last executing test programs: 2m54.580421738s ago: executing program 2 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe8e91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d7", 0x1}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x12081000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m22.649468223s ago: executing program 2 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe8e91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d7", 0x1}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x12081000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m42.345533803s ago: executing program 2 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe8e91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d7", 0x1}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x12081000, 0x0, 0x0, 0x0, 0x0, 0x0) 58.201328603s ago: executing program 2 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe8e91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d7", 0x1}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x12081000, 0x0, 0x0, 0x0, 0x0, 0x0) 58.082308911s ago: executing program 3 (id=856): ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc080661a, &(0x7f0000000600)={@id={0x2, 0x0, @c}, 0x40, 0x0, '\x00', @a}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0080800000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000090"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r7, 0x0, 0x2, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r7, 0x0, 0x2}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x5000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) syz_usb_connect(0x0, 0x10e, &(0x7f0000000600)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c9024"], 0x0) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780)) 53.934777388s ago: executing program 3 (id=867): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1) syz_io_uring_setup(0x4cc4, &(0x7f0000000380)={0x0, 0xb16c, 0x0, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180)) socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0xffffd000) 49.89604944s ago: executing program 3 (id=872): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f0000000b574e69620bf85edacab3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x1, "92"}, 0x0}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) read$hiddev(r1, &(0x7f0000000200)=""/207, 0xcf) syz_usb_control_io$hid(r0, &(0x7f0000000cc0)={0x24, &(0x7f0000000480)={0x20, 0x5, 0x13, {0x13, 0x7, "00f49618774eb6b5e0b2c3ea2aa3393ecb"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "2dd0"}}, &(0x7f0000000500)={0x0, 0x22, 0x2c, {[@main=@item_4={0x3, 0x0, 0x8, "86ea9f22"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xb, "7e34531b"}, @local=@item_4={0x3, 0x2, 0x2, "ac561184"}, @global=@item_4={0x3, 0x1, 0x0, "0f0edfa0"}, @local=@item_4={0x3, 0x2, 0x7, "5f936b27"}, @global=@item_4={0x3, 0x1, 0x9, '8\fm%'}, @global=@item_4={0x3, 0x1, 0x2, "ece95f9e"}, @global=@item_012={0x2, 0x1, 0x1, "b443"}, @main=@item_4={0x3, 0x0, 0xc, "3c984be5"}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x2be}}}}, &(0x7f0000001000)={0x2c, &(0x7f0000000d00), 0x0, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x3f}, 0x0, 0x0}) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000700), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r3, 0x541b, &(0x7f00000000c0)={0x0, "892dd83a6c711bb2abe42ccf7fa68f72d169cfac342a42aac8a7359d247f68e57d8f0a33a85322b580a4020d0084828d72220f7759bd8e1e9e5d416b7be23866"}) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000240)=@conn_svc_rsp={0x0, 0x0, 0xa, "ebdb037a", {0x3, 0x0, 0x0, 0xd}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x188, &(0x7f0000000280)={[{0xb5, 0x4e00, "2d594194b06cb9f79e6b29f985b09b5d9b7266259911c9d470a8b89401dc0e80fac364cf41b19900bdf408519c8a637f29e5ceeb22c39f93842f4195d8d13faea80ca7240a63576c643a3c25dae6d6144e98f4899a8e4109828a79d56536e538da67d01cd7de205d121ecf08fb5c5537238f49ea0e85472235c322d86eb4e5eff199006fc98b168b0ecaa4442e88c414899d1073313430cefd130f9ad28d077e037e801904c2a8fe6ae129df7baee6729b52adf2e0"}, {0x5, 0x4e00, "82eef0670d"}, {0xa9, 0x4e00, "8070437a764d1aa2673251e222c3be2cb228dd1511f1f24800c65a2ef8303619668f2eaa164e53b8ce97ff9d4d0bb1e775ca86ca5a71bc3d06ffae864022044b80dc509a26321c4992752483fb9069e5f4455ef6d32dfc74d28f06769995aab8d8a0304525276ae08c27d32b8f639589b21a46c5648504fb2c49d42dd197d0bf759612c29defb32ee907ed6750ba9c30b2984d035281ae1dc20b0ae6b893d545f51ef9845fb7055ba4"}, {0xb, 0x4e00, "fb9e8fd38f0c336ca5ecdf"}]}) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0xffffffffffffffc5, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, '\x00B+\x00'}) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0xfffffc6b, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "0f293bdf"}) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000005f6a062404000052072405000053f10b24050000133b9bda531c092405000596efc359090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b2402017f0200018b7e8e072401000000000905020910"], 0x0) syz_usb_control_io(r4, &(0x7f0000000700)={0x2c, &(0x7f0000000140)={0x20, 0xc, 0x19, {0x19, 0x34, "426d50bf29ebde88499195d3c9f53c53eda29f88ee666a"}}, &(0x7f0000000580)={0x0, 0x3, 0xf8, @string={0xf8, 0x3, "994593f6e245c9eb02991f458332f2873d189f26ef5b731097ea2b1f87b2b890c9f0088de510586d630057fdc791325f1058414ba5bff86874fe0f8ccb0c39e28b1afd4c270e621c8b013c32274d03f6c838ab5a62475f20f78281910a228067b69c57ab4a70e41c52f7af39ed3c7f776c5eea10a6d2d91f470d148d45603eccd4cf31afc5c5fc25fbe6ac313ea19ade509551480b8b20a0e0099cec15423dd19ec56c3e916df4508384349a462d3ff5aaebfe2194afc6e77c2f8fd10c72975cce9d8ccf8f80b07e4bae7fac977b1e9c7a4d86d808b4a3b054929f5d5f4b9c98b23cc18b8c0e8c4915f8548edbeeb31c8d68899c52a3"}}, &(0x7f0000000180)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3f, 0x8, 0xffff, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x85, 0x80, 0x2}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x59, 0xff, "56335fa3", "95829eb5"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1, 0x24, 0x9, 0x3, 0x2f, 0x7fff}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x0, 0xe, 0x84, "2796d2fbf763132456c002aeebf68ae45f84fed08fcb1a288258a30ceb7b573877de490161e78701770e66ad96c654f42c42897374814cfce6fcb2774c02fe55853e3f19cf54920dd0792e9f0ec1eb22f0e2d5eafa95b758341b52976bf0867eeccb50bdb1f181b02f45a681ce6653190ef901c8d98cd4a993bda7989b8db208dbb2cbf2"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xe2}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1e0, 0x2}}, &(0x7f0000000900)={0x40, 0x7, 0x2}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0xbb}, &(0x7f0000000980)={0x40, 0xb, 0x2, "f648"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @random="f6ac7975e1c5"}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000a80)={0x40, 0x19, 0x2, 'wf'}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xa5}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x3f}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0xff}}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000ec0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc512, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) ioctl$HIDIOCGRDESC(r2, 0x40305829, &(0x7f0000000040)) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="0d4e010000fc00000000697ff50101ece25cad24120100005938df", @ANYRESDEC=r0, @ANYRES64=r1], 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="160100001a80e720801bb0d3971d00000001090209000000000000"], 0x0) 43.673626322s ago: executing program 4 (id=881): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socket$inet(0x2, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x80, 0x6}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x38, 0x2}, @fwd={0xe}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}, @union={0x5, 0x4, 0x0, 0x5, 0x1, 0x5fa691c1, [{0x10, 0x0, 0xfffffff9}, {0x7, 0x4, 0x3}, {0x1, 0x1, 0x6}, {0xa, 0x4, 0x3}]}, @fwd={0x9}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000040)=""/60, 0xa8, 0x3c, 0x1, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x835, 0x202, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x1, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x0, 0xfc, 0x6, 0x2, 0x11, @private0, @private0, 0xb, 0x8000, 0x87fe, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x5}, {0x25}, {0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$UHID_INPUT(r1, &(0x7f0000001980)={0xf, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3267078b089b34083b681a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e924afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 42.879842476s ago: executing program 4 (id=883): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r7, r6, 0x0) finit_module(r7, 0x0, 0x0) 25.762831232s ago: executing program 2 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe8e91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d7", 0x1}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x12081000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.955985154s ago: executing program 0 (id=925): syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x800}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r0 = getpgid(0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) futex(0x0, 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000480)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x3e, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x12, "0bc44d0b3a6a302212dda03598ec61c4"}, @rr={0x7, 0x7, 0x0, [@remote]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@private}, {@loopback}, {@multicast1}]}, @end, @cipso={0x86, 0x53, 0x0, [{0x0, 0xe, "f20ac29161b4eeff6f1592d6"}, {0x0, 0x2}, {0x0, 0x6, "109d1391"}, {0x7, 0x8, "23b2f7b22d7f"}, {0x0, 0xd, "b3def97f6a68de2951fe75"}, {0x6, 0x11, "dd5b39d07e01f57f2ec1c30c14ebf7"}, {0x0, 0x11, "78863b0c71da22fcdaff376ed3590e"}]}, @rr={0x7, 0x1f, 0x0, [@remote, @multicast2, @dev, @remote, @broadcast, @local, @rand_addr]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@multicast1}, {@private}, {@dev}, {@empty}, {}]}]}}, {0x0, 0x0, 0x8}}}}}}, 0x112) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000080)=0x6) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x22020600) r5 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 10.211417385s ago: executing program 0 (id=927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) mknod(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], 0x48}}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_pwait2(0xffffffffffffffff, &(0x7f00000006c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r5) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 9.324580585s ago: executing program 0 (id=928): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x1a9, &(0x7f0000000140)="$eJzsVb1uGkEQ/vZuuQOKKHUUKUVQAkXgOJIoXVJFPEUUBBeCcuSHQ4pBFLjiPdzwIn4HF7bc4MKy5AK7ts7a3bllkeUCCWTZ2k86vm9mdnb2B83+TP4lPoCb5aSNL5Bw8QzHjIEDeMWU76uv+MJTXCX7nCuukP+A+IQ4GY1/teI4GgiRBwnt2YrY/owbCxe7r/Vt46wCsJsTJ1FQd3zP3v2HvhQrnqxw6Z+3FirdGbwyP+87uJS97Gg5aQvxHUCapqnwddTHzDGixKEx5gWXH3OR6jGi+QnjLYDasP+3lozG73r9VjfqRr/DsPExeB8EH8Laj14cBeqXGSUc2oXgCgDRUwtGPAfglBpsEetgxtIozsxcz2jO5dfruQ7jOjfjPMVELvV2xwWui3gjY/+n9BJAHExJrppDbqkJBpeMOjfWB6RgPC8D1fafuDMDg3hXUjHjHFzPUV8glxkiVRtR49M0W/aMuETcJJ4TL4izNyt7i7ic4Yys8hTwsNcaDgd14VJK+0LtC5/ryg5VvfJWmxPH8NKHhYWFhYWFhcUjw20AAAD//8rwVgM=") syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r2, 0x0, 0x40) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000000000000002170000", @ANYRES32=r3, @ANYBLOB="08000200ac"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @loopback}, '\x00\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000000)={@ifindex, 0x0, 0x20, 0x0, 0x0, 0x51b3171e3183d77e, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="00000c00000007000184"], 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 8.437724859s ago: executing program 3 (id=889): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x46f, 0x0, &(0x7f0000000140)="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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x15, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_sctp(0xa, 0x0, 0x84) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200)}, 0x38) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(0x0, 0x7) socket$inet6(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="042f"], 0x4) syz_usb_connect$cdc_ncm(0x0, 0x7e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xb2ff}, {0x6}, [@country_functional={0xa, 0x24, 0x7, 0x0, 0x0, [0x0, 0x0]}, @country_functional={0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x4}}}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.311434039s ago: executing program 4 (id=884): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[]}, 0x78) r2 = socket$kcm(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close(0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @random="4c5b01f560e4", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x5, 0xa, 0x0, @local}, @mptcp=@capable={0x1e, 0xc}]}}}}}}}}, 0x0) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000500)=""/147, 0x93}], 0x1) r7 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000780)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={r9, 0x10, &(0x7f00000007c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}]}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c2594012124fc60", 0x14}, {&(0x7f0000000280)="e26248d463acb929ae30f80ccd24d1fd1a0342bb06b720c55fdba499f12b688a204be525e9e0015c27d7b21be71f92cdaaaef525f735ddd4a50250bf746efd14d5b1bef33271f2ab3816fbd97122f626f8c4aa376401c6795b8598a74159e45dbdb81bf889690e673827e5f10f53f46a83bb4bd89f57644acc5b7b3324a4330e0b36cbba6a3204d46b645ec05010f2f8815edefb", 0x94}, {&(0x7f0000000340)="72fda63cc15939d149810e481468f080493cce552d6a973b017b9433eb28da7dc1a325bc70f20fc516bc79f21e2a8030b514cb9b7396beac0f16233c9ecea697cc1e6f438056b5bfb0a40dfa9a7445dd8b360caf03b144104f4c6e08664d6935dc35935cf9ed6c05d1acf186d0f52efed3f8bfe9ac21c383fde96fa8821a13d55732f4386a49", 0x86}], 0x3}, 0x40050) 7.213814682s ago: executing program 1 (id=930): rseq(0x0, 0x0, 0x0, 0x0) epoll_create(0x3ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x5) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file2\x00', 0x2, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}], [{@euid_gt={'euid>', 0xee00}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_type={'obj_type', 0x3d, '!{\x842^!\xcb\x87-'}}, {@subj_user={'subj_user', 0x3d, '&'}}, {@dont_measure}]}}, 0x0, 0x0, &(0x7f00000006c0)="29780b0f6d2596ee828998fd2e1e4cbc3c9ac139df6e31cb5995a1a37b1935f193e3064911ecb4af9c1c4e56b7f51c64846af6eb6d0954a6ffb389d7a50b10536828b362d6d7abcd183fde1f3d902e1aa3c999e2330a7eb9c624b1131f662c414499eb0e11f93269803eecb1214faaf9813e89870b946674f413ef9603735c01aa7777e09f1078c563325f8532e4d7b44a304322bb78b3ea0f133b97639c2e77edc8a41afc1e0c5f945e20c92a9e56f7bbfd9427d7d396a378aa8d8774c57f7f25ffd4c0d0b1dfe46f7ae5ebd652016b81a16998638aed84f58a267693c840") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000400020011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x701, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000005d00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x54, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x1, 0x5532, &(0x7f00000007c0)="$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") 5.939783757s ago: executing program 0 (id=931): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x39c33f082c641d23}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0) recvmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/247, 0xf7}], 0x2}, 0x10102) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000100)={0x7, 'nr0\x00', {0x1}, 0x5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x0, 0x8}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) 5.860871457s ago: executing program 4 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) dup(r0) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000240), 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000a40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000200)={r4}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r5, 0x1, r3}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={r5}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)="08cde6323b7962ef7646f28a1ca10b5273c904ad040a404b102dc11c8a3280d774f902444548bd7bf805e09857704755da5012a90e2cf9f515d913b4d385f1a03ae548fc4574bf3a8ba582b395ae34f62f2a84a221880f18ac2b2c025f0abc2553ddbd33b8026a30a7baeb068383d88774adef7b056834df89", 0x79}], 0x1}}], 0x1, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 5.174907116s ago: executing program 3 (id=933): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) bpf$ITER_CREATE(0x22, &(0x7f0000000040)={r6}, 0x8) bpf$LINK_DETACH(0xf, &(0x7f0000000080)=r6, 0x4) 5.174033177s ago: executing program 1 (id=943): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000a00), 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x120, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r5}) open(0x0, 0x143862, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x2c, r7, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100140}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000c0}, 0x0) 4.375779511s ago: executing program 0 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000003c0), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000100)={0x0, 0x2, 0x0, {0xb, @win={{0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) 4.371344339s ago: executing program 4 (id=935): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40087602, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000057c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000400)=""/23, 0x17, 0x6c00000000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) read(r4, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 4.178453506s ago: executing program 1 (id=936): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000880)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}, {@init_itable_val={'init_itable', 0x3d, 0x8000000000000003}}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e25}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r4, @ANYRES32=r3, @ANYBLOB="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", @ANYBLOB], 