last executing test programs: 3m52.416856302s ago: executing program 4 (id=95): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1d4, &(0x7f0000000980)="$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") 3m51.836909112s ago: executing program 4 (id=100): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0xfffffffffffffffd) socket$key(0xf, 0x3, 0x2) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYRES64=r5, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r8, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) socket(0x2d, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 3m48.900819618s ago: executing program 4 (id=105): syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x8}}, 0x4) 3m48.742966726s ago: executing program 4 (id=107): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7bd, 0x0, 0x1, {0x22, 0xdae}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xc, 0xe7}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) 3m44.918253429s ago: executing program 4 (id=116): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) socket(0x2, 0x3, 0x67) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/50}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x4c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m42.093548909s ago: executing program 4 (id=119): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) writev(r5, &(0x7f00000000c0), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r7, 0x500e, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x2b, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@empty}, {@dev}, {@broadcast, 0x787}]}]}}}}}}}, 0x0) socket(0x10, 0x80002, 0x0) socket(0x9, 0x80000, 0x10001) 3m24.831066343s ago: executing program 32 (id=119): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) writev(r5, &(0x7f00000000c0), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r7, 0x500e, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x2b, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@empty}, {@dev}, {@broadcast, 0x787}]}]}}}}}}}, 0x0) socket(0x10, 0x80002, 0x0) socket(0x9, 0x80000, 0x10001) 1m57.258315755s ago: executing program 0 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001b80)={0x2f}) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @local, @multicast, @private=0xa010100}}}}, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x7, r0, 0x0, 0x0, 0x0, 0x2000}) 1m54.585191437s ago: executing program 0 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 1m54.290919412s ago: executing program 0 (id=325): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) 1m54.033043896s ago: executing program 0 (id=328): unlink(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) syz_usbip_server_init(0x1) unshare(0x2c060000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x4000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r2, 0x80044df9, &(0x7f0000000500)) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000600)}, 0x9}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x6}, 0x8) setrlimit(0x5, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x10) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) socket$inet6_udplite(0xa, 0x2, 0x88) 1m50.647482016s ago: executing program 0 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001b80)={0x2f}) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r7, 0x541c, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @local, @multicast, @private=0xa010100}}}}, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x7, r0, 0x0, 0x0, 0x0, 0x2000}) 1m48.133512059s ago: executing program 0 (id=342): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1m32.315757447s ago: executing program 33 (id=342): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 14.33727373s ago: executing program 1 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) pidfd_getfd(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x24008810) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r2, &(0x7f0000002180)={0x50, 0x0, r4, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002140)={0x20, 0x0, r6, {0x403, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x200800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x20000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}]}, 0x3c}}, 0x20000004) getdents64(r3, 0x0, 0x0) read$FUSE(r2, &(0x7f000000c380)={0x2020, 0x0, 0x0}, 0x2020) r10 = getegid() write$FUSE_ENTRY(r2, &(0x7f000000e3c0)={0x90, 0x0, r9, {0x5, 0x2, 0x2, 0x6fbb, 0x0, 0x4, {0x6, 0xc5c, 0xe19, 0x53, 0x9, 0x80, 0x6, 0x2, 0x3, 0xc000, 0xfffffff8, r5, r10, 0x4, 0xffffff80}}}, 0x90) syz_fuse_handle_req(r2, &(0x7f000000a380)="0a3d78dc319597536872a6b45da672985913e63676754b42bbf7c05af89995c627cb92ac8a972d6b8c88f5f3ecd5ff5e42e034edb4b2c5bc893b50d09668ed515f62d42b3c88e1c86994d40a09a8e5b00e86b59bedfc545ef1e2e796467b3e20dfae7baffb516448de81c3ae2ce3c6a63e742ccb2f689873d5736302c01b6ee851c498ff28b03aedf0953ecf9393f0f86334951368ff352feab0675cd5e613ce9fed81787966e0299243e7396f36fb2a79d8eec5fa28d6c10c785932fcf5f70722d0bbc60b8c4005a6cc80ab33462f115ac7da57ce7ff72b2c1a1a610b2a6a7cd2e1d0b7c924122de787695bb64cafa3b2307d9237338ad67010e87d87040764a2a86ae2a9c623ee4b56ea3f29a7537ecfbdce313c45cf5147bbea4afc4a28b0f62e81c178f50e23a0406c1151c5757b648ef0b2c0fb74012b309ca940551e5e9cd5d0c8d4b758691f5212eb728aaed6f17fe54752931774b3df82f3f3b534596c317432b562f6a3f31738843223e1b80d171c24f1687838d1354bd12baea5c0260eb58a34ad07926ecdae584a32b025d45f16ae7320fb939631db28693d58af97a9412a36549ac6fa310d785020e300243626350bcc39fa21c0391800f3f51b804897df57c814d6d81b6ae535eeb6b95a5a491d5217fbd945016238a3126414dbf93e97d1ed4267e002cab9b2bf9475255b12b89c6820b7239a130a495b181c6cb45e666467d2ddb74728e1bf3fb85dc44a188b79db5b314bc3bdd39449c88126e37b3d96d81271f3e757eb5b26f7f7a4779564dcbaa375eea800efe8cbc19cd7c07049733c030a580f8d94ac62d000f221f4c25410e23e33db765b490c33b813695c17ddeae67fe65993e09a664d8e6c5268eba700a4b29ab371301ec8e909849fc4a6bb1ed305c0c72838a62a0de8a15bfc6a3dfa6a90cdbe9e45c137840f88a98a533754e865286a3ce5d04fed67364c452f268ab28ba8e1c753f38e40c3aea0e622877014187ce56f65fbc69a3390ac13c648ef3bea4a3b1e2a01a4d6087df25972ce8c04eb6f83d0f5cc930bc848700ca796061d2c18475ea0a0c58d3463a7d38c1e7c91b2fb0bd48241458591f55b79598f3b28de56107925d7b747db2e80102317bae001fdcb6ff019c45a2348003a49bc8d033e8c0e496215c4a2cad8742f5f89eee78bfc5804b63c976e73cc5553a87cfd12741b408c1498b3c672a95d049e8878fe2e941e1a9f039d8b0276e29b985cad3b2e3bd1a4902bc21643bded14e0e1b52345f206c4c3f593434e98745284a12f1ffe355d71698dc588aabd7124d02195638ae3dfa910cf6f0d758f6ef1dde64ec89c44ab5e2f9a05a85999aa7ffa911d2da5a3e165fa77d5474ddbcac4d78affa9e64dc7b79a14a187c142453647744f82a9b7f894685db1c9ab6794a1cc92c9209a1d4bac39332542a271899a43fb31cd175d25bfaec083c6b26b89dcdf585877b3733423d475366105d98c3bd021a31201fac1f6af138d70a135779e623a13942603600412037ed8361c87970b36fff5e44056c7fb22aa39c825eb2dcbc7a9a50b260f634e1155b3db282bbcb70f4fdbc9bb44214c5451118bbcc1e87d7ae3a94af152f1afe9cc1eb2e6f11f31706f1e2e1692bcfeb623babbba5352f09a842b12edf3f6ac8fb72f1b0f08bdc5c0a53a770dc2f21dcb5dc67bcbb23379e104d39665593af31d022820dfec85cec7cdcdaff6d88bf895e79414ac019526fb36d0c859151184c261decbed9f717ff55d046aae76ff5dc42289281c3eaf7342dfe04f68563d569fe1c15254f2e7d9217b2f480559307d88208c78efb7b9c1cdadbd76f82579b33d0146745251ab63506c70f399e29a1f9b106af1b2ec5383c05d8d5c3c18ebf753e995ee948fea6cef3fff03a9d355d1a50f4620a6292e2e12532b0d2c9ff767c1b0de9c6ff9774b48585ca116fa91a49397e6a937a1844bf2372d32da3569f8049c2d400bcde500375ae5a71660430b7344ef67b2203adcbf74adab3d5ff5d1c259ed9330e9b2dbde810f286bf2aa3344fe2afc7062b13ac3d31955b89ad78bd192cf6fd8cf51bcf1df3267b580f93d90a8059e027a84e27b02fb08809a68b7bbac2b5202c0e277dc1f7bc3ce1dd9071706b0773f402312ae155c39c71fe08c234dcc4799410fd109a569c32f12660dc5ac5651c146d0cd27ea1773f36389ca82317a26236eb14bdffb5361575e20f189854e213f17283563f952beba507dafc022d1ac37e934c8d342074554d18048a91d95fd83365c7c360fda1c4e560d88f6e8b2b8aa416c2960df6b8933eb4eb7eb876349254cd9cfa3c00bcfd639ce07dbf49dc0357271a6ee043928f3d0e57c86753d62b8aa302013cc80e8071b7346894b7a0bee4a2c71dbb458ee02045b177cfc22137e5db57985848d3537ce41bc88f8d952282c19c0899e9dd499dae72bdce31d8c31c04dcba09b2a24b9a62fe209af5aeb9022acf5519a31119b3c991eda7568e6a554b17dfb083269b6c5ca68be4721bf80fd05e4b7e88d6afcb93cace9eac998facdbaf0d5dc3cce1d6905830feecd353d4714989af5990e4b7f5c1fb217452728b995ad81afc3ac7669e2e35268513cc0b0961e9367630135b9ae41d24a4aeeebe75d76a7b3926f9b922720296b70eaf06a0f7df86557df767fd396a98361a26f63033ad71d5664aead9f8cb831fcb69bd1b0293c14b3a5b27059691846e64fad89f532047c607541dec839661b63d2f2a2161f5f12cf2abc5dec1956d06b20351c793fc506c1848ef96c1dc85b99910df6a8fed2e125a32fc973d5536fa110f4ac770cf8b7d1770a02d3ebc70923295a17c1852685424085fcb1a326f8160d0ccbfe6b6aff456f71900e5c78c80898d0573090ff0b309d5c60f90f66e94391213137c9b7d13e4505d3440d3eb959a1674b89acd00843f14e16a7962c158dd0b0c129909b96fe19a8b33617ccdd6948e70a3072cdfc7392ca4f70fae902df917ce4c34433f0a12a201546d28f9e91e42ffab8661c1177c182029fedcc80bc3130c03836680fd84b42ff4956c724a9841021aee2352a7eadc2ce9e291107533bcdc40613228fd36df52f20198be9f31e38e251c9740bc2b546c2277257fb18e7084e1f4c2e3a2f1e80cae6e30108891562a246d91f308ff470dcb057a52ba5bfdde6c64cbedeb1fbddfed14fcaf030d7826653661031dfc448ef7f5960056cdbd38a37d451a76e4a5cf8433befa0040458393cd91fc2ed4774cda88a589adc87f586d1b5148c41686c9d1c81083f3c6bbe3bf2c06854a6d81fecfe21f15b468b62b4172947fa2cfd987ef8b14587001df25cb77b2acca89a5541d2118d34c30f9c99872c7bff66295895b72e410bc15f8e81c87a2dc05a9de45dc12fbc58368bb2eaeb8e4258df942b8785afdb9ab6f9784558d32c011d24ca9f1fa5b2f091624314ec63e29a7a85900927a371f263d6d8de059659f97c067b5e476ee250ddc7e6095117cc17b28619a59d5360906663aaf97965dc1df675943ea110686989a1e140908d0f02617283636c3668ea95b040dd60789858e371a720a21128e574c4d75f7eeaa997e720d22ba84811990b5bc13a21d27801e0e0477b41e0ea70e5f22bea7e9e84a3973a2f7132df7270f1a95030183647eb7739ccb0daf2d8c62b1485a0a2233a3daf8a3bb1f949221faa5b950de9f0c7217b703c1a2a649e4ada96cc9367cc298637ab9dc28a51a41e18859ce391c54b804c6b066070286b00e916f99ed73b96bb9686492eabd31db1c4696a67bba2d5f36a2b1ac6d700b6ebd9d75533dc6e199c2c068ba04487a09bf370f4bff8afa8168a1bb0b01f6d750091f5bb07d9befc750af4c8fd60e75bafd199f916c98a4e34278bd15ca5e7a927b40fe8bb1a284812487523570d40397a70dcddae0497a1329235df78928d4ff4d388cf79bfb2420c64a627eee2ca837fe18dace0ad9d36d8d1163f53f58e2b13a2957124dc68ab97326fd5b858f1388f9c8bb109d044eb438148360c6f032e3d602181d3966c9d581d56fd159f5a4c39cc97f0582adaf78be51ed498a93d8511c0af60ed4625cae6e469b8b0e7d3eff6e4b61dc21938823e127913095fa7d3ac5e54f15b1f8386b3d5f243254d6f4a5c5c30a15c53ee65deb6c383e1ada3846238c5865cc3731effc012c57008aa12441f9de7f1cc639b949b922fe435fcb5e1a6b4d08241c12ad5d6e5b8940ee19d3158c8806df2c44d3fcdea89f485e59637498893715b225e7a3644af9cfbc4e3173400e12662e957db0b1e6a39fdbf30cbddb4f0c911e7311bb8223e071b0480b3caac66d50f18acbf13df046f5cc41a6047c796fef77ab5e95eeabbdda7551f92764d8eea8ab886a20dc6ad77c9c15ac1317dcb4197e0464cb504aca343d7edc3eea1fee14c2fc480cac477a026c840c0fea4f66e42d471deacb8497ce1bbd7916d81e982c0be27aac72ce4f991d244d5e810a09b609edc1a7942ea45e8d217c456ae850a92666efdeca2a21e1825367570e1d0447f8d2c1568f2747d2bd0c22ebecdd26f4d8b949970fd2df0d5a6f5ecdaec314ebef6ead33f3855ba35da1acd67439861488d417641dc4529bd79e18647526657a9897fe3c5161834c7a3975aa0b3ef4e143016c8a6510b879cb2afbdef8a33bd957b8684e197bfaec19d5a233cd174e879bafdbc3769d35d74900411a886b440930c8eb6b3dcdd6456b873ecfa40de608846afdc74304761c4517dd3a25f09a812d2cbce17301ebbb7033bcb9d0e2bd0d93813d982957d3f3092cbc14cbd1abe948e3b2926f2b35a6aa947214eaa84a40c79ac43f5ec0b3f0b0dce7926dea6c5ea6b5659199de43debc962e0609a1a71df4ce25e62af4f5a49171078e6d7821c772fbf8b54eab74179645f020d613afb1e771911333c8a1ebab0e183dd1fbb18951772790228ad14c3c49ddaa3f7af4b874134fc4c5342b46209877822589fb7e5ce4017688402929808d53db7e9aeb9450f6736a649f8c6d84c05d0202710b3c13230d7db6bc21331aff6cf5ad67b0021300f2217117bf5ab767e01d80c53b5aaa38fd3a2f0fee13f12c25dd929f3a604e04b5ba13cd0634aecf0bd748db13a83e6c0e62123cc4325a768b2d483866b926aadd6ec816a1b7ae8ce197f8ed83db70b54cbfbc19c9843b046966db39229d7404d4f082b61101e850a8ee9e5a87c1fc2630b2eb1c9b2952a9f45c7b4c8307e700e6420c714aefe468a945d2bdcb252269997630f53923237dafe19e5b9ce4b3cb08950cc8add0ab9255da604cf7ccf8f55c5c97db96bd991414e04c7a17bd7bcc13aa5e7223ee7089985ea449310e9635bad3f36992a877acedd27a763311e54cb2cb90aa31bb8ce7d461f872d2d477224cf281bc623969b7ac49ef2975d3e56cca1d4085b97ba269cd1bc8b253af60b044f5a6ccbb1cfc644e645716e9c43eb1ad0b0e819bc5a20990aaf40809c2f84c41172ba709706e247907063dcc66b9aaf66372daa69f6d565583c07411be619ef8e6eac302bb8d50b0aeaf37751f7b4c88b35cf1f112947c2ef1c21f3263665f7012be68fb7c8927104cfc84631c2cf9fd73b75128d0312fe41a4d05ddb02493e26943e83ccb13a1128a389fbb5ea65ff1b2de04e8325fef827bb34a34d5d8665d67c0326f48752db74082ba8dcf67bd24bb1d5bcc578a80b682dab8d8ce72e16dbd78a240d074ae8f92005b6735ccbc2be5d8e91e24197f2b4b4aac3da60dde02016704c1c7f17d08aa759834ca46084580bb23980d4781e58e35a0b2d75b1cfcfc9811c1f5c57003fc86cd6ad7b2b0850a39c212ebb563f673ee428546a83028255b37bb1c4305e50f45efac6ab96ba6b5a6a8049e30cb267b881179ef89c718ad2f940dc19eda5bf2fb808624cf63b06a0e9a1dca236d6e4173ea921f587886a7b33b05e23eca59c1810c8f70781c1983efc4adaa4b850e6928002c91883b5c0fa08b838356cc5d3c52a3bf046b0202ba8ff59fdb47f5391b67bc7b3c13f31fbdcca7892346b9466da4d5e7b8eabd66e02dd13457a91e0c559b1a7c89e598700fc7a8751f017eed21df6db0cfcf69236a3ec38235392de4625fcb7089af56325cdb020c31a1c950c996e780e16106730eca14e57d5a575778e77d652dcfa264ed6c51e131216c7222085d6e2e937eb74b6ecc00427f5ddeb845c7cc011d7d947873cc7a9a88934660ea21546a835b0bc8df8ce348041767dd7228c4138d065e386208e17e45ed0515a4fde55f5c53d46922d91fa02b5be614b54f3fe6d504696736c9b71a2e71c1b5585daec0c0f58385395ef0b7ebdf654dc98acf77ccc933352af9451bceb49c04a6e476e63c7eaeceea572ae0d9ac401da06462209353f8ed8d92a11d2c08a3e852dcdbf6789ca66cafcdca2daf75ab188cd7494e086ac02559294dcd8ec95af8d9fe269973e31c2760f088b64ef5993a27ad1de553b1c267426b8e95d75ba81d021b2a26d9a1191051c3445c1134351403dbcd6957be7e3341296d6a9b1197ea23753ccceaf46d823928b96bc1d7ef4cdad11bd100012c2fedbf9c84e10effdf13acfd98cd39536d5181f09409b3de810d27c75248856c62cda154d4c51cb1ed65b6e31a1bc287196c0a1628f02b7b4ab657c5406c49407c8af4ded5103f487cd22016e2a76a0e933949a56c7e14e5b007ed945700f92adebcf47b33cdd0deab3d75f588e3737ed9ed3f8785d6f520242610d3f0ad551bce62e818b9cb25af4bae3699218443cdf7879b5cd48a9a4a17d2f4ec347eff446997b5a008e7f9372c150c57b16a21eeafe9f6c399528d227309069faec4dff2bcb2f473df729c21ebedd6b178e7667c425ce246c69b1f771fd97d473e19e95ee5b7eae69b156791e9f9eb84b816be9e9c1485710678976722f4a00f22655b04253aae47baeaaef9beaa9b90eb3a237b6ae37fe4d5a2d5615f9a8426acff0f863e7f5dc3a25d6a7d75789e093868cb942687b31ebf2c1c95a95acad4a2bc80afe37b4d4b4795724d7398148668bf1394bf388b374e32fef79e34ae3124603bd2826fa3e42dffb485dfd15c4827a20cb20a6b903c8f4b25ae50c3f189828f41abe0e2deadcd62ec1ad5120b70205471ce3ea782984405a14a548ade2d7e35fdaaf4b14eb57b465c5fa27581c5bd39f2847dc8887d9bd84d4700b6e484147a9d6719992f02924dfe91d9677fecdc1d63aedd13dde54d8bc2b9d250400754dce04409d50dff72df4ef7c9fca573cfcac0560ea372089600b0702eb133399d12e6e3e7b56252ffcfd39041211b39730571826515b35496a083d9116bc870f49d0c9acdd66205cb215af2637ac4bb004e081fd801c3b9d4d6928e8141360760e6e6fee54fe51da9c0b3f6b91e9797cfa72a02e91c24b90d1f74cf2854a3f58679db43826ed510284d32ce0b3b3236fe6db3a924146037fde1de459307a8be90bd1e7f8fabc074f19c0d030407a70ba545165b17fb0907ade8ee26c12ce75bdc7994ee49237667b8835e1e2c84a1c0c4d84490d44e66ab33803c1c578019d8c6b654d1417233cc3b6ca6f87476bc7d6797f967444910a4e9977e12b7ea3b708a31293211c53c87a0732b0e5808e9719b989ae7dba521d28a0d2956cacee8e9e2cf1f39edb4437af08f47ec953b08f493bf0196cdee88fba57cf256a947b0ca0e53083e45698992d732c26fb6f82d41685b195ef7a01d38a0da987acbe0c1f2d4f99cfdc7c2f85ecf3c787c787cc5ee1e2f8573037ac0eb964137e6fb691db9fd2aab4f3d9763df93ac093379c3e58f3fb9e54626f253aac30dbe92689f61df25fde3f22881d80295585f43ce2100d1275c4134f742ba7fa11e21a66ddedc59c825f509d65536409d103661cee5a3500af00e4416d45ab4aaa77aec42dab5d620f0aac6f0883294aaf8060bedb3d8318ac3786f3ce1aeb317610af7bc76003efcb943ea5a22f6ee17c5a24334c35a6bd50bff67d9945d708d41cd7f89362657a789439fa91a5aad28d66ccbdc4c84a613d5539d027631ef434dc648a389bf2d6f21161b2ffcf12b39a41ecbbe29349ce771f1d542134ed71e99eca4c006ff721e48af1334059f8017efd26267716481cd954fab9149cb8e5f8fbc973dbbb6630105037d3875cdc0ab79e1790816a290cf7ebd1064e0fbfa8017852aaf3234ea2c3c54a31c99081edc1df0120d2d5a621d3e0dcbf3ec3bacd937e6e085043871c80e5b3684dc5064406514eac4f566abf0e238ee15fb1e435011ef6eb662eb39c9e63390b2fbe48301dd7586177501a433e4a9cedb60c02076794d9903966268ee9943080b0d66905f14741eff6371b58413145bd5532a94c705fc73601c1f36d569ea388b400c1603db5ffa043af6eb2fec1a27ee0fc58e2d54e2c45be6155b6c78b6a50f36326d4bfa364acf5ff726c568986a6440a1dab2b7b6c6a5f9a9cece10a4039a8e9aef5a399844ada9788b1aa9207ab855d8299d31469d21505b4750dcdf2d5fe4c4cc0d977c51c246a04a12029bd16bc161734d9dc09ac0c8d0a0e3c7acf279fe73c32d52874c22cc739d35459b4c4329d1a8f97498bc02cf202f5bba2bd58eec3afae941b45f6d5ae256914d816ea145b7f6a5785c0043d2af63d6ac31667589dab1ff69455922abf21af3bf2c6a830696a780b06fde15895437a227d6c250a3636588d5cd0bca146799c53fce3a4ac57d07ae80cad1eddbcd39eb791ceab11ba3b7b4fd77bb69137c1a36e3be010ce604a6cd8eb7a2c4ba1117ebdab31ab0109460763360d0782427902ed4d7e386adf959de56e1f2b0df8ef3d00942e28d5b3ec9a064fafb8a00657ecabd788da7f80f283127b9217ad40120145e48d995130300fffa0d12e9b5f67f2ca469d1a381c41809d3e01fdb81741f7b381dcbde5cec9b175c598eb3f565c822e5acff05b8d5925d19f74743123e91e5e468cf51e2b9e988cbe7003d7750edc49b55cd1f5a6a9a7a95e8f20b13bde35ba4cab9d47f16636096e16416f6737ee283bc965761846ad97493e49b57862e57485238f39b2572c570d27d0b6feb6175bfe3caae8c504c9d6fb6420ff2962f9810664306ab29cd7cc36b8fc75477ce2c146732e5cf5ef3c9945c3e2e444d45f06a8460fce16906743304df27c66e44fc85999e7b70311ae9b3dc7466ea9d063961dce2f0fd4e586e4265d16632850306e4652845a7eff5df9cd86b0799474ae8b4e5f3dda40e03038111bd5c71bf211c2e8626d95a913065d2ce69090f0152e7d3496917e5ff1002302ebf7fc2a8397803a2721c8027af52de130f886dc423d8d6e9378da0a83fcbe55ea4f0cbad494b165f21253a0c472adf69085088ceb1ba93c8a5b1d4267831e6e7ab38bb5ddff5e786268b35e253f13121a22cf79757469f763694db24b1bd50b0b6a11ef4cb63e294a562d5441ef75e3cd53c2b9f471ba18572b6e987398e51bf23acf259377d197f1798be91df35c8c3bf6276c84e7a5d8adcbcb0714e6d1efd7eda106f40f52cc517779388f9b6e4112a587c0e106cd347fa41eee5b9e0a6cfa698de746245f79c17a86df4fcd9392453bd237c608c13df1633e96fa4f34758318e83a37e3e96c5f2e9d24adb81cb23d6776d89aafbcf4946377dbb0763c6b3368d20af2037cfc6d017113fdd66e432df9f0eb68832caf62fcd4b49c8044dc99d1feddc9ed14154813f8cd8d9578516d978f1fbb1a783eff434283b0c4137e242be5707eb5614756c3785ec205c2206b32cbccad91803b3548367d109a05abfe5a782bfca4ce39e8bff6a6d81cbb4a803d8dfa0daafcca1e6981cbedceade5e7a4c9d0953d2617ea4dd117401df6743ca476ae5a4ec47d35386af120266272cdaa5d5f5aad236f3e23e312b5ac2f0f388d6604eb6994755c8a29d164e7a89511c9a43dd83c0509df676922b8319a6f8cfa93f0e1c72ac4a92b2d23b61b034c8fba824f19884e346b4e592ed39494f757685dbc9a3d8b2f7c2d442e8cf0e86aa5bacd5b28620955db4c6788894cb404b2a212a36d88204a2c7cd5569ae1fccc599021411bd7c97e33bd7bd311964ecb8d1265738c553c74532353d8fdc6a6932634b382307e03daac94ec55890ef0f90eb51bfa9ffceaf8d8d423695fe607ae18685d4e642dcba85cfd4ab1723e7b36a38437bb68891262b1c3c979a39772a5998df7628ebf10efdc7209463e9ac43d6bef30b4eb3e79b172088f399b5f8b7128c75a53adb9c627e5e8978f3133397c949c24d3d3c3a586d88cd62e2d8ab83a7a4a7db3ba2a92dfcc89de6bc0daca76e9d38298af92555d344d00ddba9d4d8ca95b1f2668b25f1c3e35154b1612a73f42b6260736bf60fcff37566e15a4836ce5f96e51cbec0adca6f566d3c9fb31fb102c7aaf62f59788f9f93ac22794b8af6e3f8958c7cc01e2c5b35c24232d7441072cc8e84adc14bbe172537623460cd1e3754d9c5675c19ca2f04701911a79e4fb9d0d4d32ed73973e236f9dccc6792462e0bf0dfe1bf958f949e8203fcd2935a70854c5d290dc2ea530b2e731b71b1407a26200a97d9f5b75a991570f1be8df3d28acb37c07fd0f321ff5b90b5118e9695060af6a4d86d075ea67513e5d7ff7a4f39407e52df4fc6f1c66a82a37de37d70dc82077a2fc8e45ce33af4be8d5397808448b5eb7f5b1484e55cb396dc0b11bb3a317d6d6a93fab066540fab11289301f0a79742c309455a8273572788575eaa01681b5592e9e20e3490b1a44b4bcfa4cfe5aba60626667d0c7cbba729142c4b46a52eb68ff76f0631bf2f4c10345a901306a20f291aa0ef3d61340277903fc8a7be17098117f093aa1270ab73d633a4032e8dae1a53dcae71fd4f27a841e9ec8f935b03b434ee3a5acf9ea80cb2bc674842c961e6625d4ce9f82023c9a82c6c949709c9c0e10eb2104c47e7f82a8276c15ee56e5f1f27ec9828f1db6af0f14f1abdd327fe1a9a41f747fc7fb4a279e854bffac55455ea59954c637450b985f0142f834b0d650fabaced8e6a56d82bb0ec930aa8a04ae510f48d646bd8e6fc66f6ad34a6fa6d22351949365feab2ba14c688f564f881c473a3f019f85233b518a73b7323b54167dec385969abf51a120e74e9455adf062af6127696d37f2e0677ffb8844d3f2ff0463b87a585e97b164600a980a8c534c4f040d690414eada1c928981d7f0ecfe0243eec26e766bcba2392b2a0d19510b660a9b6cb8d24225da891fdd5e4be4c3330bbe8cf2375944a19785b2b47c43d481d68d38ea32f396b50cd4bf997012bd831f3c3af767ea1ae8eb1934cb058f0833f97270a8a51661e75096b64178294e3c6ca14a9969aaaad213eddcaa51720cd13bc40464120ac085e93491aa6ad3ea88dba9394617ab3a0b4c7158811de7b81aca1ff8f02ba74241d0f72ad4ae57958e36757f22f9dcc987323e7da477ed9f1190b9fe47ee7157c02fcd2dcdc20fe06af8c7d5e1f7dc72fe69158e52737c332e395629047e2cc27da2fec8c41e825d55ea55d5f6b0cf7364b025d707900", 