last executing test programs: 3m33.201153154s ago: executing program 0 (id=400): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x4048841) recvmsg$unix(r0, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000006b00)=[{&(0x7f0000006a00)=""/250, 0xfa}], 0x1}, 0x121) 3m32.468176209s ago: executing program 0 (id=401): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) unshare(0x64000680) 3m32.125637761s ago: executing program 0 (id=405): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 3m31.938141842s ago: executing program 0 (id=407): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x20, 0x6fb, &(0x7f0000002280)="$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") socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3m30.070466745s ago: executing program 0 (id=411): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000001500)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="c97001abf7577b7e", @ANYBLOB="2c66fefb470f721c43121ffc27a11d06c5e375d3b012410fe2f581d9ab30ed7131b91b6b0f1e794ab538fc85c0e03ce4f240db8fb4df78f32f2a76bc249b005c9bf5f55e1b49ee2da6f492d1ce0125c401c16ee7b7a157a4953c188c2bec6580362f7990f88bb2a8bd1317c025029c13b5271b580b16cf04ff7dd9e16ff2dcee46633afb43c98a675be2f2b4d9ae978a89c2754836e7af8d9a55309f8c0000", @ANYRES8, @ANYBLOB="2cc30c26652e1807e34d433353a73fa54323002e05", @ANYBLOB="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", @ANYRESOCT], 0x5, 0xc29, &(0x7f00000008c0)="$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") rename(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') chmod(&(0x7f0000000300)='./file0/file0/..\x00', 0x0) 3m28.565341605s ago: executing program 0 (id=417): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {r1, r2+60000000}}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x3ff) sendfile(r3, r4, 0x0, 0x10ffff) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000740)={0x0, 0x483aa011, 0x0, 0x0, 0x0, "fe941600"}) 3m28.201928277s ago: executing program 32 (id=417): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {r1, r2+60000000}}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x3ff) sendfile(r3, r4, 0x0, 0x10ffff) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000740)={0x0, 0x483aa011, 0x0, 0x0, 0x0, "fe941600"}) 3m13.186460818s ago: executing program 4 (id=463): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) syz_emit_ethernet(0x11, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@llc={0x606, {@llc={0x6, 0xaa, '_'}}}}}, 0x0) 3m12.78726559s ago: executing program 4 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x300}, 0x40002002) 3m11.701749417s ago: executing program 4 (id=467): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x7f}}, 0x0, 0x0, 0x3b, 0x0, "660200000000000000c0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e004000000b349eb64746d76c42fb2623034078188f0009f9f10d5f000"}, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x400401, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@multicast2, @rand_addr=0x64010100}, 0xc) 3m8.30292673s ago: executing program 4 (id=475): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") unshare(0x80) chdir(&(0x7f0000000140)='./file1\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e461519b104962775f9527ad4d3ff4ad351f4bd845ffcfba9be710877453dd32", [0x92be790, 0x3]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 3m5.882750777s ago: executing program 4 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{0x1, 0xfffff7fd}, {0x4, 0x1003ff}, 0x6, 0x6}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4) 3m4.246373207s ago: executing program 4 (id=487): r0 = syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000004b40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704ac26b7bfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07b811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b691c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd65293261006c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b8336397cb019a5f11"], 0x1, 0x487, &(0x7f0000000f40)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r2 = fanotify_init(0x1, 0x40000) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) r4 = syz_open_dev$loop(0x0, 0x7, 0x180862) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000180)=""/154, 0x18) open(0x0, 0x145142, 0x0) dup2(r0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1100810, &(0x7f0000000000), 0x1, 0x4f2, &(0x7f0000000a40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bind$unix(0xffffffffffffffff, 0x0, 0x0) 3m3.909208019s ago: executing program 33 (id=487): r0 = syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x8000, &(0x7f0000004b40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704ac26b7bfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07b811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b691c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd65293261006c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b8336397cb019a5f11"], 0x1, 0x487, &(0x7f0000000f40)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r2 = fanotify_init(0x1, 0x40000) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) r4 = syz_open_dev$loop(0x0, 0x7, 0x180862) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000180)=""/154, 0x18) open(0x0, 0x145142, 0x0) dup2(r0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1100810, &(0x7f0000000000), 0x1, 0x4f2, &(0x7f0000000a40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) bind$unix(0xffffffffffffffff, 0x0, 0x0) 1m49.386637408s ago: executing program 5 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3810813, &(0x7f0000000540)=ANY=[@ANYBLOB="696f636861727365743d637f313235312c757466382c6f76657272696465726f636b7065726d2c6e6f6a6f6c6965742c6e6f6a6f6c6965742c6f76657272696465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030332c6e6f636f6d70726573732c6d6f64653d3078303030303030303030303030303038302c6e6f726f636b2c636865636b3d7374726963742c6f76657272696465726f636b7065726d2c6f76657272696465726f636b7065726d2c636865636b3d72656c617865642c6769643d", @ANYRESDEC=r0, @ANYBLOB=',\x00'], 0x1, 0xa51, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) 1m48.782061222s ago: executing program 5 (id=645): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554", 0x1e) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002700)=@deltfilter={0xfdc, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0xffff, 0xd}, {0xe, 0x14}}, [@f_rsvp={{0x9}, {0x34, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x92, 0x5}, {0x800, 0x9, 0x4}, 0x1d, 0x0, 0xff}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xc}}]}}, @f_tcindex={{0xc}, {0x1c, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x3c1}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}]}}, @f_tcindex={{0xc}, {0xf44, 0x2, [@TCA_TCINDEX_ACT={0xf40, 0x7, [@m_connmark={0x60, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x2, 0xa0a, 0x6}, 0xdd}}]}, {0x14, 0x6, "337753bd0f213fc6b15fd67114c65a4d"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ife={0x8c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x62, 0x6, "73dcc25d8e18639b34103bdef408d8b66004337dd41faece4363e2b431b42ee2b25ccf455350398ed0137db2f063c40dd24f7d683c14c54c1e244fce23b96d0f6db3effdcea1273f26d4005ab8dab2da209ce657174796d7f91fd8629656"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xe50, 0x4, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x8, 0xffffffffffffffff, 0x7, 0x39f}, 0x5, 0x2}, [{0x3, 0x7, 0x5, 0x8, 0x5, 0x4}, {0x9, 0x5, 0x401, 0x1c000, 0x1, 0x4}, {0x4, 0x40, 0x10001, 0x9, 0x9, 0xe}, {0x8, 0x7fffffff, 0x10, 0x4, 0x8001, 0x2}, {0x6e7, 0xf672, 0x23ee, 0x7ff}, {0x8000, 0x3, 0x5, 0x9, 0x4, 0x7f}, {0x8, 0xffff, 0x101, 0x5, 0x8, 0x1000}, {0x0, 0x4, 0x5, 0x5, 0x7ff, 0xfffffffc}, {0xc, 0x0, 0xc, 0x1, 0x800, 0x7}, {0xcc3, 0x5, 0x1, 0x0, 0x7, 0x6}, {0x3ff, 0x5, 0xc81, 0x200, 0xc41, 0x68}, {0x9a, 0xb472, 0xfffffff7, 0x5, 0x4, 0x4}, {0x8001, 0x7fffffff, 0xe2, 0x9, 0x3, 0xdb}, {0xcc02, 0xffff52af, 0x3, 0x9, 0x8, 0xfffffff9}, {0xfff, 0x100, 0x7a, 0x80000001, 0xffffff12, 0x2}, {0x6, 0x3af, 0x200, 0xfffffff7, 0x7, 0x4}, {0x8, 0x4, 0x0, 0x1, 0xfffffffb, 0xb6}, {0xd6a, 0x356, 0x623, 0x5, 0xffffffff, 0x9}, {0xe, 0xde, 0x6, 0x4, 0x9}, {0x3, 0xfffffffa, 0xffffff0c, 0x7, 0x2, 0x75}, {0x6, 0x800, 0x8, 0x80, 0xa8, 0x6}, {0x8, 0x10000, 0x3, 0x800, 0x5}, {0x8, 0x8, 0x2, 0x0, 0x7f, 0x6}, {0xa2e, 0x0, 0x92, 0x2, 0x0, 0x1fc00000}, {0xbaeb, 0x1, 0x6, 0x80, 0x6, 0x9}, {0x7, 0x1, 0x160, 0x0, 0x5, 0x5}, {0x4, 0x7, 0xb64, 0x4, 0x5, 0x6}, {0xd8, 0x2, 0x0, 0x1, 0x7ff, 0x7fff}, {0x25d, 0x62bbaaed, 0xd3, 0xc2, 0x2, 0x6}, {0x7f, 0xb0, 0x8000, 0x100, 0x4, 0x4}, {0xea, 0x9, 0x4, 0xffffff8c, 0x7f, 0x4}, {0x8, 0x8, 0x80, 0x7f3, 0x9, 0x6ca}, {0x5f9f, 0x4, 0xffffffff, 0xdc8, 0x1, 0xf1e}, {0x608, 0x8, 0x3, 0x9f, 0x0, 0x1ead}, {0x5, 0x8, 0x400, 0x3, 0x7ff, 0x2}, {0x8a39, 0x9, 0x2, 0x75b, 0x34c, 0x1}, {0x80000000, 0x7f, 0x6, 0x3, 0x5, 0x7}, {0x0, 0x8, 0x3, 0xfffffff4, 0xffffffff, 0x1}, {0x6, 0xfb, 0xfffffff9, 0x5, 0x3, 0x5}, {0x6, 0xa93, 0x7, 0x2c5c, 0xfae, 0x4}, {0x0, 0x6, 0x43, 0x7, 0x9, 0x1}, {0x5, 0x6, 0x2, 0xd, 0x51a9673b, 0x8}, {0x4, 0x7300ea42, 0x6, 0x7f, 0x10000000, 0x81}, {0x10001, 0xe2, 0x6, 0x5, 0x7, 0x7f}, {0xcec, 0xffff, 0x3, 0x5, 0x3b, 0x6}, {0x7, 0xe67, 0x400, 0x1, 0x7fff, 0x401}, {0xa993, 0x6, 0x3ff, 0x7, 0x5, 0xce57}, {0x957, 0x716, 0x3, 0x8, 0x7, 0x6}, {0x1004, 0x1, 0x2, 0xce, 0x79e, 0x5}, {0x5, 0x86f2, 0x9, 0x4, 0x1, 0x3}, {0xe2, 0x8000, 0x0, 0x8, 0x9, 0xbb60}, {0x0, 0x6, 0x7, 0x2000000, 0x4, 0x7}, {0x5, 0x3, 0x726, 0x2, 0xa, 0x59}, {0x2, 0x800, 0x8, 0x1, 0x3, 0xf}, {0x100, 0x80, 0x7, 0x7, 0x5, 0x5}, {0x7f, 0x8, 0xfffffffb, 0x62, 0x9, 0x8001}, {0x5, 0x8, 0x7, 0x8, 0x200, 0x1}, {0x8, 0xfffffffa, 0xe, 0x2, 0x7, 0x3}, {0x5, 0x4, 0x4, 0x7ff, 0xffffffff, 0x5}, {0x6, 0x10000, 0xb, 0x4, 0x8, 0x101}, {0x9, 0x7, 0x400080, 0x66, 0x1, 0x951f}, {0x8001, 0x1, 0x5, 0x51, 0x3, 0x3}, {0x5, 0xfffffff9, 0x3, 0xb, 0x3, 0x1}, {0x2, 0xfffffffc, 0x3, 0x34a25ce8, 0x7ecf4495, 0xa00}, {0x6, 0x5, 0x0, 0x9e, 0x8, 0x195b9c4c}, {0x400, 0x0, 0x8, 0x80000000, 0x9}, {0x9, 0x3, 0x81, 0xa, 0x0, 0x7ff}, {0x8, 0x4, 0x0, 0xfffffffa, 0xa11b, 0x3}, {0x999, 0x9, 0xa, 0x0, 0x9, 0x7}, {0x7, 0x0, 0x0, 0xbe, 0x0, 0x9}, {0x266e, 0x7, 0x3, 0x8, 0x10, 0x3}, {0x9, 0x7, 0x5, 0xca, 0x3, 0x4}, {0x7ff, 0x9c9f, 0x7571, 0x0, 0x8, 0x8}, {0x1000, 0x7, 0x80000001, 0x8, 0x9, 0x7}, {0xffffffff, 0x3e, 0x2, 0x4, 0xa, 0xfffffffc}, {0x5, 0x8000, 0xd6, 0x10000, 0xee8c, 0x8}, {0x7fffffff, 0xa7, 0x6, 0x3, 0x9}, {0xa0db, 0x5, 0x3ff, 0xd1e6, 0x10000000, 0x7f}, {0x8, 0x9, 0x3ff, 0x2, 0x7, 0x1}, {0x0, 0x58a, 0xda, 0x9, 0x6, 0xeaa2}, {0x5, 0x98f, 0x40, 0xff, 0x7fff, 0x9}, {0x5, 0x6, 0xf6d, 0x6, 0x0, 0x4}, {0x3, 0x5, 0x1fed, 0x6, 0x8f08, 0x2}, {0x0, 0x800, 0x0, 0x6, 0x3ff, 0x7}, {0x6, 0x4, 0x40, 0x7, 0xfff, 0x400}, {0xba9, 0x80000000, 0x2, 0x7, 0x800, 0x8}, {0xfffffffd, 0xb, 0x101, 0x1, 0xfff, 0x8001}, {0x7, 0x2300, 0x0, 0x560, 0x9, 0x10000}, {0x7, 0x5, 0x5, 0x1c88, 0x6, 0x1}, {0x6, 0x2, 0xc3, 0x7, 0x6, 0x7}, {0x4, 0xfffffff9, 0x8, 0x9, 0x5, 0x5}, {0xe4, 0xe0b, 0x3, 0x89, 0xe, 0x40}, {0x6, 0x3, 0x6, 0xce2e, 0x400, 0xfffffffd}, {0x7, 0x101, 0x7, 0x7, 0x8, 0x4}, {0x100, 0x0, 0x7, 0x92c5, 0x8001, 0xfff}, {0x5, 0x4, 0xf, 0x5, 0x10001, 0x80}, {0x800, 0xfff, 0x1, 0x8, 0x7, 0xfffffffa}, {0x8, 0x7f, 0xffffffff, 0x8, 0x2, 0x5}, {0x5, 0x2, 0x7, 0x1, 0xfffffffa}, {0x3, 0xfffffff7, 0xffff7852, 0x3, 0x101, 0x4}, {0x5eab, 0x2, 0x0, 0x5, 0x8, 0x7}, {0x8, 0x5, 0x4ef, 0x3918, 0x326, 0x7}, {0x4, 0x2, 0x0, 0x9, 0x8, 0x1}, {0x9a, 0x9, 0x80000001, 0x80, 0x2e7c, 0x7fff}, {0x7, 0x8000, 0x101, 0x2, 0x4ca, 0x3f1}, {0x10001, 0x9, 0x6, 0x80000000, 0x1e1, 0x15ba}, {0x10001, 0x2, 0x0, 0x4e64, 0x5, 0x8}, {0x2, 0x7, 0x3, 0x56efd671, 0x4}, {0xf, 0x6, 0x100, 0xdc, 0xfffffffa, 0xa3}, {0x4, 0x7fff, 0x52b, 0x800, 0xffffff80, 0x80000001}, {0xb075, 0x9, 0x9, 0x4, 0x2, 0x6}, {0x2, 0x400, 0x9, 0xffffff80, 0x101, 0x6}, {0x9, 0x7, 0x0, 0x4d, 0x4, 0x4}, {0x0, 0x4, 0xfffffff8, 0x7fffffff, 0x5, 0x6}, {0x1, 0x7f, 0x367, 0x1, 0x5, 0x44}, {0x9, 0x0, 0x6, 0x1, 0x3, 0x3}, {0x40, 0x10, 0x0, 0x4, 0x2, 0x6}, {0x0, 0x2, 0x80000000, 0x1, 0x8, 0xffffff27}, {0xa0, 0xb9, 0xffff, 0xfffffffd, 0x7fffffff, 0xb}, {0xfff, 0x60, 0x1, 0xfffffffe, 0x4, 0x3ff}, {0xfff, 0x80000001, 0x1, 0x6838, 0xfffff558, 0xa}, {0x1, 0x8, 0x9, 0x3, 0x9, 0x6}, {0x5, 0xffff, 0x26, 0xd1, 0x722, 0x10}, {0x6b9, 0x208, 0x2, 0xb2, 0x1, 0x1}, {0x6, 0x2, 0x4, 0xfffffffe, 0x6, 0xff}, {0x9, 0x3, 0x401, 0x48a80, 0x100, 0x2531}, {0x2, 0x0, 0x2, 0x6, 0x7ff}, {0x8, 0xa85, 0x0, 0x7, 0xf, 0x3}], [{0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x5}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x6}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x3}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x5}, {}, {0x5}, {}, {0x5, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}]}}]}, 0xfdc}, 0x1, 0x0, 0x0, 0x800c0d0}, 0x8810) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 1m47.995359898s ago: executing program 5 (id=649): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1m46.982230834s ago: executing program 5 (id=652): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1021408, 0x0, 0x1, 0x0, &(0x7f0000006380)) 1m41.802485029s ago: executing program 5 (id=663): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x400, 0x64) 1m41.214389843s ago: executing program 5 (id=670): sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd28, 0xa, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x303500, 0x0) syz_io_uring_setup(0x90d, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fanotify_mark(r4, 0x2, 0x40000000, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x5597bac7}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="80003724090000ce", 0x8, 0x4804, &(0x7f0000000040)={0xa, 0x4e24, 0xe, @mcast1, 0x9}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r6, &(0x7f0000005200)={0x2020}, 0x2020) 1m40.244716839s ago: executing program 34 (id=670): sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd28, 0xa, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x303500, 0x0) syz_io_uring_setup(0x90d, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fanotify_mark(r4, 0x2, 0x40000000, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x5597bac7}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="80003724090000ce", 0x8, 0x4804, &(0x7f0000000040)={0xa, 0x4e24, 0xe, @mcast1, 0x9}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r6, &(0x7f0000005200)={0x2020}, 0x2020) 14.90206837s ago: executing program 1 (id=937): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) 14.822566111s ago: executing program 6 (id=938): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x7, 0x3, 0x240, 0x4, "00000000000000000000c2041a02003d00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 12.0489266s ago: executing program 6 (id=946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.364303141s ago: executing program 1 (id=949): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x240080c4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 10.214520042s ago: executing program 2 (id=950): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000440)={0x20, 0x9, 0x6, "d661c88bcd11"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 10.214163502s ago: executing program 1 (id=951): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="800000001e0001000000000000000000010000006c0003"], 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x401, 