0x18}}], 0x2, 0x0) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) r5 = socket$inet(0x2, 0x2, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) listen(r8, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr, @multicast2}}}], 0x38}, 0x0) 3.341995902s ago: executing program 2 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe8e91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d7", 0x1}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x12081000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.883372597s ago: executing program 1 (id=937): socket$inet_sctp(0x2, 0x5, 0x84) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) getpid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000580)=""/228}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x20000) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x0, 0x0, 0x0) 1.881101191s ago: executing program 3 (id=938): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB='(\a\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf250f0000000c00990001000000010000000500a2000300000008007e000100000010001b80040003000500010020000000640017800500030010000000000000000500030011000000000000000c000400dbc664a68095ac70050006000900000000000000050006000700000000000000050002001400000000000000050003000f000000000000000500030012000000000000000a00340001010101010100000500a200040000000800a10001000000080026006c0900000800a1002185000008007e0001000000a4000e809f00030068982f9c25efcb8782f177d21f1966e6577813a0237652f63d062b57a03bb63b7d52f807bb811ff85d4ae0e626871d7720031be25b59e5f26560627654387aeaa5c47252b26eabf42dd9cb40e06da2b1a3db6abb3c94be1434533b2f4989ecf0ddf8de27aee706079c9ef48a0793308130b2f6bb997709fef1490ba1a8bb94139c3e37592e7628d3012cb94768eddca8800a24883f867ed312e02e004a000f0076067a81410001006804f00a9000841cde02000802110000000000000000000008021100000000000000000004060901f7ff09008c10e70c7e23ec1a47b77d43ce2415c51b23000074020e80a200020015844d2118112f84919e6455887919db52f577acbb39de32169154665ea589073f55ddc2477bf58023482f3e0e7d8b0dce1a5d7a5e60aef246b19329efa1503d24386c60b4eb7ee71812d54cc83cdd09bc8b754b0aabf9e209799e39c5a733c5ba9822ddf8ad8bb5bf288fa3d919985488ce63071e1566a603d8ad3140f3d3b0598839a4abb3ce92e12bcc40baf9313743cea1620551adc9e66d277ea6a10000c6000200b41765091a3da40ff88665a528f2a19cd3278dca69f84a402346428f8314cc51f48783a1d806f988fa29933de0087d909b4980de200e0674077dafb0e4b7ec4315e43eb1789ee11d2ca1d6659b7a497717da829b866c5239fdfc4b091397bfdbdcb1e369810e91a5b2504bb0ebadfb92f964a5744394ca1e853dbc72b2edd34364a853f0f066dac90b4bd237aed158782be0ab91a51213b6c1fff55d2ce88044d2d7744f16bc038966f6cda8dd5fefa7de06e486a39a31ceaa121dc43043a9ec6c0d000002010200963d7c9cfa4f1a1f6c42ca9c01ead55072481b32966e7b2ec9003bc1d45cdcdb187ce5b6fa787a202da4fc9a3f0194f57f7eaa77a0937e9bb63dbcf0609d87918031aa0397abedc9634aa32473a1fa0d9609edfb2fe81362c0766d95e22c2a8107b90d8a762407f0b948c4ed6fb9a8ef64264a40de6d92c9bd36292d49fff7b55b88773d4325976de2015cc0b2f39271cf755aecc6d376c18763b5d1533b66432815008bab081715f910ba63aa48b42209cd8c9a50e301973ccea3b567f8a9d6a8f8eaa90ee7c7333e90a979c87b721ded5f82854feeb620b71126b4cffc98c5f93e977a018f8086c024c8efa71cb238c49baa8fa4ba0d79028caec078930000cd027f0005fb02a70815b62744faccbc0b9c680328f39478a1dcda6c7662fdc4d6087eef28aa54ad7ff6eed80a63bc5cf03f749bc85713218bdae7ffa95ab4458a04fe26c75f96ad380a61d6e947ed577d3d7ab81411c21e808f27bd7b6b5e81cd0bef2675f604369f5d8deb530d7a3a3144485cd4090860dc1b5870e03b3309e355394e2ee2f7baec9b74d644a7e9a90283d600287e305eafb22a0d222ff9862f4639e5bf0c2d7e93eef1a18e179568d8b342933762d84dce5a0bb5596518c8123cbc4b04f17483aebfec86c8e6dfa568e78577864b4029adb271c2479dd08dbccac154631a12852e7e1bd5cb7de213f2023134e9f2390e4771435c9e5928d793000824930db4e08072b1821a0000000000000008021100000000000000000000000000000000680409003f00ddd1ca7290433734520c6afe851aceafe0fe9990f968fe64add8a18a3fcab4d11f9c99d2076a5be7a80adf31a3189215e597779613138ada3432c72fb970ab3636f32d83f99d383cde56c7d95773d66a7dffc9618f224cc610673dd1a35ceeaaa99f4d60b127764031bcfc23d3a678dfa90ddb3c1d936413f69ad847297b95d3dfbb641e7dbdcee2a124a3581733f6f49a6d028ca7a107f147ec54880337bf5a60134c6192ed0e80d2cde0f53759ce061520cad3faf7f552065c8087a71ac0f1d863b862cefffe3db060bf14ccc604b84a66f5dda69b3a0d8aa3b6815e402f2eb701206b45ef9cac3b086dfda12fff651deeeb1cad4f359fcdebc1861f2efb94384cc8737355c9e1a33725f861793853c81e1f0f39260d5d70275a7559434aa855adb28543e563563256cfcacfb2f7e6fc307f4074bcbd9152cc8920560dcdfaa83ab494a3b297af9d26b1877b9b5cace932ba99fac5273164411389b81ec65209d2c26b3da536f0a271da86b227f9d882441a9ec2eb167563e5cc7e15c60402ffffffffffff07000000fc0000000000000068040008c2f9bd06ffffffffffff0000001c00a6800a00060008021100000000000a000600ffffffffffff00005b2e637863a8165465f1fbb39c2e654ea39351ef86b3345cb9dd6363f05be81c6837028fbd3bdc15c095c50292117a7c2ddae9b0b8426d4ae386eeca99c75b8f8cf8bc2169b5bb070cdbbf08a8c6f7fba847f5a91162efb2c5c6eebff288368648edbce749eed8f643335a5f1696b43fed409938d6d173b25e4bc7d9ec9b465c02cc7ef665236d0e1500e86eb5b5bb1cc0d84ce8a94f4afa"], 0x728}, 0x1, 0x0, 0x0, 0x24008851}, 0x20044001) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x4}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x43e}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)={0x2c, r11, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r12, 0x4004556b, &(0x7f0000000000)) syz_usbip_server_init(0x5) 1.878386698s ago: executing program 4 (id=939): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f00000000c0)) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000000140)) socket$inet_udp(0x2, 0x2, 0x0) add_key$fscrypt_provisioning(&(0x7f00000005c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000616263a6f38f"], 0x18, 0xfffffffffffffff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9406000013004f0a00020000000000000000", @ANYRES32=r5, @ANYRES8], 0x94}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) 1.644212978s ago: executing program 1 (id=940): syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008800, &(0x7f0000000080), 0x1, 0x633, &(0x7f0000000bc0)="$eJzs3c9rVNceAPDvnUx+mLz3EuXx3vMtaqAUhdbERC1SCtW9iP2xazepiWKNRkxKGxGMYDeF7roQuuqi9s+o4NZ/oItC6aoUpLQuapE65d7MnVwnMzG/ZiZOPh+45px7M/ecG/PNOffMOXcC2LVGI2IsIvZHxNUkYrhwrJz9W8q+Kf2+R7/dOJduSVQq7/6axI2byVLxXEn161D1xX8NL+/a17O63PnF65emZmdnrlXz4wuXr47PL14/fPHy1IWZCzNXJl+fPHH82PETE0e2dH17C+nTtz/6ZPjzM+9/89WTZOLbH84kcTK9ukx6XfWv7d9SyenPbDQqyx4X96c/1xNbPPdO8cdw/nuyIqnfwY6WxkBvRPw3hqOn8L85HJ+93dGKAS1VSSJvo4BdJ9lU/A9sf0WANsv7Afm9faP74AYa3NEDL5qHp5YHpJZjvzci8vgvZ2N+EQPZ2MDgo+SZcZ4kIrY2MrcsLePB/TO30y2ajMMBrbF0Kx/lrm//kyw2R2Igyw0+Kj0T/6XClu5/ZyOF9q0kR+sOiX9on6VbEfG/avvfFxuJ/3IU4v/DTZYv/gEAAAAAAGD73DsVEa81mv9Xqs3/6Wsw/2coIk5uQ/nPf/+vlC/RS7ahOKDg4amINxvO/83DLkZ6qrl/ZvMBepPzF2dnjkTEvyLiUPT2p/mJuvOWCunDX+y706z84vy/dEvLf3C/OL249Eu5biHu9NTClL8GsHUPb0X8P5v/e6C659n5P2n7nzRo/9P4vrrOMva9cvdsMV+pVG7m6cbxvzwXGGitytcRBxu2/ysNbLL28znGs/7AeN4rWO2lJ4WFRnXEP3RO2v4PNo//Ws+79rye+Y2dvy8iji6Wm4X/OuK/cf+/L3mvJwpLCT6dWli4NhHRl5xevX9yY3WGbpXHQx4vafwfennt8b9a/78Qh3siYmmdZf7n6dBPzY5p/6Fz0vifXrv/P5JU2//I2v9aR2Ddicm7I99lZ2rwXLiz62r/j2Vt+qHqnmz8D6gqrdqz3gDtSHUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AVXioh/RFIaq6VLpbGxiKGI+HcMlmbn5hdePT/38ZXp9Fj2+f+l/JN+h5fzSf75/yOF/GRd/mhE7I2IL3v2ZPmxc3Oz052+eAAAAAAAAAAAAAAAAAAAANghhrI1/5X++vX/qZ97Ol07oOXK1a/PifeBdtQFaK/ypl9Z6d/WigBtt/n4B15064//3pbWA2i/5vH/+Eklk+eTpHj09xbXC2g9/X/YvTYZ/94ehC7QIP5HO1EPoN3WHNO7U0t59x+6kvt/AAAAAADoKnsP3Ps+iYilN/ZkW6qvesxkf+hupU5XAOgYc3hh9yrPdboGQKe4xwdW1vX/WWl0vPns/6Q1FQIAAAAAAAAAAAAAVjm43/p/2K3WXv9vbj90szXW/zcKfo8LgC7S/KM/tP3Q7dzjA89r7a3/BwAAAAAAAAAAAIAdYOD6panZ2Zlr84tbTETEj5UkYqvnaZL4oMGht1pUVksTS1M7ohrbmnjamjP3RsTOuMB2J/JHcHSwGh3+uwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANT8HQAA//9EIykl") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x302}}], 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r6, 0x400448cb, &(0x7f0000000080)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x71, 0x8000000, r7, 0x0) fanotify_mark(r1, 0x12, 0x8000001, r0, 0x0) 351.929021ms ago: executing program 0 (id=941): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x1e, 0x4, 0x3, 0x1, 0xd4, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001f80)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f00000001c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc701, 0x1f5) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000040), 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="756d001000000000303030303030383030303030303030302c6465636f6d706f73652c666f7263652c7569643d98eeaa395aee696424b879168583caff392872444d0baf4bf9c78383b49e4a0b6e1f00a863956b0000000000", @ANYRESHEX=0xee01, @ANYBLOB=',nobarrier,part=0x0000000000000004,\x00'], 0x20, 0x6de, &(0x7f0000000840)="$eJzs3U9sW3cdAPDvsx0n7qTMG+1WEFKjVVSwQpvEjBYJiYIQymGCSlx2DW26RnWyKslQWiHqAYMjnFAPOwyhcNgJcUAa4oAYZyQk7r1X4sCt4oDRe34vsZ3Esds4abvPR3p+v+f3+/N9X//es/3SygF8ai28FROtSGLh/Jub6faDrUbzwVZjpShHxGRElCIqnVUkqxHJJxFXorPEZ9Mn8+6S/cZ54+HHH5y7/1Gjs1XJl6x+aVC7He0BI7TyJWYiopyvR1TZr79re/R3b6Suk+2404SdLRIHx629S2uU5kOct8DT7l5EeWKP5+sRJyJiKv8cEPnVoXTE4R26ka5yAAAA8HQqH1ThxUfxKDZj+mjCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdD0vnNwCRfSkV5JpL89/+/n1fLVKrHG+4BvnzA/vdvHFEgAAAAAAAAAHD4JnaKZx7Fo9iM6WK7nWR/838t2ziZPb4Q78Z6LMVaXIjNWIyN2Ii1mIuYmO7qs7q5uLGxNre75W8ibdlut+/lLecjor6r5fyYjxkAAAAAAAAAnm8/jYWYPu4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgWxJR7qyy5WRRrkepEhFTEVFN67Ui/lKUn2V/Pe4AAAAAYPxq+Xo6+V+n0E6y7/yvZN/7p+LdWI2NWI6NaMZSXM/uBXS+9Zf+2Wo0H2w1VtJld8ff+vdIcWQ9RkQ53ttn5NmsxqntFgvx3fhBnI+ZuBprsRw/isXYiKWYiVp6ELEYSdRrnbsX9SLO3njLeVdXekK52h/bmb7t01kktbgRy1lsF+JateitlNVI4nTXaH+qRvRl6L00O8k3c0Pm6HrX6/Xr/L5Mrv3ikH2MRz078ontjMymuc+z8dLeuS+MOE/6R5qL0vY9qJM7o6Sb/SMVOf/hKDk/ka/TXP+iN+eHbcRbaf2ZmI9SPvsiXunN+e0v3H+5t/GX/vW3qzdLq7du3lg/P8ZDGquJotCfiUZXJl4dPPvyTDTTTLSGz8RE/xNTT3Ach6iaZ6NzYRvuavmdrLQYr3VNwXfieizFpZiNubgcs/H1mI9Gzww71ZPXSmOlNyfZuVbafX2rDQj+7Be7Kv3ygMpHK83LS1157b7S1bN9+TNXfhWzXVl6efDse5x3gcrn8kI6xs+233GeBj2ZyK/NRXTFG9Q+mfhtO31cb67eWru5eHvI8c7l6/S0fb/32vy7Jz6YJ5LOl/SKW8m2spzUivmS7vvMdrS9+armf3HptCvt2ndqe189pmM5vrfvmVrNP8Pt7qmz79U99zWyfae79vV8yol3opl9CukzczRZBWBoJ14/Ua09rP2j9mHt57WbtTenvj15efLz1Zj4e+XP5T+Ufl/6RvJ6fBg/ienjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4H63fu3lpsNpfWxlioPuZYUTqwztYLw3UY9YjBYyV5oTrubDwFhf9MDcxGLcY0+h8jYkCd6hMPkYx/PqcT+VA6LH44LXumXR6heaVotXedSqxP7fcKTu687lG/tdj8b7unTi26ThngOXdxY+X2xfU7d7+yvLL49tLbS6vzly9dvtT42txXL95Ybi7Ndh6PO0pgHNbv3C0fdwwAAAAAAAAAAADAaPJ//b/x2P+ZoXJAnera+t4jnznqQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeUQtvxUQrkpibvTCbbj/YajTTpSjv1KxERCkikh9HJJ9EXInOEvWu7pL9xnnj4ccfnLv/UWOnr0pRvzSo3XBa+RIzEVHO1web3KOb3f1d6+qv9VjhJdtHmCbsbJE4OG7/DwAA//+E1vWR") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) 0s ago: executing program 1 (id=942): socket$inet6_sctp(0xa, 0x0, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) socket(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x40044160, 0x3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/125], 0x110) kernel console output (not intermixed with test programs): ace descriptor's value: 48 [ 480.513314][ T5235] usb 4-1: config 1 interface 1 has no altsetting 0 [ 480.524628][ T5235] usb 4-1: New USB device found, idVendor=b5c7, idProduct=5746, bcdDevice=a6.21 [ 480.534242][ T5235] usb 4-1: New USB device strings: Mfr=127, Product=212, SerialNumber=3 [ 480.552769][ T5235] usb 4-1: Product: syz [ 480.557365][ T5235] usb 4-1: Manufacturer: syz [ 480.564572][ T5235] usb 4-1: SerialNumber: syz [ 480.613346][ T5235] cdc_acm 4-1:1.0: skipping garbage [ 480.631564][ T5235] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 480.701589][ T1168] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0 [ 480.720220][ T1168] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0 [ 480.730818][ T1168] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0 [ 480.740112][ T1168] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0 [ 480.750528][ T1168] corsair 0003:1B1C:1B3E.000B: unknown main item tag 0x0 [ 480.761313][ T1168] corsair 0003:1B1C:1B3E.000B: failed to start in urb: -90 [ 480.833033][ T5235] usb 4-1: USB disconnect, device number 10 [ 480.841658][ T1168] corsair 0003:1B1C:1B3E.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 480.949271][ T1168] usb 1-1: USB disconnect, device number 18 [ 481.081572][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.109724][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.133097][ T12] bond0 (unregistering): Released all slaves [ 481.199269][ T9816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.250646][ T9816] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.281274][ T9945] ip6gretap0 speed is unknown, defaulting to 1000 [ 481.427574][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.434730][ T5417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.471043][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.478230][ T5417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.711661][ T9945] lo speed is unknown, defaulting to 1000 [ 482.306147][ T5326] Bluetooth: hci2: command tx timeout [ 483.301453][ T9816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.327049][ T9816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.438770][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 483.760041][ T9975] netlink: 824 bytes leftover after parsing attributes in process `syz.0.722'. [ 484.430453][ T5326] Bluetooth: hci2: command tx timeout [ 484.625688][ T9978] loop3: detected capacity change from 0 to 512 [ 484.728637][ T9978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.748354][ T9978] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 484.839099][ T12] hsr_slave_0: left promiscuous mode [ 484.926335][ T12] hsr_slave_1: left promiscuous mode [ 484.965834][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.976267][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.005542][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.026119][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.102074][ T61] hfsplus: b-tree write err: -5, ino 4 [ 485.144574][ T12] veth1_macvtap: left promiscuous mode [ 485.156468][ T12] veth0_macvtap: left promiscuous mode [ 485.172030][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.725'. [ 485.184700][ T12] veth1_vlan: left promiscuous mode [ 485.199676][ T12] veth0_vlan: left promiscuous mode [ 486.035694][ T9991] loop1: detected capacity change from 0 to 2048 [ 486.063622][ T9991] udf: Bad value for 'gid' [ 486.476139][ T5326] Bluetooth: hci2: command tx timeout [ 487.544669][T10002] overlayfs: failed to resolve './file1': -2 [ 488.150985][ T8824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.170947][T10007] loop1: detected capacity change from 0 to 4096 [ 488.200585][T10007] NILFS (loop1): invalid segment: Checksum error in segment payload [ 488.243403][T10007] NILFS (loop1): trying rollback from an earlier position [ 488.319465][T10007] NILFS (loop1): recovery complete [ 488.376817][T10010] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.522852][ T12] team0 (unregistering): Port device team_slave_1 removed [ 488.523640][T10013] x_tables: duplicate underflow at hook 3 [ 488.546180][ T5326] Bluetooth: hci2: command tx timeout [ 488.684099][ T12] team0 (unregistering): Port device team_slave_0 removed [ 488.810684][T10014] loop3: detected capacity change from 0 to 4096 [ 488.911374][T10014] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 488.921182][T10014] ntfs3: loop3: Failed to load $MFT (-2). [ 489.095430][T10014] loop3: detected capacity change from 0 to 256 [ 489.189381][T10014] FAT-fs (loop3): Directory bread(block 64) failed [ 489.196685][T10014] FAT-fs (loop3): Directory bread(block 65) failed [ 489.203535][T10014] FAT-fs (loop3): Directory bread(block 66) failed [ 489.211693][T10014] FAT-fs (loop3): Directory bread(block 67) failed [ 489.219293][T10014] FAT-fs (loop3): Directory bread(block 68) failed [ 489.226140][T10014] FAT-fs (loop3): Directory bread(block 69) failed [ 489.234012][T10014] FAT-fs (loop3): Directory bread(block 70) failed [ 489.244727][T10014] FAT-fs (loop3): Directory bread(block 71) failed [ 489.251802][T10014] FAT-fs (loop3): Directory bread(block 72) failed [ 489.258545][T10014] FAT-fs (loop3): Directory bread(block 73) failed [ 489.421450][T10017] loop0: detected capacity change from 0 to 512 [ 489.494210][T10017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 489.521251][T10017] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.580199][T10009] Falling back ldisc for ttyS3. [ 491.051698][ T9816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.094026][ T5244] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 491.171213][ T5244] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 491.225206][ T5244] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz-executor: Failed to acquire dquot type 0 [ 491.401391][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 491.429823][ T9945] chnl_net:caif_netlink_parms(): no params data found [ 491.844149][T10052] evm: overlay not supported [ 491.852094][ T5244] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 491.978652][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.995849][T10031] loop3: detected capacity change from 0 to 40427 [ 492.006526][T10031] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 492.016291][T10031] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 492.030884][ T9945] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.052333][ T9945] bridge_slave_0: entered allmulticast mode [ 492.087477][ T9945] bridge_slave_0: entered promiscuous mode [ 492.107514][T10031] F2FS-fs (loop3): Found nat_bits in checkpoint [ 492.157644][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.166218][ T9945] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.173525][ T9945] bridge_slave_1: entered allmulticast mode [ 492.197307][ T9945] bridge_slave_1: entered promiscuous mode [ 492.259844][T10031] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 492.269470][T10031] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 492.280918][ T9945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.319209][ T9945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.472200][ T9816] veth0_vlan: entered promiscuous mode [ 