0x2000, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x10, 0xfffffffffffffff5, 0x8}, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x8}}, 0x24, 0x0) 13.890456423s ago: executing program 1 (id=610): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd2b, 0x25dbdbff, {0x7, 0x0, 0x0, r1, 0x40, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xd2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 11.475737521s ago: executing program 1 (id=614): recvmsg(0xffffffffffffffff, 0x0, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0xfffffffd, 0x1, 0x6, 0x6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) io_uring_setup(0xf08, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f0000000840), &(0x7f0000004880)=@udp=r3}, 0x20) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r5, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) 9.506737916s ago: executing program 1 (id=620): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x30, 0x7f, 0x2}, 0x7) syz_io_uring_setup(0x23cb, &(0x7f0000000480)={0x0, 0xfb37, 0x2, 0xffffffff, 0x68}, 0x0, 0x0, 0x0) 9.299703897s ago: executing program 5 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x295, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}]}}]}, 0x45c}}, 0x0) 9.003746473s ago: executing program 1 (id=625): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 8.806788303s ago: executing program 5 (id=627): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001b80)={0x2f}) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @local, @multicast, @private=0xa010100}}}}, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x7, r0, 0x0, 0x0, 0x0, 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) 8.511170809s ago: executing program 2 (id=630): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04040afffffffffffff7dd3001"], 0xd) fstat(0xffffffffffffffff, 0x0) 8.47293468s ago: executing program 5 (id=631): recvmsg(0xffffffffffffffff, 0x0, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0xfffffffd, 0x1, 0x6, 0x6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) io_uring_setup(0xf08, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f0000000840), &(0x7f0000004880)=@udp=r3}, 0x20) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r5, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) 8.353854397s ago: executing program 3 (id=632): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c5fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$cgroup_ro(r0, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 8.353634477s ago: executing program 1 (id=633): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,check=strict,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c6e6f646f74732c6e6f646f74732c6e66732c6e6f646f74732c646f74732c756d61736b3d30303030303030303030303030303030303030303030362c616c6c6f775f7574696d653d30303030303000000000000000023030303030303030352c6e6f646f74732c6e6f646f74732c6e66733d0704616c655f72772c64656275672c6e6f646f34732c73686f77657865632c666c7573682c646d61736b3d30303030303030303030303030303030303030303030332c646f74732c646f74732c00"], 0x1, 0x1fa, &(0x7f0000000800)="$eJzs3cFqE10UAOCT/Gky+XHRnSAIIy50VdQnqEgFMSBUstBdQVdm1W5SN+3Ch/AVfC8fQLrKRq7EmXRimsYQyQzW79v0zJx7e++ZIZNscpKi8PX258iyVrT3Yz8mrdiNdsycBwBwk0xSim+p0PReAIB6rPH+/73mLQEAW/b6zduXTweDg8M8zyIuzsfD8bD4W+SfvxgcPMp/2q1mXYzHw/8u84/zxc8O0/xO/F/mnxTz88t0NyKG3Xh4v8hPc89eDfJf5/fi3ZZrBwAAAAAAAAAAAAAAAAAAAACAptyNfGZpf5+9vcV8v8wXR3P9gRb693TiTqc8rNoDpbM6igIAAAAAAAAAAAAAAAAAAIC/zMnpxw9Ho9H74yroRcT8mc6SMdcHrfIfrzW4+aAdm03vl2VusGirvETbLbC//OauE0TnT1b/1Pg9PRrlNazVX3l5U5oGy18Fs7YY107vRsTq1R8cbrr5SUpp9OXe8clppJWDq2dEr9YnEgAAAAAAAAAAAAAAAAAA/LvmvvV9RdbEhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAdXv/0+Dq2dWBmcRcSt+O3i21k5kjdYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfUjAAD//3O1Ikk=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 5.265751121s ago: executing program 6 (id=634): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000980)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x20, 0x17, 0xededd30af5e65746, 0x70bd2c, 0x25dfdbff, {0xf}, [@nested={0xc, 0xcb, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid=r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000094}, 0x4000000) socket$inet6_sctp(0xa, 0x801, 0x84) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1e}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8000000000000000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xe046cf03f3bc43ad}, 0x80) r5 = fanotify_init(0x0, 0x40000) fanotify_mark(r5, 0x1, 0x40000013, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0x2, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x1400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x1b8, 0x9, 0xffffffffffffffff}], "", ['\x00']}, 0x178) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$inet6(0xa, 0x3, 0x2d) 5.265110501s ago: executing program 2 (id=635): recvmsg(0xffffffffffffffff, 0x0, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0xfffffffd, 0x1, 0x6, 0x6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) io_uring_setup(0xf08, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f0000000840), &(0x7f0000004880)=@udp=r3}, 0x20) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r5, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) 5.245418012s ago: executing program 3 (id=636): syz_mount_image$hfs(&(0x7f0000000a00), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x2, 0x308, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 5.244703332s ago: executing program 5 (id=637): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) 4.158830249s ago: executing program 6 (id=638): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x2000c6, &(0x7f0000001340)=ANY=[], 0x1, 0xace, &(0x7f00000028c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 3.526785463s ago: executing program 5 (id=639): unlink(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) syz_usbip_server_init(0x1) unshare(0x2c060000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r2, 0x80044df9, &(0x7f0000000500)) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000600)}, 0x9}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x6}, 0x8) setrlimit(0x5, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x10) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) socket$inet6_udplite(0xa, 0x2, 0x88) 3.346559352s ago: executing program 3 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f0000000400)={@void, @val={0x7, 0x4, 0x5, 0x6, 0x4, 0x7}, @ipv4=@udp={{0x5, 0x4, 0x2, 0x35, 0x1c, 0x67, 0x0, 0x6, 0x11, 0x0, @rand_addr=0x64010102, @private=0xa010102}, {0x4e22, 0x4e20, 0x8}}}, 0x26) 3.222428769s ago: executing program 2 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001b80)={0x2f}) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @local, @multicast, @private=0xa010100}}}}, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x7, r0, 0x0, 0x0, 0x0, 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) 2.804804781s ago: executing program 3 (id=642): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$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") setxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x106) 2.678576548s ago: executing program 6 (id=643): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0]) 2.673745488s ago: executing program 2 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001b80)={0x2f}) syz_open_dev$radio(0x0, 0x2, 0x2) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @local, @multicast, @private=0xa010100}}}}, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x7, r0, 0x0, 0x0, 0x0, 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) 1.610842065s ago: executing program 6 (id=645): r0 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x6000) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000007000/0x1000)=nil, 0x2) 1.469575372s ago: executing program 2 (id=646): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64], 0x2, 0x699, &(0x7f0000000140)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x10}, 0x18) 1.294563451s ago: executing program 6 (id=647): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r0, &(0x7f0000002fc0)=""/4096, 0x1000) 1.294286871s ago: executing program 3 (id=648): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000980)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x20, 0x17, 0xededd30af5e65746, 0x70bd2c, 0x25dfdbff, {0xf}, [@nested={0xc, 0xcb, 0x0, 0x1, [@typed={0x8, 0x133, 0x0, 0x0, @uid=r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000094}, 0x4000000) socket$inet6_sctp(0xa, 0x801, 0x84) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r3) r6 = fanotify_init(0x0, 0x40000) fanotify_mark(r6, 0x1, 0x40000013, r5, 0x0) write$binfmt_elf64(r5, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0x2, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x1400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x1b8, 0x9, 0xffffffffffffffff}], "", ['\x00']}, 0x178) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$inet6(0xa, 0x3, 0x2d) 1.054922994s ago: executing program 5 (id=649): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x475, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 991.508267ms ago: executing program 2 (id=650): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x8584b4, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x2) 37.688328ms ago: executing program 3 (id=651): recvmsg(0xffffffffffffffff, 0x0, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0xfffffffd, 0x1, 0x6, 0x6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) io_uring_setup(0xf08, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f0000000840), &(0x7f0000004880)=@udp=r3}, 0x20) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r5, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) 0s ago: executing program 6 (id=652): recvmsg(0xffffffffffffffff, 0x0, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0xfffffffd, 0x1, 0x6, 0x6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) io_uring_setup(0xf08, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f0000000840), &(0x7f0000004880)=@udp=r3}, 0x20) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r5, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) kernel console output (not intermixed with test programs): s ready [ 80.540223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.549482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.557892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.566912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.589914][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.602213][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.617878][ T4269] device veth1_macvtap entered promiscuous mode [ 80.627102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.636313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.645831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.654025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.670742][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.681986][ T4272] device veth1_vlan entered promiscuous mode [ 80.719769][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.751982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.771826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.792502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.810025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.827160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.858467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.874781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.902657][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.924420][ T4267] device veth0_vlan entered promiscuous mode [ 80.939719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.954776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.965947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.975384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.989375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.999276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.029317][ T4268] device veth0_vlan entered promiscuous mode [ 81.056764][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.075173][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.086359][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.095822][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.126881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.138257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.174479][ T4272] device veth0_macvtap entered promiscuous mode [ 81.203981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.214952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.225765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.236613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.248579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.267430][ T4272] device veth1_macvtap entered promiscuous mode [ 81.284354][ T4268] device veth1_vlan entered promiscuous mode [ 81.326998][ T4267] device veth1_vlan entered promiscuous mode [ 81.358482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.373996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.386466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.395813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.406242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.415996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.426873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.435439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.446480][ T4268] device veth0_macvtap entered promiscuous mode [ 81.463906][ T4268] device veth1_macvtap entered promiscuous mode [ 81.475212][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.493533][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.506963][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.517783][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 81.517807][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 81.526080][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 81.531504][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 81.537529][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 81.562450][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.610221][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.651377][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.662441][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.673230][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.686382][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.696313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.707452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.716922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.725444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.734859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.744658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.753802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.763434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.773599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.785475][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.800897][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.814436][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.838499][ T4267] device veth0_macvtap entered promiscuous mode [ 