0x8, 0x0, 0x400003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x16, 0x0, @fd_index=0xa, 0x483d, 0x0, 0xe5, 0x2}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0) r6 = getpid() ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) r7 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xffffffffffffff78}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) close_range(r7, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prlimit64(r6, 0x0, 0x0, 0x0) 9.795386604s ago: executing program 6 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x4) vmsplice(r3, &(0x7f0000000880)=[{&(0x7f0000000180)='\x00', 0x1}, {&(0x7f0000001300)="da", 0x1}, {0x0}, {&(0x7f0000003040)="162d", 0x2}], 0x4, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000022, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) syz_usb_connect(0x5, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1b, 0x3e, 0xbd, 0x40, 0x4d8, 0x83, 0x839c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x0, 0x0, 0x2, 0x2, 0x1, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000200)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8081}, 0x8040) 8.618322902s ago: executing program 6 (id=955): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407a, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000040)='erofs\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x4004844) mknod$loop(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x0) 7.638520309s ago: executing program 1 (id=958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x7fffffff, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 7.146492982s ago: executing program 7 (id=961): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/fscaps', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000400)=[{0x4, 0x6, 0x6, 0x6}, {0x6, 0x8, 0x28, 0x2}, {0x1, 0x1, 0x3, 0x3}, {0x4, 0x2, 0xfc, 0x6647}, {0x7ff, 0x6, 0xd0, 0x44}, {0x9, 0x2, 0xd, 0x9}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) 6.954679263s ago: executing program 2 (id=963): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x8040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.663798866s ago: executing program 2 (id=964): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28000600) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001380), 0x200, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) close_range(r3, 0xffffffffffffffff, 0x0) 5.673086612s ago: executing program 2 (id=965): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000ff"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x44840) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009e80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.530402213s ago: executing program 2 (id=966): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)=@multiplanar_userptr={0x5, 0x8, 0x4, 0x10, 0xa, {}, {0x1, 0x1, 0xab, 0xa, 0x1, 0x10, "761a98fc"}, 0x0, 0x2, {0x0}}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x3, 0x0, 0x0, r5}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x0, 0x6, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.065057596s ago: executing program 1 (id=967): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x7, 0x3, 0x240, 0x4, "00000000000000000000c2041a02003d00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 3.546351117s ago: executing program 7 (id=969): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xc7, 0xa6, 0x7d, 0x40, 0x13b1, 0x42, 0xec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x2, 0x7e, 0xd7, 0x25, 0x92, [], [{{0x9, 0x5, 0x3, 0x8, 0x40, 0x9, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x0, 0x7}}]}}]}}]}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) shutdown(r0, 0x1) 3.530797706s ago: executing program 3 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 3.370307958s ago: executing program 3 (id=971): syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x4, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10, "", "ca"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, "5d7b68d5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 3.03259354s ago: executing program 6 (id=972): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.790276902s ago: executing program 7 (id=973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.776492431s ago: executing program 3 (id=974): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002700)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0xffff, 0xd}, {0xe, 0x14}}}, 0x24}, 0x1, 0x0, 0x0, 0x800c0d0}, 0x8810) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 2.698651112s ago: executing program 7 (id=975): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r0, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffc}]}, 0x40}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r3, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x300}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0xc4, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000001}, 0x880) 2.478438414s ago: executing program 7 (id=976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001380), 0x200, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) close_range(r3, 0xffffffffffffffff, 0x0) 1.865138698s ago: executing program 3 (id=977): statx(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2000, 0x40, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@sr0, r0, &(0x7f0000000180)={0x0, 0x1, 0xff, 0x8f29, 0x0, 0x8, 0xb, 0x3, 0x1}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000000c0)={0x2, 0x10, '\x00', [@generic={0x7, 0x77, "05fbf253432f202a09fbaaac9f25792affede97096f23940ce0548455911e3fb9400aa698d7776ec4e11670a0b33e43157612be94f74f21fdc83dcf8a3024f3bd4068c302e1cb7980a42487f3c206fef7c8670786fd2ad28a4e2e2a090535adc7daa8f2382ff7016ed9ce66348ee11aa4f00234c07565b"}, @ra={0x5, 0x2, 0xa0ca}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x90) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000440)=""/19, 0x13}, {&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000640)=""/177, 0xb1}], 0x7}, 0x60}], 0x800000000000375, 0x42, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x7101, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x4a000, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x5) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000440)='macvtap\x00', &(0x7f0000000480)='./file0\x00', r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x16, 0x0, 0xeb, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, r3, 0x7, 0x8, 0x0, @void, @value=r8, @void, @void, r7}, 0x20) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r11, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) 1.560819129s ago: executing program 7 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x2, 0x4}, {0x9, 0x10}}}}, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) signalfd4(r3, &(0x7f00000000c0)={[0x7f]}, 0x8, 0x800) write$cgroup_devices(r3, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) r4 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 1.287222162s ago: executing program 1 (id=979): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) 894.252724ms ago: executing program 3 (id=980): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x541b, 0x0) 846.172024ms ago: executing program 2 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{0x1, 0xfffff7fd}, {0x4, 0x1003ff}, 0x6, 0x6}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4) 649.103146ms ago: executing program 3 (id=982): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231306e53f0b53743ff62a9000070980be00830000000057"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x6f, 0x13, 0x3, 0x9, "13146d83b2b82aa82ee39ee156c4cc465a0d795fc3c8b6e5c9adeedf50fcc809"}) 0s ago: executing program 6 (id=983): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbc5d}}, './mnt/file0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): le the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.346429][ T5670] attempt to access beyond end of device [ 193.346429][ T5670] loop1: rw=2049, want=30488, limit=256 [ 193.428691][ T5670] attempt to access beyond end of device [ 193.428691][ T5670] loop1: rw=2049, want=31808, limit=256 [ 193.449836][ T5679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.471888][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.478850][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.544175][ T5679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.566869][ T4231] usb 2-1: USB disconnect, device number 6 [ 193.890971][ T5679] device hsr_slave_0 entered promiscuous mode [ 193.941727][ T5679] device hsr_slave_1 entered promiscuous mode [ 193.979126][ T5712] Zero length message leads to an empty skb [ 194.001755][ T5679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.040625][ T5679] Cannot create hsr debugfs directory [ 194.073335][ T5712] netlink: 'syz.4.427': attribute type 16 has an invalid length. [ 194.090610][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.096962][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.108851][ T5712] netlink: 'syz.4.427': attribute type 17 has an invalid length. [ 194.129512][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.147690][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.212925][ T5712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.503953][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 196.261750][ T5679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.319592][ T5679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.543744][ T5679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.607372][ T5734] loop1: detected capacity change from 0 to 8 [ 196.684927][ T5679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.252757][ T5734] SQUASHFS error: Unable to read inode 0x11f [ 197.534157][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.544776][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 197.819383][ T5746] trusted_key: encrypted_key: insufficient parameters specified [ 197.839249][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.477411][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.598955][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.653752][ T5755] loop1: detected capacity change from 0 to 2048 [ 198.772123][ T5755] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.790760][ T5755] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.806168][ T5679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.442892][ T5679] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.499151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.561350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.599024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.610896][ T1346] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 199.618454][ T4217] Bluetooth: hci1: command 0x0419 tx timeout [ 199.638793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.662383][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.669484][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.696660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.257898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.394298][ T1346] usb 3-1: not running at top speed; connect to a high speed hub [ 200.672449][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.679558][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.707934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.721458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.772210][ T1346] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 200.800826][ T1346] usb 3-1: config 95 has no interface number 0 [ 200.807582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.824453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.848065][ T1346] usb 3-1: config 95 interface 1 has no altsetting 0 [ 200.879548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.892215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.908904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.918114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.933830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.947413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.958526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.979573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.078564][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.146414][ T5782] trusted_key: encrypted_key: insufficient parameters specified [ 201.181434][ T1346] usb 3-1: string descriptor 0 read error: -22 [ 201.203444][ T1346] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 201.381854][ T1346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.911831][ T1346] usb 3-1: USB disconnect, device number 4 [ 201.983146][ T5789] loop2: detected capacity change from 0 to 1024 [ 202.436025][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.732325][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.739805][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.810054][ T5679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.499546][ T146] Bluetooth: Wrong link type (-22) [ 205.619217][ T4186] syz-executor (4186) used greatest stack depth: 20320 bytes left [ 205.662082][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.673653][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.702202][ T5844] loop1: detected capacity change from 0 to 2048 [ 205.764541][ T5844] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.942604][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.981746][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.006813][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.023603][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.060661][ T5679] device veth0_vlan entered promiscuous mode [ 207.217239][ T5679] device veth1_vlan entered promiscuous mode [ 207.340720][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.363180][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.403030][ T5679] device veth0_macvtap entered promiscuous mode [ 207.441238][ T5679] device veth1_macvtap entered promiscuous mode [ 207.500252][ T144] device hsr_slave_0 left promiscuous mode [ 207.508791][ T5867] loop2: detected capacity change from 0 to 256 [ 207.522302][ T144] device hsr_slave_1 left promiscuous mode [ 207.570279][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.602779][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.672102][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.679554][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.786870][ T144] device bridge_slave_1 left promiscuous mode [ 207.851014][ T5876] loop1: detected capacity change from 0 to 4096 [ 207.878206][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.924789][ T5876] EXT4-fs (loop1): Test dummy encryption mode enabled [ 207.992807][ T5876] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 208.001166][ T5876] System zones: 0-5 [ 208.016858][ T144] device bridge_slave_0 left promiscuous mode [ 208.058887][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.071037][ T5876] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 208.190332][ T144] device veth1_macvtap left promiscuous mode [ 208.262078][ T144] device veth0_macvtap left promiscuous mode [ 208.280845][ T144] device veth1_vlan left promiscuous mode [ 208.286864][ T144] device veth0_vlan left promiscuous mode [ 