last executing test programs: 2m2.204152393s ago: executing program 0 (id=105): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_io_uring_setup(0x6cf2, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x0) getpgid(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[], 0x100}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x0) socket$inet(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) close_range(r1, 0xffffffffffffffff, 0x0) 1m55.67799185s ago: executing program 0 (id=124): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1m55.433155797s ago: executing program 0 (id=125): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x180) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000040)={&(0x7f0000000040), 0x0, 0x5}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r3, 0x5501) socket$inet_smc(0x2b, 0x1, 0x0) fsopen(&(0x7f0000000080)='qnx6\x00', 0x1) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x20) 1m51.741218594s ago: executing program 0 (id=134): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001080)=""/79, 0x4f) getdents(r1, 0xfffffffffffffffd, 0x58) 1m48.74043836s ago: executing program 0 (id=144): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x180) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000040)={&(0x7f0000000040), 0x0, 0x5}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r3, 0x5501) socket$inet_smc(0x2b, 0x1, 0x0) fsopen(&(0x7f0000000080)='qnx6\x00', 0x1) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x20) 1m46.962458906s ago: executing program 0 (id=154): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0xa8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2781, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000040)) fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000480)={0x4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000005780)='./file0\x00', 0x2000095) inotify_rm_watch(0xffffffffffffffff, r6) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 1m46.650105056s ago: executing program 32 (id=154): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0xa8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2781, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000040)) fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000480)={0x4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000005780)='./file0\x00', 0x2000095) inotify_rm_watch(0xffffffffffffffff, r6) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 59.488617332s ago: executing program 3 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/135, 0xfca2, 0x0, 0x0, 0x3}}, 0x36) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x5) fchdir(r5) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/155, 0x9b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) 58.159551565s ago: executing program 3 (id=348): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x4, 0x101801) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 57.962495431s ago: executing program 3 (id=349): fspick(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fremovexattr(0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x22020400) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = eventfd2(0xffffffff, 0x1) read$eventfd(r2, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r3, 0x0, r0, 0x0, 0x40010003, 0x0) 57.34994634s ago: executing program 3 (id=355): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x63, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000, 0x1000000}}}}}, 0x0) getpgrp(0x0) pipe2$9p(&(0x7f0000000240), 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd612, 0x10000006, 0x6, 0x3, 0x4000, 0x0, 0xee00, 0xee00, 0xd31, 0x1}}, {0x0, 0xa}}}, 0xa0) 55.710434142s ago: executing program 3 (id=362): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) 53.926796429s ago: executing program 3 (id=374): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) readv(r0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x1) 53.488587723s ago: executing program 33 (id=374): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1) readv(r0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x1) 20.48650558s ago: executing program 6 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 19.746009613s ago: executing program 6 (id=508): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 18.734479445s ago: executing program 6 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/135, 0xfca2, 0x0, 0x0, 0x3}}, 0x36) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x5) fchdir(r5) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/155, 0x9b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) 17.768349696s ago: executing program 6 (id=516): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@uni_xlateno}, {@fat=@debug}, {@uni_xlate}, {@fat=@usefree}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@shortname_lower}, {@shortname_mixed}, {@fat=@flush}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 16.68300768s ago: executing program 6 (id=523): r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0xfffffffb, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000340)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r3, 0x0, r8, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) splice(0xffffffffffffffff, &(0x7f00000001c0)=0x1, r7, &(0x7f00000002c0)=0xbd, 0x1ff, 0x2) vmsplice(r8, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) socket$nl_route(0x10, 0x3, 0x0) 15.166300418s ago: executing program 6 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/135, 0xfca2, 0x0, 0x0, 0x3}}, 0x36) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x5) fchdir(r5) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/155, 0x9b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) 14.882232648s ago: executing program 34 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/135, 0xfca2, 0x0, 0x0, 0x3}}, 0x36) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x5) fchdir(r5) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/155, 0x9b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) 7.781175223s ago: executing program 2 (id=553): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x7, 0x1, 0x1, 0x0, 0x7f}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x604d01, 0x20) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) 5.204802305s ago: executing program 5 (id=563): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0xc8202) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x3b, [0x7ffe, 0xc95a, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x288, 0x9, 0x63, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x6, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003d, 0x8f, 0x6, 0x10000006, 0xfffffc00, 0x5, 0x4, 0x8, 0x0, 0x20002, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x5, 0x45, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0xfa, 0x74, 0xea4, 0x0, 0x4, 0x5, 0x8000, 0x3, 0x400, 0x1, 0x6, 0x7, 0xff, 0x5, 0x5, 0x800, 0x0, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x6, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x7, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x9b8, 0x8d8d, 0xa2, 0x7, 0x53cf697b, 0x4, 0xa, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0x80000e, 0x7, 0xffffffff, 0x80000004, 0x8, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x101, 0x6c1b, 0x9, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) close(0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.776983188s ago: executing program 5 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 4.659522762s ago: executing program 4 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000"], 0x58}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) 4.500999517s ago: executing program 4 (id=566): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 4.241710215s ago: executing program 2 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xb1f, 0x0, 0x2}]}) 4.214171096s ago: executing program 2 (id=568): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='a'], 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)={'c', ' *:* ', 'w\x00'}, 0x8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x88102, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x700, 0xfdef) 4.109990389s ago: executing program 2 (id=570): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x50}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs, 0x76) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) connect$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x80, 0x3, @local}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x4}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 3.842350198s ago: executing program 1 (id=571): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40242, 0x31) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) 3.667567193s ago: executing program 1 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x5, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r6 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0xbb84, 0x1c080, 0xa, 0x20082f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x1e00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="150b", 0x2}], 0x1}}], 0x1, 0x20040140) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) 3.524545478s ago: executing program 4 (id=573): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc8202) writev(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x3b, [0x7ffe, 0xc95a, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x288, 0x9, 0x63, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x6, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003d, 0x8f, 0x6, 0x10000006, 0xfffffc00, 0x5, 0x4, 0x8, 0x0, 0x20002, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x5, 0x45, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0xfa, 0x74, 0xea4, 0x0, 0x4, 0x5, 0x8000, 0x3, 0x400, 0x1, 0x6, 0x7, 0xff, 0x5, 0x5, 0x800, 0x0, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x6, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x7, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x9b8, 0x8d8d, 0xa2, 0x7, 0x53cf697b, 0x4, 0xa, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0x80000e, 0x7, 0xffffffff, 0x80000004, 0x8, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x101, 0x6c1b, 0x9, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) close(0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.242487137s ago: executing program 2 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.539747779s ago: executing program 1 (id=575): syz_usb_connect$uac2(0x5, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000002082059a0040000102030109029000030104b07f080b0101010920020904000000010120000924010400091500b20c24030500040a25037f0080090401000001021e000904010101010220000b240201ea02040842db011024010505f9ffffffffffffff000044090501091000064c80082501012d"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 2.467124101s ago: executing program 2 (id=576): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x7, 0x1, 0x1, 0x0, 0x7f}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x604d01, 0x20) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5}, 0x50) 2.391289374s ago: executing program 4 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000f00)=""/4110, 0x100e}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000040)=""/33, 0x21}, {&(0x7f0000000c00)=""/101, 0x65}, {&(0x7f0000000340)=""/274, 0x112}, {&(0x7f0000000140)=""/15, 0xf}], 0x8}, 0x20001008}], 0x1, 0x20040, 0x0) 2.285767718s ago: executing program 4 (id=579): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e68540102030109022400010000"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mknod$loop(0x0, 0xc000, 0x1) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.086082563s ago: executing program 7 (id=580): r0 = socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0xee01, 0xee01) socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) 1.934630178s ago: executing program 7 (id=581): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000009340)=0x8, 0x1) 1.89543093s ago: executing program 7 (id=582): unshare(0x62000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000000000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004040) 1.845286871s ago: executing program 5 (id=583): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x801, 0x800) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) close(0x3) 1.714254565s ago: executing program 5 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x5, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r6 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0xbb84, 0x1c080, 0xa, 0x20082f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x1e00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="150b", 0x2}], 0x1}}], 0x1, 0x20040140) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) 1.531873701s ago: executing program 7 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 805.694064ms ago: executing program 5 (id=586): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711819000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 638.510559ms ago: executing program 5 (id=587): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc8202) writev(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x3b, [0x7ffe, 0xc95a, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x288, 0x9, 0x63, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x6, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003d, 0x8f, 0x6, 0x10000006, 0xfffffc00, 0x5, 0x4, 0x8, 0x0, 0x20002, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x5, 0x45, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0xfa, 0x74, 0xea4, 0x0, 0x4, 0x5, 0x8000, 0x3, 0x400, 0x1, 0x6, 0x7, 0xff, 0x5, 0x5, 0x800, 0x0, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x6, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x7, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x9b8, 0x8d8d, 0xa2, 0x7, 0x53cf697b, 0x4, 0xa, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0x80000e, 0x7, 0xffffffff, 0x80000004, 0x8, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x101, 0x6c1b, 0x9, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) close(0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 509.022213ms ago: executing program 7 (id=588): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 258.975951ms ago: executing program 1 (id=589): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 178.621484ms ago: executing program 1 (id=590): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) ioctl$FIONCLEX(r0, 0x5450) 96.502347ms ago: executing program 1 (id=591): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r3, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 66.160108ms ago: executing program 7 (id=592): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xf9, 0x577, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x8c0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) sendfile(r2, r3, &(0x7f0000000080)=0x5, 0xffff) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000009b40)={[{@utf8}, {@umask={'umask', 0x3d, 0x76f03cf9}}, {@gid}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x1}}, {@gid}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@namecase}]}, 0x1, 0x1530, &(0x7f0000006800)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000100)=0x1) ftruncate(r0, 0x2007ffb) 0s ago: executing program 4 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) kernel