492.660247][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.720230][T10083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.736839][T10083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 492.740728][T10085] gfs2: not a GFS2 filesystem [ 492.755319][ T9945] team0: Port device team_slave_0 added [ 492.762246][T10083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.778149][ T9945] team0: Port device team_slave_1 added [ 492.786405][T10083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 492.795448][T10083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 492.808132][T10085] netlink: 'syz.1.740': attribute type 4 has an invalid length. [ 492.816170][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 492.836247][T10083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.885840][ T9816] veth1_vlan: entered promiscuous mode [ 493.012605][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.054883][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.070368][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.151826][ T9945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.270815][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.337621][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.344631][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.406178][ T9945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.489159][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.528125][T10081] ip6gretap0 speed is unknown, defaulting to 1000 [ 493.625473][ T9945] hsr_slave_0: entered promiscuous mode [ 493.647181][ T9945] hsr_slave_1: entered promiscuous mode [ 493.653399][ T9945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.666765][ T1168] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 493.686475][ T9945] Cannot create hsr debugfs directory [ 493.718042][ T9816] veth0_macvtap: entered promiscuous mode [ 493.744891][T10081] lo speed is unknown, defaulting to 1000 [ 493.753242][ T9816] veth1_macvtap: entered promiscuous mode [ 493.877676][ T1168] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.908019][ T1168] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.924724][ T1168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.935113][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.948526][ T1168] usb 4-1: Product: syz [ 493.952730][ T1168] usb 4-1: Manufacturer: syz [ 493.958298][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.970061][ T1168] usb 4-1: SerialNumber: syz [ 493.975641][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.997607][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.017112][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.035948][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.046195][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.056845][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.067304][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.078018][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.089254][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.206885][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.236977][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.257649][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.279684][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.297061][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.310217][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.320480][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.331996][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.342676][ T9816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.353340][ T9816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.365459][ T9816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.532425][T10103] loop1: detected capacity change from 0 to 256 [ 494.966229][T10083] Bluetooth: hci3: command tx timeout [ 495.019964][ T9816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.051693][ T9816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.085917][ T9816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.138343][ T9816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.160785][ T12] bridge_slave_1: left allmulticast mode [ 495.175468][ T12] bridge_slave_1: left promiscuous mode [ 495.198788][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.228413][ T12] bridge_slave_0: left allmulticast mode [ 495.234104][ T12] bridge_slave_0: left promiscuous mode [ 495.247247][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 495.263924][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.367875][T10095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.411276][ T12] infiniband syz2: set down [ 495.455326][T10095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.478829][T10095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.506475][T10095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.680576][ T5417] smc: removing ib device syz2 [ 495.967594][T10113] loop1: detected capacity change from 0 to 512 [ 496.530689][ T1168] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 496.544716][ T1168] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 496.579873][ T1168] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 496.661357][ T1168] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 496.899585][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.911227][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.922164][ T12] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 496.931453][ T12] veth1_vlan: left allmulticast mode [ 496.938358][ T12] bond0 (unregistering): Released all slaves [ 496.970665][ T25] ip6gretap0 speed is unknown, defaulting to 1000 [ 496.978867][ T9159] infiniband syz2: ib_query_port failed (-19) [ 497.026453][T10083] Bluetooth: hci3: command tx timeout [ 497.184527][ T1168] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 497.246326][ T1168] usb 4-1: USB disconnect, device number 11 [ 497.286426][ T1168] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 497.375025][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 497.767415][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 497.979167][ T25] usb 2-1: config 97 has an invalid interface descriptor of length 3, skipping [ 498.154872][ T25] usb 2-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 498.307233][ T25] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 498.316956][ T25] usb 2-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 498.326517][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.615265][T10081] chnl_net:caif_netlink_parms(): no params data found [ 498.629492][ T25] usb 2-1: string descriptor 0 read error: -71 [ 498.645547][ T25] usb 2-1: USB disconnect, device number 23 [ 499.120532][T10083] Bluetooth: hci3: command tx timeout [ 499.341458][T10141] loop3: detected capacity change from 0 to 32768 [ 499.356273][T10141] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.748 (10141) [ 499.397463][T10141] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 499.417426][T10141] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 499.455546][T10141] BTRFS info (device loop3): using free-space-tree [ 499.532341][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.575303][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.604055][T10081] bridge_slave_0: entered allmulticast mode [ 499.612446][T10081] bridge_slave_0: entered promiscuous mode [ 499.632193][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.652062][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.676683][T10081] bridge_slave_1: entered allmulticast mode [ 499.692073][T10081] bridge_slave_1: entered promiscuous mode [ 499.838511][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.884879][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.904033][T10161] bridge0: port 3(hsr0) entered blocking state [ 499.931001][T10161] bridge0: port 3(hsr0) entered disabled state [ 500.194546][T10161] hsr0: entered allmulticast mode [ 500.395670][T10161] hsr_slave_0: entered allmulticast mode [ 500.417583][T10161] hsr_slave_1: entered allmulticast mode [ 500.468629][T10161] hsr0: entered promiscuous mode [ 500.510424][T10161] bridge0: port 3(hsr0) entered blocking state [ 500.516765][T10161] bridge0: port 3(hsr0) entered forwarding state [ 500.670691][ T8824] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 500.772916][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.782551][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.784360][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.828739][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.153798][T10081] team0: Port device team_slave_0 added [ 501.195461][T10083] Bluetooth: hci3: command tx timeout [ 501.203012][ T12] IPVS: stopping backup sync thread 9901 ... [ 501.241706][T10081] team0: Port device team_slave_1 added [ 501.546864][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.574906][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.669872][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.686391][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.903492][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.352399][T10201] loop1: detected capacity change from 0 to 128 [ 502.371197][T10201] vfat: Bad value for 'shortname' [ 503.023040][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.030406][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.100064][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.265573][ T9945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 504.287628][T10210] fuse: Bad value for 'group_id' [ 504.292589][T10210] fuse: Bad value for 'group_id' [ 504.303333][ T9945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 504.464193][T10081] hsr_slave_0: entered promiscuous mode [ 504.496689][T10081] hsr_slave_1: entered promiscuous mode [ 504.643608][T10081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.672199][T10081] Cannot create hsr debugfs directory [ 504.855249][T10224] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 504.900370][T10224] loop1: detected capacity change from 0 to 512 [ 505.173862][T10224] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 505.182799][T10224] System zones: 0-2, 18-18, 34-35 [ 505.202563][T10224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.215554][T10224] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.300957][ T9945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 505.384873][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 505.477753][ T9525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.638861][ T12] hsr_slave_0: left promiscuous mode [ 505.664109][ T12] hsr_slave_1: left promiscuous mode [ 505.682638][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.723778][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.753575][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.769856][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.803966][ T12] veth1_macvtap: left promiscuous mode [ 505.819759][ T12] veth0_macvtap: left promiscuous mode [ 505.892350][ T12] veth1_vlan: left promiscuous mode [ 505.903324][ T12] veth0_vlan: left promiscuous mode [ 507.574087][ T12] team0 (unregistering): Port device team_slave_1 removed [ 507.642653][ T12] team0 (unregistering): Port device team_slave_0 removed [ 508.262672][ T9945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 508.284897][T10242] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 509.635915][T10252] loop3: detected capacity change from 0 to 1024 [ 509.650374][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 509.763512][T10257] netlink: 'syz.4.762': attribute type 2 has an invalid length. [ 509.999535][ T9945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.067162][ T12] IPVS: stop unused estimator thread 0... [ 510.114469][ T9945] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.239944][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.247100][ T5417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.601262][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.608450][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.487289][T10081] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 511.618977][T10081] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 511.648703][T10081] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 511.755545][ T5309] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 512.015023][ T5309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.107039][ T5309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 512.403818][ T5309] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 512.413280][ T5309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.428709][T10081] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 512.441101][ T5309] usb 2-1: config 0 descriptor?? [ 512.532584][T10297] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 513.110266][ T5309] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 513.134406][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.153455][ T5309] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 513.403013][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.430471][ T9945] veth0_vlan: entered promiscuous mode [ 513.464928][ T9945] veth1_vlan: entered promiscuous mode [ 513.529983][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.664399][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.671684][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.728973][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.736225][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.779768][ T47] usb 2-1: USB disconnect, device number 24 [ 513.796334][ T9945] veth0_macvtap: entered promiscuous mode [ 513.944501][ T9945] veth1_macvtap: entered promiscuous mode [ 514.722678][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.814007][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.843659][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.846292][T10329] loop1: detected capacity change from 0 to 512 [ 514.859405][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.871329][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.904107][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.935211][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.957018][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.983038][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.001754][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.013367][ T9945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.045155][T10329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.050824][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.069825][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.094890][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.115843][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.117751][T10329] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.132105][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.150551][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.167567][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.188734][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.221055][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.242766][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 515.273572][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.288471][ T9945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.341920][ T9945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.372880][ T9945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.403395][ T9945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.430611][ T9945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.452629][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 515.476844][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 515.493474][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.500363][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.500411][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.500434][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.508766][ T25] usb 5-1: config 0 descriptor?? [ 515.568088][T10335] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 515.643583][ T9525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.788870][T10081] veth0_vlan: entered promiscuous mode [ 515.895896][T10081] veth1_vlan: entered promiscuous mode [ 515.939252][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.950393][T10358] loop1: detected capacity change from 0 to 2048 [ 515.966614][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.002231][T10358] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.024858][ T25] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 516.050464][ T25] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 516.087253][ T25] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 516.111656][T10358] netlink: 104 bytes leftover after parsing attributes in process `syz.1.775'. [ 516.131836][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.140894][T10081] veth0_macvtap: entered promiscuous mode [ 516.160045][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.189785][T10081] veth1_macvtap: entered promiscuous mode [ 516.327239][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.366867][ T25] usb 5-1: USB disconnect, device number 16 [ 516.370172][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.427344][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.456037][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.470130][T10369] loop1: detected capacity change from 0 to 1764 [ 516.484027][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.501115][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.531957][T10369] loop1: detected capacity change from 0 to 512 [ 516.546039][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.558047][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.593162][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.614626][T10369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.639720][T10374] block device autoloading is deprecated and will be removed. [ 