209.680614][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 209.878398][ T146] Bluetooth: Unexpected start frame (len 12) [ 209.885044][ T146] Bluetooth: Wrong link type (-22) [ 209.898799][ T144] team0 (unregistering): Port device team_slave_1 removed [ 209.943093][ T144] team0 (unregistering): Port device team_slave_0 removed [ 209.997549][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.044664][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.178183][ T144] bond0 (unregistering): Released all slaves [ 210.260094][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.281164][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.437826][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.490511][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.507856][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.527375][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.568568][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.585445][ T5908] loop4: detected capacity change from 0 to 256 [ 210.600596][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.620818][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.641625][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.666991][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.769262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.836231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.868557][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.943248][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.977393][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.049372][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.066123][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.105972][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.119673][ T5679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.131894][ T5679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.154680][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.365464][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.451401][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.462700][ T5679] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.477930][ T5679] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.507446][ T5679] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.526597][ T5679] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.488206][ T1346] Bluetooth: hci2: command 0x041b tx timeout [ 212.570797][ T5928] loop4: detected capacity change from 256 to 0 [ 212.810723][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.862471][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.874758][ T5933] Core dump to core aborted: cannot preserve file permissions [ 212.889707][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 212.914103][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.915166][ T4194] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006900) [ 212.924746][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.944813][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.962824][ T1111] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 212.963888][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.994946][ T4194] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 213.029562][ T4194] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 213.227296][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.340663][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.356152][ T5868] device bridge_slave_0 entered promiscuous mode [ 213.366754][ T1111] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 213.371910][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.409915][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.449605][ T5868] device bridge_slave_1 entered promiscuous mode [ 213.510851][ T1111] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.530235][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.585872][ T1111] usb 3-1: SerialNumber: syz [ 213.871658][ T4192] Bluetooth: Wrong link type (-22) [ 214.389765][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.549322][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.561277][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 214.564952][ T1111] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 214.581997][ T5974] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 214.656062][ T21] usb 3-1: USB disconnect, device number 5 [ 214.664393][ T21] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 214.687673][ T5976] loop1: detected capacity change from 0 to 2048 [ 214.738935][ T5976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.837367][ T5868] team0: Port device team_slave_0 added [ 214.867595][ T5868] team0: Port device team_slave_1 added [ 215.006624][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.025470][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.752434][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.780098][ T5986] loop2: detected capacity change from 0 to 1024 [ 215.840816][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.859397][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.890587][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 215.904335][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.920966][ T5986] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.060961][ T5986] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue. Quota mode: none. [ 216.143476][ T5868] device hsr_slave_0 entered promiscuous mode [ 216.160725][ T5986] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.173225][ T5868] device hsr_slave_1 entered promiscuous mode [ 216.178564][ T5986] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.491: inode has both inline data and extents flags [ 216.209920][ T5986] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.491: inode has both inline data and extents flags [ 216.237103][ T5868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.261798][ T6004] mmap: syz.2.491 (6004) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 216.281604][ T5868] Cannot create hsr debugfs directory [ 216.520820][ T7] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 216.547194][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.580673][ T7] usb 6-1: Product: syz [ 216.584860][ T7] usb 6-1: Manufacturer: syz [ 216.610728][ T7] usb 6-1: SerialNumber: syz [ 216.636920][ T7] r8152-cfgselector 6-1: config 0 descriptor?? [ 216.641086][ T26] Bluetooth: hci2: command 0x0419 tx timeout [ 217.034535][ T6017] netlink: 104 bytes leftover after parsing attributes in process `syz.2.495'. [ 217.181058][ T7] r8152-cfgselector 6-1: Unknown version 0x0000 [ 217.212812][ T7] r8152-cfgselector 6-1: bad CDC descriptors [ 217.372903][ T7] r8152-cfgselector 6-1: Unknown version 0x0000 [ 217.455567][ T7] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 217.721553][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 218.540924][ T146] Bluetooth: Wrong link type (-22) [ 219.124600][ T5868] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.475546][ T6036] loop5: detected capacity change from 0 to 4096 [ 219.713401][ T5983] chnl_net:caif_netlink_parms(): no params data found [ 219.755141][ T6036] EXT4-fs (loop5): Test dummy encryption mode enabled [ 219.760647][ T1346] Bluetooth: hci4: command 0x041b tx timeout [ 219.792782][ T6036] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 219.801220][ T6036] System zones: 0-5 [ 219.858805][ T6036] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 220.144946][ T5868] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.235080][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.252694][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.266697][ T5983] device bridge_slave_0 entered promiscuous mode [ 220.312631][ T5868] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.349403][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.367002][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.376451][ T5983] device bridge_slave_1 entered promiscuous mode [ 220.410582][ T5868] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.473597][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.502875][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.549639][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.644879][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.746591][ T5983] team0: Port device team_slave_0 added [ 220.762987][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.814662][ T5983] team0: Port device team_slave_1 added [ 220.864433][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.921855][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.940569][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.992496][ T1346] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 221.049203][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.074135][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.102840][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.152881][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.155997][ T6070] loop1: detected capacity change from 0 to 2048 [ 221.237817][ T5983] device hsr_slave_0 entered promiscuous mode [ 221.246042][ T5983] device hsr_slave_1 entered promiscuous mode [ 221.256444][ T5983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.267438][ T5983] Cannot create hsr debugfs directory [ 221.352622][ T6070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.381302][ T1346] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 221.591105][ T1346] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.829013][ T1346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 221.991371][ T5460] Bluetooth: hci4: command 0x040f tx timeout [ 222.057476][ T1346] usb 6-1: SerialNumber: syz [ 222.418280][ T146] Bluetooth: Wrong link type (-22) [ 222.424978][ T146] Bluetooth: hci0: link tx timeout [ 222.431216][ T146] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 223.015030][ T1346] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 223.044757][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.151609][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.207843][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.235311][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.276783][ T4217] usb 6-1: USB disconnect, device number 3 [ 223.284439][ T4217] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 224.013326][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 224.094143][ T5983] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 224.191065][ T5983] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 224.275984][ T6113] loop5: detected capacity change from 0 to 2048 [ 224.285313][ T5983] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.348211][ T5983] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.384951][ T6113] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 225.118370][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.203036][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.219142][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.290632][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.389082][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.413331][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.433127][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.440257][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.480920][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.637137][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.674362][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.735073][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.824165][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.831297][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.960080][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.993774][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.002937][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.013572][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.596138][ T5460] Bluetooth: hci3: command 0x0409 tx timeout [ 226.683949][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.326386][ T6142] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.517' sets config #0 [ 227.610923][ T6141] No such timeout policy "syz1" [ 227.941877][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.966253][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.981155][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.004710][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.027052][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.051238][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.091509][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.128273][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.159788][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.254136][ T5868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.272801][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.303945][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.360039][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.367140][ T4437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.430122][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.730742][ T4207] Bluetooth: hci3: command 0x041b tx timeout [ 229.057690][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.101096][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.108162][ T4437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.169669][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.214004][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.273641][ T6104] chnl_net:caif_netlink_parms(): no params data found [ 229.340909][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.381709][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.402694][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.445882][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.484113][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.517180][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.041020][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.050258][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.076203][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.112908][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.138272][ T5983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.207657][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.244231][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.533459][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.657906][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.670586][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.711625][ T6104] device bridge_slave_0 entered promiscuous mode [ 230.758177][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.784938][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.800880][ T4207] Bluetooth: hci3: command 0x040f tx timeout [ 230.804690][ T6104] device bridge_slave_1 entered promiscuous mode [ 230.843465][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.871375][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.944881][ T6183] loop1: detected capacity change from 0 to 164 [ 230.965538][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.982734][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.021935][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.051043][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.073526][ T5868] device veth0_vlan entered promiscuous mode [ 231.103410][ T6104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.169258][ T5868] device veth1_vlan entered promiscuous mode [ 231.242538][ T6104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.290015][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 231.301574][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.322946][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.343800][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.456854][ T6104] team0: Port device team_slave_0 added [ 231.484264][ T6104] team0: Port device team_slave_1 added [ 231.603568][ T5868] device veth0_macvtap entered promiscuous mode [ 231.637686][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.646771][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.736136][ T6104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.771577][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.801858][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.980368][ T5868] device veth1_macvtap entered promiscuous mode [ 232.054775][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.117650][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.158478][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.210201][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.250620][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.261440][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.272029][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.285787][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.295717][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.306401][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.321871][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.330607][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.337553][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.420581][ T25] audit: type=1326 audit(1761958939.662:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.5.523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3977e3ffc9 code=0x0 [ 233.438630][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 233.513059][ T6104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.544641][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.568410][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.581453][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.610301][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.693131][ T144] device hsr_slave_0 left promiscuous mode [ 233.716301][ T144] device hsr_slave_1 left promiscuous mode [ 233.731227][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.738675][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.754921][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.767547][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.779784][ T144] device bridge_slave_1 left promiscuous mode [ 233.790375][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.808030][ T144] device bridge_slave_0 left promiscuous mode [ 233.818681][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.837190][ T144] device hsr_slave_0 left promiscuous mode [ 233.852039][ T144] device hsr_slave_1 left promiscuous mode [ 233.880883][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.888337][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.915943][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.930620][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.949761][ T144] device bridge_slave_1 left promiscuous mode [ 233.960801][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.972612][ T144] device bridge_slave_0 left promiscuous mode [ 233.978811][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.029842][ T144] device veth1_macvtap left promiscuous mode [ 234.040828][ T144] device veth0_macvtap left promiscuous mode [ 234.046923][ T144] device veth1_vlan left promiscuous mode [ 234.070013][ T144] device veth0_vlan left promiscuous mode [ 234.077973][ T144] device veth1_macvtap left promiscuous mode [ 234.093111][ T144] device veth0_macvtap left promiscuous mode [ 234.099564][ T144] device veth1_vlan left promiscuous mode [ 234.115380][ T144] device veth0_vlan left promiscuous mode [ 237.399417][ T144] team0 (unregistering): Port device team_slave_1 removed [ 237.441201][ T144] team0 (unregistering): Port device team_slave_0 removed [ 237.466036][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.500971][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.658486][ T144] bond0 (unregistering): Released all slaves [ 237.907142][ T6244] loop5: detected capacity change from 0 to 2048 [ 238.060788][ T146] Bluetooth: Wrong link type (-22) [ 238.066666][ T146] Bluetooth: hci0: link tx timeout [ 238.072370][ T146] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 238.156317][ T6244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.639527][ T144] team0 (unregistering): Port device team_slave_1 removed [ 238.682436][ T144] team0 (unregistering): Port device team_slave_0 removed [ 238.696031][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.718114][ T6248] loop1: detected capacity change from 0 to 256 [ 239.248742][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.688526][ T144] bond0 (unregistering): Released all slaves [ 239.780742][ T6252] loop1: detected capacity change from 256 to 0 [ 239.821677][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.835862][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.848449][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.860858][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.872555][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.443446][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.475050][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.489532][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.510868][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.520414][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.529705][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.541680][ T6257] Core dump to core aborted: cannot preserve file permissions [ 240.570968][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.597475][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.635344][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.691777][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.707134][ T6104] device hsr_slave_0 entered promiscuous mode [ 240.722079][ T6104] device hsr_slave_1 entered promiscuous mode [ 240.743083][ T5868] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.761797][ T5868] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.776099][ T5868] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.785332][ T5868] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.801371][ T5983] device veth0_vlan entered promiscuous mode [ 240.916062][ T5983] device veth1_vlan entered promiscuous mode [ 240.965013][ T6266] loop1: detected capacity change from 0 to 512 [ 241.022834][ T5983] device veth0_macvtap entered promiscuous mode [ 241.095489][ T5983] device veth1_macvtap entered promiscuous mode [ 241.109642][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.129791][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.140046][ T6266] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 241.151295][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.365498][ T6266] ext4 filesystem being mounted at /126/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.412433][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.580658][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.722240][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.826206][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.841027][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.851348][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.865538][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.878148][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.888678][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.910613][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.926741][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.941995][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.022883][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 242.034742][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.044801][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.063492][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.095038][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.112899][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.124381][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.135452][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.145920][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.155766][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.166358][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.177632][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.207230][ T6281] device syzkaller0 entered promiscuous mode [ 242.214239][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.228145][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.228164][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.249043][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.260412][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.282160][ T5983] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.306338][ T5983] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.315589][ T5983] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.324907][ T5983] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.387601][ T4437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.396422][ T21] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 242.396991][ T4437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.405414][ T21] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 242.422053][ T21] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 242.433002][ T21] usb 2-1: config 220 has no interface number 2 [ 242.439293][ T21] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 242.453015][ T21] usb 2-1: config 220 interface 0 has no altsetting 0 [ 242.459801][ T21] usb 2-1: config 220 interface 76 has no altsetting 0 [ 242.467126][ T21] usb 2-1: config 220 interface 1 has no altsetting 0 [ 242.491433][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.586179][ T6104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.630845][ T21] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 242.639945][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.655192][ T21] usb 2-1: Product: syz [ 242.669812][ T21] usb 2-1: Manufacturer: syz [ 242.677955][ T21] usb 2-1: SerialNumber: syz [ 242.678917][ T6295] loop3: detected capacity change from 0 to 1024 [ 242.725302][ T6104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.792495][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.810076][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.868367][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.876488][ T25] audit: type=1800 audit(1761958949.882:78): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.464" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 242.949500][ T6104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.151685][ T6104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.157051][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.248916][ T4192] Bluetooth: Wrong link type (-22) [ 243.387938][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.782316][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.790887][ T21] uvcvideo 2-1:220.1: Unknown video format 30303030-2c31-0000-0000-000000000000 [ 243.808690][ T21] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 243.891302][ T21] usb 2-1: No valid video chain found. [ 243.897076][ T21] usb 2-1: selecting invalid altsetting 0 [ 243.977254][ T6104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.011575][ T21] usb 2-1: selecting invalid altsetting 0 [ 244.017336][ T21] usbtest: probe of 2-1:220.1 failed with error -22 [ 244.127087][ T6319] loop3: detected capacity change from 0 to 2048 [ 244.179255][ T6104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.188958][ T21] usb 2-1: USB disconnect, device number 7 [ 244.235456][ T6104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.291912][ T4192] Bluetooth: Wrong link type (-22) [ 244.297915][ T4192] Bluetooth: hci1: link tx timeout [ 244.303600][ T4192] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 244.709967][ T6326] loop1: detected capacity change from 0 to 4096 [ 244.752352][ T6326] EXT4-fs (loop1): Test dummy encryption mode enabled [ 244.796106][ T6326] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 244.802385][ T6319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.813150][ T6326] System zones: 0-5 [ 244.819198][ T6326] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 244.893396][ T6104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.880676][ T25] audit: type=1800 audit(1761958952.882:79): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.542" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 247.165568][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 249.700195][ T6364] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 249.708165][ T6364] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 249.716503][ T6364] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 249.738611][ T6364] Error parsing options; rc = [-22] [ 250.521345][ T6104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.537933][ T6104] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.551547][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.559550][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.662075][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.701586][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.730967][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.738042][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.810952][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.823067][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.832979][ T6369] xt_hashlimit: max too large, truncated to 1048576 [ 250.856551][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.863694][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.951915][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.970977][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.021096][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.035130][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.109852][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.137680][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.191325][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.208015][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.426330][ T4192] Bluetooth: Wrong link type (-22) [ 252.004484][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.061319][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.069809][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.091655][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.142937][ T6104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.370652][ T6386] loop6: detected capacity change from 0 to 1024 [ 252.525758][ T6391] loop1: detected capacity change from 0 to 2048 [ 252.649083][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.666963][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.728011][ T6391] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 252.745682][ T6104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.904423][ T6401] loop3: detected capacity change from 0 to 1024 [ 253.914598][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.923739][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.035143][ T6104] device veth0_vlan entered promiscuous mode [ 254.041392][ T6401] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 254.077686][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.090621][ T6401] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #32: comm syz.3.559: iget: special inode unallocated [ 254.107505][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.149585][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.165907][ T6401] EXT4-fs (loop3): no journal found [ 254.181204][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.191254][ T6401] EXT4-fs (loop3): can't get journal size [ 254.232016][ T6104] device veth1_vlan entered promiscuous mode [ 254.232201][ T6401] EXT4-fs (loop3): filesystem is read-only [ 254.280524][ T6401] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 254.324049][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 254.391137][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 254.399194][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.491565][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.521951][ T6104] device veth0_macvtap entered promiscuous mode [ 254.555624][ T6104] device veth1_macvtap entered promiscuous mode [ 254.720911][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.799061][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.868389][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.920835][ T1346] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 255.017263][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.290578][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.367822][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.440679][ T1346] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.451860][ T1346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.467342][ T6422] loop3: detected capacity change from 0 to 512 [ 255.468106][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.493966][ T1346] usb 6-1: config 0 descriptor?? [ 255.518121][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.532293][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.538585][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.547299][ T1346] cp210x 6-1:0.0: cp210x converter detected [ 255.557269][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.569930][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.584809][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.620506][ T25] audit: type=1800 audit(1761958962.632:80): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.563" name="file1" dev="loop3" ino=1048620 res=0 errno=0 [ 255.667019][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.677868][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.706542][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.726924][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.762188][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.807345][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.837825][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.878461][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.899108][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.946689][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.963731][ T6416] loop5: detected capacity change from 0 to 764 [ 256.019155][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.060719][ T1346] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 256.073593][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.078000][ T6429] loop1: detected capacity change from 0 to 512 [ 256.100061][ T6104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.117461][ T1346] usb 6-1: cp210x converter now attached to ttyUSB0 [ 256.130427][ T6104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.164924][ T6429] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.173023][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.233387][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.256110][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.316178][ T4296] usb 6-1: USB disconnect, device number 4 [ 256.328896][ T6429] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.331919][ T4296] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 256.368411][ T4296] cp210x 6-1:0.0: device disconnected [ 256.402658][ T6104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.415393][ T6104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.426608][ T6104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.435738][ T6104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.882431][ T4192] Bluetooth: Wrong link type (-22) [ 258.124299][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.132846][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.156243][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.259307][ T6451] loop3: detected capacity change from 0 to 512 [ 258.300294][ T4437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.319654][ T4437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.387717][ T6451] EXT4-fs (loop3): Test dummy encryption mode enabled [ 258.393971][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.400621][ T6451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 258.501046][ T6451] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.569: bad orphan inode 131083 [ 258.557149][ T6451] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 259.873303][ T6455] loop5: detected capacity change from 0 to 256 [ 260.088732][ T6474] loop3: detected capacity change from 0 to 512 [ 261.010755][ T6455] FAT-fs (loop5): Directory bread(block 64) failed [ 261.080362][ T6474] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,commit=0x0000000000000000,sb=0x0000000000000008,i_version,lazytime,nodiscard,grpjquota=,block_validity,errors=remount-ro,. Quota mode: writeback. [ 261.080646][ T6455] FAT-fs (loop5): Directory bread(block 65) failed [ 261.120685][ T6474] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.378244][ T6489] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #2: comm syz.3.573: corrupted inode contents [ 261.771932][ T6455] FAT-fs (loop5): Directory bread(block 66) failed [ 261.793441][ T6489] EXT4-fs (loop3): Remounting filesystem read-only [ 261.799978][ T6489] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #2: comm syz.3.573: mark_inode_dirty error [ 261.812134][ T6489] EXT4-fs (loop3): Remounting filesystem read-only [ 261.818813][ T6489] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #2: comm syz.3.573: corrupted inode contents [ 261.830938][ T6489] EXT4-fs (loop3): Remounting filesystem read-only [ 261.837618][ T6489] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.573: mark_inode_dirty error [ 261.849563][ T6489] EXT4-fs (loop3): Remounting filesystem read-only [ 261.861928][ T4329] Bluetooth: hci0: command 0x0c20 tx timeout [ 262.061688][ T6455] FAT-fs (loop5): Directory bread(block 67) failed [ 262.068996][ T6455] FAT-fs (loop5): Directory bread(block 68) failed [ 262.092378][ T6455] FAT-fs (loop5): Directory bread(block 69) failed [ 262.121577][ T6455] FAT-fs (loop5): Directory bread(block 70) failed [ 262.134841][ T6455] FAT-fs (loop5): Directory bread(block 71) failed [ 262.150608][ T6455] FAT-fs (loop5): Directory bread(block 72) failed [ 262.157352][ T6455] FAT-fs (loop5): Directory bread(block 73) failed [ 262.319985][ T6496] loop3: detected capacity change from 0 to 1024 [ 262.366005][ T6496] hfsplus: unable to parse mount options [ 263.452699][ T146] Bluetooth: Wrong link type (-22) [ 263.594125][ T6506] loop1: detected capacity change from 0 to 2048 [ 263.694134][ T6506] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 263.762802][ T6506] UDF-fs: Scanning with blocksize 512 failed [ 263.849710][ T6506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.198862][ T6524] loop6: detected capacity change from 0 to 256 [ 264.227703][ T6524] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 265.001832][ T6529] loop1: detected capacity change from 0 to 1024 [ 265.002199][ T6513] loop3: detected capacity change from 0 to 8 [ 265.084654][ T25] audit: type=1800 audit(1761958972.102:81): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.582" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 266.717095][ T146] Bluetooth: Wrong link type (-22) [ 266.785745][ T146] Bluetooth: hci0: link tx timeout [ 266.790996][ T146] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 266.798878][ T146] Bluetooth: hci0: link tx timeout [ 266.804832][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 266.831719][ T144] device hsr_slave_0 left promiscuous mode [ 266.852372][ T144] device hsr_slave_1 left promiscuous mode [ 266.992713][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.201733][ T7] Bluetooth: hci3: command 0x0405 tx timeout [ 267.459110][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.781210][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.820921][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.828701][ T6571] loop1: detected capacity change from 0 to 1024 [ 267.861217][ T144] device bridge_slave_1 left promiscuous mode [ 267.870125][ T6574] loop5: detected capacity change from 0 to 2048 [ 267.877517][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.946962][ T144] device bridge_slave_0 left promiscuous mode [ 268.010726][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.220059][ T144] device veth1_macvtap left promiscuous mode [ 268.236131][ T6576] loop3: detected capacity change from 0 to 2048 [ 268.263382][ T144] device veth0_macvtap left promiscuous mode [ 268.297636][ T144] device veth1_vlan left promiscuous mode [ 268.329152][ T144] device veth0_vlan left promiscuous mode [ 268.472765][ T6576] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value [ 268.603419][ T6574] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 268.612980][ T6574] UDF-fs: Scanning with blocksize 512 failed [ 268.643491][ T6574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.778836][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 271.809529][ T146] Bluetooth: Wrong link type (-22) [ 271.816916][ T146] Bluetooth: hci1: link tx timeout [ 271.822220][ T146] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 274.310386][ T6605] loop6: detected capacity change from 0 to 2048 [ 274.821599][ T6614] loop5: detected capacity change from 0 to 512 [ 275.426801][ T6614] EXT4-fs (loop5): Unrecognized mount option "subj_type= '" or missing value [ 275.451398][ T6605] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.755868][ T144] team0 (unregistering): Port device team_slave_1 removed [ 276.537530][ T144] team0 (unregistering): Port device team_slave_0 removed [ 276.709251][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.724890][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.960871][ T5460] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 277.128119][ T144] bond0 (unregistering): Released all slaves [ 277.250882][ T5460] usb 4-1: Using ep0 maxpacket: 8 [ 277.262399][ T146] Bluetooth: Wrong link type (-22) [ 277.372674][ T5460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 277.465111][ T5460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.624075][ T5460] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.792432][ T5460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 277.857112][ T5460] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 277.894041][ T5460] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 277.932925][ T6634] loop1: detected capacity change from 0 to 256 [ 277.946360][ T5460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.994058][ T5460] usb 4-1: config 0 descriptor?? [ 278.008595][ T6634] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 278.026989][ T6621] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 278.192305][ T6639] loop2: detected capacity change from 0 to 8 [ 279.317987][ T6639] squashfs: Unknown parameter '' [ 279.613522][ T4207] usb 4-1: USB disconnect, device number 4 [ 279.871073][ T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 280.168888][ T6652] loop5: detected capacity change from 0 to 128 [ 280.175407][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 280.262819][ T6652] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 280.376931][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 280.432127][ T6652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.751420][ T6660] loop6: detected capacity change from 0 to 2048 [ 281.186532][ T26] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 281.210524][ T26] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 281.221242][ T26] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 281.230552][ T26] usb 3-1: config 128 has no interface number 0 [ 281.237348][ T26] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 32450, setting to 1024 [ 281.264235][ T26] usb 3-1: config 128 interface 127 altsetting 14 bulk endpoint 0x5 has invalid maxpacket 1024 [ 281.388846][ T26] usb 3-1: config 128 interface 127 has no altsetting 0 [ 281.441487][ T26] usb 3-1: string descriptor 0 read error: -71 [ 281.448539][ T26] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 281.454407][ T6660] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.457771][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.775511][ T6659] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (32) [ 281.948137][ T26] usb 3-1: can't set config #128, error -71 [ 282.597719][ T26] usb 3-1: USB disconnect, device number 6 [ 282.763453][ T6672] loop5: detected capacity change from 0 to 512 [ 282.899376][ T6672] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.987882][ T146] Bluetooth: Wrong link type (-22) [ 283.698166][ T6672] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.625: iget: bad i_size value: 38620345925642 [ 283.712012][ T6672] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.625: couldn't read orphan inode 15 (err -117) [ 283.726382][ T6672] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,delalloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 283.755506][ T25] audit: type=1800 audit(1761958990.772:82): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.625" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 284.849870][ T6682] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 284.969647][ T6693] loop1: detected capacity change from 0 to 256 [ 285.247668][ T6698] loop5: detected capacity change from 0 to 256 [ 285.328919][ T6698] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 285.717258][ T6714] loop1: detected capacity change from 0 to 512 [ 285.998331][ T6714] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 286.067319][ T6714] ext4 filesystem being mounted at /145/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.000234][ T6728] loop5: detected capacity change from 0 to 2048 [ 287.006749][ T25] audit: type=1326 audit(1761958994.012:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.1.634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff52b019fc9 code=0x0 [ 287.173452][ T6728] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000007,,errors=continue. Quota mode: none. [ 289.684482][ T6755] loop5: detected capacity change from 0 to 1764 [ 289.800103][ T6763] kvm: pic: non byte read [ 289.833601][ T6763] kvm: pic: non byte read [ 289.838164][ T6763] kvm: pic: non byte read [ 289.875821][ T6763] kvm: pic: non byte read [ 289.880368][ T6763] kvm: pic: non byte read [ 289.899463][ T6763] kvm: pic: non byte read [ 289.935835][ T6763] kvm: pic: non byte read [ 289.940572][ T6763] kvm: pic: non byte read [ 289.945130][ T6763] kvm: pic: non byte read [ 289.949642][ T6763] kvm: pic: non byte read [ 290.140851][ T4192] Bluetooth: Wrong link type (-22) [ 290.146786][ T4192] Bluetooth: hci3: link tx timeout [ 290.153306][ T4192] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 292.964900][ T4217] Bluetooth: hci3: command 0x0406 tx timeout [ 296.138123][ T4207] Bluetooth: hci0: command 0x0c20 tx timeout [ 296.257489][ T6819] loop6: detected capacity change from 0 to 1764 [ 296.688349][ T6833] loop5: detected capacity change from 0 to 2048 [ 296.810576][ T6833] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.850554][ T6664] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 296.880723][ T6833] loop_set_status: loop5 () has still dirty pages (nrpages=2) [ 297.222701][ T6664] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 297.240802][ T6664] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.261812][ T6664] usb 7-1: config 0 descriptor?? [ 297.306549][ T6664] cp210x 7-1:0.0: cp210x converter detected [ 297.733031][ T6664] usb 7-1: cp210x converter now attached to ttyUSB0 [ 298.476262][ T26] usb 7-1: USB disconnect, device number 2 [ 298.531138][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 298.585213][ T26] cp210x 7-1:0.0: device disconnected [ 298.641133][ T6880] loop2: detected capacity change from 0 to 256 [ 298.665588][ T6880] exfat: Unknown parameter 'sys_tz' [ 298.703857][ T6879] loop1: detected capacity change from 0 to 1024 [ 298.810051][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.834316][ T6884] loop2: detected capacity change from 0 to 2048 [ 298.886362][ T6884] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 298.899598][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.967034][ T6884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.019321][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.264329][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.387878][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 300.621519][ T6892] chnl_net:caif_netlink_parms(): no params data found [ 300.696061][ T6933] loop1: detected capacity change from 0 to 2048 [ 300.843605][ T6933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.022677][ T6941] loop6: detected capacity change from 0 to 4096 [ 301.061182][ T6941] EXT4-fs (loop6): Test dummy encryption mode enabled [ 301.094640][ T6941] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 301.103881][ T6941] System zones: 0-5 [ 301.116214][ T6941] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 301.154344][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.186449][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.200592][ T26] Bluetooth: hci1: command 0x0409 tx timeout [ 301.204757][ T6892] device bridge_slave_0 entered promiscuous mode [ 301.259309][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.302444][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.328563][ T6892] device bridge_slave_1 entered promiscuous mode [ 301.553238][ T6892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.616998][ T6892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.821337][ T6956] loop3: detected capacity change from 0 to 2048 [ 302.514458][ T6956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.608597][ T6892] team0: Port device team_slave_0 added [ 302.642205][ T6892] team0: Port device team_slave_1 added [ 303.339168][ T4296] Bluetooth: hci1: command 0x041b tx timeout [ 303.394986][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.402294][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.435763][ T6892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.552646][ T6892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.569979][ T6892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.674637][ T6892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.191495][ T7000] loop6: detected capacity change from 0 to 512 [ 305.203066][ T144] device hsr_slave_0 left promiscuous mode [ 305.363021][ T4321] Bluetooth: hci1: command 0x040f tx timeout [ 305.370788][ T144] device hsr_slave_1 left promiscuous mode [ 305.383654][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.399815][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.442395][ T7000] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 305.448622][ T7006] loop3: detected capacity change from 0 to 4096 [ 305.459726][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.481556][ T7000] EXT4-fs (loop6): invalid journal inode [ 305.487437][ T7000] EXT4-fs (loop6): can't get journal size [ 305.496681][ T7006] EXT4-fs (loop3): Test dummy encryption mode enabled [ 305.517984][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.549685][ T7006] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 305.557927][ T7006] System zones: 0-5 [ 305.621234][ T144] device bridge_slave_1 left promiscuous mode [ 305.637291][ T7006] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 305.686125][ T7000] EXT4-fs (loop6): 1 truncate cleaned up [ 305.688973][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.703359][ T7000] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 306.927621][ T7019] loop2: detected capacity change from 0 to 512 [ 306.981386][ T7000] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 307.047110][ T7019] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 307.062345][ T7000] Disabled LAPIC found during irq injection [ 307.068877][ T7000] kvm: apic: phys broadcast and lowest prio [ 307.095660][ T144] device bridge_slave_0 left promiscuous mode [ 307.102549][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.224262][ T26] Bluetooth: hci1: command 0x0419 tx timeout [ 308.225813][ T7019] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.288870][ T7019] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.706: invalid size [ 308.352500][ T144] device veth1_macvtap left promiscuous mode [ 308.370882][ T144] device veth0_macvtap left promiscuous mode [ 308.376983][ T144] device veth1_vlan left promiscuous mode [ 308.413931][ T144] device veth0_vlan left promiscuous mode [ 308.546460][ T7034] loop6: detected capacity change from 0 to 136 [ 309.852535][ T5983] rock: directory entry would overflow storage [ 309.858924][ T5983] rock: sig=0x4f50, size=4, remaining=3 [ 309.921436][ T5983] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 309.962610][ T5983] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 310.127914][ T7043] loop6: detected capacity change from 0 to 8 [ 310.201389][ T7043] SQUASHFS error: zlib decompression failed, data probably corrupt [ 310.248064][ T7043] SQUASHFS error: Failed to read block 0x9b: -5 [ 310.270207][ T7043] SQUASHFS error: Unable to read metadata cache entry [99] [ 310.400716][ T7043] SQUASHFS error: Unable to read inode 0x127 [ 310.435604][ T144] team0 (unregistering): Port device team_slave_1 removed [ 310.473139][ T144] team0 (unregistering): Port device team_slave_0 removed [ 310.539313][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.807056][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.817295][ T7055] loop6: detected capacity change from 0 to 4096 [ 311.448162][ T4321] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 311.484714][ T7055] EXT4-fs (loop6): Test dummy encryption mode enabled [ 311.526500][ T7055] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 311.534772][ T7055] System zones: 0-5 [ 311.560956][ T7055] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 311.700879][ T4321] usb 4-1: Using ep0 maxpacket: 32 [ 311.851303][ T4321] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 311.872538][ T4321] usb 4-1: config 0 has no interface number 0 [ 312.010382][ T144] bond0 (unregistering): Released all slaves [ 312.051255][ T4321] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 312.070569][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.079273][ T4321] usb 4-1: Product: syz [ 312.086656][ T4321] usb 4-1: Manufacturer: syz [ 312.093623][ T4321] usb 4-1: SerialNumber: syz [ 312.136441][ T4321] usb 4-1: config 0 descriptor?? [ 312.200026][ T4321] smsc95xx v2.0.0 [ 312.302701][ T6892] device hsr_slave_0 entered promiscuous mode [ 312.324770][ T6892] device hsr_slave_1 entered promiscuous mode [ 312.338837][ T6892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.358373][ T6892] Cannot create hsr debugfs directory [ 312.620875][ T4321] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 312.650665][ T4321] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 312.687733][ T6892] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 312.738410][ T6892] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 312.758026][ T6892] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 312.811995][ T6892] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 312.942020][ T7096] loop1: detected capacity change from 0 to 512 [ 312.983933][ T7095] loop2: detected capacity change from 0 to 2048 [ 313.068629][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.6.725'. [ 313.079836][ T7095] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 313.101339][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.6.725'. [ 313.135558][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.6.725'. [ 313.340910][ T7096] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 313.350668][ T4321] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 313.367770][ T7105] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 313.383507][ T7096] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.407402][ T4321] smsc95xx: probe of 4-1:0.67 failed with error -32 [ 313.427270][ T7096] EXT4-fs (loop1): shut down requested (2) [ 313.589896][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.791530][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.804415][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.832416][ T6892] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.165672][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.257700][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.304175][ T4312] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.311349][ T4312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.375028][ T26] usb 4-1: USB disconnect, device number 5 [ 314.410240][ T7132] loop2: detected capacity change from 0 to 4096 [ 314.426842][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.456685][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.476082][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.363287][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.370402][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.470344][ T7132] EXT4-fs (loop2): Test dummy encryption mode enabled [ 315.498723][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.508798][ T7132] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 315.517118][ T7132] System zones: 0-5 [ 315.553587][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.597751][ T7132] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 315.623042][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.632927][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.653618][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.697813][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.736390][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.775091][ T7142] device batadv_slave_1 entered promiscuous mode [ 315.823497][ T7147] device syz_tun entered promiscuous mode [ 315.852520][ T7148] device batadv_slave_1 left promiscuous mode [ 315.912092][ T7140] device syz_tun left promiscuous mode [ 315.921025][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.951617][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.985109][ T6892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.031033][ T6892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.039095][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.061409][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.090193][ T7155] loop2: detected capacity change from 0 to 1024 [ 316.221573][ T7155] hfsplus: xattr searching failed [ 316.232662][ T7155] hfsplus: xattr searching failed [ 316.267302][ T3560] udevd[3560]: worker [6085] terminated by signal 33 (Unknown signal 33) [ 316.274703][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.280529][ T3560] udevd[3560]: worker [6085] failed while handling '/devices/virtual/block/loop2' [ 316.311667][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.346502][ T6892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.532533][ T25] audit: type=1326 audit(1761959023.552:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.6.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2eddffc9 code=0x7ffc0000 [ 316.580150][ T7176] loop2: detected capacity change from 0 to 128 [ 316.646098][ T25] audit: type=1326 audit(1761959023.582:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.6.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2eddffc9 code=0x7ffc0000 [ 316.766830][ T25] audit: type=1326 audit(1761959023.582:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.6.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f2d2eddffc9 code=0x7ffc0000 [ 316.915507][ T25] audit: type=1326 audit(1761959023.582:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.6.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2eddffc9 code=0x7ffc0000 [ 316.968838][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.975203][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.983762][ T7181] loop1: detected capacity change from 0 to 2048 [ 317.045840][ T7181] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 317.233190][ T25] audit: type=1326 audit(1761959023.582:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.6.