+0xcf/0x110 [ 588.506931][ T9823] __ext4_iget+0x2ea4/0x3f30 [ 588.512109][ T9823] ? __pfx_lock_release+0x10/0x10 [ 588.517922][ T9823] ? __pfx___ext4_iget+0x10/0x10 [ 588.523040][ T9823] ? ext4_fname_free_filename+0x89/0xb0 [ 588.528897][ T9823] ? rcu_is_watching+0x15/0xb0 [ 588.533819][ T9823] ? ext4_fname_free_filename+0x89/0xb0 [ 588.539417][ T9823] ? kfree+0x4e/0x430 [ 588.543548][ T9823] ext4_lookup+0x3e3/0x750 [ 588.548037][ T9823] ? __pfx_ext4_lookup+0x10/0x10 [ 588.553414][ T9823] ? __init_waitqueue_head+0xae/0x150 [ 588.558856][ T9823] __lookup_slow+0x296/0x400 [ 588.566084][ T9823] ? __pfx___lookup_slow+0x10/0x10 [ 588.573052][ T9823] ? lookup_fast+0x1a8/0x5a0 [ 588.577708][ T9823] lookup_slow+0x53/0x70 [ 588.583526][ T9823] walk_component+0x2eb/0x410 [ 588.588300][ T9823] path_lookupat+0x169/0x440 [ 588.593078][ T9823] filename_lookup+0x2a6/0x670 [ 588.597893][ T9823] ? __lock_acquire+0x1397/0x2100 [ 588.603802][ T9823] ? __pfx_filename_lookup+0x10/0x10 [ 588.609200][ T9823] ? __virt_addr_valid+0x183/0x530 [ 588.614468][ T9823] ? __pfx_lock_release+0x10/0x10 [ 588.619642][ T9823] do_linkat+0x13f/0x6f0 [ 588.623960][ T9823] ? __phys_addr_symbol+0x2f/0x70 [ 588.629044][ T9823] ? __pfx_do_linkat+0x10/0x10 [ 588.634037][ T9823] ? strncpy_from_user+0x146/0x270 [ 588.639220][ T9823] ? getname_flags+0x1e3/0x530 [ 588.644591][ T9823] __x64_sys_link+0x82/0x90 [ 588.649149][ T9823] do_syscall_64+0xf3/0x230 [ 588.654076][ T9823] ? clear_bhb_loop+0x35/0x90 [ 588.658913][ T9823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.664956][ T9823] RIP: 0033:0x7f5f5918cde9 [ 588.671175][ T9823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.692476][ T9823] RSP: 002b:00007f5f5a025038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 588.701061][ T9823] RAX: ffffffffffffffda RBX: 00007f5f593a5fa0 RCX: 00007f5f5918cde9 [ 588.709081][ T9823] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 588.717166][ T9823] RBP: 00007f5f5920e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 588.725238][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.733311][ T9823] R13: 0000000000000000 R14: 00007f5f593a5fa0 R15: 00007ffddc3efee8 [ 588.741414][ T9823] [ 588.744482][ T9823] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 588.751806][ T9823] CPU: 0 UID: 0 PID: 9823 Comm: syz.9.946 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 588.761896][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 588.771975][ T9823] Call Trace: [ 588.775266][ T9823] [ 588.778208][ T9823] dump_stack_lvl+0x241/0x360 [ 588.782909][ T9823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.788121][ T9823] ? __pfx__printk+0x10/0x10 [ 588.792744][ T9823] ? vscnprintf+0x5d/0x90 [ 588.797085][ T9823] panic+0x349/0x880 [ 588.801019][ T9823] ? __warn+0x174/0x4d0 [ 588.805197][ T9823] ? __pfx_panic+0x10/0x10 [ 588.809675][ T9823] __warn+0x344/0x4d0 [ 588.813677][ T9823] ? inode_set_cached_link+0xd0/0x110 [ 588.819073][ T9823] report_bug+0x2b3/0x500 [ 588.823428][ T9823] ? inode_set_cached_link+0xd0/0x110 [ 588.828820][ T9823] handle_bug+0x60/0x90 [ 588.833002][ T9823] exc_invalid_op+0x1a/0x50 [ 588.837531][ T9823] asm_exc_invalid_op+0x1a/0x20 [ 