516.642982][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.690826][T10369] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.705993][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.734117][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.767780][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.972921][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.021306][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.211410][ T29] audit: type=1804 audit(1723710089.607:348): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.776" name="/newroot/27/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 517.370511][T10389] loop3: detected capacity change from 0 to 512 [ 517.377835][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.420000][T10389] EXT4-fs (loop3): Test dummy encryption mode enabled [ 517.429196][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.470318][T10389] EXT4-fs (loop3): can't mount with commit=8389119, fs mounted w/o journal [ 517.480290][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.520820][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.564853][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.727679][T10396] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 517.799644][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.809781][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.820520][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.831224][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.842290][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.854496][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.868227][T10081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.885224][T10081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.243694][T10081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.252617][T10081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.257470][ T9525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.319537][T10399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 519.323564][T10411] loop3: detected capacity change from 0 to 128 [ 519.330371][T10411] vfat: Unknown parameter '' [ 519.592409][ T3605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.770005][ T3605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.816175][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.824039][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.878251][ T6329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.886850][ T6329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.043007][ T3605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.225210][ T3605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.585584][ T25] IPVS: starting estimator thread 0... [ 521.800852][T10459] IPVS: using max 18 ests per chain, 43200 per kthread [ 521.815830][T10461] loop3: detected capacity change from 0 to 128 [ 521.984534][T10467] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 522.785569][T10471] syz.3.785: attempt to access beyond end of device [ 522.785569][T10471] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 523.416487][ T3605] bridge_slave_1: left allmulticast mode [ 523.422188][ T3605] bridge_slave_1: left promiscuous mode [ 523.430195][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.486084][ T3605] bridge_slave_0: left allmulticast mode [ 523.494944][T10473] loop0: detected capacity change from 0 to 8 [ 523.516218][ T3605] bridge_slave_0: left promiscuous mode [ 523.561384][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.703652][T10473] unable to read xattr id index table [ 523.735240][T10083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 523.766095][T10083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 523.786322][T10083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 523.817252][T10083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 523.827573][T10083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 523.835006][T10083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 523.846772][ T9159] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 523.974200][T10493] loop3: detected capacity change from 0 to 512 [ 524.127393][T10493] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 524.252149][ T9159] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 524.257435][T10498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 524.270383][ T9159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.270423][ T9159] usb 2-1: Product: syz [ 524.270440][ T9159] usb 2-1: Manufacturer: syz [ 524.270454][ T9159] usb 2-1: SerialNumber: syz [ 524.336643][T10498] netlink: 32 bytes leftover after parsing attributes in process `syz.4.789'. [ 524.345719][T10498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.789'. [ 524.362675][T10493] EXT4-fs (loop3): 1 truncate cleaned up [ 524.369072][ T9159] usb 2-1: config 0 descriptor?? [ 524.379227][ T9159] ch341 2-1:0.0: ch341-uart converter detected [ 524.387156][T10493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.489167][T10493] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.766664][ T1168] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 524.986172][ T1168] usb 5-1: Using ep0 maxpacket: 32 [ 524.994506][ T1168] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 525.037235][ T1168] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 525.048370][ T1168] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 525.082196][ T1168] usb 5-1: config 1 has no interface number 0 [ 525.088467][ T5309] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 525.100169][ T1168] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.111433][ T1168] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 525.147114][ T1168] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 525.158207][ T1168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.201655][ T1168] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 525.307771][ T3605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.327008][ T3605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.344203][ C0] hrtimer: interrupt took 48927 ns [ 525.354377][ T3605] bond0 (unregistering): Released all slaves [ 525.361990][ T5309] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 525.402868][ T5309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.493551][T10483] lo speed is unknown, defaulting to 1000 [ 525.507422][ T5309] usb 1-1: Product: syz [ 525.511706][ T5309] usb 1-1: Manufacturer: syz [ 525.562938][ T5309] usb 1-1: SerialNumber: syz [ 525.601208][ T5309] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 525.624533][T10520] loop3: detected capacity change from 0 to 2048 [ 525.711915][T10520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.907461][ T5326] Bluetooth: hci2: command tx timeout [ 525.937849][ T29] audit: type=1804 audit(1723710098.407:349): pid=10520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.791" name=2F6E6577726F6F742F35392F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161612FE91F7189591E9233614B dev="loop3" ino=1367 res=1 errno=0 [ 526.000578][ T9159] usb 2-1: failed to send control message: -110 [ 526.013085][ T1168] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 526.025058][ T9159] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 526.060508][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 526.207788][ T3605] hsr_slave_0: left promiscuous mode [ 526.215694][T10524] Process accounting resumed [ 526.264407][ T3605] hsr_slave_1: left promiscuous mode [ 526.319305][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.383201][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.436572][ T3605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.465435][ T3605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.510975][ T25] usb 2-1: USB disconnect, device number 25 [ 526.521729][ T25] ch341 2-1:0.0: device disconnected [ 526.630112][ T3605] veth1_macvtap: left promiscuous mode [ 526.635786][ T3605] veth0_macvtap: left promiscuous mode [ 526.660601][ T3605] veth1_vlan: left promiscuous mode [ 526.671308][ T3605] veth0_vlan: left promiscuous mode [ 527.057940][ T9159] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 527.690071][ T25] usb 5-1: USB disconnect, device number 17 [ 527.731303][ T25] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 527.820887][T10551] loop3: detected capacity change from 0 to 8 [ 527.986727][ T5326] Bluetooth: hci2: command tx timeout [ 528.156639][ T8] usb 1-1: Service connection timeout for: 256 [ 528.871294][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 528.963706][ T8] ath9k_htc: Failed to initialize the device [ 529.029786][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 530.066791][ T5326] Bluetooth: hci2: command tx timeout [ 530.420250][T10572] netlink: 'syz.4.799': attribute type 9 has an invalid length. [ 530.429368][T10572] netlink: 399 bytes leftover after parsing attributes in process `syz.4.799'. [ 530.602088][ T3605] team0 (unregistering): Port device team_slave_1 removed [ 530.667937][ T3605] team0 (unregistering): Port device team_slave_0 removed [ 531.231460][T10546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.793'. [ 531.256321][T10565] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 531.325070][T10565] geneve0: entered promiscuous mode [ 531.355095][ T25] usb 1-1: USB disconnect, device number 19 [ 531.361248][T10574] loop1: detected capacity change from 0 to 8 [ 531.392096][T10565] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 531.609967][T10581] loop0: detected capacity change from 0 to 4096 [ 531.619767][T10581] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 531.774317][T10581] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 531.786446][T10483] chnl_net:caif_netlink_parms(): no params data found [ 532.243649][ T5326] Bluetooth: hci2: command tx timeout [ 532.256791][T10483] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.263933][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.338875][T10483] bridge_slave_0: entered allmulticast mode [ 533.397174][T10483] bridge_slave_0: entered promiscuous mode [ 533.431453][T10483] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.481558][T10483] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.526377][T10483] bridge_slave_1: entered allmulticast mode [ 533.545577][T10618] loop4: detected capacity change from 0 to 2048 [ 533.564533][T10483] bridge_slave_1: entered promiscuous mode [ 533.581375][T10613] loop3: detected capacity change from 0 to 2048 [ 533.626379][T10618] loop4: p3 < > p4 < > [ 533.636909][T10618] loop4: partition table partially beyond EOD, truncated [ 533.667160][T10618] loop4: p3 start 4284289 is beyond EOD, truncated [ 533.773690][T10574] loop1: detected capacity change from 0 to 32768 [ 533.797427][T10483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.973580][T10483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.866182][T10083] Bluetooth: hci0: command 0x0406 tx timeout [ 534.980257][T10634] serio: Serial port ptm0 [ 535.070859][T10483] team0: Port device team_slave_0 added [ 535.212500][T10483] team0: Port device team_slave_1 added [ 535.257006][T10634] loop0: detected capacity change from 0 to 1024 [ 535.409278][ T29] audit: type=1326 audit(1723710107.887:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070a7799b9 code=0x7ffc0000 [ 535.426771][T10645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.450828][ T29] audit: type=1326 audit(1723710107.887:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070a7799b9 code=0x7ffc0000 [ 535.484500][ T29] audit: type=1326 audit(1723710107.887:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f070a7799b9 code=0x7ffc0000 [ 535.618181][T10645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.649819][ T29] audit: type=1326 audit(1723710107.887:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070a7799b9 code=0x7ffc0000 [ 535.697934][T10483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.092772][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.136472][ T29] audit: type=1326 audit(1723710107.887:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070a7799b9 code=0x7ffc0000 [ 536.137339][T10483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.247253][ T29] audit: type=1326 audit(1723710107.887:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f070a7799b9 code=0x7ffc0000 [ 536.250756][T10483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.298927][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.351396][ T29] audit: type=1326 audit(1723710107.887:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070a7799b9 code=0x7ffc0000 [ 536.452981][ T29] audit: type=1326 audit(1723710107.887:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070a7799b9 code=0x7ffc0000 [ 536.453367][T10483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.505542][ T29] audit: type=1326 audit(1723710107.887:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f070a7799b9 code=0x7ffc0000 [ 536.546597][ T29] audit: type=1326 audit(1723710107.887:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10647 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070a7799b9 code=0x7ffc0000 [ 537.093616][T10671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.217069][T10483] hsr_slave_0: entered promiscuous mode [ 537.238097][T10483] hsr_slave_1: entered promiscuous mode [ 537.244294][ T6328] hfsplus: b-tree write err: -5, ino 4 [ 537.257752][T10483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.277397][T10483] Cannot create hsr debugfs directory [ 538.652103][T10688] netlink: 'syz.3.816': attribute type 4 has an invalid length. [ 538.747297][T10693] loop4: detected capacity change from 0 to 1024 [ 538.764328][T10693] hfsplus: invalid attributes max_key_len 0 [ 538.771645][T10693] hfsplus: failed to load attributes file [ 540.490875][T10698] loop0: detected capacity change from 0 to 764 [ 541.513906][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 541.843055][T10712] /dev/loop0: Can't open blockdev [ 542.355555][T10081] rock: directory entry would overflow storage [ 542.386182][T10081] rock: sig=0x4f50, size=4, remaining=3 [ 542.391785][T10081] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 543.408077][T10081] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 543.685319][T10733] loop0: detected capacity change from 0 to 256 [ 543.797347][T10733] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 544.057015][T10739] loop3: detected capacity change from 0 to 1024 [ 544.067563][T10739] hfsplus: unable to parse mount options [ 545.232461][T10735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.827'. [ 545.653431][T10750] loop1: detected capacity change from 0 to 1024 [ 545.782103][T10750] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 545.850991][T10750] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 545.871046][T10750] JBD2: no valid journal superblock found [ 545.881808][T10750] EXT4-fs (loop1): Could not load journal inode [ 546.522260][T10750] loop1: detected capacity change from 0 to 512 [ 546.615153][ T1692] hid-generic 0003:0000:0000.000E: unknown main item tag 0x0 [ 546.717119][ T1692] hid-generic 0003:0000:0000.000E: unknown main item tag 0x0 [ 546.793632][ T1692] hid-generic 0003:0000:0000.000E: unknown main item tag 0x0 [ 546.899009][T10777] loop4: detected capacity change from 0 to 256 [ 547.023996][ T1692] hid-generic 0003:0000:0000.000E: unknown main item tag 0x0 [ 547.054849][ T1692] hid-generic 0003:0000:0000.000E: hidraw0: USB HID v0.08 Device [syz1] on syz1 [ 547.936103][T10781] sp0: Synchronizing with TNC [ 548.590360][T10483] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 548.850650][T10483] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 549.039664][T10483] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 549.081027][T10483] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 550.161057][T10799] loop0: detected capacity change from 0 to 4096 [ 550.667190][T10799] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 550.679277][T10799] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 550.686484][T10799] ntfs3: loop0: Failed to load $MFT (-22). [ 550.799312][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 550.925049][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.835'. [ 550.939317][T10795] gtp0: entered promiscuous mode [ 550.944293][T10795] gtp0: entered allmulticast mode [ 550.969118][T10483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.136140][ T1168] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 551.175814][T10811] loop4: detected capacity change from 0 to 1024 [ 551.989016][T10483] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.072816][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.080098][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.124925][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.132196][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.292872][T10811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.317275][T10811] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.388047][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 552.415813][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 552.454146][T10483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.465552][T10483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 553.218958][ T1168] usb 2-1: string descriptor 0 read error: -71 [ 553.227685][ T1168] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 553.246085][ T1168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.327366][ T9816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.344257][ T1168] usb 2-1: config 0 descriptor?? [ 553.376165][ T1168] usb 2-1: can't set config #0, error -71 [ 553.397692][ T1168] usb 2-1: USB disconnect, device number 26 [ 554.505435][ T5280] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 555.291132][T10483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.435743][T10853] binder_alloc: binder_alloc_mmap_handler: 10852 20ffc000-20ffd000 already mapped failed -16 [ 555.436404][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 555.463256][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.500061][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.501272][T10483] veth0_vlan: entered promiscuous mode [ 555.564255][ T5280] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 