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2eddffc9 code=0x7ffc0000 [ 318.269214][ T7204] loop1: detected capacity change from 0 to 2048 [ 318.292116][ T7198] loop6: detected capacity change from 0 to 1024 [ 318.428061][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.515416][ T7208] loop2: detected capacity change from 0 to 4096 [ 318.569968][ T7208] EXT4-fs (loop2): Test dummy encryption mode enabled [ 318.643912][ T7208] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 318.652165][ T7208] System zones: 0-5 [ 318.717478][ T7208] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 318.757925][ T7198] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.826469][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.948301][ T6892] device veth0_vlan entered promiscuous mode [ 318.955129][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.963954][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.965183][ T7204] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 319.059288][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.081001][ T7204] UDF-fs: Scanning with blocksize 512 failed [ 319.116376][ T7204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.163416][ T5089] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.204341][ T6892] device veth1_vlan entered promiscuous mode [ 319.381413][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 319.607511][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 319.627181][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 319.646965][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.724306][ T6892] device veth0_macvtap entered promiscuous mode [ 319.822253][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.876642][ T6892] device veth1_macvtap entered promiscuous mode [ 321.062906][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.084438][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.155384][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.175716][ T7238] loop1: detected capacity change from 0 to 1024 [ 321.201357][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.240492][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.284634][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.323291][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.355160][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.386292][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.413763][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.445535][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.465730][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.504148][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.533800][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.450502][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.500534][ T6892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.530475][ T6892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.572151][ T6892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.627149][ T6892] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.690549][ T6892] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.729874][ T6892] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.760299][ T6892] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.853340][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.972325][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.509480][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.598391][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.703057][ T4369] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 325.511042][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.519246][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.596724][ T7274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.614052][ T407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.622840][ T4369] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.630166][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.661705][ T4369] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 325.671044][ T407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.700650][ T4369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.711526][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.743604][ T4369] usb 2-1: config 0 descriptor?? [ 325.817278][ T4369] usb 2-1: bad CDC descriptors [ 325.824212][ T4369] usb 2-1: bad CDC descriptors [ 326.047365][ T4369] usb 2-1: USB disconnect, device number 8 [ 326.155054][ T7288] loop6: detected capacity change from 0 to 4096 [ 326.635178][ T7288] EXT4-fs (loop6): Test dummy encryption mode enabled [ 328.457184][ T7288] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 328.457281][ T7288] System zones: 0-5 [ 328.534599][ T7288] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 329.605174][ T7317] loop1: detected capacity change from 0 to 512 [ 329.714819][ T7317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 329.815553][ T7317] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.768: inode has both inline data and extents flags [ 329.815885][ T7317] EXT4-fs (loop1): Remounting filesystem read-only [ 329.815946][ T7317] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.768: couldn't read orphan inode 15 (err -117) [ 329.816231][ T7317] EXT4-fs (loop1): Remounting filesystem read-only [ 329.816248][ T7317] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,discard,journal_ioprio=0x0000000000000006,errors=remount-ro,lazytime,minixdf,noquota,minixdf,. Quota mode: none. [ 329.887703][ T7317] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.768: bg 0: block 256: padding at end of block bitmap is not set [ 329.936882][ T7317] EXT4-fs (loop1): Remounting filesystem read-only [ 330.065348][ T7335] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 331.564257][ T7354] loop2: detected capacity change from 0 to 512 [ 331.637591][ T7358] loop3: detected capacity change from 0 to 4096 [ 331.676385][ T7358] EXT4-fs (loop3): Test dummy encryption mode enabled [ 332.127569][ T4329] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 332.128363][ T7358] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 332.143379][ T7358] System zones: 0-5 [ 332.170982][ T7358] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 332.560819][ T4329] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.581062][ T4329] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.639202][ T4329] usb 7-1: New USB device found, idVendor=046d, idProduct=7f26, bcdDevice= 0.00 [ 332.898398][ T4329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.149598][ T146] Bluetooth: Wrong link type (-22) [ 333.156318][ T146] Bluetooth: hci2: link tx timeout [ 333.162299][ T146] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 333.172892][ T146] Bluetooth: hci2: link tx timeout [ 333.182195][ T146] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 333.344132][ T4329] usb 7-1: config 0 descriptor?? [ 333.390747][ T4329] usb 7-1: can't set config #0, error -71 [ 334.160685][ T7388] netlink: 104 bytes leftover after parsing attributes in process `syz.6.781'. [ 334.232726][ T4329] usb 7-1: USB disconnect, device number 3 [ 335.333012][ T4244] Bluetooth: hci2: command 0x0406 tx timeout [ 335.516391][ T7403] loop1: detected capacity change from 0 to 128 [ 335.529989][ T25] audit: type=1326 audit(1761959042.542:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.7.785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbf17b2fc9 code=0x0 [ 335.627973][ T7403] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 335.697676][ T25] audit: type=1800 audit(1761959042.712:90): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.787" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 337.373164][ T4321] Bluetooth: hci2: command 0x0406 tx timeout [ 337.615052][ T7421] loop7: detected capacity change from 0 to 4096 [ 338.144132][ T7421] EXT4-fs (loop7): Test dummy encryption mode enabled [ 338.181115][ T7421] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 338.189310][ T7421] System zones: 0-5 [ 338.211206][ T7421] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 338.524087][ T25] audit: type=1800 audit(1761959045.542:91): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.787" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 338.934998][ T146] Bluetooth: Wrong link type (-22) [ 340.369425][ T4231] Bluetooth: hci4: command 0x0406 tx timeout [ 340.785637][ T7458] loop6: detected capacity change from 0 to 512 [ 341.002833][ T7462] loop7: detected capacity change from 0 to 512 [ 341.015724][ T7458] EXT4-fs (loop6): mounted filesystem without journal. Opts: acl,commit=0x0000000000000000,sb=0x0000000000000008,i_version,lazytime,nodiscard,grpjquota=,block_validity,errors=remount-ro,. Quota mode: writeback. [ 341.158119][ T7458] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.221646][ T7462] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.391313][ T7470] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #2: comm syz.6.797: corrupted inode contents [ 341.403546][ T7470] EXT4-fs (loop6): Remounting filesystem read-only [ 341.410047][ T7470] EXT4-fs error (device loop6): ext4_dirty_inode:6054: inode #2: comm syz.6.797: mark_inode_dirty error [ 341.421894][ T7470] EXT4-fs (loop6): Remounting filesystem read-only [ 341.428579][ T7470] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #2: comm syz.6.797: corrupted inode contents [ 341.441723][ T7470] EXT4-fs (loop6): Remounting filesystem read-only [ 341.448225][ T7470] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.797: mark_inode_dirty error [ 341.459964][ T7470] EXT4-fs (loop6): Remounting filesystem read-only [ 341.642722][ T7462] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 342.419570][ T7492] loop7: detected capacity change from 0 to 4096 [ 343.014767][ T7492] EXT4-fs (loop7): Test dummy encryption mode enabled [ 343.033795][ T7492] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 343.042623][ T7492] System zones: 0-5 [ 343.048274][ T7492] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 343.125858][ T7500] loop3: detected capacity change from 0 to 128 [ 343.133946][ T7498] loop6: detected capacity change from 0 to 1024 [ 343.370511][ T146] Bluetooth: Wrong link type (-22) [ 343.378301][ T146] Bluetooth: hci3: link tx timeout [ 343.384104][ T146] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 343.391861][ T146] Bluetooth: hci3: link tx timeout [ 343.450566][ T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 343.466287][ T7498] hfsplus: xattr searching failed [ 344.249427][ T4312] hfsplus: bad catalog file entry [ 344.262038][ T4312] hfsplus: b-tree write err: -5, ino 3 [ 344.970107][ T7516] loop2: detected capacity change from 0 to 512 [ 345.010007][ T7518] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.178152][ T7516] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.248228][ T7528] loop6: detected capacity change from 0 to 512 [ 345.307882][ T7516] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 345.338249][ T7528] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 345.350588][ T4369] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 346.521717][ T1111] Bluetooth: hci3: command 0x0406 tx timeout [ 346.630982][ T7528] EXT4-fs (loop6): 1 truncate cleaned up [ 346.637458][ T7528] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.740871][ T4369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 346.820553][ T4369] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 346.863972][ T4369] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 346.883866][ T4369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.902055][ T4369] usb 4-1: config 0 descriptor?? [ 346.921014][ T7522] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 347.257333][ T7551] loop2: detected capacity change from 0 to 4096 [ 347.675583][ T4369] microsoft 0003:045E:009D.0006: unbalanced collection at end of report description [ 347.760977][ T7551] EXT4-fs (loop2): Test dummy encryption mode enabled [ 347.782961][ T7551] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 347.791311][ T7551] System zones: 0-5 [ 347.796753][ T7551] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 347.801365][ T7553] xt_hashlimit: max too large, truncated to 1048576 [ 347.846795][ T4369] microsoft 0003:045E:009D.0006: parse failed [ 347.863901][ T4369] microsoft: probe of 0003:045E:009D.0006 failed with error -22 [ 347.884707][ T4369] usb 4-1: USB disconnect, device number 6 [ 348.095095][ T7562] loop6: detected capacity change from 0 to 1024 [ 348.321960][ T7562] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,nodioread_nolock,noquota,barrier,errors=remount-ro,nodioread_nolock,. Quota mode: none. [ 348.341169][ T7562] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.434063][ T7562] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.820: inode has both inline data and extents flags [ 349.705537][ T7562] EXT4-fs (loop6): Remounting filesystem read-only [ 350.568173][ T7592] loop6: detected capacity change from 0 to 512 [ 350.629655][ T7592] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 350.728127][ T7592] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 351.148124][ T7605] loop6: detected capacity change from 0 to 128 [ 351.224196][ T7605] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,delalloc,,errors=continue. Quota mode: none. [ 351.257237][ T7605] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.330620][ T4369] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 351.390573][ T4231] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 351.412216][ T7621] kvm: pic: non byte write [ 351.679142][ T7628] loop1: detected capacity change from 0 to 1024 [ 351.695218][ T4369] usb 8-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 351.740828][ T4369] usb 8-1: config 8 interface 0 has no altsetting 0 [ 351.879754][ T7628] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 351.900815][ T7628] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 352.076311][ T7628] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,delalloc,resuid=0x0000000000000000,abort,dioread_nolock,jqfmt=vfsold,data=ordered,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 352.140840][ T4231] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 352.170228][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.206552][ T4231] usb 4-1: Product: syz [ 352.222942][ T4369] usb 8-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=73.93 [ 352.232531][ T4369] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.245208][ T4231] usb 4-1: Manufacturer: syz [ 352.256213][ T4231] usb 4-1: SerialNumber: syz [ 352.261739][ T4369] usb 8-1: Product: syz [ 352.280116][ T4369] usb 8-1: Manufacturer: syz [ 352.295301][ T4369] usb 8-1: SerialNumber: syz [ 353.670823][ T7611] udc-core: couldn't find an available UDC or it's busy [ 353.689669][ T7656] loop2: detected capacity change from 0 to 512 [ 353.763145][ T7611] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 354.348927][ T7656] EXT4-fs (loop2): Ignoring removed bh option [ 354.361317][ T7656] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 354.462069][ T7656] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 355.898050][ T7656] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 355.923628][ T4369] usb 8-1: USB disconnect, device number 2 [ 355.981224][ T7656] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 356.067129][ T7656] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 356.184961][ T7656] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 356.210907][ T7670] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 357.255499][ T7703] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.263369][ T7703] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.434709][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.441895][ T7705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.450913][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.458011][ T7705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.521252][ T7705] device bridge0 entered promiscuous mode [ 