console output (not intermixed with test programs): oid problems! [ 62.518508][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.533018][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.542128][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.550874][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.560000][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.573053][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.585286][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.594203][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.603560][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.624271][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.637968][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.648232][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.664304][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.697704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.708010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.872691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.900294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.912592][ T4191] device veth0_macvtap entered promiscuous mode [ 62.953647][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.966700][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 62.967422][ T4191] device veth1_macvtap entered promiscuous mode [ 62.979433][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 62.986680][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 62.992823][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 63.000089][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 63.012577][ T4192] device veth0_vlan entered promiscuous mode [ 63.022492][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.052169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.060333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.069629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.081743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.090918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.105189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.115805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.144825][ T4192] device veth1_vlan entered promiscuous mode [ 63.331469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 63.391447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 63.481458][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 63.491451][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 63.501447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 63.511451][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 63.521448][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 63.531452][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 63.871476][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 63.881476][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.566983][ T4272] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6'. [ 64.611518][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.613341][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.619375][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.639282][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.665640][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.676652][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.686739][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.697486][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.710791][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.725827][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.744461][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.758255][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.773809][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.793884][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.805702][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.818364][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.832685][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.847366][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.858623][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.871251][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.897966][ T795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.898175][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.915099][ T795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.925700][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.937459][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.974070][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.990802][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.000532][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.015013][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.051226][ T4192] device veth0_macvtap entered promiscuous mode [ 65.065974][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 65.075509][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 65.084591][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 65.090681][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 65.092292][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.101168][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 65.117223][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.130155][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.158395][ T4192] device veth1_macvtap entered promiscuous mode [ 65.167973][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.184598][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.252221][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.260961][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.308540][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.326274][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.338500][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.350803][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.362849][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.374632][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.385132][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.401132][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.412859][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.425144][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.436916][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.447979][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.468456][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.482036][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.493349][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.503940][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.514911][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.527490][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.546518][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.556920][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.561773][ T4261] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.566026][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.582135][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.606168][ T795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.617495][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.626015][ T795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.633954][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.658847][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.668387][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.685330][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.760586][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.782991][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.828943][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.898179][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.926062][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.949130][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.962465][ T4261] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.975061][ T4261] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 65.990002][ T795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.016579][ T795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.045136][ T4261] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.046498][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.065727][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.230359][ T4279] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.307840][ T4295] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.448639][ T4261] usb 3-1: USB disconnect, device number 2 [ 67.762507][ T4310] syz.4.10 uses obsolete (PF_INET,SOCK_PACKET) [ 68.165930][ T4240] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.388462][ T4315] udevd[4315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.861699][ T4240] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 69.631566][ T4261] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.719380][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.729987][ T4240] usb 4-1: config 0 descriptor?? [ 69.820970][ T4240] usb 4-1: can't set config #0, error -71 [ 69.829699][ T4240] usb 4-1: USB disconnect, device number 2 [ 69.910145][ T4341] loop3: detected capacity change from 0 to 1024 [ 69.919663][ T4345] loop1: detected capacity change from 0 to 512 [ 69.941556][ T4261] usb 1-1: Using ep0 maxpacket: 32 [ 69.967505][ T4345] ======================================================= [ 69.967505][ T4345] WARNING: The mand mount option has been deprecated and [ 69.967505][ T4345] and is ignored by this kernel. Remove the mand [ 69.967505][ T4345] option from the mount to silence this warning. [ 69.967505][ T4345] ======================================================= [ 70.043966][ T4345] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.132087][ T4261] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 70.153667][ T4261] usb 1-1: config 0 has no interface number 0 [ 70.162892][ T4261] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.207064][ T4261] usb 1-1: config 0 interface 85 has no altsetting 0 [ 70.218112][ T4351] loop2: detected capacity change from 0 to 2048 [ 70.392980][ T4261] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 70.405188][ T144] hfsplus: b-tree write err: -5, ino 8 [ 70.411738][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.414984][ T4351] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 70.420582][ T4261] usb 1-1: Product: syz [ 70.442936][ T4261] usb 1-1: Manufacturer: syz [ 70.451174][ T4345] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 70.470021][ T4351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.488428][ T4345] ext4 filesystem being mounted at /4/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.544948][ T4261] usb 1-1: SerialNumber: syz [ 70.622163][ T4261] usb 1-1: config 0 descriptor?? [ 70.867131][ T4364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.929229][ T4365] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.128074][ T4371] loop1: detected capacity change from 0 to 4096 [ 71.284863][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.292963][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.346490][ T4371] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.362291][ T4261] appletouch 1-1:0.85: Geyser mode initialized. [ 71.385696][ T4261] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5 [ 71.777544][ T4236] usb 1-1: USB disconnect, device number 2 [ 71.792260][ T4380] loop4: detected capacity change from 0 to 256 [ 71.850954][ T4236] appletouch 1-1:0.85: input: appletouch disconnected [ 72.660267][ T4236] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.757986][ T4388] loop4: detected capacity change from 0 to 512 [ 72.830185][ T4388] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 72.924434][ T4236] usb 1-1: Using ep0 maxpacket: 8 [ 72.930967][ T4388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e02c, mo2=0002] [ 73.001725][ T4388] System zones: 1-12 [ 73.008238][ T4388] EXT4-fs (loop4): orphan cleanup on readonly fs [ 73.030608][ T4388] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.31: invalid indirect mapped block 589824 (level 0) [ 73.064714][ T4388] EXT4-fs (loop4): Remounting filesystem read-only [ 73.081699][ T4236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.118814][ T4388] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.31: bg 0: block 361: padding at end of block bitmap is not set [ 73.139504][ T4388] EXT4-fs (loop4): Remounting filesystem read-only [ 73.169611][ T4388] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 73.185554][ T4388] EXT4-fs (loop4): Remounting filesystem read-only [ 73.193792][ T4388] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.31: invalid indirect mapped block 2 (level 2) [ 73.230622][ T4388] EXT4-fs (loop4): Remounting filesystem read-only [ 73.238372][ T4388] EXT4-fs (loop4): 1 truncate cleaned up [ 73.252078][ T4388] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,noinit_itable,stripe=0x0000000000000000,errors=remount-ro,journal_ioprio=0x0000000000000002. Quota mode: none. [ 73.291758][ T4236] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 73.301695][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.309900][ T4236] usb 1-1: Product: syz [ 73.315704][ T4236] usb 1-1: Manufacturer: syz [ 73.322569][ T4236] usb 1-1: SerialNumber: syz [ 73.421536][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.501579][ T4393] netlink: 'syz.4.32': attribute type 11 has an invalid length. [ 73.587824][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.619012][ T4393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.692689][ T4236] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 73.708945][ T4397] loop3: detected capacity change from 0 to 1024 [ 73.721573][ T4236] usb 1-1: clock source 0 is not valid, cannot use [ 73.762018][ T4236] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 73.792819][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.809007][ T4397] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,sb=0x0000000100000000,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 73.809144][ T4397] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.821934][ T4236] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 73.823967][ T4236] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 73.838321][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.890587][ T4236] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 74.006433][ T4236] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 74.013657][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.091305][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.113526][ T4236] usb 1-1: USB disconnect, device number 3 [ 74.168929][ T4233] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.212663][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.223937][ T4233] usb 2-1: config 0 descriptor?? [ 74.243380][ T4412] loop0: detected capacity change from 0 to 4096 [ 74.354109][ T4412] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.726862][ T4412] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.40: corrupted inode contents [ 75.755383][ T4240] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.941644][ T4412] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.40: mark_inode_dirty error [ 