81.863648][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.875093][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.885593][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.910649][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.932156][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.939603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.951589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.976712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.008641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.037959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.059687][ T4267] device veth1_macvtap entered promiscuous mode [ 82.086159][ T4268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.096206][ T4268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.105842][ T4268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.121713][ T4268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.142460][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.152444][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.164443][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.173825][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.272063][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.285524][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.292538][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.305161][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.309799][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.316076][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.350220][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.369366][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.389364][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.433520][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.453521][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.470268][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.488637][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.500109][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.523016][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.533876][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.545768][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.557025][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.568888][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.615050][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.629631][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.642776][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.653349][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.665694][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.723562][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.738125][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.750895][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.759910][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.798196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.807899][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.818346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.863297][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.878891][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.890646][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.922808][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.933397][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.941115][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.965385][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.975814][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.008996][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 83.024252][ T4271] device veth0_vlan entered promiscuous mode [ 83.045548][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.057358][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.067843][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.076643][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.173758][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.174718][ T4271] device veth1_vlan entered promiscuous mode [ 83.194783][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.224517][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.244280][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.265111][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.315711][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.339208][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.384507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.428157][ T4271] device veth0_macvtap entered promiscuous mode [ 83.489612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.510008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.531642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.544307][ T4368] loop0: detected capacity change from 0 to 8 [ 83.574382][ T4271] device veth1_macvtap entered promiscuous mode [ 83.581305][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 83.581498][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 83.587332][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 83.593918][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 83.603840][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 83.624534][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.629006][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.644528][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.654774][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.674635][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.676371][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.692773][ T4368] unable to read xattr id index table [ 83.707594][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.718583][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.740619][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.754002][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.768542][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.776596][ T4370] netlink: 'syz.1.9': attribute type 49 has an invalid length. [ 83.793549][ T4350] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 83.814499][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.851435][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.876290][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.907294][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.955784][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.014084][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.035580][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.054507][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.107092][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.170300][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.192949][ T4287] Bluetooth: hci4: Malformed HCI Event [ 84.206454][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.230803][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.247853][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.331425][ T4361] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.528428][ T4382] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.985221][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.031351][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.040237][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.051098][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.065509][ T4361] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.081617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.091533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.100904][ T4361] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 85.141348][ T4361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.176913][ T4361] usb 2-1: config 0 descriptor?? [ 85.214643][ T4361] smsusb:smsusb_probe: board id=8, interface number 0 [ 85.240359][ T4387] loop0: detected capacity change from 0 to 128 [ 85.282094][ T4361] smsusb:smsusb_probe: Device initialized with return code -19 [ 85.320219][ T4387] FAT-fs (loop0): bogus sectors per cluster 0 [ 85.385452][ T4387] FAT-fs (loop0): Can't find a valid FAT filesystem [ 85.408967][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.427240][ T4392] loop2: detected capacity change from 0 to 512 [ 85.449930][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.474397][ T4392] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.509849][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.530878][ T4392] EXT4-fs (loop2): invalid inodes per group: 3120562208 [ 85.530878][ T4392] [ 85.549408][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.566085][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.599686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.606075][ T4361] usb 2-1: USB disconnect, device number 2 [ 86.197813][ T4400] loop2: detected capacity change from 0 to 8192 [ 86.267669][ T4413] loop0: detected capacity change from 0 to 128 [ 86.278474][ T4400] REISERFS warning (device loop2): super-6506 reiserfs_getopt: empty argument for "jdev" [ 86.278474][ T4400] [ 86.330362][ T4413] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 86.489598][ T4410] loop1: detected capacity change from 0 to 4096 [ 86.548939][ T4410] ntfs: (device loop1): parse_options(): Unrecognized mount option ÿ0x000000000000ee00. [ 86.624018][ T4410] ntfs: (device loop1): parse_options(): The case_sensitive option requires a boolean argument. [ 86.669283][ T4420] loop3: detected capacity change from 0 to 512 [ 86.719208][ T4422] loop0: detected capacity change from 0 to 164 [ 86.741580][ T4420] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.797475][ T4420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 86.817275][ T4427] loop4: detected capacity change from 0 to 64 [ 86.862910][ T951] cfg80211: failed to load regulatory.db [ 86.864292][ T4427] hfs: unable to read volume bitmap [ 86.984944][ T4420] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.041154][ T4422] Unable to read rock-ridge attributes [ 87.082486][ T4420] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.25: Allocating blocks 41-42 which overlap fs metadata [ 87.122014][ T4431] process 'syz.1.30' launched './file2' with NULL argv: empty string added [ 87.215641][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 87.286149][ T4420] Quota error (device loop3): write_blk: dquota write failed [ 87.327480][ T4420] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 87.379815][ T4420] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.25: Failed to acquire dquot type 0 [ 87.429271][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 87.438550][ T4440] loop1: detected capacity change from 0 to 8 [ 87.446098][ T4420] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 87.494533][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 87.507716][ T4440] SQUASHFS error: zlib decompression failed, data probably corrupt [ 87.529784][ T4420] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.25: corrupted inode contents [ 87.550650][ T4440] SQUASHFS error: Failed to read block 0x9b: -5 [ 87.558830][ T4440] SQUASHFS error: Unable to read metadata cache entry [99] [ 87.573810][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 87.586117][ T4440] SQUASHFS error: Unable to read inode 0x127 [ 87.602781][ T4420] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #12: comm syz.3.25: mark_inode_dirty error [ 87.646307][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 87.674125][ T4420] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.25: corrupted inode contents [ 87.721810][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 87.747714][ T4434] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 87.764654][ T4420] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.25: mark_inode_dirty error [ 87.816884][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 87.836865][ T4434] ntfs3: loop2: Failed to load $Extend. [ 87.854716][ T4420] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.25: corrupted inode contents [ 88.068803][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 88.849458][ T4420] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 88.921100][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 88.927733][ T4420] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.25: corrupted inode contents [ 89.090479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.100484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.110457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 89.740467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 89.760499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.770456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.780466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.790466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.800466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.820495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.010362][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 90.031323][ T4420] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.25: mark_inode_dirty error [ 90.116560][ T26] audit: type=1800 audit(1776454728.948:2): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.31" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 90.358792][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 90.512179][ T4420] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 90.584596][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 90.616195][ T4420] EXT4-fs (loop3): 1 truncate cleaned up [ 90.656081][ T4420] EXT4-fs (loop3): pa ffff88807282c620: logic 1, phys. 41, len 23 [ 90.664806][ T4420] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 91.406368][ T4472] ======================================================= [ 91.406368][ T4472] WARNING: The mand mount option has been deprecated and [ 91.406368][ T4472] and is ignored by this kernel. Remove the mand [ 91.406368][ T4472] option from the mount to silence this warning. [ 91.406368][ T4472] ======================================================= [ 95.328272][ T4420] EXT4-fs (loop3): Remounting filesystem read-only [ 95.358757][ T4420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.401560][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 96.747345][ T4488] tipc: Started in network mode [ 96.752535][ T4488] tipc: Node identity 4, cluster identity 4711 [ 96.758882][ T4488] tipc: Node number set to 4 [ 97.129705][ T4359] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.477877][ T4359] usb 3-1: Using ep0 maxpacket: 32 [ 97.480580][ T4491] set_capacity_and_notify: 2 callbacks suppressed [ 97.480594][ T4491] loop3: detected capacity change from 0 to 8 [ 97.559767][ T2184] hid (null): global environment stack underflow [ 97.841793][ T2184] hid-generic 0005:15C2:0004.0001: global environment stack underflow [ 97.892517][ T4359] usb 3-1: config 2 has an invalid interface number: 196 but max is 0 [ 97.906838][ T4359] usb 3-1: config 2 has no interface number 0 [ 97.913150][ T4359] usb 3-1: config 2 interface 196 has no altsetting 0 [ 97.922969][ T4359] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice= 9.71 [ 97.932339][ T4359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.940384][ T4359] usb 3-1: Product: syz [ 97.945085][ T4359] usb 3-1: Manufacturer: syz [ 97.949723][ T4359] usb 3-1: SerialNumber: syz [ 97.950639][ T2184] hid-generic 0005:15C2:0004.0001: item 0 0 1 11 parsing failed [ 97.987399][ T2184] hid-generic: probe of 0005:15C2:0004.0001 failed with error -22 [ 98.256017][ T4506] ax25_connect(): syz.3.51 uses autobind, please contact jreuter@yaina.de [ 99.126405][ T4359] usb 3-1: bad CDC descriptors [ 99.136931][ T4359] usb 3-1: bad CDC descriptors [ 99.547623][ T4516] loop3: detected capacity change from 0 to 512 [ 100.425905][ T4359] usb 3-1: USB disconnect, device number 2 [ 100.435734][ T4516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.486193][ T4511] loop4: detected capacity change from 0 to 2048 [ 100.497415][ T4516] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.52: iget: bad i_size value: 38620345925642 [ 100.512409][ T4516] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.52: couldn't read orphan inode 15 (err -117) [ 100.525275][ T4516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.698489][ T4514] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.52: bg 0: block 5: invalid block bitmap [ 100.717784][ T4514] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1808 with error 28 [ 100.731340][ T4514] EXT4-fs (loop3): This should not happen!! Data will be lost [ 100.731340][ T4514] [ 100.741148][ T4514] EXT4-fs (loop3): Total free blocks count 0 [ 100.747239][ T4514] EXT4-fs (loop3): Free/Dirty block details [ 100.753301][ T4514] EXT4-fs (loop3): free_blocks=0 [ 100.758371][ T4514] EXT4-fs (loop3): dirty_blocks=1812 [ 100.763770][ T4514] EXT4-fs (loop3): Block reservation details [ 100.769921][ T4514] EXT4-fs (loop3): i_reserved_data_blocks=1812 [ 100.858396][ T4522] loop2: detected capacity change from 0 to 128 [ 100.896481][ T4511] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.49: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 21765(21765) [ 100.916375][ T4511] EXT4-fs (loop4): get root inode failed [ 100.922806][ T4511] EXT4-fs (loop4): mount failed [ 100.953210][ T4522] ufs: You didn't specify the type of your ufs filesystem [ 100.953210][ T4522] [ 100.953210][ T4522] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 100.953210][ T4522] [ 100.953210][ T4522] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 101.052933][ T4501] loop0: detected capacity change from 0 to 4096 [ 101.084210][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 101.112456][ T4522] ufs: ufstype=old is supported read-only [ 101.128845][ T4501] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 101.294924][ T4522] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 103.284796][ T4526] loop3: detected capacity change from 0 to 4096 [ 103.409918][ T4526] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 103.490474][ T4526] ntfs3: loop3: Failed to load $Extend. [ 103.576017][ T4530] syz.4.55 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.685357][ T4530] netlink: 60 bytes leftover after parsing attributes in process `syz.4.55'. [ 104.489281][ T4272] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 104.500606][ T4272] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 104.508150][ T4272] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 104.536306][ T4538] loop1: detected capacity change from 