555.594417][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.646735][T10483] veth1_vlan: entered promiscuous mode [ 555.726056][ T5280] usb 1-1: config 0 descriptor?? [ 555.767597][T10483] veth0_macvtap: entered promiscuous mode [ 555.794050][ T5280] hub 1-1:0.0: USB hub found [ 555.798144][T10867] loop1: detected capacity change from 0 to 164 [ 555.837592][T10483] veth1_macvtap: entered promiscuous mode [ 555.872315][T10867] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 555.908900][T10870] futex_wake_op: syz.4.847 tries to shift op by -1; fix this program [ 555.951806][T10870] syz.4.847: attempt to access beyond end of device [ 555.951806][T10870] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 555.965193][T10870] hpfs: hpfs_map_sector(): read error [ 556.574958][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.630155][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.639669][ T5280] hub 1-1:0.0: 1 port detected [ 556.686470][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.698125][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.708728][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.732116][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.877659][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.926047][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.965127][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.021279][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.032013][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.042959][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.668470][T10483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.744104][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.791702][ T5280] hub 1-1:0.0: activate --> -90 [ 557.812743][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.824963][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.865681][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.877423][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.889127][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.920551][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.940871][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.954146][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.977178][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.996043][T10483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.010176][T10483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.122300][T10483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.191660][T10483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.212456][T10483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.229164][ T25] usb 1-1: USB disconnect, device number 20 [ 558.230866][T10483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.262221][T10483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.263068][T10893] loop4: detected capacity change from 0 to 16 [ 558.364969][T10893] erofs: (device loop4): mounted with root inode @ nid 36. [ 558.466472][ T5280] usb 1-1-port1: config error [ 558.605436][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.910115][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.029150][T10897] loop3: detected capacity change from 0 to 512 [ 559.073744][ T5724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.092603][ T5724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.150939][T10897] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.851: corrupted in-inode xattr: invalid ea_ino [ 559.268938][T10897] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.851: couldn't read orphan inode 15 (err -117) [ 559.313917][T10907] loop0: detected capacity change from 0 to 2048 [ 559.327434][T10897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.415765][ T8824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.025244][T10938] loop3: detected capacity change from 0 to 32768 [ 562.036085][T10938] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.854 (10938) [ 562.116684][T10938] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 562.127139][T10938] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 562.135802][T10938] BTRFS info (device loop3): using free-space-tree [ 562.357824][T10907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.723029][ T8824] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 562.950542][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.109020][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.117554][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.293500][T10970] netlink: 277 bytes leftover after parsing attributes in process `syz.3.856'. [ 563.340420][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.483966][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.598356][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.800247][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 563.817860][ T33] bridge_slave_1: left allmulticast mode [ 563.823589][ T33] bridge_slave_1: left promiscuous mode [ 563.868583][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.913118][T10980] loop4: detected capacity change from 0 to 1024 [ 564.227634][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 564.278839][ T8] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 564.288595][ T8] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 564.303492][ T8] usb 4-1: config 135 has no interface number 0 [ 564.313071][ T8] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.333659][ T33] bridge_slave_0: left allmulticast mode [ 564.374265][T10980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.460286][ T8] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 564.462382][ T33] bridge_slave_0: left promiscuous mode [ 564.646199][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.801547][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.811002][ T8] usb 4-1: Product: syz [ 564.815215][ T8] usb 4-1: Manufacturer: syz [ 564.957324][ T8] usb 4-1: SerialNumber: syz [ 565.049003][ T9816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.148757][T10993] loop1: detected capacity change from 0 to 512 [ 565.220080][T10993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.346431][T10993] ext4 filesystem being mounted at /44/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.484169][T10993] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.860: Directory hole found for htree leaf block 0 [ 565.607102][T10083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 565.636941][T10083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 565.650259][T10993] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.860: Directory hole found for htree leaf block 0 [ 565.672566][T10083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 565.686610][T10083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 565.692840][T10993] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 565.726344][T10083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 565.763628][T10083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.812245][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 566.224513][ T9525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.612736][ T8] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 566.639126][ T8] usb 4-1: No valid video chain found. [ 566.643617][ T5326] Bluetooth: hci3: unexpected cc 0x100c length: 11 > 3 [ 566.669020][ T8] usb 4-1: USB disconnect, device number 12 [ 567.834175][ T5326] Bluetooth: hci2: command tx timeout [ 568.322585][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.142113][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.160262][ T33] bond0 (unregistering): Released all slaves [ 569.383678][T11004] lo speed is unknown, defaulting to 1000 [ 569.434176][T11046] loop0: detected capacity change from 0 to 512 [ 569.481481][T11046] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.871: casefold flag without casefold feature [ 569.495015][T11046] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.871: couldn't read orphan inode 15 (err -117) [ 569.518533][T11046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.540200][T11021] lo speed is unknown, defaulting to 1000 [ 569.616310][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 569.837798][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.874980][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.904013][ T25] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 569.920217][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.952299][T10083] Bluetooth: hci2: command tx timeout [ 569.959158][ T25] usb 5-1: config 0 descriptor?? [ 569.968072][ T5315] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 570.033363][ T33] hsr_slave_0: left promiscuous mode [ 570.111797][ T33] hsr_slave_1: left promiscuous mode [ 570.125273][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.142544][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.156560][ T5315] usb 1-1: Using ep0 maxpacket: 16 [ 570.172890][ T5315] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 570.196078][ T5315] usb 1-1: config 0 has no interface number 0 [ 570.202280][ T5315] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 2139, setting to 1024 [ 570.215409][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.236603][ T5315] usb 1-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 570.252285][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.272110][ T5315] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 570.303209][ T5315] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 570.322551][T10083] Bluetooth: hci1: command 0x0406 tx timeout [ 570.346143][ T5315] usb 1-1: Product: syz [ 570.350382][ T5315] usb 1-1: Manufacturer: syz [ 570.355101][ T5315] usb 1-1: SerialNumber: syz [ 570.363691][ T5315] usb 1-1: config 0 descriptor?? [ 570.373221][T11046] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 570.384109][ T5315] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 570.396389][ T5315] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 570.403334][ T33] veth1_macvtap: left promiscuous mode [ 570.413189][ T33] veth0_macvtap: left promiscuous mode [ 570.430171][ T33] veth1_vlan: left promiscuous mode [ 570.436965][ T5315] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 570.456145][ T33] veth0_vlan: left promiscuous mode [ 570.462454][ T5315] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 570.507430][ T5315] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 570.533017][ T5315] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 570.564782][ T5315] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 570.602398][ T5315] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 570.646222][ T5315] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 570.702090][ T5315] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 570.710301][ T5326] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 570.710415][ T5326] Bluetooth: hci3: Injecting HCI hardware error event [ 570.713668][ T5326] Bluetooth: hci3: hardware error 0x00 [ 570.820606][ T5315] usb 1-1: USB disconnect, device number 21 [ 570.866640][ T5315] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 570.931275][ T5315] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 570.967241][ T5315] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 570.992678][ T5315] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 571.008705][ T5315] keyspan 1-1:0.107: device disconnected [ 571.119981][ T5309] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 571.203113][T10081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.301487][T11071] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 571.317985][ T5309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.329133][ T5309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 571.342840][ T5309] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.364213][ T5309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.396287][ T5309] usb 4-1: config 0 descriptor?? [ 571.418862][T11071] loop0: detected capacity change from 0 to 512 [ 571.480298][T11071] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.873: casefold flag without casefold feature [ 571.515862][T11071] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.873: couldn't read orphan inode 15 (err -117) [ 571.544961][T11071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.573474][T11071] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.873: Directory hole found for htree leaf block 0 [ 571.735721][ T33] team0 (unregistering): Port device team_slave_1 removed [ 571.816384][ T33] team0 (unregistering): Port device team_slave_0 removed [ 571.853831][ T5309] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 571.895547][ T5309] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 571.909921][ T5235] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 571.986330][T10083] Bluetooth: hci2: command tx timeout [ 572.122404][ T5235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.149629][ T5235] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 572.164787][ T5235] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 572.190251][ T5235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.212544][ T5235] usb 1-1: config 0 descriptor?? [ 572.666778][ T5235] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 572.674891][ T25] usb 5-1: string descriptor 0 read error: -71 [ 572.681869][ T5235] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 572.718313][ T5235] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 572.726153][ T25] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71 [ 572.809170][ T25] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 572.839991][ T25] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71 [ 572.849586][ T25] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 572.858539][ T25] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 572.873089][ T5326] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 572.926345][ T25] usb 5-1: USB disconnect, device number 18 [ 572.993708][ T5315] usb 1-1: USB disconnect, device number 22 [ 573.052375][T11083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.069708][T11004] chnl_net:caif_netlink_parms(): no params data found [ 573.179847][T11083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.223344][T11083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.251976][T11083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.265061][T11080] loop4: detected capacity change from 0 to 8 [ 573.333412][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.405811][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.428713][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.502404][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.529751][T11004] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.567805][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.599460][T11004] bridge_slave_0: entered allmulticast mode [ 573.628457][T11004] bridge_slave_0: entered promiscuous mode [ 573.654299][T10081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.672890][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.685403][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.695740][T11004] bridge_slave_1: entered allmulticast mode [ 573.717524][T11004] bridge_slave_1: entered promiscuous mode [ 573.871657][T11004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.948048][T11004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.066776][ T5326] Bluetooth: hci2: command tx timeout [ 574.341125][T11004] team0: Port device team_slave_0 added [ 574.390994][T11004] team0: Port device team_slave_1 added [ 574.518208][T11004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.575405][T11004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.657161][T11107] loop0: detected capacity change from 0 to 64 [ 574.902457][T11004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.005611][T11004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.105698][T11004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.189414][T11004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.302155][T11111] trusted_key: encrypted_key: insufficient parameters specified [ 575.343745][T11111] trusted_key: encrypted_key: insufficient parameters specified [ 575.418387][T11004] hsr_slave_0: entered promiscuous mode [ 575.455221][T11004] hsr_slave_1: entered promiscuous mode [ 575.524607][T11004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.556699][T11004] Cannot create hsr debugfs directory [ 576.309619][T11128] loop4: detected capacity change from 0 to 256 [ 576.459173][T11132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.878'. [ 577.018235][ T9816] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 577.051542][ T9816] FAT-fs (loop4): Filesystem has been set read-only [ 577.070037][T11004] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 577.079366][ T9816] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 577.148190][T11004] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 577.155143][T11142] loop0: detected capacity change from 0 to 1024 [ 577.170212][T11142] ext4: Bad value for 'commit' [ 577.200795][T11004] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 577.339648][T11143] loop0: detected capacity change from 0 to 512 [ 577.353905][T11143] EXT4-fs: Ignoring removed i_version option [ 577.367559][T11143] EXT4-fs: Ignoring removed nobh option [ 577.414012][T11143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 577.456344][T11004] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 577.552514][T11143] EXT4-fs (loop0): 1 truncate cleaned up [ 577.573950][T11143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.261192][ T5419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.418319][T11004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.543914][ T5419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.658395][T11004] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.927263][ T5419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.014838][T11166] syz.1.885: attempt to access beyond end of device [ 579.014838][T11166] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 579.028201][T11166] FAT-fs (loop3): unable