75.985539][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.001611][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.019378][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.026915][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.039652][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.057570][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.065194][ T4412] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.40: corrupted inode contents [ 76.096961][ T4412] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.40: mark_inode_dirty error [ 76.112210][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.112821][ T4412] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.40: corrupted inode contents [ 76.120607][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.141966][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.157808][ T4412] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.40: mark_inode_dirty error [ 76.157848][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.181650][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.191766][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.210922][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.221707][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.225931][ T4412] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.40: corrupted inode contents [ 76.230001][ T4233] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.268025][ T4233] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 76.291980][ T4233] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 76.298167][ T4412] EXT4-fs error (device loop0): ext4_truncate:4286: inode #15: comm syz.0.40: mark_inode_dirty error [ 76.311829][ T4233] usb 2-1: USB disconnect, device number 2 [ 76.331691][ T4240] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.356822][ T4240] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.399955][ T4412] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 76.453550][ T4420] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.40: corrupted inode contents [ 76.542646][ T4240] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.557700][ T4191] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 76.573684][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.609985][ T4240] usb 5-1: Product: syz [ 76.636938][ T4240] usb 5-1: Manufacturer: syz [ 76.661727][ T4240] usb 5-1: SerialNumber: syz [ 76.707145][ T4434] fido_id[4434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 77.257756][ T4240] usb 5-1: cannot find UAC_HEADER [ 77.307710][ T4240] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 77.522630][ T4447] loop1: detected capacity change from 0 to 1024 [ 79.028973][ T4443] sched: RT throttling activated [ 79.058084][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.053706][ T4447] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 80.060521][ T4447] hfsplus: xattr searching failed [ 81.040637][ T4413] usb 5-1: USB disconnect, device number 2 [ 81.525053][ T1110] cfg80211: failed to load regulatory.db [ 84.414928][ T4470] input: syz1 as /devices/virtual/input/input6 [ 84.656316][ T4480] loop4: detected capacity change from 0 to 256 [ 84.953438][ T4480] exfat: Unknown parameter '18446744073709551615' [ 85.459389][ T4492] loop0: detected capacity change from 0 to 512 [ 85.789323][ T4492] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 86.066281][ T4492] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.713407][ T4514] loop4: detected capacity change from 0 to 128 [ 86.733724][ T4511] loop0: detected capacity change from 0 to 2048 [ 86.786473][ T4179] loop0: p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 86.818961][ T4514] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 86.975162][ T4517] input: syz1 as /devices/virtual/input/input7 [ 87.468054][ T4526] loop1: detected capacity change from 0 to 2048 [ 87.537382][ T4526] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 87.566348][ T26] audit: type=1800 audit(1780626231.367:2): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.70" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 87.597065][ T4526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.660315][ T26] audit: type=1800 audit(1780626231.387:3): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.70" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 87.735163][ T4530] loop2: detected capacity change from 0 to 1764 [ 89.060320][ T4511] loop0: p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 89.370252][ T4551] loop2: detected capacity change from 0 to 512 [ 89.507049][ T4551] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 89.646582][ T4556] loop3: detected capacity change from 0 to 512 [ 89.669492][ T4551] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.82: bg 0: block 288: padding at end of block bitmap is not set [ 89.691329][ T4551] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 89.722770][ T4551] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.82: attempt to clear invalid blocks 1024 len 1 [ 89.732718][ T4558] input: syz1 as /devices/virtual/input/input8 [ 89.822455][ T4551] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.82: invalid indirect mapped block 1819239214 (level 0) [ 89.889637][ T4551] EXT4-fs (loop2): 1 truncate cleaned up [ 89.889667][ T4316] udevd[4316]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 89.937391][ T4556] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,dioread_lock,sysvgroups,usrquota,,errors=continue. Quota mode: writeback. [ 89.952460][ T4551] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,discard,,errors=continue. Quota mode: none. [ 89.991679][ T4556] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.124577][ T4556] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.83: bg 0: block 217: padding at end of block bitmap is not set [ 90.507267][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.943337][ T4580] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 90.950120][ T4580] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 90.972644][ T4580] vhci_hcd vhci_hcd.0: Device attached [ 91.039660][ T4581] vhci_hcd: connection closed [ 91.062587][ T13] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 91.096228][ T4358] vhci_hcd: stop threads [ 91.113082][ T4358] vhci_hcd: release socket [ 91.117582][ T4358] vhci_hcd: disconnect device [ 91.124109][ T13] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 91.137649][ T13] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.155055][ T13] usb 5-1: config 1 interface 0 has no altsetting 0 [ 91.331947][ T13] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 91.356176][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.412467][ T13] usb 5-1: Product: syz [ 91.429501][ T13] usb 5-1: Manufacturer: syz [ 91.456157][ T13] usb 5-1: SerialNumber: syz [ 91.532905][ T4565] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.546325][ T4565] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.982592][ T13] rtl8150 5-1:1.0: couldn't find required endpoints [ 91.996342][ T4598] loop3: detected capacity change from 0 to 164 [ 92.072068][ T4599] input: syz1 as /devices/virtual/input/input9 [ 93.431080][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 93.434244][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 93.454214][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 93.456125][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 93.476195][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p8, 10) failed: No such file or directory [ 93.476946][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 93.490484][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 93.529686][ T4407] udevd[4407]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory [ 94.050418][ T4612] loop2: detected capacity change from 0 to 128 [ 94.202786][ T13] rtl8150: probe of 5-1:1.0 failed with error -5 [ 94.316519][ T13] usb 5-1: USB disconnect, device number 3 [ 94.371118][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p14, 10) failed: No such file or directory [ 95.026263][ T4625] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 95.032922][ T4625] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 95.077405][ T4625] vhci_hcd vhci_hcd.0: Device attached [ 95.091119][ T4628] vhci_hcd: connection closed [ 95.109886][ T4314] vhci_hcd: stop threads [ 95.131060][ T4611] udevd[4611]: inotify_add_watch(7, /dev/loop0p12, 10) failed: No such file or directory [ 95.150081][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p22, 10) failed: No such file or directory [ 95.165983][ T4608] udevd[4608]: inotify_add_watch(7, /dev/loop0p29, 10) failed: No such file or directory [ 95.166265][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop0p23, 10) failed: No such file or directory [ 95.188121][ T4609] udevd[4609]: inotify_add_watch(7, /dev/loop0p25, 10) failed: No such file or directory [ 95.199761][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop0p26, 10) failed: No such file or directory [ 95.212804][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop0p28, 10) failed: No such file or directory [ 95.213249][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop0p24, 10) failed: No such file or directory [ 95.225709][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop0p27, 10) failed: No such file or directory [ 95.245800][ T4234] kernel read not supported for file /ppp (pid: 4234 comm: kworker/1:5) [ 95.252139][ T4314] vhci_hcd: release socket [ 95.257423][ T4407] udevd[4407]: inotify_add_watch(7, /dev/loop0p30, 10) failed: No such file or directory [ 95.260285][ T4314] vhci_hcd: disconnect device [ 95.613013][ T4236] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.246793][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 96.971661][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.015462][ T4659] input: syz1 as /devices/virtual/input/input10 [ 98.728599][ T4236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.740999][ T4236] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.755983][ T4236] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.777057][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.779598][ T4658] loop4: detected capacity change from 0 to 512 [ 98.796478][ T4236] usb 3-1: config 0 descriptor?? [ 98.811678][ T4236] usb 3-1: can't set config #0, error -71 [ 98.813557][ T4236] usb 3-1: USB disconnect, device number 3 [ 98.905891][ T4658] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 99.338287][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.383680][ T4658] EXT4-fs (loop4): 1 truncate cleaned up [ 99.389613][ T4658] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 100.456802][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop0p200, 10) failed: No such file or directory [ 100.458478][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p199, 10) failed: No such file or directory [ 100.467280][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.478398][ T4611] udevd[4611]: inotify_add_watch(7, /dev/loop0p198, 10) failed: No such file or directory [ 100.488125][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop0p201, 10) failed: No such file or directory [ 100.507734][ T4609] udevd[4609]: inotify_add_watch(7, /dev/loop0p202, 10) failed: No such file or directory [ 100.521234][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop0p203, 10) failed: No such file or directory [ 100.546384][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop0p204, 10) failed: No such file or directory [ 100.561144][ T4613] udevd[4613]: inotify_add_watch(7, /dev/loop0p205, 10) failed: No such file or directory [ 100.575545][ T4608] udevd[4608]: inotify_add_watch(7, /dev/loop0p207, 10) failed: No such file or directory [ 100.575632][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop0p206, 10) failed: No such file or directory [ 100.722056][ T13] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 100.758268][ T4685] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 100.764841][ T4685] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 100.789282][ T4685] vhci_hcd vhci_hcd.0: Device attached [ 100.921683][ T13] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 100.981337][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.998766][ T4686] vhci_hcd: connection closed [ 100.999002][ T795] vhci_hcd: stop threads [ 101.023859][ T795] vhci_hcd: release socket [ 101.038251][ T4697] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.065617][ T13] usb 2-1: Product: syz [ 101.097453][ T13] usb 2-1: Manufacturer: syz [ 101.097496][ T795] vhci_hcd: disconnect device [ 101.105698][ T13] usb 2-1: SerialNumber: syz [ 101.141747][ T4276] usb 42-1: enqueue for inactive port 0 [ 101.374415][ T13] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.702184][ T4276] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 101.724989][ T4276] usb usb42-port1: attempt power cycle [ 101.810691][ T4706] input: syz1 as /devices/virtual/input/input11 [ 104.111704][ T4276] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 104.921987][ T13] usb 2-1: failed to enable PITCH for EP 0x82 [ 104.962324][ T13] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 105.085445][ T13] usb 2-1: clock source 0 is not valid, cannot use [ 105.207916][ T13] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 105.293731][ T13] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 105.366134][ T4724] loop3: detected capacity change from 0 to 128 [ 105.402751][ T4726] loop0: detected capacity change from 0 to 2048 [ 105.416991][ T4724] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 105.439117][ T26] audit: type=1800 audit(1780626249.237:4): pid=4724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.132" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 105.448731][ T13] usb 2-1: USB disconnect, device number 3 [ 105.475754][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop0p37, 10) failed: No such file or directory [ 105.486488][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop0p40, 10) failed: No such file or directory [ 105.493926][ T4613] udevd[4613]: inotify_add_watch(7, /dev/loop0p39, 10) failed: No such file or directory [ 105.497063][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop0p38, 10) failed: No such file or directory [ 105.508604][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p43, 10) failed: No such file or directory [ 105.520684][ T4608] udevd[4608]: inotify_add_watch(7, /dev/loop0p41, 10) failed: No such file or directory [ 105.529696][ T4407] udevd[4407]: inotify_add_watch(7, /dev/loop0p42, 10) failed: No such file or directory [ 105.551257][ T4726] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.563631][ T4724] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 105.627701][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p45, 10) failed: No such file or directory [ 105.643803][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop0p46, 10) failed: No such file or directory [ 105.658295][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop0p47, 10) failed: No such file or directory [ 105.734729][ T4276] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 105.746262][ T4276] usb usb42-port1: unable to enumerate USB device [ 105.772312][ T4732] loop4: detected capacity change from 0 to 512 [ 106.454041][ T4732] EXT4-fs (loop4): orphan cleanup on readonly fs [ 106.515771][ T4732] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.133: invalid