0 to 2048 [ 104.587059][ T4534] Zero length message leads to an empty skb [ 107.558273][ T4559] NILFS (nullb0): couldn't find nilfs on the device [ 107.674004][ T4287] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 107.682985][ T4287] Bluetooth: hci1: Injecting HCI hardware error event [ 107.693427][ T4281] Bluetooth: hci1: hardware error 0x00 [ 108.250879][ T4566] loop3: detected capacity change from 0 to 1024 [ 109.258035][ T4574] loop2: detected capacity change from 0 to 1024 [ 109.301060][ T4574] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 110.070534][ T4281] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 110.823595][ T4574] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 111.066716][ T4574] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.67: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 111.451325][ T4574] EXT4-fs (loop2): no journal found [ 111.521036][ T4574] EXT4-fs (loop2): can't get journal size [ 111.533357][ T4574] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.67: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 111.552207][ T4574] EXT4-fs (loop2): failed to initialize system zone (-117) [ 111.559682][ T4574] EXT4-fs (loop2): mount failed [ 112.640506][ T2184] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 113.685002][ T2184] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 113.703939][ T2184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.713807][ T2184] usb 5-1: Product: syz [ 113.719087][ T2184] usb 5-1: Manufacturer: syz [ 113.725170][ T2184] usb 5-1: SerialNumber: syz [ 114.819716][ T2184] usb 5-1: can't set config #1, error -71 [ 114.840766][ T2184] usb 5-1: USB disconnect, device number 2 [ 114.906573][ T4612] loop3: detected capacity change from 0 to 128 [ 114.977166][ T4612] VFS: unable to find oldfs superblock on device loop3 [ 115.039759][ T4616] loop0: detected capacity change from 0 to 512 [ 115.086402][ T4616] EXT4-fs (loop0): unsupported inode size: 0 [ 115.093778][ T27] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 115.106679][ T4616] EXT4-fs (loop0): blocksize: 1024 [ 115.292680][ T27] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 115.312925][ T27] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=76.2a [ 115.546268][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.558450][ T27] usb 3-1: Product: syz [ 115.646437][ T27] usb 3-1: Manufacturer: syz [ 115.661706][ T27] usb 3-1: SerialNumber: syz [ 116.800423][ C0] sched: RT throttling activated [ 117.256530][ T27] ttusbir 3-1:7.0: cannot find expected altsetting [ 117.280618][ T27] usb 3-1: USB disconnect, device number 3 [ 117.562338][ T4639] vivid-004: ================= START STATUS ================= [ 117.571791][ T4639] vivid-004: Radio HW Seek Mode: Bounded [ 117.578628][ T4639] vivid-004: Radio Programmable HW Seek: false [ 117.587735][ T4639] vivid-004: RDS Rx I/O Mode: Block I/O [ 117.594529][ T4639] vivid-004: Generate RBDS Instead of RDS: false [ 117.601569][ T4639] vivid-004: RDS Reception: true [ 117.606575][ T4639] vivid-004: RDS Program Type: 0 inactive [ 117.614057][ T4639] vivid-004: RDS PS Name: inactive [ 117.619683][ T4639] vivid-004: RDS Radio Text: inactive [ 117.625938][ T4639] vivid-004: RDS Traffic Announcement: false inactive [ 117.633238][ T4639] vivid-004: RDS Traffic Program: false inactive [ 117.688408][ T4646] loop3: detected capacity change from 0 to 2048 [ 120.338943][ T4647] loop0: detected capacity change from 0 to 2048 [ 120.358349][ T4281] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 120.369764][ T4281] Bluetooth: hci4: Injecting HCI hardware error event [ 120.383541][ T4273] Bluetooth: hci4: hardware error 0x00 [ 120.531218][ T4639] vivid-004: RDS Music: false inactive [ 121.473397][ T4647] EXT4-fs: failed to create workqueue [ 121.478863][ T4647] EXT4-fs (loop0): mount failed [ 121.503012][ T4639] vivid-004: ================== END STATUS ================== [ 122.482153][ T4273] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 123.739148][ T4669] loop0: detected capacity change from 0 to 64 [ 123.801722][ T4672] kAFS: unparsable volume name [ 124.219220][ T4679] hugetlbfs: syz.3.92 (4679): Using mlock ulimits for SHM_HUGETLB is obsolete [ 124.947723][ T4669] Trying to free block not in datazone [ 124.973924][ T4669] /dev/loop0: Can't open blockdev [ 125.038861][ T4688] loop4: detected capacity change from 0 to 8 [ 125.128733][ T4688] SQUASHFS error: zlib decompression failed, data probably corrupt [ 125.176850][ T4688] SQUASHFS error: Failed to read block 0x9b: -5 [ 125.204988][ T4688] SQUASHFS error: Unable to read metadata cache entry [99] [ 125.229477][ T4688] SQUASHFS error: Unable to read inode 0x127 [ 125.323918][ T4313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.520554][ T4313] usb 4-1: Using ep0 maxpacket: 16 [ 125.532697][ T4313] usb 4-1: config 9 has an invalid interface number: 133 but max is 1 [ 125.545554][ T4313] usb 4-1: config 9 has an invalid interface number: 245 but max is 1 [ 125.586085][ T4313] usb 4-1: config 9 has no interface number 0 [ 125.613415][ T4313] usb 4-1: config 9 has no interface number 1 [ 125.862745][ T4313] usb 4-1: config 9 interface 133 has no altsetting 0 [ 125.866545][ T4701] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 125.884443][ T4313] usb 4-1: config 9 interface 245 has no altsetting 0 [ 125.908764][ T4313] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice= 1.6d [ 126.981925][ T4703] loop0: detected capacity change from 0 to 32768 [ 128.030444][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.038542][ T4313] usb 4-1: Product: syz [ 128.042956][ T4313] usb 4-1: Manufacturer: syz [ 128.047604][ T4313] usb 4-1: SerialNumber: syz [ 128.080703][ T4393] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.111551][ T4710] loop1: detected capacity change from 0 to 8 [ 128.152007][ T4273] Bluetooth: hci0: unexpected subevent 0x01 length: 11 < 18 [ 128.176462][ T4313] usb 4-1: can't set config #9, error -71 [ 128.394267][ T4313] usb 4-1: USB disconnect, device number 2 [ 128.402920][ T4710] SQUASHFS error: zlib decompression failed, data probably corrupt [ 128.430586][ T4710] SQUASHFS error: Failed to read block 0x9b: -5 [ 128.448715][ T4714] loop0: detected capacity change from 0 to 8 [ 128.473585][ T4714] SQUASHFS error: lzo decompression failed, data probably corrupt [ 128.482066][ T4273] Bluetooth: hci0: Malformed LE Event: 0x0b [ 128.516037][ T4714] SQUASHFS error: Failed to read block 0x82: -5 [ 128.535115][ T4714] SQUASHFS error: Unable to read metadata cache entry [80] [ 128.540455][ T4710] SQUASHFS error: Unable to read metadata cache entry [99] [ 128.550097][ T4714] SQUASHFS error: Unable to read inode 0x11f [ 128.570963][ T4710] SQUASHFS error: Unable to read inode 0x104 [ 130.405850][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.590568][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 130.605258][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.738306][ T27] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.905119][ T27] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.969679][ T4729] loop2: detected capacity change from 0 to 4096 [ 131.170671][ T27] usb 5-1: config 1 interface 0 has no altsetting 0 [ 131.549451][ T27] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 131.560932][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.569325][ T27] usb 5-1: Product: syz [ 131.580597][ T27] usb 5-1: Manufacturer: syz [ 131.610507][ T27] usb 5-1: SerialNumber: syz [ 132.150157][ T4729] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 132.277259][ T27] usb 5-1: can't set config #1, error -71 [ 132.284414][ T27] usb 5-1: USB disconnect, device number 3 [ 132.309334][ T4729] ntfs3: loop2: Failed to load $Extend. [ 132.823529][ T4758] loop3: detected capacity change from 0 to 2048 [ 133.783881][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.791507][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.225484][ T4758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.234285][ T4758] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.500193][ T4758] EXT4-fs (loop3): unmounting filesystem. [ 135.837215][ T4770] loop1: detected capacity change from 0 to 2048 [ 136.718489][ T4787] loop1: detected capacity change from 0 to 512 [ 136.844952][ T4787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.701774][ T4787] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.120: iget: bad i_size value: 38620345925642 [ 137.732650][ T4787] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.120: couldn't read orphan inode 15 (err -117) [ 137.745855][ T4787] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.916126][ T4785] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.120: bg 0: block 5: invalid block bitmap [ 137.929593][ T4785] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1056 with error 28 [ 137.943053][ T4785] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.943053][ T4785] [ 137.952793][ T4785] EXT4-fs (loop1): Total free blocks count 0 [ 137.958932][ T4785] EXT4-fs (loop1): Free/Dirty block details [ 137.964963][ T4785] EXT4-fs (loop1): free_blocks=0 [ 137.969956][ T4785] EXT4-fs (loop1): dirty_blocks=1060 [ 137.975553][ T4785] EXT4-fs (loop1): Block reservation details [ 137.981897][ T4785] EXT4-fs (loop1): i_reserved_data_blocks=1060 [ 138.629639][ T4801] NILFS (nullb0): couldn't find nilfs on the device [ 139.522463][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 142.324470][ T4817] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 142.331380][ T4817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.340054][ T4817] vhci_hcd vhci_hcd.0: Device attached [ 143.030188][ T4315] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 143.212324][ T4820] vhci_hcd: connection reset by peer [ 143.220293][ T4461] vhci_hcd: stop threads [ 143.241386][ T4461] vhci_hcd: release socket [ 143.249855][ T4461] vhci_hcd: disconnect device [ 147.109931][ T4851] loop2: detected capacity change from 0 to 2048 [ 148.112526][ T4851] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.121199][ T4851] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.221675][ T4315] vhci_hcd: vhci_device speed not set [ 148.452024][ T4851] EXT4-fs (loop2): unmounting filesystem. [ 154.745956][ T4880] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 154.752618][ T4880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.899719][ T4886] vhci_hcd: connection closed [ 154.906433][ T4880] vhci_hcd vhci_hcd.0: Device attached [ 154.919967][ T4461] vhci_hcd: stop threads [ 154.924554][ T4461] vhci_hcd: release socket [ 154.999410][ T4893] netlink: 60 bytes leftover after parsing attributes in process `syz.0.140'. [ 155.485232][ T4461] vhci_hcd: disconnect device [ 155.510628][ T4314] vhci_hcd: vhci_device speed not set [ 158.973318][ T4913] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 158.980059][ T4913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.987886][ T4913] vhci_hcd vhci_hcd.0: Device attached [ 160.099970][ T4833] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 161.328827][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.337897][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.348063][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.358624][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.366803][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.374288][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.396648][ T4916] vhci_hcd: connection reset by peer [ 161.403783][ T4385] vhci_hcd: stop threads [ 161.403823][ T4385] vhci_hcd: release socket [ 161.404424][ T4385] vhci_hcd: disconnect device [ 163.255346][ T4332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.421510][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 163.870742][ T4332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.500586][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 165.753419][ T4332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.300626][ T4833] vhci_hcd: vhci_device speed not set [ 166.897197][ T4332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.100785][ T4980] loop1: detected capacity change from 0 to 2048 [ 167.373175][ T4980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.382261][ T4980] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.586066][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 169.660532][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 170.221543][ T4980] EXT4-fs (loop1): unmounting filesystem. [ 170.312616][ T4933] chnl_net:caif_netlink_parms(): no params data found [ 170.671121][ T5007] netlink: 60 bytes leftover after parsing attributes in process `syz.2.158'. [ 171.265105][ T5011] 9p: Unknown Cache mode readahead [ 172.003972][ T4933] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.060594][ T4933] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.161684][ T4933] device bridge_slave_0 entered promiscuous mode [ 172.168412][ T5016] loop3: detected capacity change from 0 to 256 [ 172.385271][ T5018] loop0: detected capacity change from 0 to 2048 [ 172.412674][ T4933] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.430606][ T4933] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.439687][ T4933] device bridge_slave_1 entered promiscuous mode [ 172.489755][ T4933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.511073][ T4933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.168624][ T5018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.327671][ T5027] loop2: detected capacity change from 0 to 128 [ 173.338018][ T5027] hpfs: bad mount options. [ 173.431623][ T4933] team0: Port device team_slave_0 added [ 173.451411][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 173.601629][ T4933] team0: Port device team_slave_1 added [ 173.852968][ T4933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.859998][ T4933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.135604][ T4933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.182412][ T4933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.190946][ T4933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.217659][ T4933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.474309][ T5038] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 174.480883][ T5038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.488726][ T5038] vhci_hcd vhci_hcd.0: Device attached [ 174.760523][ T4842] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 175.371861][ T5039] vhci_hcd: connection reset by peer [ 175.389262][ T4318] vhci_hcd: stop threads [ 175.394083][ T4318] vhci_hcd: release socket [ 175.414437][ T4318] vhci_hcd: disconnect device [ 175.465915][ T4933] device hsr_slave_0 entered promiscuous mode [ 175.493568][ T4933] device hsr_slave_1 entered promiscuous mode [ 175.506451][ T4933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.524698][ T4933] Cannot create hsr debugfs directory [ 179.780276][ T5075] loop1: detected capacity change from 0 to 32768 [ 180.061809][ T4842] vhci_hcd: vhci_device speed not set [ 180.069375][ T5081] loop2: detected capacity change from 0 to 512 [ 180.089349][ T5081] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 180.175206][ T5081] EXT4-fs (loop2): orphan cleanup on readonly fs [ 180.197236][ T5081] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.173: bad orphan inode 15 [ 180.235212][ T5081] ext4_test_bit(bit=14, block=18) = 1 [ 180.250627][ T5081] is_bad_inode(inode)=0 [ 180.255307][ T5081] NEXT_ORPHAN(inode)=1023 [ 180.259908][ T5081] max_ino=32 [ 180.264475][ T5081] i_nlink=0 [ 180.282262][ T5081] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2916: inode #15: comm syz.2.173: corrupted xattr block 19 [ 180.431095][ T125] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 180.460194][ T5081] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 180.500602][ T5081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 180.526101][ T5084] loop3: detected capacity change from 0 to 4096 [ 180.564145][ T5084] ntfs: (device loop3): ntfs_read_inode_mount(): $MFT/$DATA attribute not found. $MFT is corrupt. Run chkdsk. [ 180.673391][ T125] usb 1-1: Using ep0 maxpacket: 8 [ 180.740688][ T5084] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 180.742570][ T125] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 180.749831][ T5084] ntfs: (device loop3): ntfs_fill_super(): Failed to load essential metadata. [ 180.910882][ T125] usb 1-1: config 0 has no interface number 0 [ 180.973285][ T125] usb 1-1: config 0 interface 176 altsetting 56 bulk endpoint 0x8 has invalid maxpacket 32 [ 181.208278][ T125] usb 1-1: config 0 interface 176 altsetting 56 endpoint 0x7 has invalid maxpacket 16416, setting to 1024 [ 181.255136][ T125] usb 1-1: config 0 interface 176 altsetting 56 bulk endpoint 0x7 has invalid maxpacket 1024 [ 181.276125][ T125] usb 1-1: config 0 interface 176 has no altsetting 0 [ 181.304058][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 181.319213][ T4332] device hsr_slave_0 left promiscuous mode [ 181.320271][ T125] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=68.dc [ 181.342480][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.359154][ T4332] device hsr_slave_1 left promiscuous mode [ 181.365172][ T125] usb 1-1: Product: syz [ 181.365195][ T125] usb 1-1: Manufacturer: syz [ 181.365211][ T125] usb 1-1: SerialNumber: syz [ 181.381992][ T125] usb 1-1: config 0 descriptor?? [ 181.412235][ T5080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.432920][ T5080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.441734][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.450539][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.614795][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.622812][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.638172][ T4332] device bridge_slave_1 left promiscuous mode [ 181.646893][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.636009][ T125] usb 1-1: probing VID:PID(0424:012C) [ 182.667015][ T5103] netlink: 60 bytes leftover after parsing attributes in process `syz.3.179'. [ 182.844251][ T4332] device bridge_slave_0 left promiscuous mode [ 183.927413][ T125] usb 1-1: vub300 testing BULK OUT EndPoint(0) 08 [ 183.936597][ T125] usb 1-1: vub300 testing BULK OUT EndPoint(1) 07 [ 183.953096][ T125] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 183.965779][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.985021][ T125] vub300: probe of 1-1:0.176 failed with error -22 [ 183.994569][ T125] usb 1-1: USB disconnect, device number 2 [ 184.402288][ T4332] device veth1_macvtap left promiscuous mode [ 184.428970][ T4332] device veth0_macvtap left promiscuous mode [ 184.480100][ T4332] device veth1_vlan left promiscuous mode [ 184.528634][ T4332] device veth0_vlan left promiscuous mode [ 186.043878][ T5119] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 186.050629][ T5119] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.058439][ T5119] vhci_hcd vhci_hcd.0: Device attached [ 186.256238][ T5121] vhci_hcd: connection closed [ 186.257904][ T2908] vhci_hcd: stop threads [ 186.274967][ T2908] vhci_hcd: release socket [ 186.279680][ T2908] vhci_hcd: disconnect device [ 186.529911][ T5136] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 186.536507][ T5136] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.544534][ T5136] vhci_hcd vhci_hcd.0: Device attached [ 186.710467][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 186.711021][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 186.840716][ T3599] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 187.270665][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 187.311786][ T5137] vhci_hcd: connection reset by peer [ 187.320183][ T4743] vhci_hcd: stop threads [ 187.564493][ T4743] vhci_hcd: release socket [ 187.830583][ T4743] vhci_hcd: disconnect device [ 187.838005][ T22] usb 1-1: config 2 has an invalid interface number: 196 but max is 0 [ 187.870517][ T22] usb 1-1: config 2 has no interface number 0 [ 187.876883][ T22] usb 1-1: config 2 interface 196 has no altsetting 0 [ 187.899391][ T5141] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 187.906055][ T5141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.914245][ T5141] vhci_hcd vhci_hcd.0: Device attached [ 187.961348][ T22] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice= 9.71 [ 188.000454][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.017119][ T22] usb 1-1: Product: syz [ 188.021825][ T22] usb 1-1: Manufacturer: syz [ 188.026702][ T22] usb 1-1: SerialNumber: syz [ 188.032142][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.043953][ T14] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 188.054020][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.200655][ T4842] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 188.441378][ T14] usb 3-1: config 0 descriptor?? [ 188.457435][ T22] usb 1-1: bad CDC descriptors [ 188.506980][ T22] usb 1-1: bad CDC descriptors [ 188.531643][ T22] usb 1-1: USB disconnect, device number 3 [ 188.728143][ T5142] vhci_hcd: connection reset by peer [ 188.734466][ T4493] vhci_hcd: stop threads [ 188.738860][ T4493] vhci_hcd: release socket [ 188.744384][ T4493] vhci_hcd: disconnect device [ 188.764412][ T14] smsusb:smsusb_probe: board id=8, interface number 0 [ 188.791018][ T14] smsusb:smsusb_probe: Device initialized with return code -19 [ 188.977265][ T14] usb 3-1: USB disconnect, device number 4 [ 189.744087][ T5160] usb usb8: usbfs: process 5160 (syz.1.195) did not claim interface 0 before use [ 192.460529][ T3599] vhci_hcd: vhci_device speed not set [ 193.052558][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 193.345571][ T4842] vhci_hcd: vhci_device speed not set [ 193.626019][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 193.848473][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'. [ 193.872294][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.948706][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.386087][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392582][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.706702][ T4332] bond0 (unregistering): Released all slaves [ 199.738363][ T5235] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 199.744966][ T5235] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.753253][ T5235] vhci_hcd vhci_hcd.0: Device attached [ 199.794012][ T5236] vhci_hcd: connection closed [ 199.795072][ T4461] vhci_hcd: stop threads [ 200.030631][ T7] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 200.311327][ T4461] vhci_hcd: release socket [ 200.320328][ T4461] vhci_hcd: disconnect device [ 200.474152][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 200.543288][ T5181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.199'. [ 201.146364][ T5256] ax25_connect(): syz.1.218 uses autobind, please contact jreuter@yaina.de [ 201.590523][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 201.590572][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 202.039216][ T4933] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.139842][ T5261] loop1: detected capacity change from 0 to 32768 [ 203.165602][ T5261] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.221 (5261) [ 203.187218][ T5261] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.198061][ T5261] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 203.207322][ T5261] BTRFS info (device loop1): force clearing of disk cache [ 203.214727][ T5261] BTRFS info (device loop1): enabling auto defrag [ 203.221448][ T5261] BTRFS info (device loop1): max_inline at 0 [ 203.227671][ T5261] BTRFS info (device loop1): enabling ssd optimizations [ 203.234723][ T5261] BTRFS info (device loop1): using spread ssd allocation scheme [ 203.242659][ T5261] BTRFS info (device loop1): using free space tree [ 203.282862][ T5261] BTRFS info (device loop1): rebuilding free space tree [ 203.331555][ T4933] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.343118][ T4933] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.472388][ T4933] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.183095][ T4269] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.202170][ T4318] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 204.418056][ T5291] vivid-002: ================= START STATUS ================= [ 204.461804][ T4933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.491513][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.499563][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.520911][ T5291] vivid-002: Radio HW Seek Mode: Bounded [ 204.526744][ T5291] vivid-002: Radio Programmable HW Seek: false [ 204.594264][ T4933] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.677650][ T5291] vivid-002: RDS Rx I/O Mode: Block I/O [ 204.677714][ T5291] vivid-002: Generate RBDS Instead of RDS: false [ 204.677740][ T5291] vivid-002: RDS Reception: true [ 204.677763][ T5291] vivid-002: RDS Program Type: 0 inactive [ 204.677796][ T5291] vivid-002: RDS PS Name: inactive [ 204.677826][ T5291] vivid-002: RDS Radio Text: inactive [ 204.677853][ T5291] vivid-002: RDS Traffic Announcement: false inactive [ 204.677882][ T5291] vivid-002: RDS Traffic Program: false inactive [ 204.677910][ T5291] vivid-002: RDS Music: false inactive [ 204.677938][ T5291] vivid-002: ================== END STATUS ================== [ 205.106535][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.197419][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.251082][ T4570] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.259586][ T4570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.337318][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.420663][ T7] vhci_hcd: vhci_device speed not set [ 205.436304][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.496840][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.504176][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.645004][ T5315] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 205.651720][ T5315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.659671][ T5315] vhci_hcd vhci_hcd.0: Device attached [ 205.841198][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.960503][ T5307] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 206.159683][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.348918][ T5316] vhci_hcd: connection reset by peer [ 206.369009][ T35] vhci_hcd: stop threads [ 206.375550][ T35] vhci_hcd: release socket [ 206.410661][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.454880][ T35] vhci_hcd: disconnect device [ 206.643114][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.865040][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.874101][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.884512][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.895025][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.906218][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.915469][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.627887][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.651632][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.683750][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.390892][ T5349] loop0: detected capacity change from 0 to 32768 [ 211.419714][ T5349] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.234 (5349) [ 211.438057][ T5349] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.448731][ T5349] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 211.457836][ T5349] BTRFS info (device loop0): force clearing of disk cache [ 211.465017][ T5349] BTRFS info (device loop0): enabling auto defrag [ 211.471654][ T5349] BTRFS info (device loop0): max_inline at 0 [ 211.477737][ T5349] BTRFS info (device loop0): enabling ssd optimizations [ 211.484964][ T5349] BTRFS info (device loop0): using spread ssd allocation scheme [ 211.492736][ T5349] BTRFS info (device loop0): using free space tree [ 211.513544][ T5307] vhci_hcd: vhci_device speed not set [ 212.219085][ T5349] BTRFS info (device loop0): rebuilding free space tree [ 212.423117][ T4570] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 212.961969][ T4272] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.141898][ T5390] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 214.149273][ T5390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.251005][ T5390] vhci_hcd vhci_hcd.0: Device attached [ 214.445366][ T5391] vhci_hcd: connection closed [ 214.446025][ T4371] vhci_hcd: stop threads [ 214.500165][ T4371] vhci_hcd: release socket [ 214.540014][ T4371] vhci_hcd: disconnect device [ 215.056101][ T5414] loop2: detected capacity change from 0 to 64 [ 217.572188][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.591544][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.600106][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.616357][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.624482][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.632109][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.843271][ T5446] loop2: detected capacity change from 0 to 512 [ 217.936724][ T5448] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 217.943441][ T5448] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 217.951796][ T5448] vhci_hcd vhci_hcd.0: Device attached [ 218.022555][ T5446] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 218.047379][ T5446] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.102602][ T5446] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 218.131159][ T5446] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 218.159672][ T5446] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.255: Failed to acquire dquot type 1 [ 218.188374][ T5446] EXT4-fs (loop2): Remounting filesystem read-only [ 218.219700][ T5446] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.255: bg 0: block 40: padding at end of block bitmap is not set [ 218.250449][ T3599] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 218.300852][ T5446] EXT4-fs (loop2): Remounting filesystem read-only [ 218.307932][ T5446] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 218.367074][ T5446] EXT4-fs (loop2): Remounting filesystem read-only [ 218.402275][ T5446] EXT4-fs (loop2): 1 truncate cleaned up [ 218.410177][ T5446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 218.659137][ T5450] vhci_hcd: connection reset by peer [ 218.669347][ T4332] vhci_hcd: stop threads [ 218.674101][ T4332] vhci_hcd: release socket [ 218.700814][ T4332] vhci_hcd: disconnect device [ 218.731550][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 219.661670][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 221.008464][ T5478] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 221.537830][ T5486] loop0: detected capacity change from 0 to 1024 [ 221.590994][ T5440] chnl_net:caif_netlink_parms(): no params data found [ 221.750437][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 223.173387][ T4371] hfsplus: b-tree write err: -5, ino 25 [ 223.280656][ T4371] hfsplus: b-tree write err: -5, ino 4 [ 223.287216][ T4371] hfsplus: b-tree write err: -5, ino 2 [ 223.450674][ T3599] vhci_hcd: vhci_device speed not set [ 224.090956][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 224.095123][ T5508] loop3: detected capacity change from 0 to 32768 [ 224.201988][ T5440] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.236770][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.271264][ T5440] device bridge_slave_0 entered promiscuous mode [ 224.298957][ T5512] netlink: 'syz.0.275': attribute type 39 has an invalid length. [ 224.334471][ T4432] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.446832][ T5440] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.490553][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.517543][ T5440] device bridge_slave_1 entered promiscuous mode [ 224.778105][ T5440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.970211][ T5440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.000810][ T5527] loop1: detected capacity change from 0 to 1024 [ 225.154373][ T5440] team0: Port device team_slave_0 added [ 225.272376][ T4371] hfsplus: b-tree write err: -5, ino 25 [ 225.278218][ T4371] hfsplus: b-tree write err: -5, ino 4 [ 225.305214][ T4371] hfsplus: b-tree write err: -5, ino 2 [ 225.339367][ T4461] device hsr_slave_0 left promiscuous mode [ 225.373718][ T4461] device hsr_slave_1 left promiscuous mode [ 225.406580][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.450278][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.499016][ T4461] device bridge_slave_1 left promiscuous mode [ 225.542032][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.570900][ T3599] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 225.631205][ T4461] device bridge_slave_0 left promiscuous mode [ 225.637537][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.678982][ T5542] netlink: 60 bytes leftover after parsing attributes in process `syz.1.278'. [ 225.817974][ T3599] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.829522][ T3599] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.839288][ T3599] usb 1-1: config 1 interface 0 has no altsetting 0 [ 225.867223][ T3599] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.876474][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.909599][ T3599] usb 1-1: SerialNumber: syz [ 226.140630][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 226.227828][ T3599] usb 1-1: 0:2 : does not exist [ 226.322555][ T3599] usb 1-1: USB disconnect, device number 4 [ 226.615182][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.775812][ T4461] team0 (unregistering): Port device team_slave_1 removed [ 226.837454][ T4461] team0 (unregistering): Port device team_slave_0 removed [ 226.890694][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.958880][ T4461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.653336][ T4461] bond0 (unregistering): Released all slaves [ 228.768289][ T5440] team0: Port device team_slave_1 added [ 228.785493][ T5559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.282'. [ 228.810559][ T5559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.282'. [ 228.819891][ T5559] netlink: 'syz.3.282': attribute type 6 has an invalid length. [ 228.837690][ T5569] netlink: 'syz.2.283': attribute type 3 has an invalid length. [ 228.877009][ T5573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.106047][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.161837][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.943438][ T5582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 229.950210][ T5582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 229.958007][ T5582] vhci_hcd vhci_hcd.0: Device attached [ 230.014981][ T5583] vhci_hcd: connection closed [ 230.040452][ T4493] vhci_hcd: stop threads [ 230.548179][ T4493] vhci_hcd: release socket [ 230.561771][ T4493] vhci_hcd: disconnect device [ 232.042678][ T5440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.111332][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.160694][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.187330][ T5440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.362098][ T5440] device hsr_slave_0 entered promiscuous mode [ 232.368996][ T5440] device hsr_slave_1 entered promiscuous mode [ 232.377611][ T5440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.395528][ T5440] Cannot create hsr debugfs directory [ 233.071408][ T5440] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.081971][ T5440] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.094732][ T5440] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.105224][ T5440] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.189360][ T5440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.218245][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.234724][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.248928][ T5440] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.273872][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.283249][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.298328][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.305556][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.320828][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.337576][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.346738][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.356071][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.363257][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.385638][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.395450][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.419473][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.436018][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.447380][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.457291][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.484532][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.495283][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.505490][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.514553][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.524432][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.535295][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.829894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.839268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.859192][ T5440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.347733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.363992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.401129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.414234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.426123][ T5440] device veth0_vlan entered promiscuous mode [ 234.439950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.448843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.467071][ T5440] device veth1_vlan entered promiscuous mode [ 234.495398][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 234.507806][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 234.517063][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.533672][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.551606][ T5440] device veth0_macvtap entered promiscuous mode [ 234.569870][ T5440] device veth1_macvtap entered promiscuous mode [ 234.601673][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.612393][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.623644][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.634658][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.645157][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.656246][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.667049][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.678264][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.696439][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.718138][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.727918][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.736761][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.746122][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.758489][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.769806][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.782333][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.793299][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.803489][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.815746][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.826961][ T5440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.838019][ T5440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.849702][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.865891][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.875370][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.887349][ T5440] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.896471][ T5440] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.905820][ T5440] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.916001][ T5440] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.006135][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.028180][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.037682][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.076606][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.091581][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.108265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 235.279672][ T5662] loop0: detected capacity change from 0 to 47 [ 235.350287][ T5662] MINIX-fs: bad superblock [ 236.435687][ T5674] loop2: detected capacity change from 0 to 164 [ 236.458631][ T5670] loop1: detected capacity change from 0 to 2048 [ 236.539829][ T5670] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.803474][ T5681] netlink: 60 bytes leftover after parsing attributes in process `syz.5.291'. [ 237.512644][ T5687] loop2: detected capacity change from 0 to 32768 [ 237.532983][ T5687] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.295 (5687) [ 237.581026][ T5687] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.591446][ T5687] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 237.600156][ T5687] BTRFS info (device loop2): force clearing of disk cache [ 237.607364][ T5687] BTRFS info (device loop2): enabling auto defrag [ 237.614125][ T5687] BTRFS info (device loop2): max_inline at 0 [ 237.620112][ T5687] BTRFS info (device loop2): enabling ssd optimizations [ 237.627110][ T5687] BTRFS info (device loop2): using spread ssd allocation scheme [ 237.635288][ T5687] BTRFS info (device loop2): using free space tree [ 238.427487][ T5687] BTRFS info (device loop2): rebuilding free space tree [ 239.276282][ T35] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 239.566529][ T5724] loop0: detected capacity change from 0 to 32768 [ 239.583352][ T5724] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.317 (5724) [ 239.596801][ T4268] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.990615][ T4393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 13 /dev/loop2 scanned by udevd (4393) [ 241.234507][ T5750] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 241.241200][ T5750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.249327][ T5750] vhci_hcd vhci_hcd.0: Device attached [ 241.320985][ T5751] vhci_hcd: connection closed [ 241.324314][ T4634] vhci_hcd: stop threads [ 242.036967][ T4634] vhci_hcd: release socket [ 242.037577][ T4634] vhci_hcd: disconnect device [ 242.447185][ T5773] loop1: detected capacity change from 0 to 128 [ 242.481544][ T5773] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.544767][ T5773] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 243.005987][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.093049][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.710045][ T5813] netlink: 16 bytes leftover after parsing attributes in process `syz.5.330'. [ 250.287096][ T5855] xt_hashlimit: max too large, truncated to 1048576 [ 252.219632][ T5880] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 252.252893][ T5848] infiniband syz1: set active [ 252.291401][ T5848] infiniband syz1: added bond0 [ 252.303327][ T5848] rdma_rxe: unable to create cq [ 252.308967][ T5848] infiniband syz1: Couldn't create ib_mad CQ [ 252.364383][ T5848] infiniband syz1: Couldn't open port 1 [ 252.463787][ T5848] RDS/IB: syz1: added [ 252.498869][ T5848] smc: adding ib device syz1 with port count 1 [ 252.524596][ T5848] smc: ib device syz1 port 1 has pnetid [ 253.403234][ T5898] comedi comedi3: pcl711: a I/O base address must be specified [ 255.823374][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.832020][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.520063][ T5949] fuse: Bad value for 'fd' [ 261.567028][ T5949] netlink: 'syz.2.366': attribute type 8 has an invalid length. [ 261.695708][ T5952] IPv6: sit1: Disabled Multicast RS [ 261.976764][ T5966] netlink: 88 bytes leftover after parsing attributes in process `syz.3.372'. [ 262.087540][ T5967] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 262.094156][ T5967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.102065][ T5967] vhci_hcd vhci_hcd.0: Device attached [ 262.380684][ T4842] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 262.805133][ T5968] vhci_hcd: connection reset by peer [ 262.813545][ T4493] vhci_hcd: stop threads [ 263.341449][ T4493] vhci_hcd: release socket [ 263.346017][ T4493] vhci_hcd: disconnect device [ 266.236027][ T5985] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 266.242808][ T5985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 266.251859][ T5985] vhci_hcd vhci_hcd.0: Device attached [ 266.260816][ T5986] vhci_hcd: connection closed [ 266.268623][ T4570] vhci_hcd: stop threads [ 266.583100][ T4570] vhci_hcd: release socket [ 266.587643][ T4570] vhci_hcd: disconnect device [ 267.258814][ T6004] fuse: Bad value for 'fd' [ 267.302394][ T6004] netlink: 'syz.5.382': attribute type 8 has an invalid length. [ 267.450879][ T6007] netlink: 'syz.3.383': attribute type 32 has an invalid length. [ 267.530498][ T4842] vhci_hcd: vhci_device speed not set [ 267.753462][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.954559][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.975151][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.984399][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.993240][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 268.003583][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.070624][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 271.206839][ T6053] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 271.401474][ T4494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.885452][ T4494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.102748][ T4494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.140503][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 272.211082][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.402'. [ 272.241461][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.402'. [ 272.375885][ T4494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.459784][ T6084] netlink: 'syz.5.404': attribute type 4 has an invalid length. [ 272.491840][ T6084] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.404'. [ 272.525395][ T6014] chnl_net:caif_netlink_parms(): no params data found [ 274.092455][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.099646][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.170511][ T6014] device bridge_slave_0 entered promiscuous mode [ 274.189928][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.223991][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 274.284042][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.313249][ T6014] device bridge_slave_1 entered promiscuous mode [ 274.890066][ T6014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.936881][ T6014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.964289][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.413'. [ 275.409373][ T6014] team0: Port device team_slave_0 added [ 275.434259][ T6014] team0: Port device team_slave_1 added [ 276.300836][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 277.418623][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.451022][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.554095][ T6014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.625824][ T6152] loop2: detected capacity change from 0 to 256 [ 277.706953][ T6152] FAT-fs (loop2): Directory bread(block 64) failed [ 277.732972][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.741173][ T6152] FAT-fs (loop2): Directory bread(block 65) failed [ 277.748031][ T6152] FAT-fs (loop2): Directory bread(block 66) failed [ 277.772164][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.829954][ T6152] FAT-fs (loop2): Directory bread(block 67) failed [ 277.850938][ T6152] FAT-fs (loop2): Directory bread(block 68) failed [ 277.865576][ T6152] FAT-fs (loop2): Directory bread(block 69) failed [ 277.900969][ T6152] FAT-fs (loop2): Directory bread(block 70) failed [ 277.920499][ T6014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.941220][ T6152] FAT-fs (loop2): Directory bread(block 71) failed [ 277.963093][ T6152] FAT-fs (loop2): Directory bread(block 72) failed [ 277.990507][ T6152] FAT-fs (loop2): Directory bread(block 73) failed [ 279.482972][ T6014] device hsr_slave_0 entered promiscuous mode [ 279.502837][ T6014] device hsr_slave_1 entered promiscuous mode [ 279.545160][ T6014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.567670][ T6014] Cannot create hsr debugfs directory [ 279.638252][ T6176] loop2: detected capacity change from 0 to 64 [ 280.247479][ T4273] Bluetooth: hci3: failed to read key size for handle 201 [ 282.269635][ T6201] loop2: detected capacity change from 0 to 512 [ 282.295810][ T6201] EXT4-fs: Ignoring removed nobh option [ 282.423871][ T6201] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 283.219390][ T6201] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 283.338172][ T6201] EXT4-fs (loop2): 1 truncate cleaned up [ 283.357529][ T6201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 283.457054][ T4494] device hsr_slave_0 left promiscuous mode [ 283.495459][ T4494] device hsr_slave_1 left promiscuous mode [ 283.522468][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.551903][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 283.557940][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.588137][ T6215] loop1: detected capacity change from 0 to 4096 [ 283.598003][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.623048][ T4494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.641870][ T4494] device bridge_slave_1 left promiscuous mode [ 283.648599][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.682848][ T4494] device bridge_slave_0 left promiscuous mode [ 283.693111][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.870845][ T6221] loop3: detected capacity change from 0 to 32768 [ 283.892332][ T6221] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 13 [ 283.925148][ T6223] loop2: detected capacity change from 0 to 1024 [ 283.926034][ T4494] device veth1_macvtap left promiscuous mode [ 283.957677][ T4494] device veth0_macvtap left promiscuous mode [ 284.033099][ T4494] device veth1_vlan left promiscuous mode [ 284.056552][ T4494] device veth0_vlan left promiscuous mode [ 284.060312][ T6223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 284.092887][ T4269] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 284.102958][ T4269] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 284.731045][ T6223] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 623: comm syz.2.443: Attempting to read directory block (623) that is past i_size (638464) [ 284.949132][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 286.699322][ T6258] loop1: detected capacity change from 0 to 2048 [ 286.727655][ T6258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.757104][ T4494] infiniband syz1: set down [ 287.578304][ T6276] loop3: detected capacity change from 0 to 128 [ 287.626111][ T6276] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 287.649367][ T6276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.377501][ T4494] team0 (unregistering): Port device team_slave_1 removed [ 288.743386][ T4494] team0 (unregistering): Port device team_slave_0 removed [ 289.106566][ T4494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.211215][ T4494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.534381][ T6290] loop3: detected capacity change from 0 to 32768 [ 289.559879][ T6290] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.466 (6290) [ 289.590152][ T6290] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 289.603591][ T6290] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 289.613315][ T6290] BTRFS info (device loop3): using free space tree [ 289.781454][ T4494] bond0 (unregistering): Released all slaves [ 289.789301][ T4461] smc: removing ib device syz1 [ 289.829420][ T6290] BTRFS info (device loop3): enabling ssd optimizations [ 289.876447][ T6290] BTRFS info (device loop3): balance: start -f -susage=9 [ 289.914560][ T5753] bond0 speed is unknown, defaulting to 1000 [ 289.932299][ T5747] infiniband syz1: ib_query_port failed (-19) [ 289.966848][ T6290] BTRFS info (device loop3): relocating block group 1048576 flags system [ 290.049364][ T6014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 290.131731][ T6014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 290.147911][ T6290] BTRFS info (device loop3): balance: canceled [ 290.168952][ T6014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 290.355186][ T6014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 291.417066][ T4267] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 291.776981][ T6325] loop2: detected capacity change from 0 to 8 [ 291.822253][ T6014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.931857][ T6014] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.938956][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.963612][ T2908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.027459][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.111257][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.160730][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.168092][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.451875][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.476088][ T6338] loop1: detected capacity change from 0 to 512 [ 292.699034][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.971141][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.978326][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.997348][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.006123][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.007124][ T6338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 293.030582][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.089164][ T6338] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.183881][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.195762][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.679414][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.695532][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.716886][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.740217][ T6338] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.474: bg 0: block 248: padding at end of block bitmap is not set [ 293.764537][ T6338] Quota error (device loop1): write_blk: dquota write failed [ 293.773699][ T6338] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 293.851266][ T6338] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.474: Failed to acquire dquot type 0 [ 293.891182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.913246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.974000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.025738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.081503][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 294.118763][ T6355] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 294.302690][ T6351] loop3: detected capacity change from 0 to 32768 [ 294.310518][ T6351] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 13 [ 294.447606][ T5747] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 294.459369][ T6355] batman_adv: batadv0: Adding interface: netdevsim0 [ 294.560574][ T6355] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.588972][ T6355] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 294.664368][ T5747] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 294.693284][ T5747] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.771342][ T5747] usb 6-1: config 0 has no interface number 0 [ 294.818013][ T5747] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 294.867153][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.918433][ T5747] usb 6-1: Product: syz [ 294.947297][ T5747] usb 6-1: Manufacturer: syz [ 294.980522][ T5747] usb 6-1: SerialNumber: syz [ 295.020074][ T5747] usb 6-1: config 0 descriptor?? [ 295.344206][ T6376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.483'. [ 295.356214][ T3599] usb 6-1: USB disconnect, device number 2 [ 295.420638][ T6376] netlink: 9 bytes leftover after parsing attributes in process `syz.3.483'. [ 295.460467][ T6376] netlink: 9 bytes leftover after parsing attributes in process `syz.3.483'. [ 295.513678][ T6376] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 295.730241][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.740426][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.780775][ T6014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.591792][ T6402] loop2: detected capacity change from 0 to 32768 [ 298.621100][ T6402] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.631685][ T6402] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 298.640550][ T6402] BTRFS info (device loop2): force clearing of disk cache [ 298.648171][ T6402] BTRFS info (device loop2): enabling auto defrag [ 298.654912][ T6402] BTRFS info (device loop2): max_inline at 0 [ 298.661084][ T6402] BTRFS info (device loop2): enabling ssd optimizations [ 298.668501][ T6402] BTRFS info (device loop2): using spread ssd allocation scheme [ 298.676727][ T6402] BTRFS info (device loop2): using free space tree [ 298.876733][ T6402] BTRFS info (device loop2): rebuilding free space tree [ 299.563543][ T4479] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 299.581023][ T4268] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 299.611032][ T6434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.493'. [ 299.767324][ T6106] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop2 scanned by udevd (6106) [ 299.790846][ T3599] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 299.992086][ T3599] usb 2-1: Using ep0 maxpacket: 8 [ 299.999210][ T3599] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 300.027998][ T3599] usb 2-1: config 179 has no interface number 0 [ 300.050419][ T3599] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 300.080525][ T3599] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 300.126461][ T3599] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 300.176592][ T3599] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 300.199378][ T6441] loop5: detected capacity change from 0 to 8192 [ 300.218845][ T3599] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 300.243659][ T3599] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 300.253758][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.258897][ T6441] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 300.286202][ T6432] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.330950][ T6441] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 300.344034][ T6441] REISERFS (device loop5): using ordered data mode [ 300.351321][ T6441] reiserfs: using flush barriers [ 300.457609][ T6441] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 300.477469][ T6441] REISERFS (device loop5): checking transaction log (loop5) [ 300.506188][ T6454] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 300.512853][ T6454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 300.520685][ T6454] vhci_hcd vhci_hcd.0: Device attached [ 300.612714][ T6441] REISERFS (device loop5): Using r5 hash to sort names [ 300.647310][ T4577] usb 2-1: USB disconnect, device number 3 [ 300.653319][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 300.653395][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 300.717370][ T6441] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 300.758020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.771906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.820110][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.861455][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.884160][ T3599] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 300.899853][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.941818][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.979025][ T6014] device veth0_vlan entered promiscuous mode [ 301.039676][ T6014] device veth1_vlan entered promiscuous mode [ 301.124742][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.141219][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.189995][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.218718][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.249619][ T6014] device veth0_macvtap entered promiscuous mode [ 301.283214][ T6455] vhci_hcd: connection reset by peer [ 301.288834][ T11] vhci_hcd: stop threads [ 301.293698][ T11] vhci_hcd: release socket [ 301.302653][ T6014] device veth1_macvtap entered promiscuous mode [ 301.320430][ T11] vhci_hcd: disconnect device [ 301.370172][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.431921][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.359848][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.396901][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.407244][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.432350][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.442763][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.453666][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.466571][ T4317] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 302.473538][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.489288][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.507477][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.517969][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.529683][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.558451][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.578750][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.596315][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.630250][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.644822][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.684126][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.715411][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.734525][ T4317] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 302.760764][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.929145][ T6485] loop1: detected capacity change from 0 to 32768 [ 302.939896][ T6485] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 302.956718][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.966506][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.977978][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.989521][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.461166][ T6014] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.501750][ T6014] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.559276][ T6014] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.612417][ T6014] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.980688][ T3599] vhci_hcd: vhci_device speed not set [ 306.137136][ T4634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.210154][ T4634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.247994][ T4317] usb 6-1: Product: syz [ 306.252401][ T4317] usb 6-1: Manufacturer: syz [ 306.257136][ T4317] usb 6-1: SerialNumber: syz [ 306.265426][ T4317] usb 6-1: config 0 descriptor?? [ 306.335565][ T6106] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.340621][ T4317] usb 6-1: can't set config #0, error -71 [ 306.355430][ T4317] usb 6-1: USB disconnect, device number 3 [ 306.410730][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.438309][ T4479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.575056][ T4479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.634771][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 306.710572][ T951] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 306.764909][ T6497] device batadv0 entered promiscuous mode [ 306.806644][ T6497] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 306.932950][ T951] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 306.963032][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.978174][ T6503] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 306.984762][ T6503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.992697][ T6503] vhci_hcd vhci_hcd.0: Device attached [ 307.048568][ T951] usb 2-1: Product: syz [ 307.073199][ T951] usb 2-1: Manufacturer: syz [ 307.100473][ T951] usb 2-1: SerialNumber: syz [ 307.120951][ T951] r8152-cfgselector 2-1: config 0 descriptor?? [ 307.426664][ T4317] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 307.802225][ T6505] vhci_hcd: connection closed [ 307.802656][ T4318] vhci_hcd: stop threads [ 307.857285][ T4318] vhci_hcd: release socket [ 307.862233][ T4318] vhci_hcd: disconnect device [ 308.006890][ T951] r8152-cfgselector 2-1: Unknown version 0x0000 [ 308.811644][ T951] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 309.690454][ T5734] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 311.722248][ T5734] usb 6-1: config 128 interface 0 has no altsetting 0 [ 312.470458][ T5734] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 312.551720][ T6561] usb usb9: usbfs: interface 0 claimed by hub while 'syz.6.525' sets config #-2 [ 312.913470][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.940710][ T4317] vhci_hcd: vhci_device speed not set [ 313.005909][ T5734] usb 6-1: can't set config #128, error -71 [ 313.050504][ T5734] usb 6-1: USB disconnect, device number 4 [ 314.136056][ T6576] mmap: syz.2.531 (6576) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 315.529401][ T6587] netlink: 144 bytes leftover after parsing attributes in process `syz.5.533'. [ 316.448646][ T6592] loop3: detected capacity change from 0 to 256 [ 316.718297][ T6587] team0: Port device team_slave_0 removed [ 316.751957][ T6587] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 316.839439][ T6592] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 317.265689][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.278589][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.246461][ T6627] loop2: detected capacity change from 0 to 128 [ 319.351952][ T5308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 319.400545][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 319.444125][ T6627] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 319.560593][ T5308] usb 4-1: Using ep0 maxpacket: 16 [ 319.600458][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 319.614708][ T27] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 319.635943][ T27] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 319.646757][ T5308] usb 4-1: config 0 has no interfaces? [ 319.668337][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.689216][ T27] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 319.710444][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.850864][ T5308] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 319.860173][ T5308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.869227][ T5308] usb 4-1: Product: syz [ 319.873780][ T5308] usb 4-1: Manufacturer: syz [ 319.878605][ T5308] usb 4-1: SerialNumber: syz [ 319.900888][ T6627] hpfs: filesystem error: improperly stopped [ 319.921998][ T27] usb 2-1: config 0 descriptor?? [ 320.417226][ T6627] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 320.435821][ T5308] r8152-cfgselector 4-1: config 0 descriptor?? [ 320.463429][ T6627] hpfs: You really don't want any checks? You are crazy... [ 320.545422][ T6627] hpfs: hpfs_map_sector(): read error [ 320.572128][ T6627] hpfs: code page support is disabled [ 320.596296][ T6627] hpfs: hpfs_map_4sectors(): unaligned read [ 320.617505][ T6627] hpfs: hpfs_map_4sectors(): unaligned read [ 320.741006][ T6627] hpfs: filesystem error: unable to find root dir [ 320.914609][ T5308] r8152-cfgselector 4-1: Unknown version 0x0000 [ 320.972831][ T27] usb 2-1: USB disconnect, device number 5 [ 321.313288][ T6640] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 321.495125][ T27] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 321.564261][ T6642] loop5: detected capacity change from 0 to 64 [ 322.040479][ T125] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 322.857616][ T6649] loop1: detected capacity change from 0 to 32768 [ 322.873770][ T6649] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 323.000446][ T125] usb 3-1: Using ep0 maxpacket: 16 [ 323.032284][ T125] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 323.235824][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.513128][ T125] usb 3-1: config 0 descriptor?? [ 323.624318][ T125] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 323.716490][ T6665] netlink: 'syz.3.552': attribute type 4 has an invalid length. [ 324.517125][ T6668] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 324.523818][ T6668] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 324.531884][ T6668] vhci_hcd vhci_hcd.0: Device attached [ 324.591080][ T6669] vhci_hcd: connection closed [ 324.597027][ T4832] vhci_hcd: stop threads [ 325.113877][ T4832] vhci_hcd: release socket [ 325.125387][ T4832] vhci_hcd: disconnect device [ 325.190794][ T5753] vhci_hcd: vhci_device speed not set [ 326.103793][ T125] usb 3-1: Detected FT232A [ 326.317021][ T125] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 326.693482][ T125] usb 3-1: USB disconnect, device number 5 [ 326.984404][ T6106] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 327.084062][ T125] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 327.257768][ T6687] loop2: detected capacity change from 0 to 512 [ 327.311191][ T6687] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 327.344781][ T125] ftdi_sio 3-1:0.0: device disconnected [ 327.883449][ T6687] EXT4-fs (loop2): orphan cleanup on readonly fs [ 327.971221][ T6687] Quota error (device loop2): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 328.040800][ T6687] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 328.117884][ T6687] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 328.170482][ T5753] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 328.177547][ T6687] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.558: bg 0: block 15: invalid block bitmap [ 328.293262][ T6687] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 328.350636][ T6687] EXT4-fs (loop2): 1 truncate cleaned up [ 328.356685][ T6687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 328.374382][ T5753] usb 4-1: Using ep0 maxpacket: 32 [ 328.391678][ T5753] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.473721][ T5753] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.550697][ T5753] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 328.584653][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.802513][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 328.844300][ T6703] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 328.850902][ T6703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 328.858802][ T6703] vhci_hcd vhci_hcd.0: Device attached [ 329.310656][ T5308] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 329.437109][ T6708] vhci_hcd: connection reset by peer [ 329.449101][ T4832] vhci_hcd: stop threads [ 329.457894][ T4832] vhci_hcd: release socket [ 329.541856][ T4832] vhci_hcd: disconnect device [ 329.956813][ T5753] usb 4-1: config 0 descriptor?? [ 330.020693][ T5753] usb 4-1: bad CDC descriptors [ 330.031328][ T5753] usb 4-1: bad CDC descriptors [ 330.090600][ T6712] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 330.097435][ T6712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.105003][ T6712] vhci_hcd vhci_hcd.0: Device attached [ 330.198021][ T2184] usb 4-1: USB disconnect, device number 4 [ 330.220246][ T6714] vhci_hcd: connection closed [ 330.220819][ T4661] vhci_hcd: stop threads [ 330.246446][ T4661] vhci_hcd: release socket [ 330.263744][ T4661] vhci_hcd: disconnect device [ 330.314361][ T6726] netlink: 'syz.1.569': attribute type 5 has an invalid length. [ 330.328313][ T6726] netlink: 176 bytes leftover after parsing attributes in process `syz.1.569'. [ 330.420599][ T5753] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 330.510467][ T5747] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 330.631320][ T5753] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 330.720460][ T5747] usb 7-1: Using ep0 maxpacket: 16 [ 330.748949][ T5747] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 331.160920][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 331.221603][ T5747] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.240575][ T5753] usb 3-1: Product: syz [ 331.267499][ T5753] usb 3-1: config 0 descriptor?? [ 331.278140][ T5747] usb 7-1: config 0 descriptor?? [ 331.313747][ T5753] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 331.322721][ T5747] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 331.348615][ T5753] usb 3-1: Detected FT232H [ 331.352601][ T6741] netlink: 5 bytes leftover