to read boot sector [ 579.722591][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.729852][ T5724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.859323][T10081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.880473][ T5419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.899885][T11170] loop1: detected capacity change from 0 to 8 [ 579.947199][T11170] SQUASHFS error: Unable to read directory block [631:526] [ 579.994501][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 579.994518][ T29] audit: type=1326 audit(1723710153.467:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11169 comm="syz.1.886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa87b1799b9 code=0x0 [ 580.025108][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.032334][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.094413][T11174] SQUASHFS error: Unable to read directory block [631:526] [ 580.162021][T10083] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 580.185486][T10083] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 580.197232][T10083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 580.225875][T10083] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 580.234130][T10083] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 580.242797][T10083] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 581.410247][ T5326] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 581.436933][ T5326] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 581.447279][ T5326] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 581.468353][ T5326] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 581.488524][ T5326] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 581.497332][ T5326] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 582.311448][T10083] Bluetooth: hci6: command tx timeout [ 583.590329][T11083] plantronics 0003:047F:FFFF.0010: timeout initializing reports [ 583.601853][T10083] Bluetooth: hci7: command tx timeout [ 583.798858][T11175] lo speed is unknown, defaulting to 1000 [ 583.887643][ T5235] usb 4-1: USB disconnect, device number 13 [ 583.923326][T11210] lo speed is unknown, defaulting to 1000 [ 584.027123][T11243] loop1: detected capacity change from 0 to 512 [ 584.083810][T11243] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.891: corrupted in-inode xattr: invalid ea_ino [ 584.092513][T11004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.113854][T11243] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.891: couldn't read orphan inode 15 (err -117) [ 584.149676][T11243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.166082][ T5419] bridge_slave_1: left allmulticast mode [ 584.171752][ T5419] bridge_slave_1: left promiscuous mode [ 584.178428][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.202606][ T5419] bridge_slave_0: left allmulticast mode [ 584.209937][ T5419] bridge_slave_0: left promiscuous mode [ 584.217251][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.391645][ T9525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.401909][T10083] Bluetooth: hci6: command tx timeout [ 585.601098][ T5419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.612010][ T5419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.623770][ T5419] bond0 (unregistering): Released all slaves [ 585.667948][T10083] Bluetooth: hci7: command tx timeout [ 585.898379][ T5419] IPVS: stopping backup sync thread 10242 ... [ 586.298210][T11267] netlink: 44 bytes leftover after parsing attributes in process `syz.1.894'. [ 586.466030][T10083] Bluetooth: hci6: command tx timeout [ 586.473953][T11004] veth0_vlan: entered promiscuous mode [ 586.521979][ T5419] hsr_slave_0: left promiscuous mode [ 586.528198][ T5419] hsr_slave_1: left promiscuous mode [ 586.534337][ T5419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.544065][ T5419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.553017][ T5419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.560778][ T5419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.599863][ T5419] veth1_macvtap: left promiscuous mode [ 586.617702][ T5419] veth0_macvtap: left promiscuous mode [ 586.623332][ T5419] veth1_vlan: left promiscuous mode [ 586.636149][ T5419] veth0_vlan: left promiscuous mode [ 587.776256][ T47] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 587.828758][T10083] Bluetooth: hci7: command tx timeout [ 588.466241][T11292] loop1: detected capacity change from 0 to 512 [ 588.473357][T11292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.487829][T11292] EXT4-fs (loop1): Test dummy encryption mode enabled [ 588.534590][ T5419] team0 (unregistering): Port device team_slave_1 removed [ 588.556663][T10083] Bluetooth: hci6: command tx timeout [ 588.580526][ T47] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 588.599227][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 588.600346][T11292] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.896: iget: bogus i_mode (0) [ 588.609610][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.630802][T11292] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.896: couldn't read orphan inode 17 (err -117) [ 588.632107][T11292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.644899][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 588.666486][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.687562][ T47] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 588.695041][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 588.727349][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.745028][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 588.758918][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.773741][ T47] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 588.782305][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 588.797296][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.810892][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 588.824764][ T47] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.860302][T11292] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.896: bg 0: block 7: invalid block bitmap [ 588.884660][ T5419] team0 (unregistering): Port device team_slave_0 removed [ 588.890414][ T47] usb 1-1: string descriptor 0 read error: -22 [ 588.901201][ T47] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 588.933019][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.986318][ T47] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 589.576596][ T9525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.862412][ T5309] usb 1-1: USB disconnect, device number 23 [ 589.907187][T10083] Bluetooth: hci7: command tx timeout [ 590.479853][T11175] chnl_net:caif_netlink_parms(): no params data found [ 590.589064][T11004] veth1_vlan: entered promiscuous mode [ 590.679881][T11210] chnl_net:caif_netlink_parms(): no params data found [ 590.920542][T11175] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.930053][T11175] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.955028][T11175] bridge_slave_0: entered allmulticast mode [ 590.979642][T11175] bridge_slave_0: entered promiscuous mode [ 591.081636][T11004] veth0_macvtap: entered promiscuous mode [ 591.117723][T11175] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.176349][T11175] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.183623][T11175] bridge_slave_1: entered allmulticast mode [ 591.243443][T11175] bridge_slave_1: entered promiscuous mode [ 591.319516][T11004] veth1_macvtap: entered promiscuous mode [ 591.466142][ T1168] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 591.574129][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.587560][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.597531][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.609065][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.619305][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.630303][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.640835][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.652306][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.662558][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.682241][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.694222][ T1168] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 591.704524][ T1168] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 591.719601][T11004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.745498][ T1168] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 591.757959][T11175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.772396][ T1168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.789272][ T1168] usb 1-1: Product: syz [ 591.793658][ T1168] usb 1-1: Manufacturer: syz [ 591.798748][ T1168] usb 1-1: SerialNumber: syz [ 591.824930][T11210] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.836713][T11210] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.846225][T11210] bridge_slave_0: entered allmulticast mode [ 591.863830][T11210] bridge_slave_0: entered promiscuous mode [ 591.878675][T11210] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.885788][T11210] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.908050][T11210] bridge_slave_1: entered allmulticast mode [ 591.915065][T11210] bridge_slave_1: entered promiscuous mode [ 591.939299][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.965986][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.975862][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.995987][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.007020][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.026168][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.047403][ T1168] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 592.056200][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.076001][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.101264][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.115489][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.147033][T11004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.156677][T11175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.198440][T11004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.207692][T11004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.219240][T11004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.229422][T11004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.326606][T11175] team0: Port device team_slave_0 added [ 592.344985][T11175] team0: Port device team_slave_1 added [ 592.414801][T11210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.498029][T11175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.505403][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.686161][T11175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.902730][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.900'. [ 593.050072][T11210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.238110][T11175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.266178][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.306174][T11175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.366542][T11210] team0: Port device team_slave_0 added [ 593.404209][T11344] netlink: 132 bytes leftover after parsing attributes in process `syz.1.903'. [ 593.435219][T11210] team0: Port device team_slave_1 added [ 593.568473][ T5309] usb 1-1: USB disconnect, device number 24 [ 593.593574][ T5309] usblp0: removed [ 593.646822][T11175] hsr_slave_0: entered promiscuous mode [ 593.664291][ T29] audit: type=1326 audit(1723710167.137:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.0.905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b84d799b9 code=0x0 [ 593.709588][T11175] hsr_slave_1: entered promiscuous mode [ 593.732601][T11175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.746794][T11175] Cannot create hsr debugfs directory [ 593.752932][T11210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.764451][T11210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.795306][T11210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.815670][T11358] loop0: detected capacity change from 0 to 512 [ 593.817337][T11210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.831595][T11210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.858027][T11358] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent [ 593.861000][T11210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.009603][ T5724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.022608][ T5724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.047078][T11362] loop1: detected capacity change from 0 to 512 [ 594.067139][T11362] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 594.079925][T11362] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 594.160885][T11210] hsr_slave_0: entered promiscuous mode [ 594.177298][T11210] hsr_slave_1: entered promiscuous mode [ 594.184111][T11210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.201433][T11362] loop1: detected capacity change from 0 to 128 [ 594.209026][T11210] Cannot create hsr debugfs directory [ 594.223016][T11362] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 594.251747][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.260453][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.694904][T11377] loop1: detected capacity change from 0 to 64 [ 595.015109][T11376] netlink: 'syz.0.909': attribute type 8 has an invalid length. [ 595.409519][ T6328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.544384][ T6328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.667970][T11210] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.710146][ T6328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.768190][T11210] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.805540][ T6328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.872950][T11210] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.033595][T11210] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.180268][ T6328] bridge_slave_1: left allmulticast mode [ 596.203213][ T6328] bridge_slave_1: left promiscuous mode [ 596.216493][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.254702][T11411] loop1: detected capacity change from 0 to 1024 [ 596.345064][T11411] ext4: Unknown parameter 'nouser_xattr' [ 596.408872][ T6328] bridge_slave_0: left allmulticast mode [ 596.795076][ T6328] bridge_slave_0: left promiscuous mode [ 597.093276][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.115362][T11416] loop1: detected capacity change from 0 to 256 [ 597.696948][ T5326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.710720][ T5326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.721814][ T5326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.732095][ T5326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.766607][ T5326] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 597.786182][ T5326] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.147796][T11422] loop1: detected capacity change from 0 to 32768 [ 598.211595][T11422] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 598.274280][T11422] XFS (loop1): Ending clean mount [ 598.282074][ T6328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.313338][ T6328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.335203][ T6328] bond0 (unregistering): Released all slaves [ 598.432556][T11419] lo speed is unknown, defaulting to 1000 [ 598.599958][T11436] loop0: detected capacity change from 0 to 1024 [ 599.842282][T10083] Bluetooth: hci0: command tx timeout [ 599.972293][T11210] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 600.004109][T11210] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 600.094191][ T6328] hsr_slave_0: left promiscuous mode [ 600.120745][ T6328] hsr_slave_1: left promiscuous mode [ 600.163794][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.199249][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.218026][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.225906][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.293415][ T6328] veth1_macvtap: left promiscuous mode [ 600.301493][ T6328] veth0_macvtap: left promiscuous mode [ 600.309241][ T6328] veth1_vlan: left promiscuous mode [ 600.314879][ T6328] veth0_vlan: left promiscuous mode [ 600.956171][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 601.164339][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 601.189388][ T9525] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 601.213453][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.228474][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.239801][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 601.275542][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.305231][ T25] usb 1-1: config 0 descriptor?? [ 601.609978][T11470] trusted_key: encrypted_key: insufficient parameters specified [ 601.675114][T11490] loop1: detected capacity change from 0 to 512 [ 601.687268][T11490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 601.765804][T11490] EXT4-fs (loop1): 1 truncate cleaned up [ 601.772763][T11490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.907563][T10083] Bluetooth: hci0: command tx timeout [ 602.069565][ T9525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.211757][ T6328] team0 (unregistering): Port device team_slave_1 removed [ 602.300306][ T6328] team0 (unregistering): Port device team_slave_0 removed [ 603.071494][T11210] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 603.120853][T11419] chnl_net:caif_netlink_parms(): no params data found [ 603.141759][T11509] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 603.146322][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 603.161215][T11210] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 603.174747][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 603.199743][ T25] usb 1-1: USB disconnect, device number 25 [ 603.285158][T11175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 603.422962][T11175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 603.494239][T11175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 603.507742][T11175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 