588.842401][ T9823] RIP: 0010:inode_set_cached_link+0xd0/0x110 [ 588.848399][ T9823] Code: 41 5f 5d c3 cc cc cc cc e8 4d e6 43 ff c6 05 eb 29 8a 0d 01 90 48 c7 c7 60 df 1d 8c 4c 89 f6 44 89 fa 89 e9 e8 41 8d 04 ff 90 <0f> 0b 90 90 e9 6a ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 7c a1 e8 [ 588.868206][ T9823] RSP: 0018:ffffc9000b3775f8 EFLAGS: 00010246 [ 588.874295][ T9823] RAX: c4e6cb3cf9ea1500 RBX: ffff88807aa53e20 RCX: 0000000000080000 [ 588.882281][ T9823] RDX: ffffc90004ab9000 RSI: 0000000000001d35 RDI: 0000000000001d36 [ 588.890350][ T9823] RBP: 000000000000001d R08: ffffffff81803292 R09: fffffbfff1cfa5b8 [ 588.898362][ T9823] R10: dffffc0000000000 R11: fffffbfff1cfa5b8 R12: ffff88807aa53e20 [ 588.906348][ T9823] R13: 00000000637cf1f7 R14: ffff88807aa53b70 R15: 0000000000000027 [ 588.914343][ T9823] ? __warn_printk+0x292/0x360 [ 588.919154][ T9823] ? inode_set_cached_link+0xcf/0x110 [ 588.924544][ T9823] __ext4_iget+0x2ea4/0x3f30 [ 588.929147][ T9823] ? __pfx_lock_release+0x10/0x10 [ 588.934213][ T9823] ? __pfx___ext4_iget+0x10/0x10 [ 588.939343][ T9823] ? ext4_fname_free_filename+0x89/0xb0 [ 588.944966][ T9823] ? rcu_is_watching+0x15/0xb0 [ 588.949758][ T9823] ? ext4_fname_free_filename+0x89/0xb0 [ 588.955330][ T9823] ? kfree+0x4e/0x430 [ 588.959341][ T9823] ext4_lookup+0x3e3/0x750 [ 588.963782][ T9823] ? __pfx_ext4_lookup+0x10/0x10 [ 588.968754][ T9823] ? __init_waitqueue_head+0xae/0x150 [ 588.974158][ T9823] __lookup_slow+0x296/0x400 [ 588.978774][ T9823] ? __pfx___lookup_slow+0x10/0x10 [ 588.983933][ T9823] ? lookup_fast+0x1a8/0x5a0 [ 588.988548][ T9823] lookup_slow+0x53/0x70 [ 588.992814][ T9823] walk_component+0x2eb/0x410 [ 588.997530][ T9823] path_lookupat+0x169/0x440 [ 589.002183][ T9823] filename_lookup+0x2a6/0x670 [ 589.006973][ T9823] ? __lock_acquire+0x1397/0x2100 [ 589.012051][ T9823] ? __pfx_filename_lookup+0x10/0x10 [ 589.017376][ T9823] ? __virt_addr_valid+0x183/0x530 [ 589.022512][ T9823] ? __pfx_lock_release+0x10/0x10 [ 589.027576][ T9823] do_linkat+0x13f/0x6f0 [ 589.031839][ T9823] ? __phys_addr_symbol+0x2f/0x70 [ 589.036899][ T9823] ? __pfx_do_linkat+0x10/0x10 [ 589.041678][ T9823] ? strncpy_from_user+0x146/0x270 [ 589.046814][ T9823] ? getname_flags+0x1e3/0x530 [ 589.051596][ T9823] __x64_sys_link+0x82/0x90 [ 589.056112][ T9823] do_syscall_64+0xf3/0x230 [ 589.060634][ T9823] ? clear_bhb_loop+0x35/0x90 [ 589.065336][ T9823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.071245][ T9823] RIP: 0033:0x7f5f5918cde9 [ 589.075681][ T9823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.095307][ T9823] RSP: 002b:00007f5f5a025038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 589.103749][ T9823] RAX: ffffffffffffffda RBX: 00007f5f593a5fa0 RCX: 00007f5f5918cde9 [ 589.111729][ T9823] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 589.119705][ T9823] RBP: 00007f5f5920e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 589.127685][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.135662][ T9823] R13: 0000000000000000 R14: 00007f5f593a5fa0 R15: 00007ffddc3efee8 [ 589.143666][ T9823] [ 589.147000][ T9823] Kernel Offset: disabled [ 589.151342][ T9823] Rebooting in 86400 seconds..