after parsing attributes in process `syz.3.573'. [ 331.862295][ T5747] usb 7-1: Detected FT232B [ 332.036646][ T5753] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 332.038285][ T5753] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 332.072932][ T5747] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 332.073665][ T5747] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 332.079763][ T5747] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 332.096629][ T5753] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 332.123434][ T5747] usb 7-1: USB disconnect, device number 2 [ 332.215886][ T5753] usb 3-1: USB disconnect, device number 6 [ 332.390666][ T5753] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 332.422100][ T5753] ftdi_sio 3-1:0.0: device disconnected [ 332.453897][ T5747] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 332.502545][ T5747] ftdi_sio 7-1:0.0: device disconnected [ 333.307105][ T6743] tty tty2: ldisc open failed (-12), clearing slot 1 [ 334.465133][ T5308] vhci_hcd: vhci_device speed not set [ 335.776210][ T6784] sp0: Synchronizing with TNC [ 335.968927][ T6789] syz.5.590 uses obsolete (PF_INET,SOCK_PACKET) [ 336.275967][ T6792] loop5: detected capacity change from 0 to 128 [ 336.382748][ T6792] befs: Invalid gid -1, using default [ 336.511147][ T6792] befs: (loop5): No write support. Marking filesystem read-only [ 336.573982][ T6791] device team_slave_0 entered promiscuous mode [ 336.581113][ T6791] device team_slave_1 entered promiscuous mode [ 336.725052][ T6792] befs: (loop5): invalid magic header [ 337.063546][ T6791] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 337.433673][ T6791] team0: Device macvtap1 is already an upper device of the team interface [ 337.588794][ T6791] device team_slave_0 left promiscuous mode [ 337.595003][ T6791] device team_slave_1 left promiscuous mode [ 339.782419][ T6816] loop3: detected capacity change from 0 to 1024 [ 339.820470][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 340.232675][ T6820] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 340.239381][ T6820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.296532][ T6820] vhci_hcd vhci_hcd.0: Device attached [ 340.770488][ T4316] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 340.980484][ T6822] vhci_hcd: connection reset by peer [ 341.002247][ T4494] hfsplus: b-tree write err: -5, ino 25 [ 341.010397][ T5927] vhci_hcd: stop threads [ 341.014780][ T5927] vhci_hcd: release socket [ 341.034407][ T4494] hfsplus: b-tree write err: -5, ino 4 [ 341.066849][ T5927] vhci_hcd: disconnect device [ 341.595506][ T4494] hfsplus: b-tree write err: -5, ino 2 [ 341.730660][ T4361] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 341.950449][ T4361] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 342.020514][ T2184] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 342.424589][ T4361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.774074][ T4361] usb 3-1: Product: syz [ 342.790666][ T4361] usb 3-1: Manufacturer: syz [ 342.795377][ T4361] usb 3-1: SerialNumber: syz [ 342.835937][ T4361] usb 3-1: config 0 descriptor?? [ 342.880704][ T2184] usb 4-1: Using ep0 maxpacket: 32 [ 342.897113][ T4361] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 342.902397][ T2184] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 342.946928][ T4361] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.983427][ T2184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.009454][ T2184] usb 4-1: config 0 descriptor?? [ 343.018839][ T4361] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 343.034280][ T2184] gspca_main: sunplus-2.14.0 probing 041e:400b [ 343.038150][ T4361] usb 3-1: media controller created [ 343.063274][ T6856] fuse: Bad value for 'fd' [ 343.084722][ T6856] netlink: 'syz.1.608': attribute type 8 has an invalid length. [ 343.093685][ T4361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.471491][ T2184] gspca_sunplus: reg_w_riv err -71 [ 343.477011][ T2184] sunplus: probe of 4-1:0.0 failed with error -71 [ 343.501263][ T4361] DVB: Unable to find symbol mt352_attach() [ 345.547967][ T6869] loop5: detected capacity change from 0 to 164 [ 345.690051][ T2184] usb 4-1: USB disconnect, device number 5 [ 345.780140][ T6871] loop3: detected capacity change from 0 to 256 [ 345.787715][ T6871] exfat: Deprecated parameter 'namecase' [ 345.793737][ T6871] exfat: Deprecated parameter 'utf8' [ 345.826990][ T6869] Unsupported NM flag settings (240) [ 345.855455][ T6871] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 345.900748][ T4316] vhci_hcd: vhci_device speed not set [ 346.068610][ T4361] DVB: Unable to find symbol nxt6000_attach() [ 346.092491][ T4361] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 346.443253][ T4361] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 346.736869][ T4361] dvb-usb: schedule remote query interval to 1000 msecs. [ 346.940616][ T4361] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 346.960721][ T4361] dvb-usb: bulk message failed: -22 (7/0) [ 346.990422][ T4361] dvb-usb: bulk message failed: -22 (7/0) [ 347.034607][ T4361] usb 3-1: USB disconnect, device number 7 [ 347.251535][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 347.267872][ T4361] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 347.405817][ T6894] capability: warning: `syz.2.619' uses 32-bit capabilities (legacy support in use) [ 348.018963][ T6896] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 348.025550][ T6896] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 348.093845][ T6896] vhci_hcd vhci_hcd.0: Device attached [ 348.124652][ T6905] cgroup: fork rejected by pids controller in /syz1 [ 348.189391][ T6897] vhci_hcd: connection closed [ 348.189634][ T4634] vhci_hcd: stop threads [ 348.209705][ T6909] netlink: 364 bytes leftover after parsing attributes in process `syz.5.622'. [ 348.219926][ T4634] vhci_hcd: release socket [ 348.230598][ T4634] vhci_hcd: disconnect device [ 348.281205][ T6909] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 348.529404][ T6918] loop3: detected capacity change from 0 to 1024 [ 348.659265][ T6925] loop2: detected capacity change from 0 to 164 [ 348.686447][ T6925] Unsupported NM flag settings (240) [ 348.902171][ T46] hfsplus: b-tree write err: -5, ino 25 [ 348.908251][ T46] hfsplus: b-tree write err: -5, ino 4 [ 348.930487][ T46] hfsplus: b-tree write err: -5, ino 2 [ 348.960059][ T46] hfsplus: b-tree write err: -5, ino 26 [ 351.102789][ T6231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.599222][ T6942] loop3: detected capacity change from 0 to 512 [ 351.826759][ T6231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.984053][ T6231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.203920][ T6231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.987826][ T6958] loop3: detected capacity change from 0 to 64 [ 353.479558][ T6962] loop6: detected capacity change from 0 to 2048 [ 353.497212][ T6962] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 353.549103][ T6958] hfs: request for non-existent node 196608 in B*Tree [ 353.560479][ T6958] hfs: request for non-existent node 196608 in B*Tree [ 353.962480][ T6962] syz.6.638: attempt to access beyond end of device [ 353.962480][ T6962] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 353.983433][ T6966] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.268370][ T6231] tipc: Left network mode [ 354.395630][ T6972] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 354.402222][ T6972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 354.445940][ T6972] vhci_hcd vhci_hcd.0: Device attached [ 354.682732][ T6983] loop3: detected capacity change from 0 to 1024 [ 354.740719][ T5301] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 354.750129][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.763152][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.775595][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.786647][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.811571][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 354.819933][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.629482][ T6974] vhci_hcd: connection reset by peer [ 355.660584][ T4494] vhci_hcd: stop threads [ 355.664954][ T4494] vhci_hcd: release socket [ 355.702824][ T4494] vhci_hcd: disconnect device [ 355.824371][ T6998] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 355.863368][ T6998] hfsplus: xattr searching failed [ 355.869426][ T26] audit: type=1800 audit(1776454994.758:3): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.642" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 356.016294][ T7002] loop2: detected capacity change from 0 to 164 [ 356.054194][ T7004] loop6: detected capacity change from 0 to 64 [ 356.141041][ T7004] hfs: unable to locate alternate MDB [ 356.147947][ T7004] hfs: continuing without an alternate MDB [ 356.383208][ T26] audit: type=1800 audit(1776454995.268:4): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.647" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 357.154341][ T7016] loop5: detected capacity change from 0 to 512 [ 357.181203][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 357.189196][ T7016] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 357.287887][ T7019] loop2: detected capacity change from 0 to 128 [ 357.301257][ T7016] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.649: Invalid inode bitmap blk 4 in block_group 0 [ 357.315204][ T7019] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 357.335031][ T4385] hfs: new node 0 already hashed? [ 357.343757][ T6987] chnl_net:caif_netlink_parms(): no params data found [ 357.356822][ T4385] ------------[ cut here ]------------ [ 357.362574][ T4385] WARNING: CPU: 1 PID: 4385 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 357.371705][ T4385] Modules linked in: [ 357.375649][ T4385] CPU: 1 PID: 4385 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 357.383288][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.393731][ T4385] Workqueue: writeback wb_workfn (flush-7:6) [ 357.399883][ T4385] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 357.405683][ T4385] Code: ac a2 8a 89 ee e8 36 7d d7 07 e9 ab fd ff ff e8 cc 34 37 ff 48 89 df e8 34 cd ec 07 48 c7 c7 00 ad a2 8a 89 ee e8 16 7d d7 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 357.425456][ T4385] RSP: 0018:ffffc90004abee80 EFLAGS: 00010246 [ 357.431708][ T4385] RAX: 000000000000001f RBX: ffff88802f38e0e0 RCX: 3d33187dcd7ab000 [ 357.439907][ T4385] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 357.448157][ T4385] RBP: 0000000000000000 R08: ffffc90004abeb87 R09: 1ffff92000957d70 [ 357.456483][ T4385] R10: dffffc0000000000 R11: fffff52000957d71 R12: 0000000000000000 [ 357.464714][ T4385] R13: ffff88802f38e000 R14: ffff888027a32700 R15: dffffc0000000000 [ 357.469201][ T7019] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 357.472753][ T4385] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 357.472816][ T4385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.472835][ T4385] CR2: 00007f954ff47e20 CR3: 000000007f498000 CR4: 00000000003506e0 [ 357.472856][ T4385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.472871][ T4385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.491152][ T7016] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 357.497792][ T4385] Call Trace: [ 357.497813][ T4385] [ 357.497830][ T4385] hfs_bmap_alloc+0x53d/0x5d0 [ 357.542004][ T4385] ? hfs_bmap_reserve+0x420/0x420 [ 357.547123][ T4385] hfs_btree_inc_height+0xfd/0xac0 [ 357.552306][ T4385] ? hfs_brec_insert+0x6f6/0xbd0 [ 357.557290][ T4385] ? hfs_brec_insert+0xbd0/0xbd0 [ 357.562323][ T4385] ? do_raw_spin_unlock+0x11d/0x230 [ 357.567720][ T4385] hfs_brec_insert+0x744/0xbd0 [ 357.572578][ T4385] ? hfs_brec_keylen+0x350/0x350 [ 357.577587][ T4385] __hfs_ext_write_extent+0x2a1/0x470 [ 357.583038][ T4385] hfs_ext_write_extent+0x17b/0x200 [ 357.588385][ T4385] ? verify_lock_unused+0x140/0x140 [ 357.593837][ T4385] ? hfs_ext_keycmp+0x310/0x310 [ 357.598816][ T4385] ? writeback_sb_inodes+0x46b/0x1850 [ 357.604240][ T4385] hfs_write_inode+0xd8/0xa20 [ 357.609033][ T4385] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 357.614684][ T4385] ? __writeback_single_inode+0x4ae/0x1160 [ 357.620647][ T4385] ? __lock_acquire+0x7d10/0x7d10 [ 357.625712][ T4385] ? do_raw_spin_lock+0x128/0x2f0 [ 357.630871][ T4385] ? __rwlock_init+0x140/0x140 [ 357.635765][ T4385] __writeback_single_inode+0x75b/0x1160 [ 357.641478][ T4385] writeback_sb_inodes+0xb30/0x1850 [ 357.646703][ T4385] ? queue_io+0x5a0/0x5a0 [ 357.651232][ T4385] ? rcu_is_watching+0x11/0xa0 [ 357.656053][ T4385] wb_writeback+0x482/0xd50 [ 357.660661][ T4385] ? percpu_ref_tryget+0x250/0x250 [ 357.665814][ T4385] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 357.671907][ T4385] ? _raw_spin_unlock_irq+0x1f/0x40 [ 357.677147][ T4385] wb_workfn+0x423/0xee0 [ 357.681525][ T4385] ? inode_wait_for_writeback+0x220/0x220 [ 357.687336][ T4385] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 357.693477][ T4385] ? read_lock_is_recursive+0x10/0x10 [ 357.698952][ T4385] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 357.704968][ T4385] ? _raw_spin_unlock+0x40/0x40 [ 357.709830][ T4385] ? _raw_spin_unlock_irq+0x1f/0x40 [ 357.715056][ T4385] ? process_one_work+0x7b0/0x1160 [ 357.720374][ T4385] process_one_work+0x8a2/0x1160 [ 357.725450][ T4385] ? worker_detach_from_pool+0x240/0x240 [ 357.731246][ T4385] ? _raw_spin_lock_irq+0xb7/0xf0 [ 357.736719][ T4385] ? _raw_spin_lock_irqsave+0x100/0x100 [ 357.742397][ T4385] ? kthread_data+0x4b/0xc0 [ 357.746952][ T4385] worker_thread+0xaa2/0x1270 [ 357.751703][ T4385] kthread+0x29d/0x330 [ 357.755787][ T4385] ? worker_clr_flags+0x1a0/0x1a0 [ 357.760849][ T4385] ? kthread_blkcg+0xd0/0xd0 [ 357.765867][ T4385] ret_from_fork+0x1f/0x30 [ 357.770381][ T4385] [ 357.773512][ T4385] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 357.780807][ T4385] CPU: 1 PID: 4385 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 357.788467][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.799006][ T4385] Workqueue: writeback wb_workfn (flush-7:6) [ 357.805032][ T4385] Call Trace: [ 357.808490][ T4385] [ 357.811423][ T4385] dump_stack_lvl+0x188/0x24e [ 357.816200][ T4385] ? memcpy+0x3c/0x60 [ 357.820326][ T4385] ? show_regs_print_info+0x12/0x12 [ 357.825808][ T4385] ? load_image+0x400/0x400 [ 357.830406][ T4385] panic+0x2e5/0x730 [ 357.834479][ T4385] ? bpf_jit_dump+0xd0/0xd0 [ 357.839110][ T4385] ? ret_from_fork+0x1f/0x30 [ 357.843768][ T4385] __warn+0x2f8/0x4f0 [ 357.847990][ T4385] ? hfs_bnode_create+0x37a/0x400 [ 357.853109][ T4385] ? hfs_bnode_create+0x37a/0x400 [ 357.858135][ T4385] report_bug+0x2ba/0x4f0 [ 357.862488][ T4385] ? hfs_bnode_create+0x37a/0x400 [ 357.867540][ T4385] handle_bug+0x3a/0x70 [ 357.871715][ T4385] exc_invalid_op+0x16/0x40 [ 357.876271][ T4385] asm_exc_invalid_op+0x16/0x20 [ 357.881230][ T4385] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 357.886880][ T4385] Code: ac a2 8a 89 ee e8 36 7d d7 07 e9 ab fd ff ff e8 cc 34 37 ff 48 89 df e8 34 cd ec 07 48 c7 c7 00 ad a2 8a 89 ee e8 16 7d d7 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 357.906583][ T4385] RSP: 0018:ffffc90004abee80 EFLAGS: 00010246 [ 357.912781][ T4385] RAX: 000000000000001f RBX: ffff88802f38e0e0 RCX: 3d33187dcd7ab000 [ 357.920771][ T4385] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 357.928931][ T4385] RBP: 0000000000000000 R08: ffffc90004abeb87 R09: 1ffff92000957d70 [ 357.937077][ T4385] R10: dffffc0000000000 R11: fffff52000957d71 R12: 0000000000000000 [ 357.945152][ T4385] R13: ffff88802f38e000 R14: ffff888027a32700 R15: dffffc0000000000 [ 357.953241][ T4385] hfs_bmap_alloc+0x53d/0x5d0 [ 357.958034][ T4385] ? hfs_bmap_reserve+0x420/0x420 [ 357.963188][ T4385] hfs_btree_inc_height+0xfd/0xac0 [ 357.968316][ T4385] ? hfs_brec_insert+0x6f6/0xbd0 [ 357.973263][ T4385] ? hfs_brec_insert+0xbd0/0xbd0 [ 357.978227][ T4385] ? do_raw_spin_unlock+0x11d/0x230 [ 357.983530][ T4385] hfs_brec_insert+0x744/0xbd0 [ 357.988510][ T4385] ? hfs_brec_keylen+0x350/0x350 [ 357.993588][ T4385] __hfs_ext_write_extent+0x2a1/0x470 [ 357.999317][ T4385] hfs_ext_write_extent+0x17b/0x200 [ 358.004543][ T4385] ? verify_lock_unused+0x140/0x140 [ 358.009742][ T4385] ? hfs_ext_keycmp+0x310/0x310 [ 358.014683][ T4385] ? writeback_sb_inodes+0x46b/0x1850 [ 358.020067][ T4385] hfs_write_inode+0xd8/0xa20 [ 358.024743][ T4385] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 358.030203][ T4385] ? __writeback_single_inode+0x4ae/0x1160 [ 358.036100][ T4385] ? __lock_acquire+0x7d10/0x7d10 [ 358.041144][ T4385] ? do_raw_spin_lock+0x128/0x2f0 [ 358.046189][ T4385] ? __rwlock_init+0x140/0x140 [ 358.051005][ T4385] __writeback_single_inode+0x75b/0x1160 [ 358.056682][ T4385] writeback_sb_inodes+0xb30/0x1850 [ 358.061990][ T4385] ? queue_io+0x5a0/0x5a0 [ 358.066431][ T4385] ? rcu_is_watching+0x11/0xa0 [ 358.071745][ T4385] wb_writeback+0x482/0xd50 [ 358.076272][ T4385] ? percpu_ref_tryget+0x250/0x250 [ 358.081393][ T4385] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 358.087475][ T4385] ? _raw_spin_unlock_irq+0x1f/0x40 [ 358.092767][ T4385] wb_workfn+0x423/0xee0 [ 358.097201][ T4385] ? inode_wait_for_writeback+0x220/0x220 [ 358.102931][ T4385] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 358.109002][ T4385] ? read_lock_is_recursive+0x10/0x10 [ 358.114377][ T4385] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 358.120376][ T4385] ? _raw_spin_unlock+0x40/0x40 [ 358.125257][ T4385] ? _raw_spin_unlock_irq+0x1f/0x40 [ 358.130471][ T4385] ? process_one_work+0x7b0/0x1160 [ 358.135587][ T4385] process_one_work+0x8a2/0x1160 [ 358.140620][ T4385] ? worker_detach_from_pool+0x240/0x240 [ 358.146335][ T4385] ? _raw_spin_lock_irq+0xb7/0xf0 [ 358.151398][ T4385] ? _raw_spin_lock_irqsave+0x100/0x100 [ 358.156960][ T4385] ? kthread_data+0x4b/0xc0 [ 358.161486][ T4385] worker_thread+0xaa2/0x1270 [ 358.166201][ T4385] kthread+0x29d/0x330 [ 358.170384][ T4385] ? worker_clr_flags+0x1a0/0x1a0 [ 358.175445][ T4385] ? kthread_blkcg+0xd0/0xd0 [ 358.180039][ T4385] ret_from_fork+0x1f/0x30 [ 358.184557][ T4385] [ 358.188312][ T4385] Kernel Offset: disabled [ 358.192715][ T4385] Rebooting in 86400 seconds..