indirect mapped block 28777 (level 2) [ 107.641245][ T4732] EXT4-fs (loop4): 1 truncate cleaned up [ 107.695442][ T4732] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,nodiscard,,errors=continue. Quota mode: none. [ 108.430869][ T4191] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 108.462285][ T4191] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 108.790138][ T4773] loop1: detected capacity change from 0 to 512 [ 108.922369][ T4773] EXT4-fs (loop1): 1 truncate cleaned up [ 108.937488][ T4773] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 109.983352][ T26] audit: type=1800 audit(1780626253.787:5): pid=4773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.148" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 110.013506][ T4773] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.148: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 110.129631][ T4791] loop4: detected capacity change from 0 to 16 [ 110.210083][ T26] audit: type=1800 audit(1780626254.007:6): pid=4787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.148" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 110.237913][ T4791] erofs: (device loop4): mounted with root inode @ nid 36. [ 110.241987][ T4787] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.148: bg 0: block 465: padding at end of block bitmap is not set [ 110.266913][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.308280][ T4791] attempt to access beyond end of device [ 110.308280][ T4791] loop4: rw=524288, want=34359738368, limit=16 [ 110.332432][ T4787] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 110.389785][ T4203] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -4055 in[4096, 0] out[9000] [ 110.439399][ T4791] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 110.484871][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.563242][ T4791] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 110.590998][ T4787] EXT4-fs (loop1): This should not happen!! Data will be lost [ 110.590998][ T4787] [ 110.611573][ T4791] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 110.652555][ T4791] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 110.661764][ T4787] EXT4-fs (loop1): Total free blocks count 0 [ 110.667770][ T4787] EXT4-fs (loop1): Free/Dirty block details [ 110.730567][ T4791] attempt to access beyond end of device [ 110.730567][ T4791] loop4: rw=524288, want=56, limit=16 [ 110.745494][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.751567][ T4787] EXT4-fs (loop1): free_blocks=0 [ 110.777409][ T4613] udevd[4613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.914724][ T4787] EXT4-fs (loop1): dirty_blocks=2 [ 111.130808][ T4787] EXT4-fs (loop1): Block reservation details [ 111.408424][ T4791] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -4055 in[4096, 0] out[8192] [ 111.476401][ T4787] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 111.506232][ T26] audit: type=1800 audit(1780626255.307:7): pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.152" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 111.836234][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.831296][ T4830] loop1: detected capacity change from 0 to 512 [ 113.855217][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 114.015365][ T4805] chnl_net:caif_netlink_parms(): no params data found [ 114.094545][ T4842] loop2: detected capacity change from 0 to 256 [ 114.137009][ T4842] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.148828][ T4830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 114.157694][ T4842] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 114.174825][ T4830] FAT-fs (loop1): Filesystem has been set read-only [ 114.199086][ T4842] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 114.387945][ T4805] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.397827][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.407078][ T4805] device bridge_slave_0 entered promiscuous mode [ 114.419136][ T4805] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.427357][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.435787][ T4805] device bridge_slave_1 entered promiscuous mode [ 114.539178][ T4805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.586907][ T4805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.683755][ T4805] team0: Port device team_slave_0 added [ 114.765212][ T4805] team0: Port device team_slave_1 added [ 114.863441][ T4805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.598836][ T4805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.656661][ T4805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.707730][ T4868] device syzkaller0 entered promiscuous mode [ 115.806781][ T4805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.821878][ T4805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.890192][ T4805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.922276][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 115.991698][ T4276] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.241708][ T4276] usb 5-1: Using ep0 maxpacket: 16 [ 116.329998][ T4805] device hsr_slave_0 entered promiscuous mode [ 116.371975][ T4276] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.386977][ T4805] device hsr_slave_1 entered promiscuous mode [ 116.404613][ T4276] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.448637][ T4276] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.478925][ T4276] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 116.503539][ T4276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.535558][ T4276] usb 5-1: config 0 descriptor?? [ 116.581925][ T4805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.599345][ T4805] Cannot create hsr debugfs directory [ 116.614017][ T4906] loop1: detected capacity change from 0 to 128 [ 116.634066][ T4906] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.684525][ T4906] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.790701][ T144] device hsr_slave_0 left promiscuous mode [ 116.822321][ T144] device hsr_slave_1 left promiscuous mode [ 116.848089][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.992994][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.187923][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.302103][ T4276] usbhid 5-1:0.0: can't add hid device: -71 [ 117.314153][ T4276] usbhid: probe of 5-1:0.0 failed with error -71 [ 117.344254][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.486100][ T4276] usb 5-1: USB disconnect, device number 4 [ 117.643892][ T4314] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.677403][ T4910] loop2: detected capacity change from 0 to 4096 [ 117.736315][ T144] device bridge_slave_1 left promiscuous mode [ 118.395709][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 118.413595][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.434779][ T4910] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.464345][ T4910] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.182: corrupted inode contents [ 118.537737][ T144] device bridge_slave_0 left promiscuous mode [ 118.587591][ T4910] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.182: mark_inode_dirty error [ 118.610381][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.620113][ T4910] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.182: corrupted inode contents [ 118.668302][ T4910] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.182: mark_inode_dirty error [ 118.693564][ T4910] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.182: corrupted inode contents [ 118.694791][ T4919] loop1: detected capacity change from 0 to 8192 [ 118.722862][ T4910] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.182: mark_inode_dirty error [ 118.744628][ T4910] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.182: corrupted inode contents [ 118.758753][ T144] device veth1_macvtap left promiscuous mode [ 118.782551][ T144] device veth0_macvtap left promiscuous mode [ 118.788691][ T144] device veth1_vlan left promiscuous mode [ 118.792977][ T4910] EXT4-fs error (device loop2): ext4_truncate:4286: inode #15: comm syz.2.182: mark_inode_dirty error [ 118.797978][ T144] device veth0_vlan left promiscuous mode [ 118.828940][ T4910] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 118.865946][ T4920] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.182: corrupted inode contents [ 118.897146][ T26] audit: type=1800 audit(1780626262.697:8): pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.183" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 119.464540][ T4940] kvm: pic: non byte write [ 119.822205][ T4947] Zero length message leads to an empty skb [ 121.227584][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 121.272980][ T144] team0 (unregistering): Port device team_slave_1 removed [ 121.343278][ T144] team0 (unregistering): Port device team_slave_0 removed [ 121.411846][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.469207][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.756465][ T144] bond0 (unregistering): Released all slaves [ 122.784946][ T4964] loop1: detected capacity change from 0 to 1024 [ 122.978429][ T4978] capability: warning: `syz.3.201' uses 32-bit capabilities (legacy support in use) [ 122.988950][ T4964] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 123.006353][ T4964] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.132470][ T4805] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.392776][ T4805] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.533086][ T4805] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.563811][ T4999] loop1: detected capacity change from 0 to 256 [ 123.594498][ T4805] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.612070][ T4999] exfat: Deprecated parameter 'utf8' [ 123.617732][ T4999] exfat: Deprecated parameter 'namecase' [ 123.637099][ T4999] exfat: Deprecated parameter 'utf8' [ 123.677440][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 123.714907][ T4999] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 123.791749][ T4313] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.010246][ T4805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.089429][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.101674][ T4313] usb 4-1: Using ep0 maxpacket: 32 [ 124.139222][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.169261][ T4805] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.241830][ T4313] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 124.319648][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.332212][ T4313] usb 4-1: config 0 has no interface number 0 [ 124.353185][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.386193][ T4313] usb 4-1: config 0 interface 89 altsetting 225 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 124.504669][ T4313] usb 4-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 1024 [ 124.604977][ T4313] usb 4-1: config 0 interface 89 has no altsetting 0 [ 124.979747][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.986898][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.151914][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.189364][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.201830][ T4313] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 125.213878][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.221157][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.229985][ T4313] usb 4-1: Product: syz [ 125.248980][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.256191][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.261487][ T4313] usb 4-1: Manufacturer: syz [ 125.281515][ T4313] usb 4-1: SerialNumber: syz [ 125.309863][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.319717][ T4313] usb 4-1: config 0 descriptor?? [ 125.339714][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.351923][ T4995] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.372331][ T4313] hub 4-1:0.89: bad descriptor, ignoring hub [ 125.378378][ T4313] hub: probe of 4-1:0.89 failed with error -5 [ 125.388088][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.417031][ T4313] option 4-1:0.89: GSM modem (1-port) converter detected [ 125.426645][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.444972][ T1335] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.455269][ T4313] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 125.505522][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.526417][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.546087][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.575302][ T5023] loop2: detected capacity change from 0 to 512 [ 125.595222][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.609780][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.636070][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.654341][ T5023] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 125.681577][ T5023] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 125.683269][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.709552][ T21] usb 4-1: USB disconnect, device number 3 [ 125.736397][ T21] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 125.745673][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.749868][ T5023] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.790352][ T21] option 4-1:0.89: device disconnected [ 125.801298][ T5023] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 125.811685][ T1335] usb 2-1: config 0 has an invalid interface number: 5 but max is 0 [ 125.819815][ T1335] usb 2-1: config 0 has no interface number 0 [ 125.826001][ T1335] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 125.837264][ T5023] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 125.844706][ T1335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.862659][ T1335] usb 2-1: config 0 descriptor?? [ 125.878323][ T5023] EXT4-fs (loop2): 1 truncate cleaned up [ 125.898126][ T5023] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 125.920139][ T1335] ums-realtek 2-1:0.5: USB Mass Storage device detected [ 126.178055][ T4236] usb 2-1: USB disconnect, device number 4 [ 126.259225][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.291745][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.350372][ T4805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.894530][ T5070] loop3: detected capacity change from 0 to 512 [ 128.023657][ T5070] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 128.050067][ T5070] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.061546][ T4236] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.214966][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.226541][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.301573][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 128.322691][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.338427][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.383918][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.406320][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.422139][ T4236] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.435048][ T4805] device veth0_vlan entered promiscuous mode [ 128.452717][ T4236] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.494943][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.496880][ T4805] device veth1_vlan entered promiscuous mode [ 128.511639][ T4236] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 128.547540][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.610935][ T4236] usb 2-1: config 0 descriptor?? [ 128.628534][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.660122][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.705216][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.716665][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.426072][ T4805] device veth0_macvtap entered promiscuous mode [ 129.456934][ T4805] device veth1_macvtap entered promiscuous mode [ 129.517219][ T4805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.567085][ T4805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.601469][ T4805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.642657][ T4805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.674105][ T4805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.699867][ T4805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.741465][ T4805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.786335][ T4805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.816287][ T4805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.840117][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.882239][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.885676][ T4236] hid (null): unknown global tag 0xc [ 129.920502][ T4236] hid (null): report_id 1267574933 is invalid [ 129.923252][ T4805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.963625][ T4805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.998766][ T4805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.031611][ T4805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.067318][ T4805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.087601][ T4236] usb 2-1: USB disconnect, device number 5 [ 130.106538][ T4805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.146961][ T4805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.188177][ T4805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.258044][ T4805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.281989][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.290781][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.345369][ T4805] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.369947][ T4805] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.401475][ T4805] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.410219][ T4805] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.373543][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.557825][ T5131] loop2: detected capacity change from 0 to 512 [ 132.271099][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.313518][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.368467][ T5136] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 132.376005][ T4603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.398846][ T4603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.414762][ T5136] syzkaller1: linktype set to 6 [ 132.462044][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.724887][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.731246][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.059251][ T5160] loop5: detected capacity change from 0 to 512 [ 133.103359][ T5164] loop2: detected capacity change from 0 to 512 [ 133.157150][ T5164] EXT4-fs (loop2): Ignoring removed bh option [ 133.368903][ T5160] EXT4-fs (loop5): orphan cleanup on readonly fs [ 133.389855][ T5160] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 133.410370][ T5164] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 133.433055][ T5164] EXT4-fs (loop2): 1 truncate cleaned up [ 133.438907][ T5164] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 133.460501][ T5160] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 133.570946][ T1092] block nbd1: Attempted send on invalid socket [ 133.578732][ T1092] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 133.592446][ T5177] SQUASHFS error: Failed to read block 0x0: -5 [ 133.598950][ T5177] unable to read squashfs_super_block [ 133.680555][ T5160] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.246: Failed to acquire dquot type 1 [ 133.713690][ T26] audit: type=1800 audit(1780626277.517:9): pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.245" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 133.772093][ T5160] EXT4-fs (loop5): 1 truncate cleaned up [ 133.806020][ T5160] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 133.835979][ T5164] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.245: bg 0: block 465: padding at end of block bitmap is not set [ 133.931340][ T5164] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 134.013640][ T5185] loop1: detected capacity change from 0 to 2048 [ 134.024075][ T5164] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.024075][ T5164] [ 134.092747][ T5164] EXT4-fs (loop2): Total free blocks count 0 [ 134.098791][ T5164] EXT4-fs (loop2): Free/Dirty block details [ 134.117140][ T5185] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.216236][ T5164] EXT4-fs (loop2): free_blocks=0 [ 134.221272][ T5164] EXT4-fs (loop2): dirty_blocks=10 [ 134.262885][ T5193] xt_hashlimit: size too large, truncated to 1048576 [ 134.292559][ T5164] EXT4-fs (loop2): Block reservation details [ 134.298615][ T5164] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 134.477408][ T5201] loop1: detected capacity change from 0 to 512 [ 134.585298][ T5201] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.661557][ T5201] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.676479][ T5206] loop2: detected capacity change from 0 to 512 [ 134.722494][ T5206] EXT4-fs (loop2): Ignoring removed nobh option [ 134.742911][ T5209] loop5: detected capacity change from 0 to 128 [ 134.867090][ T5206] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.874906][ T5201] EXT4-fs (loop1): 1 truncate cleaned up [ 134.896878][ T5201] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 135.130046][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 135.151337][ T5206] EXT4-fs (loop2): 1 truncate cleaned up [ 135.158960][ T5206] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 135.863807][ T5209] EXT4-fs (loop5): Test dummy encryption mode enabled [ 135.893205][ T5209] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 135.921472][ T26] audit: type=1800 audit(1780626279.617:10): pid=5206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.255" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 135.948159][ T5209] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.323754][ T5209] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 136.339580][ T5230] input: syz1 as /devices/virtual/input/input12 [ 136.476696][ T150] block nbd2: Attempted send on invalid socket [ 136.483072][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 136.494293][ T5234] SQUASHFS error: Failed to read block 0x0: -5 [ 136.500469][ T5234] unable to read squashfs_super_block [ 136.532678][ T5227] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 137.642695][ T5268] loop2: detected capacity change from 0 to 2048 [ 137.795862][ T5268] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback. [ 138.010035][ T5268] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.267: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 138.130652][ T5268] EXT4-fs (loop2): Remounting filesystem read-only [ 138.159398][ T5285] EXT4-fs error (device loop2): ext4_ext_precache:608: inode #2: comm syz.2.267: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 138.574431][ T5174] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 138.935165][ T5285] EXT4-fs (loop2): Remounting filesystem read-only [ 138.973923][ T5174] EXT4-fs (loop2): Remounting filesystem read-only [ 139.996929][ T1092] block nbd2: Attempted send on invalid socket [ 140.003465][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 140.014572][ T5309] SQUASHFS error: Failed to read block 0x0: -5 [ 140.021362][ T5309] unable to read squashfs_super_block [ 140.098063][ T5316] process 'syz.4.278' launched './file0' with NULL argv: empty string added [ 141.766716][ T5347] loop1: detected capacity change from 0 to 1024 [ 141.931384][ T5347] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 142.104252][ T5357] loop1: detected capacity change from 0 to 512 [ 142.238110][ T5357] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.274787][ T5357] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.676345][ T5367] loop2: detected capacity change from 0 to 512 [ 142.747106][ T5367] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 142.772456][ T5367] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.290: corrupted in-inode xattr [ 142.859572][ T5367] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.290: couldn't read orphan inode 15 (err -117) [ 142.872837][ T5367] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 143.095291][ T1092] block nbd4: Attempted send on invalid socket [ 143.101686][ T1092] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 143.112842][ T5374] SQUASHFS error: Failed to read block 0x0: -5 [ 143.119044][ T5374] unable to read squashfs_super_block [ 143.699317][ T5384] loop2: detected capacity change from 0 to 1024 [ 144.497046][ T5384] hfsplus: unable to parse mount options [ 148.512307][ T1324] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 149.837075][ T5455] loop1: detected capacity change from 0 to 512 [ 150.346427][ T5455] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.711872][ T5455] EXT4-fs (loop1): 1 truncate cleaned up [ 150.717572][ T5455] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,auto_da_alloc=0x0000000000000009,nodioread_nolock,nodiscard,noquota,. Quota mode: none. [ 151.546886][ T150] block nbd2: Attempted send on invalid socket [ 151.553244][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 151.564536][ T5473] SQUASHFS error: Failed to read block 0x0: -5 [ 151.570841][ T5473] unable to read squashfs_super_block [ 154.499142][ T1092] block nbd2: Attempted send on invalid socket [ 154.505527][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 154.516886][ T5521] SQUASHFS error: Failed to read block 0x0: -5 [ 154.523206][ T5521] unable to read squashfs_super_block [ 154.668652][ T5529] loop5: detected capacity change from 0 to 128 [ 154.670770][ T5530] loop1: detected capacity change from 0 to 512 [ 154.897789][ T5529] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 154.923095][ T5530] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 154.932940][ T5530] FAT-fs (loop1): Filesystem has been set read-only [ 155.077172][ T5539] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 155.169648][ T5543] binder: 5542:5543 ioctl c0306201 0 returned -14 [ 155.238352][ T5541] loop1: detected capacity change from 0 to 1024 [ 155.260539][ T5541] EXT4-fs (loop1): Ignoring removed oldalloc option [ 155.302854][ T5541] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 155.322981][ T5541] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.924746][ T5541] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,nomblk_io_submit,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 155.945473][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.961590][ T4614] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.595634][ T5569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.703063][ T4614] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.777268][ T4614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.333258][ T4614] usb 3-1: config 0 descriptor?? [ 157.372594][ T4614] cp210x 3-1:0.0: cp210x converter detected [ 157.415390][ T5571] loop3: detected capacity change from 0 to 512 [ 157.501220][ T5573] loop5: detected capacity change from 0 to 128 [ 157.546018][ T5571] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 157.555020][ T5571] FAT-fs (loop3): Filesystem has been set read-only [ 157.612636][ T5573] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.700925][ T5573] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.732858][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.800562][ T5573] syz.5.340 (pid 5573) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 157.872489][ T1092] block nbd3: Attempted send on invalid socket [ 157.880501][ T1092] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 157.927391][ T1324] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.940216][ T5584] overlayfs: failed to resolve './file1/file0': -2 [ 157.951099][ T5581] SQUASHFS error: Failed to read block 0x0: -5 [ 157.957547][ T5581] unable to read squashfs_super_block [ 158.291739][ T4614] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 158.352706][ T4614] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 158.378596][ T4614] usb 3-1: cp210x converter now attached to ttyUSB0 [ 158.525841][ T4614] usb 3-1: USB disconnect, device number 4 [ 158.717048][ T1324] usb 5-1: Using ep0 maxpacket: 32 [ 159.096341][ T4614] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.109519][ T4614] cp210x 3-1:0.0: device disconnected [ 159.221994][ T1324] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.305679][ T5614] device syzkaller0 entered promiscuous mode [ 159.511858][ T1324] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 159.541374][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.549774][ T1324] usb 5-1: Product: syz [ 159.564526][ T1324] usb 5-1: Manufacturer: syz [ 159.569177][ T1324] usb 5-1: SerialNumber: syz [ 159.591796][ T5625] loop2: detected capacity change from 0 to 2048 [ 159.606773][ T5627] loop1: detected capacity change from 0 to 512 [ 159.719349][ T5625] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none. [ 159.747625][ T5627] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 159.818473][ T5627] FAT-fs (loop1): Filesystem has been set read-only [ 159.859544][ T5625] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 159.864780][ T5635] loop3: detected capacity change from 0 to 1024 [ 159.893067][ T5625] EXT4-fs (loop2): Remounting filesystem read-only [ 159.997803][ T5635] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.090687][ T5635] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,discard,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 160.124264][ T1324] usb 5-1: unit 0 not found! [ 160.270252][ T5656] loop5: detected capacity change from 0 to 256 [ 160.690767][ T5656] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 160.745744][ T4352] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 160.804146][ T1324] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 160.813940][ T5634] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 160.833852][ T5634] EXT4-fs (loop3): This should not happen!! Data will be lost [ 160.833852][ T5634] [ 160.846336][ T5634] EXT4-fs (loop3): Total free blocks count 0 [ 160.852614][ T5634] EXT4-fs (loop3): Free/Dirty block details [ 160.858743][ T5634] EXT4-fs (loop3): free_blocks=20480 [ 160.864323][ T5634] EXT4-fs (loop3): dirty_blocks=10768 [ 160.869883][ T5634] EXT4-fs (loop3): Block reservation details [ 160.876128][ T1324] usb 5-1: unit 0 not found! [ 160.971814][ T5634] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 160.990384][ T1092] block nbd2: Attempted send on invalid socket [ 160.997383][ T1092] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 161.009083][ T5665] SQUASHFS error: Failed to read block 0x0: -5 [ 