603.599652][T11419] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.624841][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.651792][T11419] bridge_slave_0: entered allmulticast mode [ 603.678271][T11419] bridge_slave_0: entered promiscuous mode [ 603.744414][T11419] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.760625][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.776103][T11419] bridge_slave_1: entered allmulticast mode [ 603.790453][T11419] bridge_slave_1: entered promiscuous mode [ 603.986128][T10083] Bluetooth: hci0: command tx timeout [ 604.053258][T11419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.871573][T11419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.127513][T11550] kvm: kvm [11549]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x6d00000085 [ 605.200735][T11419] team0: Port device team_slave_0 added [ 605.227436][T11419] team0: Port device team_slave_1 added [ 605.965431][T11419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.003698][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.054278][T11419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.075422][T10083] Bluetooth: hci0: command tx timeout [ 606.084614][T11419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.101546][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.155336][T11557] loop0: detected capacity change from 0 to 256 [ 606.161963][T11419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.209124][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 606.280914][T11419] hsr_slave_0: entered promiscuous mode [ 606.307812][T11419] hsr_slave_1: entered promiscuous mode [ 606.323161][T11419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.334526][T11419] Cannot create hsr debugfs directory [ 606.427800][T11210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.445800][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 606.457211][ T8] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 606.484960][ T8] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.514383][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 606.533580][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 606.553200][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.574083][T11175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.580792][ T8] usb 2-1: Product: з [ 606.595519][ T8] usb 2-1: Manufacturer: Щ [ 606.604322][ T8] usb 2-1: SerialNumber: syz [ 606.622686][T11550] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 606.662251][T11210] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.743016][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.750268][ T6328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.792624][T11175] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.814905][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.822089][ T6328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.847035][T11571] netlink: 'syz.0.922': attribute type 11 has an invalid length. [ 606.869684][ T8] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 606.905295][ T8] usb 2-1: USB disconnect, device number 27 [ 606.959355][ T8] usblp0: removed [ 607.070354][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.077546][ T6328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.115619][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.122829][ T6328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.864567][T11210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.940960][T11419] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 608.021052][T11419] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 608.308908][T11419] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 608.532799][T11419] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 608.741720][T11175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.117393][T11210] veth0_vlan: entered promiscuous mode [ 609.939687][T11210] veth1_vlan: entered promiscuous mode [ 610.193286][T11419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.240919][T11210] veth0_macvtap: entered promiscuous mode [ 610.319940][T11210] veth1_macvtap: entered promiscuous mode [ 610.408045][T11419] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.504643][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.525433][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.537129][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.559903][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.583593][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.641171][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.686018][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.738056][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.783335][T10083] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 610.815038][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.898164][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.937552][T11210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.961701][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.968804][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.007226][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.014502][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.121046][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.146576][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.161336][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.173003][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.201823][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.225342][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.236237][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.256102][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.276041][T11210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.330574][T11210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.363039][T11210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.399919][T11210] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.422000][T11210] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.456040][T11210] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.464792][T11210] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.474962][T11635] loop0: detected capacity change from 0 to 8 [ 611.490847][T11175] veth0_vlan: entered promiscuous mode [ 611.517765][T11419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 611.534753][T11419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.623889][T11175] veth1_vlan: entered promiscuous mode [ 611.818496][T11175] veth0_macvtap: entered promiscuous mode [ 611.842966][ T6329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.861145][ T6329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.935517][T11175] veth1_macvtap: entered promiscuous mode [ 611.963848][ T6329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.997511][ T6329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.051872][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.069516][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.085279][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.099557][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.110182][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.122504][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.134519][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.147191][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.157494][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.178081][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.196587][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.224338][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.273394][T11175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.294429][T11419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.317914][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.343529][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.358529][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.370709][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.386439][ T25] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 612.395140][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.432484][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.456100][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.474462][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.501962][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.521595][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.531638][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.542473][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.556877][T11175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.576218][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 612.592876][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.614786][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.616728][T11175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.627244][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 612.644663][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.648392][T11175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.661183][ T25] usb 1-1: config 0 descriptor?? [ 612.673165][ T25] hub 1-1:0.0: USB hub found [ 612.680695][T11175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.701594][T11175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.769120][ T1168] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 612.785798][T11419] veth0_vlan: entered promiscuous mode [ 612.854426][T11419] veth1_vlan: entered promiscuous mode [ 612.874632][ T25] hub 1-1:0.0: 1 port detected [ 612.928503][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.940559][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.962266][ T1168] usb 4-1: Using ep0 maxpacket: 32 [ 612.967532][T11419] veth0_macvtap: entered promiscuous mode [ 612.991187][ T1168] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.993276][T11419] veth1_macvtap: entered promiscuous mode [ 613.003568][ T1168] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.019304][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.028618][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.037922][ T1168] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 613.049545][ T1168] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 613.059895][ T1168] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.072928][ T1168] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 613.075154][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.088721][ T1168] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 613.110239][ T1168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.112644][ T25] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 613.121598][ T1168] usb 4-1: Product: syz [ 613.128716][ T25] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 613.130432][ T1168] usb 4-1: Manufacturer: syz [ 613.142574][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.152341][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 613.152989][ T1168] usb 4-1: SerialNumber: syz [ 613.163151][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 613.166527][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.195233][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.215032][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.217899][ T25] usb 1-1: USB disconnect, device number 26 [ 613.226279][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.244173][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.254951][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.265075][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.275660][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.286872][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.298664][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.309195][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.320196][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.332506][T11419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.375287][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.406051][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.444099][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.474677][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.491907][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.510967][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.522036][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.534811][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.545030][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.556119][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.566753][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.580048][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.590734][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.602653][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.617137][T11419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.684712][T11658] fuse: Bad value for 'fd' [ 614.722944][T11419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.767740][T11419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.793274][T11658] loop1: detected capacity change from 0 to 40427 [ 614.796098][T11419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.806017][ T1168] cdc_ncm 4-1:1.0: bind() failure [ 614.813484][T11658] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 614.820944][T11658] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 614.831084][T11658] F2FS-fs (loop1): Unrecognized mount option "batadv_slave_1" or missing value [ 614.840297][T11419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.871605][ T1168] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 614.878527][ T1168] cdc_ncm 4-1:1.1: bind() failure [ 614.907919][ T1168] usb 4-1: USB disconnect, device number 14 [ 615.046024][ T29] audit: type=1326 audit(1723710188.507:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11659 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cfd799b9 code=0x7fc00000 [ 615.106032][ T29] audit: type=1326 audit(1723710188.507:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11659 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cfd799b9 code=0x7fc00000 [ 615.383580][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.420811][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.557950][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.612711][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.736123][ T29] audit: type=1326 audit(1723710189.197:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11659 comm="syz.4.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51cfd799b9 code=0x7fc00000 [ 616.514726][T11677] loop4: detected capacity change from 0 to 128 [ 616.586247][T11677] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 616.591156][T11682] loop1: detected capacity change from 0 to 512 [ 616.606512][T11682] ext4: Bad value for 'init_itable' [ 616.666500][T11677] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 616.727101][T11677] EXT4-fs warning (device loop4): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 616.886099][ T5315] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 617.116810][ T5315] usb 1-1: Using ep0 maxpacket: 8 [ 617.185289][ T5315] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 617.466075][ T5315] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 617.521386][ T5315] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 617.584265][ T5315] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 617.634976][ T5315] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.666298][ T5315] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 617.678203][T11175] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 617.687299][ T5315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.700542][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.709768][ T5315] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 617.914867][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.129651][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.240245][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.393425][ T36] bridge_slave_1: left allmulticast mode [ 618.399473][ T36] bridge_slave_1: left promiscuous mode [ 618.405483][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.414798][ T36] bridge_slave_0: left allmulticast mode [ 618.421390][ T36] bridge_slave_0: left promiscuous mode [ 618.432320][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.061546][T11698] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 619.068619][T11698] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 619.096029][T11698] vhci_hcd vhci_hcd.0: Device attached [ 619.192313][T11702] loop1: detected capacity change from 0 to 1024 [ 619.229343][T11702] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 619.229343][T11702] [ 619.241142][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 619.260995][T11702] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 619.371170][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.433619][ T5315] usb 16-1: SetAddress Request (2) to port 0 [ 619.440589][ T5315] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 619.578469][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 619.592331][ T1692] usb 1-1: USB disconnect, device number 27 [ 619.606678][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.644727][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 619.657890][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 619.672845][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 619.691632][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.702314][ T25] usb 5-1: config 0 descriptor?? [ 620.577965][T11699] vhci_hcd: connection reset by peer [ 620.590966][T11696] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 620.610172][ T3605] vhci_hcd: stop threads [ 620.693350][ T3605] vhci_hcd: release socket [ 620.706679][ T30] INFO: task syz.4.690:9663 blocked for more than 143 seconds. [ 620.717218][ T36] bond0 (unregistering): Released all slaves [ 620.726692][ T3605] vhci_hcd: disconnect device [ 620.745199][ T30] Not tainted 6.11.0-rc3-next-20240815-syzkaller #0 [ 620.798362][ T5326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 620.812950][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 620.824763][ T5326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 620.846988][ T5326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 620.856140][ T5326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 620.865412][ T5326] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 620.885769][ T5326] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 620.919126][ T30] task:syz.4.690 state:D stack:23736 pid:9663 tgid:9642 ppid:5461 flags:0x00000004 [ 620.954876][ T30] Call Trace: [ 620.959330][ T30] [ 620.964075][ T30] __schedule+0x17ff/0x4ad0 [ 620.969980][ T30] ? __pfx___schedule+0x10/0x10 [ 620.974980][ T30] ? __pfx_lock_release+0x10/0x10 [ 620.989903][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 621.004472][ T30] ? schedule+0x90/0x320 [ 621.026110][ T30] schedule+0x14b/0x320 [ 621.026998][T11710] loop0: detected capacity change from 0 to 1024 [ 621.034798][ T30] schedule_preempt_disabled+0x13/0x30 [ 621.055716][T11710] hfsplus: unable to parse mount options [ 621.056008][ T30] __mutex_lock+0x6a4/0xd70 [ 621.082871][ T30] ? __kernel_text_address+0xd/0x40 [ 621.098422][ T25] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 621.101033][ T30] ? __mutex_lock+0x527/0xd70 [ 621.142471][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1a60 [ 621.152267][ T25] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 621.154436][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 621.192899][ T25] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 621.193703][ T30] ? stack_trace_save+0x118/0x1d0 [ 621.216076][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 621.245055][ T30] ? stack_trace_save+0x118/0x1d0 [ 621.253543][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1a60 [ 621.282521][ T30] ? kasan_save_track+0x51/0x80 [ 621.297999][ T30] ? kasan_save_track+0x3f/0x80 [ 621.304985][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 621.316903][ T30] ? kmalloc_reserve+0x111/0x2a0 [ 621.325517][ T30] ? __alloc_skb+0x1f3/0x440 [ 621.347530][ T30] ? netlink_dump+0x2cd/0xd80 [ 621.354620][ T30] ? __netlink_dump_start+0x5a2/0x790 [ 621.374274][ T30] ? genl_rcv_msg+0x88c/0xec0 [ 621.383653][ T30] ? netlink_rcv_skb+0x1e3/0x430 [ 621.391245][ T30] ? genl_rcv+0x28/0x40 [ 621.398135][ T30] ? netlink_unicast+0x7f6/0x990 [ 621.405874][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 621.430895][ T30] ? __sock_sendmsg+0x221/0x270 [ 621.444638][ T30] ? ____sys_sendmsg+0x525/0x7d0 [ 621.461694][ T30] ? __sys_sendmsg+0x298/0x390 [ 621.475191][ T30] ? do_syscall_64+0xf3/0x230 [ 621.484662][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.493902][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 621.522716][ T30] ? rcu_is_watching+0x15/0xb0 [ 621.536004][ T30] ? trace_kmalloc+0x1f/0xd0 [ 621.544449][ T30] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 621.565413][ T30] ? __build_skb_around+0x245/0x3d0 [ 621.600907][ T30] ? __alloc_skb+0x28f/0x440 [ 621.610142][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.620242][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 621.625248][ T30] genl_dumpit+0x107/0x1a0 [ 621.632973][ T30] netlink_dump+0x647/0xd80 [ 621.638556][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 621.643968][ T30] ? __asan_memset+0x23/0x50 [ 621.649200][ T30] ? genl_start+0x4a8/0x6d0 [ 621.653856][ T30] __netlink_dump_start+0x5a2/0x790 [ 621.659163][ T30] genl_rcv_msg+0x88c/0xec0 [ 621.663714][ T30] ? mark_lock+0x9a/0x350 [ 621.671452][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.676723][ T30] ? __pfx_genl_start+0x10/0x10 [ 621.681590][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 621.687105][ T30] ? __pfx_genl_done+0x10/0x10 [ 621.692271][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 621.697677][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 621.704290][ T30] ? __pfx___might_resched+0x10/0x10 [ 621.710232][ T30] netlink_rcv_skb+0x1e3/0x430 [ 621.715118][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.722833][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 621.731207][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 621.738670][ T30] genl_rcv+0x28/0x40 [ 621.742687][ T30] netlink_unicast+0x7f6/0x990 [ 621.751379][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 621.757029][ T30] ? __virt_addr_valid+0x183/0x530 [ 621.762367][ T30] ? __check_object_size+0x49c/0x900 [ 621.768957][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 621.774573][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 621.781765][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.788416][ T30] ? __import_iovec+0x536/0x820 [ 621.793439][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 621.798659][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 621.803993][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 621.809880][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.816223][ T30] __sock_sendmsg+0x221/0x270 [ 621.822375][ T30] ____sys_sendmsg+0x525/0x7d0 [ 621.828149][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.833661][ T30] __sys_sendmsg+0x298/0x390 [ 621.838758][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.843951][ T30] ? bpf_raw_tracepoint_open+0xbf/0x1f0 [ 621.853242][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 621.861621][ T30] ? do_syscall_64+0x100/0x230 [ 621.869758][ T30] ? do_syscall_64+0xb6/0x230 [ 621.874604][ T30] do_syscall_64+0xf3/0x230 [ 621.879802][ T30] ? clear_bhb_loop+0x35/0x90 [ 621.888277][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.901981][ T30] RIP: 0033:0x7f28273799b9 [ 621.907836][ T30] RSP: 002b:00007f282817f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.917736][ T30] RAX: ffffffffffffffda RBX: 00007f2827516130 RCX: 00007f28273799b9 [ 621.939604][ T30] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 621.951897][ T30] RBP: 00007f28273e78d8 R08: 0000000000000000 R09: 0000000000000000 [ 621.963892][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.975211][ T30] R13: 0000000000000000 R14: 00007f2827516130 R15: 00007ffc2c020a08 [ 621.985775][ T30] [ 621.991021][ T30] [ 621.991021][ T30] Showing all locks held in the system: [ 622.035100][ T30] 4 locks held by kworker/u8:0/11: [ 622.050576][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 622.066703][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 622.084253][ T30] #2: ffffffff8fc8fd88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 622.093820][ T30] #3: ffffffff8e93ecb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 622.114097][ T30] 1 lock held by khungtaskd/30: [ 622.123091][ T30] #0: ffffffff8e939720 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 622.135640][ T30] 4 locks held by kworker/u8:3/36: [ 622.141582][ T30] #0: ffff8880166ed948 ((wq_completion)#19){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 622.153252][ T30] #1: ffffc90000ac7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 622.165173][ T30] #2: ffffffff8fc832d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 622.190591][ T30] #3: ffffffff8e93eb80 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 622.221091][ T30] 2 locks held by dhcpcd/4895: [ 622.234213][ T30] #0: ffffffff8fcf5a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 622.245501][ T30] #1: ffffffff8fc8fd88 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 622.260156][ T30] 2 locks held by getty/4980: [ 622.268909][ T30] #0: ffff88802f5e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 622.281451][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 622.292421][ T30] 1 lock held by syz-executor/5218: [ 622.300825][ T30] 5 locks held by kworker/1:6/5315: [ 622.307614][ T30] #0: ffff88801da8f948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 622.320721][ T30] #1: ffffc9000459fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 622.335469][ T30] #2: ffff888024461190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 622.349556][ T30] #3: ffff8880244d8518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 622.362090][ T30] #4: ffff8880236a4a68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 622.395285][ T30] 2 locks held by syz.1.649/9396: [ 622.404472][ T30] #0: ffffffff8fcf5a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 622.423576][ T30] #1: ffffffff8ec0f528 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 622.437790][ T30] 3 locks held by syz.4.690/9663: [ 622.442970][ T30] #0: ffffffff8fcf5a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 622.451893][ T30] #1: ffff88805da94678 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 622.465149][ T30] #2: ffffffff8ec0f528 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1a60 [ 622.478412][ T30] 2 locks held by syz.3.938/11697: [ 622.483668][ T30] #0: ffffffff8fcf5a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 622.498513][ T30] #1: ffffffff8fc8fd88 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 622.508683][ T30] 1 lock held by syz.4.939/11693: [ 622.515010][ T30] #0: ffffffff8e93ecb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 622.526203][ T30] 1 lock held by syz.0.941/11709: [ 622.531918][ T30] #0: ffffffff8fc8fd88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15b/0x1190 [ 622.545322][ T30] 1 lock held by syz-executor/11707: [ 622.552295][ T30] #0: ffffffff8fc8fd88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 622.563080][ T30] 1 lock held by syz.1.942/11714: [ 622.568994][ T30] [ 622.609528][ T30] ============================================= [ 622.609528][ T30] [ 622.640399][T11707] lo speed is unknown, defaulting to 1000 [ 622.646807][ T30] NMI backtrace for cpu 1 [ 622.651133][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-next-20240815-syzkaller #0 [ 622.661094][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 622.671131][ T30] Call Trace: [ 622.674394][ T30] [ 622.677309][ T30] dump_stack_lvl+0x241/0x360 [ 622.681973][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.687193][ T30] ? __pfx__printk+0x10/0x10 [ 622.691764][ T30] ? vprintk_emit+0x667/0x7c0 [ 622.696424][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 622.701437][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 622.706462][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 622.711932][ T30] ? _printk+0xd5/0x120 [ 622.716092][ T30] ? __pfx__printk+0x10/0x10 [ 622.720666][ T30] ? __wake_up_klogd+0xcc/0x110 [ 622.725500][ T30] ? __pfx__printk+0x10/0x10 [ 622.730073][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 622.735084][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 622.741054][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 622.747019][ T30] watchdog+0xff4/0x1040 [ 622.751248][ T30] ? watchdog+0x1ea/0x1040 [ 622.755656][ T30] ? __pfx_watchdog+0x10/0x10 [ 622.760328][ T30] kthread+0x2f0/0x390 [ 622.764377][ T30] ? __pfx_watchdog+0x10/0x10 [ 622.769036][ T30] ? __pfx_kthread+0x10/0x10 [ 622.773603][ T30] ret_from_fork+0x4b/0x80 [ 622.778001][ T30] ? __pfx_kthread+0x10/0x10 [ 622.782567][ T30] ret_from_fork_asm+0x1a/0x30 [ 622.787321][ T30] [ 622.791138][ T30] Sending NMI from CPU 1 to CPUs 0: [ 622.796823][ C0] NMI backtrace for cpu 0 [ 622.796835][ C0] CPU: 0 UID: 0 PID: 11707 Comm: syz-executor Not tainted 6.11.0-rc3-next-20240815-syzkaller #0 [ 622.796854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 622.796863][ C0] RIP: 0010:lock_acquire+0x17f/0x550 [ 622.796888][ C0] Code: 4c 8d bc 24 80 00 00 00 4c 89 fb 48 c1 eb 03 42 80 3c 2b 00 74 08 4c 89 ff e8 ed 3a 8c 00 48 c7 84 24 80 00 00 00 00 00 00 00 <9c> 8f 84 24 80 00 00 00 42 80 3c 2b 00 74 08 4c 89 ff e8 da 39 8c [ 622.796902][ C0] RSP: 0018:ffffc9000aae7140 EFLAGS: 00000246 [ 622.796916][ C0] RAX: 0000000000000000 RBX: 1ffff9200155ce38 RCX: ffffffff816fe6d4 [ 622.796926][ C0] RDX: 0000000000000000 RSI: ffffffff8c609da0 RDI: ffffffff8c609d60 [ 622.796937][ C0] RBP: ffffc9000aae7288 R08: ffffffff9018b8af R09: 1ffffffff2031715 [ 622.796949][ C0] R10: dffffc0000000000 R11: fffffbfff2031716 R12: 1ffff9200155ce30 [ 622.796961][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000aae71c0 [ 622.796972][ C0] FS: 0000555572f37500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 622.796986][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.796997][ C0] CR2: 00007f51cfeea338 CR3: 0000000068b0a000 CR4: 00000000003506f0 [ 622.797018][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 622.797031][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 622.797041][ C0] Call Trace: [ 622.797046][ C0] [ 622.797052][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 622.797069][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 622.797092][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 622.797106][ C0] ? nmi_handle+0x2a/0x5a0 [ 622.797128][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 622.797151][ C0] ? nmi_handle+0x14f/0x5a0 [ 622.797166][ C0] ? nmi_handle+0x2a/0x5a0 [ 622.797182][ C0] ? lock_acquire+0x17f/0x550 [ 622.797202][ C0] ? default_do_nmi+0x63/0x160 [ 622.797218][ C0] ? exc_nmi+0x123/0x1f0 [ 622.797232][ C0] ? end_repeat_nmi+0xf/0x53 [ 622.797252][ C0] ? lock_acquire+0xd4/0x550 [ 622.797273][ C0] ? lock_acquire+0x17f/0x550 [ 622.797294][ C0] ? lock_acquire+0x17f/0x550 [ 622.797316][ C0] ? lock_acquire+0x17f/0x550 [ 622.797337][ C0] [ 622.797342][ C0] [ 622.797350][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 622.797373][ C0] ? __pfx___might_resched+0x10/0x10 [ 622.797394][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 622.797417][ C0] ? __pfx___might_resched+0x10/0x10 [ 622.797437][ C0] ? __kernfs_new_node+0x559/0x870 [ 622.797458][ C0] down_write+0x99/0x220 [ 622.797479][ C0] ? kernfs_link_sibling+0x2d6/0x420 [ 622.797498][ C0] ? __pfx_down_write+0x10/0x10 [ 622.797524][ C0] kernfs_link_sibling+0x2d6/0x420 [ 622.797546][ C0] kernfs_add_one+0x393/0x8b0 [ 622.797569][ C0] __kernfs_create_file+0x22e/0x2e0 [ 622.797592][ C0] sysfs_add_file_mode_ns+0x24a/0x310 [ 622.797611][ C0] internal_create_group+0x7a7/0x11d0 [ 622.797634][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 622.797652][ C0] ? sysfs_create_dir_ns+0x1cf/0x3a0 [ 622.797669][ C0] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 622.797688][ C0] sysfs_create_groups+0x56/0x120 [ 622.797706][ C0] kobject_add_internal+0x472/0x8d0 [ 622.797731][ C0] kobject_add+0x152/0x220 [ 622.797751][ C0] ? ib_setup_port_attrs+0xa9c/0x2440 [ 622.797773][ C0] ? __pfx_kobject_add+0x10/0x10 [ 622.797793][ C0] ? ib_setup_port_attrs+0x4ee/0x2440 [ 622.797812][ C0] ? rcu_is_watching+0x15/0xb0 [ 622.797834][ C0] ? ib_setup_port_attrs+0x4ee/0x2440 [ 622.797853][ C0] ? ib_setup_port_attrs+0x4ee/0x2440 [ 622.797873][ C0] ? __kmalloc_noprof+0x21a/0x400 [ 622.797895][ C0] ib_setup_port_attrs+0xf8b/0x2440 [ 622.797928][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 622.797973][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 622.798001][ C0] ? device_add+0x460/0xbf0 [ 622.798026][ C0] add_one_compat_dev+0x51a/0x710 [ 622.798047][ C0] rdma_dev_init_net+0x1f1/0x280 [ 622.798064][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 622.798087][ C0] ops_init+0x31e/0x590 [ 622.798108][ C0] ? lockdep_init_map_type+0xa1/0x910 [ 622.798131][ C0] setup_net+0x287/0x9e0 [ 622.798149][ C0] ? __pfx_down_read_killable+0x10/0x10 [ 622.798173][ C0] ? __pfx_setup_net+0x10/0x10 [ 622.798197][ C0] copy_net_ns+0x33f/0x570 [ 622.798218][ C0] create_new_namespaces+0x425/0x7b0 [ 622.798239][ C0] ? bpf_lsm_capable+0x9/0x10 [ 622.798262][ C0] unshare_nsproxy_namespaces+0x124/0x180 [ 622.798283][ C0] ksys_unshare+0x619/0xc10 [ 622.798301][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 622.798313][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 622.798338][ C0] ? do_syscall_64+0x100/0x230 [ 622.798361][ C0] __x64_sys_unshare+0x38/0x40 [ 622.798375][ C0] do_syscall_64+0xf3/0x230 [ 622.798394][ C0] ? clear_bhb_loop+0x35/0x90 [ 622.798410][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.798432][ C0] RIP: 0033:0x7f050297b117 [ 622.798445][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.798458][ C0] RSP: 002b:00007ffda3895fb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 622.798473][ C0] RAX: ffffffffffffffda RBX: 00007f0502b15f40 RCX: 00007f050297b117 [ 622.798485][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 622.798495][ C0] RBP: 00007f0502b16a38 R08: 0000000000000000 R09: 0000000000000000 [ 622.798505][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 622.798514][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 622.798531][ C0] [ 623.409937][T10083] Bluetooth: hci0: command tx timeout [ 623.466808][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 623.473701][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-next-20240815-syzkaller #0 [ 623.483783][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 623.493855][ T30] Call Trace: [ 623.497139][ T30] [ 623.500061][ T30] dump_stack_lvl+0x241/0x360 [ 623.504823][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.510013][ T30] ? __pfx__printk+0x10/0x10 [ 623.514593][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 623.520591][ T30] ? vscnprintf+0x5d/0x90 [ 623.524913][ T30] panic+0x349/0x870 [ 623.528803][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 623.534949][ T30] ? __pfx_panic+0x10/0x10 [ 623.539358][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 623.544723][ T30] ? __irq_work_queue_local+0x137/0x410 [ 623.550265][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 623.555635][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 623.561784][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 623.567931][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 623.574090][ T30] watchdog+0x1033/0x1040 [ 623.578421][ T30] ? watchdog+0x1ea/0x1040 [ 623.582834][ T30] ? __pfx_watchdog+0x10/0x10 [ 623.587504][ T30] kthread+0x2f0/0x390 [ 623.591561][ T30] ? __pfx_watchdog+0x10/0x10 [ 623.596231][ T30] ? __pfx_kthread+0x10/0x10 [ 623.600809][ T30] ret_from_fork+0x4b/0x80 [ 623.605220][ T30] ? __pfx_kthread+0x10/0x10 [ 623.609801][ T30] ret_from_fork_asm+0x1a/0x30 [ 623.614569][ T30] [ 623.617802][ T30] Kernel Offset: disabled [ 623.622116][ T30] Rebooting in 86400 seconds..