161.010484][ T5656] attempt to access beyond end of device [ 161.010484][ T5656] loop5: rw=524288, want=408, limit=256 [ 161.015377][ T5665] unable to read squashfs_super_block [ 161.098996][ T1324] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 161.332646][ T4352] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 161.498575][ T4352] EXT4-fs (loop3): This should not happen!! Data will be lost [ 161.498575][ T4352] [ 161.626297][ T1324] usb 5-1: unit 0 not found! [ 161.659723][ T5656] attempt to access beyond end of device [ 161.659723][ T5656] loop5: rw=524288, want=664, limit=256 [ 161.760281][ T1324] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 161.791651][ T1324] usb 5-1: USB disconnect, device number 5 [ 161.813119][ T5656] attempt to access beyond end of device [ 161.813119][ T5656] loop5: rw=0, want=288, limit=256 [ 161.831999][ T26] audit: type=1800 audit(1780626305.637:11): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.360" name="file1" dev="loop5" ino=1048608 res=0 errno=0 [ 161.832381][ T5666] attempt to access beyond end of device [ 161.832381][ T5666] loop5: rw=0, want=288, limit=256 [ 161.987221][ T26] audit: type=1800 audit(1780626305.787:12): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.360" name="file1" dev="loop5" ino=1048608 res=0 errno=0 [ 162.022946][ T5674] attempt to access beyond end of device [ 162.022946][ T5674] loop5: rw=0, want=288, limit=256 [ 162.051678][ T4614] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.052809][ T4609] udevd[4609]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.103994][ T26] audit: type=1800 audit(1780626305.907:13): pid=5674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.360" name="file1" dev="loop5" ino=1048608 res=0 errno=0 [ 162.216093][ T5688] loop1: detected capacity change from 0 to 2048 [ 162.292304][ T4614] usb 3-1: Using ep0 maxpacket: 16 [ 162.292690][ T5688] UDF-fs: bad mount option "fscontext=uncon" or missing value [ 162.417167][ T4614] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.478493][ T4614] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.514375][ T4614] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.526383][ T4614] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 162.536461][ T4614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.549084][ T4614] usb 3-1: config 0 descriptor?? [ 162.628058][ T5711] overlayfs: failed to resolve './file1/file0': -2 [ 162.852265][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.171715][ T4189] syz-executor (4189) used greatest stack depth: 19288 bytes left [ 163.301956][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.386691][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.417646][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.454515][ T4313] usb 3-1: USB disconnect, device number 5 [ 163.692891][ T21] usb 5-1: string descriptor 0 read error: -22 [ 163.706092][ T21] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 163.738833][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.838474][ T21] usb 5-1: selecting invalid altsetting 1 [ 164.864493][ T21] usb 5-1: unit 6 not found! [ 165.007302][ T5732] loop1: detected capacity change from 0 to 512 [ 165.158877][ T5732] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 165.170997][ T5741] loop2: detected capacity change from 0 to 128 [ 165.177567][ T5732] FAT-fs (loop1): Filesystem has been set read-only [ 166.392317][ T5741] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.449526][ T5741] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.511724][ T21] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 166.553272][ T21] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 166.581801][ T21] usb 5-1: USB disconnect, device number 6 [ 166.880206][ T5735] chnl_net:caif_netlink_parms(): no params data found [ 167.266184][ T1324] Bluetooth: hci1: command 0x0409 tx timeout [ 167.346208][ T4611] udevd[4611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.540911][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.607883][ T5773] overlayfs: overlapping lowerdir path [ 167.659462][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.668272][ T5735] device bridge_slave_0 entered promiscuous mode [ 167.676814][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.908590][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.929518][ T5735] device bridge_slave_1 entered promiscuous mode [ 168.151893][ T4413] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.878917][ T4413] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 168.880306][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.939649][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.941469][ T4413] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 168.991810][ T5735] team0: Port device team_slave_0 added [ 169.033199][ T5735] team0: Port device team_slave_1 added [ 169.394854][ T4413] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.461221][ T1324] Bluetooth: hci1: command 0x041b tx timeout [ 169.468172][ T5797] loop5: detected capacity change from 0 to 512 [ 169.509575][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.541834][ T4413] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.565889][ T4413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.581501][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.610755][ T5797] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 169.616314][ T5802] loop1: detected capacity change from 0 to 256 [ 169.626555][ T4413] usb 3-1: SerialNumber: syz [ 169.639948][ T5797] FAT-fs (loop5): Filesystem has been set read-only [ 169.672820][ T4413] usb-storage 3-1:1.0: USB Mass Storage device detected [ 169.690305][ T5802] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d) [ 169.709888][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.734492][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.745969][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.774805][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.903978][ T5735] device hsr_slave_0 entered promiscuous mode [ 169.911672][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 169.943346][ T4413] usb 3-1: USB disconnect, device number 6 [ 169.958409][ T5735] device hsr_slave_1 entered promiscuous mode [ 170.597975][ T5815] autofs4:pid:5815:autofs_fill_super: called with bogus options [ 170.717170][ T5735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.736808][ T5735] Cannot create hsr debugfs directory [ 170.835801][ T5804] udc-core: couldn't find an available UDC or it's busy [ 170.861626][ T5804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.985061][ T5735] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 171.010238][ T5735] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 171.038003][ T5735] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.080958][ T5735] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 171.084302][ T5804] udc-core: couldn't find an available UDC or it's busy [ 171.150721][ T5804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.277692][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.297858][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.327748][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.374015][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 171.382240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.390156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.401912][ T21] usb 5-1: can't read configurations, error -71 [ 171.412283][ T5835] loop2: detected capacity change from 0 to 1024 [ 171.465009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.482761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.519556][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.523033][ T5835] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,noload,grpjquota=,lazytime,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 171.526766][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.557166][ T5494] Bluetooth: hci1: command 0x040f tx timeout [ 171.558109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.577137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.621094][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.628267][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.644647][ T5846] loop1: detected capacity change from 0 to 1024 [ 171.700527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.729509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.854413][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.881852][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.161153][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.320045][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.361128][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.409115][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.483747][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.519889][ T5866] loop2: detected capacity change from 0 to 512 [ 172.528457][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.590661][ T5871] loop1: detected capacity change from 0 to 512 [ 172.775666][ T5876] autofs4:pid:5876:autofs_fill_super: called with bogus options [ 173.759572][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 173.808090][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.816825][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.845836][ T5735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.933478][ T5866] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 173.951767][ T5866] FAT-fs (loop2): Filesystem has been set read-only [ 174.011812][ T5871] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 174.143551][ T5871] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.397509][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.430998][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.460017][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.580736][ T5901] loop5: detected capacity change from 0 to 256 [ 174.680559][ T5907] loop1: detected capacity change from 0 to 128 [ 174.699161][ T5901] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 174.771547][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.824318][ T5907] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.868451][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.873821][ T5907] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.879354][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.914000][ T5907] EXT4-fs (loop1): shut down requested (1) [ 174.920299][ T5907] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 174.973332][ T13] usb 5-1: device descriptor read/64, error -71 [ 175.432602][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.544528][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.168004][ T5921] autofs4:pid:5921:autofs_fill_super: called with bogus options [ 176.718527][ T13] usb 5-1: device descriptor read/64, error -71 [ 176.734077][ T5919] loop5: detected capacity change from 0 to 512 [ 176.751172][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.804748][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.823268][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.839160][ T5735] device veth0_vlan entered promiscuous mode [ 176.855198][ T13] usb usb5-port1: attempt power cycle [ 176.860231][ T5735] device veth1_vlan entered promiscuous mode [ 176.922071][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.931318][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.949345][ T5735] device veth0_macvtap entered promiscuous mode [ 176.968825][ T5735] device veth1_macvtap entered promiscuous mode [ 177.012998][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.029654][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.048194][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.069805][ T5927] loop2: detected capacity change from 0 to 512 [ 177.076335][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.095505][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.109418][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.128036][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.139702][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.156380][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.168127][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.187264][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.200078][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.222038][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.226505][ T5927] EXT4-fs (loop2): Test dummy encryption mode enabled [ 177.256168][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.267781][ T5927] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.288141][ T5919] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 177.288411][ T5927] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 177.306344][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.314376][ T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 177.340106][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.379170][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.380424][ T5919] FAT-fs (loop5): Filesystem has been set read-only [ 177.401256][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.419365][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.434848][ T13] usb 5-1: device descriptor read/8, error -71 [ 177.441749][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.452878][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.464170][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.474740][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.484653][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.496693][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.509453][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.520550][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.538930][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.602146][ T5735] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.641544][ T5735] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.691482][ T5735] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.700933][ T5735] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.950373][ T5942] autofs4:pid:5942:autofs_fill_super: called with bogus options [ 179.120687][ T5935] loop2: detected capacity change from 0 to 512 [ 179.183996][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.216778][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.246804][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.279134][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.292520][ T5935] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.362488][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.371372][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.379221][ T5935] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.558225][ T5935] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 179.635176][ T1092] block nbd6: Attempted send on invalid socket [ 179.641401][ T1092] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 179.643637][ T5935] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 179.653738][ T5960] SQUASHFS error: Failed to read block 0x0: -5 [ 179.669487][ T5960] unable to read squashfs_super_block [ 179.715462][ T5963] loop1: detected capacity change from 0 to 512 [ 179.732195][ T5935] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.422: Failed to acquire dquot type 0 [ 179.879201][ T5963] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 179.898920][ T5963] FAT-fs (loop1): Filesystem has been set read-only [ 180.629511][ T5978] loop6: detected capacity change from 0 to 1024 [ 180.774694][ T5981] autofs4:pid:5981:autofs_fill_super: called with bogus options [ 181.318185][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 181.356102][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 181.436227][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 181.822786][ T5994] netlink: 'syz.4.444': attribute type 4 has an invalid length. [ 181.958337][ T5996] device syzkaller0 entered promiscuous mode [ 182.773206][ T6015] loop1: detected capacity change from 0 to 512 [ 182.787039][ T1092] block nbd5: Attempted send on invalid socket [ 182.794337][ T1092] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 182.806736][ T6014] SQUASHFS error: Failed to read block 0x0: -5 [ 182.813482][ T6014] unable to read squashfs_super_block [ 183.782621][ T6015] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.940545][ T6019] autofs4:pid:6019:autofs_fill_super: called with bogus options [ 185.477808][ T6034] loop1: detected capacity change from 0 to 1024 [ 185.634993][ T6034] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 185.652796][ T6034] attempt to access beyond end of device [ 185.652796][ T6034] loop1: rw=0, want=917506, limit=1024 [ 185.702078][ T6034] Buffer I/O error on dev loop1, logical block 458752, async page read [ 185.721786][ T6034] attempt to access beyond end of device [ 185.721786][ T6034] loop1: rw=0, want=917506, limit=1024 [ 185.741616][ T6034] Buffer I/O error on dev loop1, logical block 458752, async page read [ 187.358734][ T6058] autofs4:pid:6058:autofs_fill_super: called with bogus options [ 187.394991][ T150] block nbd6: Attempted send on invalid socket [ 187.401807][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 187.413673][ T6060] SQUASHFS error: Failed to read block 0x0: -5 [ 187.420030][ T6060] unable to read squashfs_super_block [ 188.768467][ T6076] loop1: detected capacity change from 0 to 128 [ 188.896323][ T6076] FAT-fs (loop1): Directory bread(block 32) failed [ 188.925427][ T6076] FAT-fs (loop1): Directory bread(block 33) failed [ 188.956026][ T6076] FAT-fs (loop1): Directory bread(block 34) failed [ 189.009734][ T6076] FAT-fs (loop1): Directory bread(block 35) failed [ 189.051045][ T6076] FAT-fs (loop1): Directory bread(block 36) failed [ 189.062172][ T6076] FAT-fs (loop1): Directory bread(block 37) failed [ 189.099854][ T6076] FAT-fs (loop1): Directory bread(block 38) failed [ 189.111536][ T6076] FAT-fs (loop1): Directory bread(block 39) failed [ 189.127641][ T6076] FAT-fs (loop1): Directory bread(block 40) failed [ 189.161752][ T6076] FAT-fs (loop1): Directory bread(block 41) failed [ 189.400261][ T6085] ODEBUG: Out of memory. ODEBUG disabled [ 189.774297][ T6097] loop1: detected capacity change from 0 to 512 [ 190.611858][ T6097] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 190.621172][ T6097] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 190.789917][ T26] audit: type=1804 audit(1780626334.587:14): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.475" name="file1" dev="ramfs" ino=39925 res=1 errno=0 [ 190.867002][ T6097] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e002e018, mo2=0000] [ 190.905925][ T6097] System zones: 0-2, 18-18, 34-34 [ 191.033792][ T6097] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.472: bg 0: block 465: padding at end of block bitmap is not set [ 191.088498][ T6097] Quota error (device loop1): write_blk: dquota write failed [ 191.099462][ T6097] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 191.109963][ T6097] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.472: Failed to acquire dquot type 0 [ 191.139612][ T6097] EXT4-fs (loop1): 1 truncate cleaned up [ 191.232131][ T6097] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=journal,inode_readahead_blks=0x0000000000000400,grpjquota=éq‰Y’3aK,jqfmt=vfsold,init_itable=0x0000000000000007,init_itable=0x0000000000000009,debug,,errors=continue. Quota mode: writeback. [ 191.262543][ T6113] loop5: detected capacity change from 0 to 2048 [ 191.264833][ T6097] ext4 filesystem being mounted at /108/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.328189][ T6097] Quota error (device loop1): write_blk: dquota write failed [ 191.338387][ T1092] block nbd6: Attempted send on invalid socket [ 191.344993][ T1092] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 191.356440][ T6115] SQUASHFS error: Failed to read block 0x0: -5 [ 191.362739][ T6115] unable to read squashfs_super_block [ 191.372463][ T6097] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 191.383801][ T6097] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.472: Failed to acquire dquot type 0 [ 191.399528][ T6113] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.788279][ T6142] loop5: detected capacity change from 0 to 512 [ 192.920313][ T6142] EXT4-fs (loop5): Test dummy encryption mode enabled [ 192.952593][ T6142] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.486: inode #1: comm syz.5.486: iget: illegal inode # [ 192.979190][ T6142] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.486: error while reading EA inode 1 err=-117 [ 192.992423][ T6142] EXT4-fs (loop5): 1 orphan inode deleted [ 193.009558][ T6142] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,discard,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 193.090114][ T6142] x_tables: duplicate underflow at hook 3 [ 193.530755][ T6161] loop6: detected capacity change from 0 to 512 [ 193.600410][ T6161] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 193.614946][ T6161] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 193.640878][ T6161] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000006,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 193.769451][ T6161] EXT4-fs warning (device loop6): dx_probe:869: inode #2: comm syz.6.492: Unimplemented hash flags: 0x0001 [ 193.821551][ T6161] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.492: Corrupt directory, running e2fsck is recommended [ 194.171876][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.178259][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.658044][ T6189] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6189] [ 198.364420][ T6213] loop1: detected capacity change from 0 to 1024 [ 198.441193][ T6213] EXT4-fs (loop1): Unrecognized mount option "seclabel" or missing value [ 198.730551][ T1092] block nbd6: Attempted send on invalid socket [ 198.738944][ T1092] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 198.752264][ T6230] SQUASHFS error: Failed to read block 0x0: -5 [ 198.758498][ T6230] unable to read squashfs_super_block [ 199.201681][ T26] audit: type=1326 audit(1780626342.977:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd122c9e59 code=0x7fc00000 [ 199.335228][ T26] audit: type=1326 audit(1780626342.987:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd122c9e59 code=0x7fc00000 [ 199.361000][ T26] audit: type=1326 audit(1780626342.987:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd122c9e59 code=0x7fc00000 [ 199.443824][ T6238] loop6: detected capacity change from 0 to 128 [ 199.517365][ T26] audit: type=1326 audit(1780626342.987:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd122c9e59 code=0x7fc00000 [ 199.575184][ T26] audit: type=1326 audit(1780626342.987:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd122c9e59 code=0x7fc00000 [ 199.609538][ T26] audit: type=1326 audit(1780626342.987:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd122c9e59 code=0x7fc00000 [ 200.440516][ T26] audit: type=1326 audit(1780626342.987:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd122c9e59 code=0x7fc00000 [ 200.465261][ T26] audit: type=1326 audit(1780626342.987:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd122c9e59 code=0x7fc00000 [ 200.499824][ T26] audit: type=1326 audit(1780626342.987:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd122c9e59 code=0x7fc00000 [ 200.532057][ T26] audit: type=1326 audit(1780626342.987:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.2.510" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd122c9e59 code=0x7fc00000 [ 201.996864][ T4269] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.145424][ T4269] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.247478][ T4269] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.374103][ T4269] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.826840][ T6268] loop1: detected capacity change from 0 to 512 [ 202.911517][ T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 202.949266][ T6268] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 202.982595][ T6268] FAT-fs (loop1): Filesystem has been set read-only [ 203.124963][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 203.271738][ T7] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 203.279957][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.318780][ T7] usb 5-1: config 0 has no interface number 0 [ 203.325435][ T7] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 203.368684][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.368848][ T7] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.414326][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.440044][ T6259] device bridge_slave_0 entered promiscuous mode [ 203.483131][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.511471][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.519646][ T6259] device bridge_slave_1 entered promiscuous mode [ 203.631817][ T7] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 203.656966][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.667431][ T7] usb 5-1: Product: syz [ 203.687717][ T7] usb 5-1: Manufacturer: syz [ 203.697820][ T7] usb 5-1: SerialNumber: syz [ 203.699707][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.743093][ T7] usb 5-1: config 0 descriptor?? [ 203.780947][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.904767][ T6259] team0: Port device team_slave_0 added [ 203.940698][ T6259] team0: Port device team_slave_1 added [ 203.979691][ T4269] device hsr_slave_0 left promiscuous mode [ 203.996518][ T4269] device hsr_slave_1 left promiscuous mode [ 204.006840][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.025029][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.049225][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.065029][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.081658][ T4269] device bridge_slave_1 left promiscuous mode [ 204.102769][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.128254][ T4269] device bridge_slave_0 left promiscuous mode [ 204.146325][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.170935][ T4269] device veth1_macvtap left promiscuous mode [ 204.193548][ T4269] device veth0_macvtap left promiscuous mode [ 204.202944][ T4269] device veth1_vlan left promiscuous mode [ 204.208912][ T4269] device veth0_vlan left promiscuous mode [ 204.222529][ T7] usb 5-1: USB disconnect, device number 13 [ 204.981682][ T4413] Bluetooth: hci1: command 0x0409 tx timeout [ 206.053095][ T4269] team0 (unregistering): Port device team_slave_1 removed [ 206.085549][ T4269] team0 (unregistering): Port device team_slave_0 removed [ 206.139430][ T4269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.179846][ T4269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.277550][ T4269] bond0 (unregistering): Released all slaves [ 206.350645][ T6310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.382291][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.391662][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.473298][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.731161][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.741540][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.772433][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.053695][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 207.093918][ T6259] device hsr_slave_0 entered promiscuous mode [ 207.111211][ T6259] device hsr_slave_1 entered promiscuous mode [ 207.130818][ T6259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.151950][ T6259] Cannot create hsr debugfs directory [ 207.368303][ T6259] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 207.434328][ T6259] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 207.466330][ T6259] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 207.486360][ T6259] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 207.688714][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.749932][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.771049][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.795350][ T6259] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.822282][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.856043][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.986017][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.993206][ T4254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.052211][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.068179][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.087369][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.341877][ T4614] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 208.781897][ T4614] usb 2-1: config 64 has an invalid interface number: 220 but max is 0 [ 208.818183][ T4614] usb 2-1: config 64 has no interface number 0 [ 208.854762][ T4614] usb 2-1: config 64 interface 220 has no altsetting 0 [ 208.882107][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.889268][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.924971][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.975398][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.058573][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.088333][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.107597][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.121618][ T4614] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b0.d9 [ 209.121637][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 209.156088][ T4614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.164451][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.180121][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.188372][ T4614] usb 2-1: Product: syz [ 209.200842][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.227886][ T4614] usb 2-1: Manufacturer: syz [ 209.233934][ T4614] usb 2-1: SerialNumber: syz [ 209.242559][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.283491][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.318262][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.349346][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.593126][ T4614] net1080: probe of 2-1:64.220 failed with error -22 [ 209.616974][ T4614] usb 2-1: USB disconnect, device number 6 [ 209.744428][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.781788][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.819138][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.436178][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.444518][ T4413] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 210.465226][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.540402][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.568714][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.613528][ T6259] device veth0_vlan entered promiscuous mode [ 210.625189][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.675253][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.804439][ T6259] device veth1_vlan entered promiscuous mode [ 210.831569][ T4413] usb 2-1: Using ep0 maxpacket: 32 [ 211.008268][ T6231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.484269][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.515024][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.539118][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 211.574883][ T6259] device veth0_macvtap entered promiscuous mode [ 211.623613][ T4413] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.630238][ T6259] device veth1_macvtap entered promiscuous mode [ 211.650255][ T4413] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.723321][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.771742][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.821454][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.831709][ T4413] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 211.851845][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.857481][ T4413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.881453][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.917428][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.930811][ T4413] usb 2-1: Product: syz [ 211.944224][ T4413] usb 2-1: Manufacturer: syz [ 211.948848][ T4413] usb 2-1: SerialNumber: syz [ 211.962052][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.966567][ T4413] usb 2-1: config 0 descriptor?? [ 212.002250][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.031154][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.092017][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.135933][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.172907][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.191514][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.232995][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.336416][ T4233] usb 2-1: USB disconnect, device number 7 [ 212.368448][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.419753][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.457638][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.470077][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.526707][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.565794][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.576419][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.586331][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.597254][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.607599][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.622681][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.742357][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.793546][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.807733][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.857535][ T6259] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.877119][ T6259] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.907952][ T6259] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.943243][ T6259] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.202582][ T795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.237813][ T795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.259219][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.562746][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.650053][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.770135][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.931524][ T4413] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.115839][ T4233] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 215.203597][ T4413] usb 2-1: Using ep0 maxpacket: 32 [ 215.388601][ T4413] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.396425][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 215.481926][ T4413] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.522578][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.533610][ T4413] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 215.565285][ T4233] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.742349][ T4233] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 215.742401][ T4413] usb 2-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 215.760983][ T4413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.799934][ T4413] usb 2-1: Product: syz [ 215.858150][ T4413] usb 2-1: Manufacturer: syz [ 215.925545][ T4413] usb 2-1: SerialNumber: syz [ 215.942941][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.109370][ T4233] usb 5-1: Product: syz [ 216.174290][ T4233] usb 5-1: Manufacturer: syz [ 216.231503][ T4233] usb 5-1: SerialNumber: syz [ 216.277106][ T4233] usb 5-1: config 0 descriptor?? [ 216.441711][ T4413] usb 2-1: 1:1 : unsupported sample bitwidth 2 in 234 bytes [ 216.459248][ T4413] usb 2-1: 1:1 : unsupported format bits 0xfffffffe [ 216.486490][ T4413] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 216.561204][ T4233] usb 5-1: USB disconnect, device number 14 [ 216.567490][ T4413] usb 2-1: failed to enable PITCH for EP 0x1 [ 216.611757][ T4413] usb 2-1: unit 37 not found! [ 216.616564][ T4413] usb 2-1: unit 3 not found! [ 216.669208][ T6559] loop7: detected capacity change from 0 to 512 [ 216.685317][ T4413] usb 2-1: USB disconnect, device number 8 [ 216.787320][ T6559] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.805992][ T6559] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.974223][ T4609] udevd[4609]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.721919][ T6575] [ 217.724273][ T6575] ====================================================== [ 217.731265][ T6575] WARNING: possible circular locking dependency detected [ 217.738269][ T6575] syzkaller #0 Not tainted [ 217.742663][ T6575] ------------------------------------------------------ [ 217.749752][ T6575] syz.1.591/6575 is trying to acquire lock: [ 217.755624][ T6575] ffff888026dd9028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 217.766652][ T6575] [ 217.766652][ T6575] but task is already holding lock: [ 217.773993][ T6575] ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 217.783618][ T6575] [ 217.783618][ T6575] which lock already depends on the new lock. [ 217.783618][ T6575] [ 217.794000][ T6575] [ 217.794000][ T6575] the existing dependency chain (in reverse order) is: [ 217.803255][ T6575] [ 217.803255][ T6575] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 217.811238][ T6575] __mutex_lock_common+0x1e3/0x2400 [ 217.816948][ T6575] mutex_lock_nested+0x17/0x20 [ 217.822215][ T6575] rfkill_register+0x33/0x980 [ 217.827391][ T6575] hci_register_dev+0x452/0x970 [ 217.832741][ T6575] vhci_create_device+0x32c/0x5c0 [ 217.838271][ T6575] vhci_write+0x391/0x450 [ 217.843100][ T6575] vfs_write+0x745/0xd60 [ 217.847842][ T6575] ksys_write+0x152/0x260 [ 217.852673][ T6575] do_syscall_64+0x4c/0xa0 [ 217.857589][ T6575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.863979][ T6575] [ 217.863979][ T6575] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 217.871767][ T6575] __mutex_lock_common+0x1e3/0x2400 [ 217.877464][ T6575] mutex_lock_nested+0x17/0x20 [ 217.882725][ T6575] vhci_send_frame+0x88/0x100 [ 217.887900][ T6575] hci_send_frame+0x1a9/0x2e0 [ 217.893077][ T6575] hci_tx_work+0x9f9/0x1710 [ 217.898079][ T6575] process_one_work+0x85f/0x1010 [ 217.903541][ T6575] worker_thread+0xaa6/0x1290 [ 217.908722][ T6575] kthread+0x436/0x520 [ 217.913290][ T6575] ret_from_fork+0x1f/0x30 [ 217.918202][ T6575] [ 217.918202][ T6575] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 217.927379][ T6575] __flush_work+0x116/0x210 [ 217.932381][ T6575] hci_dev_do_close+0x1e7/0x1030 [ 217.937818][ T6575] hci_unregister_dev+0x2eb/0x590 [ 217.943345][ T6575] vhci_release+0x73/0xc0 [ 217.948180][ T6575] __fput+0x234/0x930 [ 217.952665][ T6575] task_work_run+0x125/0x1a0 [ 217.957753][ T6575] do_exit+0x626/0x20c0 [ 217.962432][ T6575] do_group_exit+0x12e/0x300 [ 217.967515][ T6575] __x64_sys_exit_group+0x3b/0x40 [ 217.973036][ T6575] do_syscall_64+0x4c/0xa0 [ 217.977951][ T6575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.984340][ T6575] [ 217.984340][ T6575] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 217.991952][ T6575] __mutex_lock_common+0x1e3/0x2400 [ 217.997671][ T6575] mutex_lock_nested+0x17/0x20 [ 218.002933][ T6575] bg_scan_update+0x44/0x3b0 [ 218.008019][ T6575] process_one_work+0x85f/0x1010 [ 218.013455][ T6575] worker_thread+0xaa6/0x1290 [ 218.019510][ T6575] kthread+0x436/0x520 [ 218.024083][ T6575] ret_from_fork+0x1f/0x30 [ 218.029000][ T6575] [ 218.029000][ T6575] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 218.038788][ T6575] __lock_acquire+0x2c42/0x7d10 [ 218.044148][ T6575] lock_acquire+0x19e/0x400 [ 218.049150][ T6575] __flush_work+0x116/0x210 [ 218.054153][ T6575] __cancel_work_timer+0x3f4/0x560 [ 218.059761][ T6575] hci_request_cancel_all+0xcc/0x300 [ 218.065543][ T6575] hci_dev_do_close+0x4e/0x1030 [ 218.070890][ T6575] hci_rfkill_set_block+0x10a/0x190 [ 218.076588][ T6575] rfkill_set_block+0x1c9/0x3d0 [ 218.081958][ T6575] rfkill_fop_write+0x452/0x560 [ 218.087305][ T6575] vfs_write+0x30b/0xd60 [ 218.092042][ T6575] ksys_write+0x152/0x260 [ 218.096869][ T6575] do_syscall_64+0x4c/0xa0 [ 218.101783][ T6575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.108207][ T6575] [ 218.108207][ T6575] other info that might help us debug this: [ 218.108207][ T6575] [ 218.118411][ T6575] Chain exists of: [ 218.118411][ T6575] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 218.118411][ T6575] [ 218.134108][ T6575] Possible unsafe locking scenario: [ 218.134108][ T6575] [ 218.141538][ T6575] CPU0 CPU1 [ 218.146879][ T6575] ---- ---- [ 218.152222][ T6575] lock(rfkill_global_mutex); [ 218.156974][ T6575] lock(&data->open_mutex); [ 218.164065][ T6575] lock(rfkill_global_mutex); [ 218.171324][ T6575] lock((work_completion)(&hdev->bg_scan_update)); [ 218.177883][ T6575] [ 218.177883][ T6575] *** DEADLOCK *** [ 218.177883][ T6575] [ 218.186025][ T6575] 1 lock held by syz.1.591/6575: [ 218.190935][ T6575] #0: ffffffff8d6c73e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 218.200996][ T6575] [ 218.200996][ T6575] stack backtrace: [ 218.206869][ T6575] CPU: 0 PID: 6575 Comm: syz.1.591 Not tainted syzkaller #0 [ 218.214126][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.224169][ T6575] Call Trace: [ 218.227428][ T6575] [ 218.230339][ T6575] dump_stack_lvl+0x188/0x250 [ 218.234997][ T6575] ? load_image+0x400/0x400 [ 218.239479][ T6575] ? show_regs_print_info+0x20/0x20 [ 218.244657][ T6575] ? print_circular_bug+0x12b/0x1a0 [ 218.249833][ T6575] check_noncircular+0x296/0x330 [ 218.254750][ T6575] ? look_up_lock_class+0x71/0x110 [ 218.259842][ T6575] ? add_chain_block+0x940/0x940 [ 218.264756][ T6575] ? lockdep_lock+0xf1/0x1f0 [ 218.269327][ T6575] ? __lock_acquire+0x12e8/0x7d10 [ 218.274332][ T6575] ? mark_lock+0x94/0x320 [ 218.278642][ T6575] ? _find_first_zero_bit+0xce/0xf0 [ 218.283819][ T6575] __lock_acquire+0x2c42/0x7d10 [ 218.288652][ T6575] ? mark_lock+0x94/0x320 [ 218.292965][ T6575] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 218.298928][ T6575] ? verify_lock_unused+0x140/0x140 [ 218.304106][ T6575] ? asm_sysvec_call_function_single+0x16/0x20 [ 218.310243][ T6575] lock_acquire+0x19e/0x400 [ 218.314727][ T6575] ? __flush_work+0xfa/0x210 [ 218.319296][ T6575] ? __lock_acquire+0x7d10/0x7d10 [ 218.324302][ T6575] ? read_lock_is_recursive+0x10/0x10 [ 218.329674][ T6575] ? start_flush_work+0x776/0x820 [ 218.334682][ T6575] __flush_work+0x116/0x210 [ 218.339171][ T6575] ? __flush_work+0xfa/0x210 [ 218.343739][ T6575] ? flush_work+0x20/0x20 [ 218.348073][ T6575] ? try_to_grab_pending+0xfa/0x7f0 [ 218.353254][ T6575] ? mark_lock+0x94/0x320 [ 218.357564][ T6575] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 218.363523][ T6575] ? lock_chain_count+0x20/0x20 [ 218.368353][ T6575] ? mark_lock+0x94/0x320 [ 218.372661][ T6575] ? __cancel_work_timer+0x36a/0x560 [ 218.377928][ T6575] __cancel_work_timer+0x3f4/0x560 [ 218.383021][ T6575] ? cancel_work_sync+0x20/0x20 [ 218.387870][ T6575] ? __cancel_work+0x1f9/0x2e0 [ 218.392610][ T6575] ? lockdep_hardirqs_on+0x94/0x140 [ 218.397793][ T6575] ? __cancel_work+0x27b/0x2e0 [ 218.402536][ T6575] ? cancel_work+0x20/0x20 [ 218.406946][ T6575] ? asm_sysvec_call_function_single+0x16/0x20 [ 218.413083][ T6575] hci_request_cancel_all+0xcc/0x300 [ 218.418362][ T6575] hci_dev_do_close+0x4e/0x1030 [ 218.424410][ T6575] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 218.430283][ T6575] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 218.436172][ T6575] ? _raw_spin_unlock+0x40/0x40 [ 218.441005][ T6575] hci_rfkill_set_block+0x10a/0x190 [ 218.446204][ T6575] ? rcu_lock_release+0x20/0x20 [ 218.451038][ T6575] rfkill_set_block+0x1c9/0x3d0 [ 218.455871][ T6575] rfkill_fop_write+0x452/0x560 [ 218.460700][ T6575] ? rfkill_fop_read+0x520/0x520 [ 218.465611][ T6575] ? common_file_perm+0xb0/0x1c0 [ 218.470538][ T6575] ? fsnotify_perm+0x5d/0x560 [ 218.475190][ T6575] ? security_file_permission+0x75/0xa0 [ 218.480712][ T6575] ? rfkill_fop_read+0x520/0x520 [ 218.485630][ T6575] vfs_write+0x30b/0xd60 [ 218.489857][ T6575] ? file_end_write+0x250/0x250 [ 218.494688][ T6575] ? __fget_files+0x40f/0x480 [ 218.499374][ T6575] ? __fdget_pos+0x1e2/0x370 [ 218.503941][ T6575] ? ksys_write+0x71/0x260 [ 218.508337][ T6575] ksys_write+0x152/0x260 [ 218.512648][ T6575] ? __ia32_sys_read+0x80/0x80 [ 218.517391][ T6575] ? lockdep_hardirqs_on+0x94/0x140 [ 218.522570][ T6575] do_syscall_64+0x4c/0xa0 [ 218.526964][ T6575] ? clear_bhb_loop+0x30/0x80 [ 218.531624][ T6575] ? clear_bhb_loop+0x30/0x80 [ 218.536282][ T6575] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.542165][ T6575] RIP: 0033:0x7f0723d46e59 [ 218.546565][ T6575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.566170][ T6575] RSP: 002b:00007f0721f7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.574568][ T6575] RAX: ffffffffffffffda RBX: 00007f0723fc0090 RCX: 00007f0723d46e59 [ 218.582521][ T6575] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000003 [ 218.590478][ T6575] RBP: 00007f0723ddcd6f R08: 0000000000000000 R09: 0000000000000000 [ 218.598426][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.606378][ T6575] R13: 00007f0723fc0128 R14: 00007f0723fc0090 R15: 00007ffd8a181f08 [ 218.614334][ T6575] [ 218.759780][ T6580] loop7: detected capacity change from 0 to 1024 [ 218.821336][ T6580] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.975026][ T6580] EXT4-fs (loop7): shut down requested (0) [ 219.687842][ T6231] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 219.707035][ T6231] EXT4-fs (loop7): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2040 with error 28 [ 219.719850][ T6231] EXT4-fs (loop7): This should not happen!! Data will be lost [ 219.719850][ T6231] [ 219.729893][ T6231] EXT4-fs (loop7): Total free blocks count 0 [ 219.738313][ T6231] EXT4-fs (loop7): Free/Dirty block details [ 219.776057][ T6231] EXT4-fs (loop7): free_blocks=68451041280 [ 219.782683][ T6231] EXT4-fs (loop7): dirty_blocks=2048 [ 219.788764][ T6231] EXT4-fs (loop7): Block reservation details [ 219.794878][ T6231] EXT4-fs (loop7): i_reserved_data_blocks=128