357.835811][ T7712] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 357.843840][ T7712] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 357.852579][ T7712] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 357.866515][ T7712] Error parsing options; rc = [-22] [ 358.676175][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.712521][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.721235][ T7707] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.742276][ T7707] device bridge_slave_0 left promiscuous mode [ 358.767763][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.797492][ T7707] device bridge_slave_1 left promiscuous mode [ 358.846363][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.864083][ T7707] bond0: (slave bond_slave_0): Releasing backup interface [ 358.897608][ T4231] rtl8150 4-1:1.0: couldn't reset the device [ 358.905065][ T4231] rtl8150: probe of 4-1:1.0 failed with error -5 [ 358.937171][ T4231] usb 4-1: USB disconnect, device number 7 [ 358.967278][ T7707] bond0: (slave bond_slave_1): Releasing backup interface [ 359.056607][ T7707] team0: Port device team_slave_0 removed [ 359.107238][ T7707] team0: Port device team_slave_1 removed [ 359.129570][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.151348][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.169773][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.180219][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.640599][ T4231] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 360.014620][ T7742] netlink: 104 bytes leftover after parsing attributes in process `syz.3.850'. [ 360.050776][ T146] Bluetooth: Wrong link type (-22) [ 360.059719][ T146] Bluetooth: hci4: link tx timeout [ 360.065871][ T146] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 360.350509][ T4369] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 360.411979][ T4231] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 360.430615][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.446517][ T4231] usb 2-1: config 0 descriptor?? [ 360.493801][ T4231] cp210x 2-1:0.0: cp210x converter detected [ 360.679958][ T7761] loop6: detected capacity change from 0 to 1024 [ 360.821799][ T7761] hfsplus: request for non-existent node 134217728 in B*Tree [ 360.861081][ T7761] hfsplus: request for non-existent node 134217728 in B*Tree [ 360.971003][ T4231] usb 2-1: cp210x converter now attached to ttyUSB0 [ 361.126024][ T4369] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 361.135355][ T4369] usb 3-1: config 8 interface 0 has no altsetting 0 [ 361.148073][ T1346] usb 2-1: USB disconnect, device number 9 [ 361.169138][ T1346] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 361.211975][ T1346] cp210x 2-1:0.0: device disconnected [ 361.300660][ T4369] usb 3-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=73.93 [ 361.320535][ T4369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.328565][ T4369] usb 3-1: Product: syz [ 361.359820][ T4369] usb 3-1: Manufacturer: syz [ 361.370537][ T4369] usb 3-1: SerialNumber: syz [ 361.592442][ T7780] loop3: detected capacity change from 0 to 256 [ 361.926169][ T7780] FAT-fs (loop3): Directory bread(block 64) failed [ 361.926210][ T7780] FAT-fs (loop3): Directory bread(block 65) failed [ 361.926281][ T7780] FAT-fs (loop3): Directory bread(block 66) failed [ 361.926310][ T7780] FAT-fs (loop3): Directory bread(block 67) failed [ 361.926373][ T7780] FAT-fs (loop3): Directory bread(block 68) failed [ 361.926402][ T7780] FAT-fs (loop3): Directory bread(block 69) failed [ 361.926464][ T7780] FAT-fs (loop3): Directory bread(block 70) failed [ 361.926492][ T7780] FAT-fs (loop3): Directory bread(block 71) failed [ 361.926557][ T7780] FAT-fs (loop3): Directory bread(block 72) failed [ 361.926585][ T7780] FAT-fs (loop3): Directory bread(block 73) failed [ 363.192704][ T7797] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 363.200157][ T7797] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 363.207733][ T7797] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 363.220918][ T7797] Error parsing options; rc = [-22] [ 363.773496][ T4369] usb 3-1: USB disconnect, device number 7 [ 365.018781][ T7806] loop6: detected capacity change from 0 to 764 [ 365.125991][ T7806] Symlink component flag not implemented [ 365.145615][ T7806] Symlink component flag not implemented (116) [ 366.309527][ T7851] loop3: detected capacity change from 0 to 256 [ 366.687033][ T7859] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 366.694783][ T7859] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 366.702865][ T7859] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 366.716957][ T7859] Error parsing options; rc = [-22] [ 367.846747][ T7862] kvm: pic: non byte write [ 368.086982][ T7877] loop1: detected capacity change from 0 to 2048 [ 368.163101][ T7877] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.115493][ T7909] loop7: detected capacity change from 0 to 512 [ 370.266228][ T7909] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 370.415416][ T7909] EXT4-fs (loop7): 1 truncate cleaned up [ 370.435394][ T7909] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 372.227360][ T7933] kvm: pic: non byte write [ 373.717668][ T25] audit: type=1326 audit(1761959080.732:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 373.877658][ T7977] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 373.885083][ T7977] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 373.892685][ T7977] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 373.905742][ T7977] Error parsing options; rc = [-22] [ 374.502904][ T25] audit: type=1326 audit(1761959080.742:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 374.750108][ T25] audit: type=1326 audit(1761959080.762:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 374.923336][ T25] audit: type=1326 audit(1761959080.762:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 375.015489][ T25] audit: type=1326 audit(1761959080.762:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 375.113732][ T25] audit: type=1326 audit(1761959080.762:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 375.230472][ T25] audit: type=1326 audit(1761959080.762:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 375.363421][ T25] audit: type=1326 audit(1761959080.762:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 375.500325][ T25] audit: type=1326 audit(1761959080.762:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 375.676807][ T146] Bluetooth: Wrong link type (-22) [ 376.576687][ T25] audit: type=1326 audit(1761959080.762:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 377.360592][ T4296] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 377.374952][ T8033] kvm: pic: non byte write [ 377.654704][ T4296] usb 3-1: Using ep0 maxpacket: 16 [ 377.825372][ T4296] usb 3-1: unable to get BOS descriptor or descriptor too short [ 378.718193][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.733032][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.829382][ T8055] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 378.836959][ T8055] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 378.844608][ T8055] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 378.857944][ T8055] Error parsing options; rc = [-22] [ 379.002587][ T4296] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 379.319275][ T4296] usb 3-1: can't read configurations, error -71 [ 379.396448][ T25] kauditd_printk_skb: 32 callbacks suppressed [ 379.396462][ T25] audit: type=1326 audit(1761959086.412:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 379.494368][ T25] audit: type=1326 audit(1761959086.442:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 379.707709][ T4192] Bluetooth: Wrong link type (-22) [ 379.754215][ T8075] loop3: detected capacity change from 0 to 2048 [ 379.820751][ T25] audit: type=1326 audit(1761959086.442:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 379.852565][ T25] audit: type=1326 audit(1761959086.442:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 379.883434][ T25] audit: type=1326 audit(1761959086.442:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 379.936192][ T8075] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 379.953260][ T8075] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.024626][ T25] audit: type=1326 audit(1761959086.442:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 380.190065][ T25] audit: type=1326 audit(1761959086.442:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 380.342815][ T25] audit: type=1326 audit(1761959086.742:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 380.394241][ T25] audit: type=1326 audit(1761959086.752:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 380.421878][ T25] audit: type=1326 audit(1761959086.752:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a13426fc9 code=0x7ffc0000 [ 382.166986][ T8128] kvm: pic: non byte write [ 382.919153][ T8145] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 382.926729][ T8145] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 382.934371][ T8145] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 382.947607][ T8145] Error parsing options; rc = [-22] [ 385.650549][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 385.978166][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 386.101069][ T21] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 386.125866][ T21] usb 3-1: config 0 has no interface number 0 [ 386.300634][ T21] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.34 [ 386.314677][ T21] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 386.330458][ T21] usb 3-1: Product: syz [ 386.334653][ T21] usb 3-1: Manufacturer: syz [ 386.350482][ T21] usb 3-1: SerialNumber: syz [ 386.381028][ T21] usb 3-1: config 0 descriptor?? [ 386.434525][ T21] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 386.543979][ T8194] binder: 8187:8194 ioctl 4018620d 0 returned -22 [ 387.648761][ T8220] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 387.656247][ T8220] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 387.663770][ T8220] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 387.676889][ T8220] Error parsing options; rc = [-22] [ 388.230671][ T21] gspca_stk1135: reg_w 0xd err -110 [ 388.237031][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 388.306798][ T21] gspca_stk1135: Sensor write failed [ 388.373191][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 388.379526][ T21] gspca_stk1135: Sensor write failed [ 388.440603][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 388.446939][ T21] gspca_stk1135: Sensor read failed [ 388.473712][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 388.480073][ T21] gspca_stk1135: Sensor read failed [ 388.530471][ T21] gspca_stk1135: Detected sensor type unknown (0x0) [ 388.550494][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 388.557265][ T21] gspca_stk1135: Sensor read failed [ 388.578041][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 388.625828][ T21] gspca_stk1135: Sensor read failed [ 388.647742][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 388.660475][ T21] gspca_stk1135: Sensor write failed [ 388.678572][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 388.715518][ T21] gspca_stk1135: Sensor write failed [ 388.730494][ T21] stk1135: probe of 3-1:0.95 failed with error -110 [ 388.769375][ T21] usb 3-1: USB disconnect, device number 10 [ 389.190733][ T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 390.251212][ T21] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 390.275651][ T8267] loop6: detected capacity change from 0 to 256 [ 390.295129][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.333347][ T21] usb 3-1: Product: syz [ 390.350532][ T21] usb 3-1: Manufacturer: syz [ 390.355157][ T21] usb 3-1: SerialNumber: syz [ 391.370585][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 391.398419][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 391.457083][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 391.486975][ T21] lan78xx: probe of 3-1:1.0 failed with error -71 [ 391.655904][ T21] usb 3-1: USB disconnect, device number 11 [ 393.524905][ T8334] netlink: 'syz.2.966': attribute type 4 has an invalid length. [ 393.534614][ T8334] netlink: 17 bytes leftover after parsing attributes in process `syz.2.966'. [ 393.870497][ T4244] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 394.273210][ T4244] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 394.305753][ T4244] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 394.374206][ T4244] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.499135][ T4244] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 394.618832][ T4244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.023524][ T4244] usb 3-1: invalid MIDI out EP 0 [ 395.254675][ T4244] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 395.325581][ T4464] udevd[4464]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.170741][ T6664] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 396.203155][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.7.975'. [ 396.410596][ T6664] usb 7-1: Using ep0 maxpacket: 32 [ 396.691865][ T6664] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 396.712792][ T6664] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.747802][ T6664] usb 7-1: Product: syz [ 396.759979][ T6664] usb 7-1: Manufacturer: syz [ 396.779935][ T6664] usb 7-1: SerialNumber: syz [ 396.809621][ T6664] usb 7-1: config 0 descriptor?? [ 396.861888][ T6664] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 397.068824][ T25] audit: type=1326 audit(1761959104.082:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8400 comm="syz.3.977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a32a2bfc9 code=0x0 [ 397.638066][ T146] Bluetooth: Wrong link type (-22) [ 397.643335][ T146] Bluetooth: hci1: link tx timeout [ 397.648773][ T146] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 397.750672][ T6664] gspca_ov534_9: reg_w failed -71 [ 397.837868][ T7795] usb 3-1: USB disconnect, device number 12 [ 397.902814][ T8332] delete_channel: no stack [ 398.373749][ T8431] loop2: detected capacity change from 0 to 4096 [ 398.445745][ T8431] EXT4-fs (loop2): Test dummy encryption mode enabled [ 398.626385][ T8431] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 398.635000][ T8431] System zones: 0-5 [ 398.708940][ T8431] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 398.801436][ T6664] gspca_ov534_9: Unknown sensor 0000 [ 398.801503][ T6664] ov534_9: probe of 7-1:0.0 failed with error -22 [ 398.863314][ T146] ================================================================== [ 398.871887][ T146] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 398.877812][ T6664] usb 7-1: USB disconnect, device number 4 [ 398.879714][ T146] Read of size 1 at addr ffff88805f737c06 by task kworker/u5:0/146 [ 398.893498][ T146] [ 398.895824][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 398.903544][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.913610][ T146] Workqueue: hci4 hci_rx_work [ 398.918318][ T146] Call Trace: [ 398.921605][ T146] [ 398.924547][ T146] dump_stack_lvl+0x168/0x230 [ 398.929242][ T146] ? show_regs_print_info+0x20/0x20 [ 398.934461][ T146] ? load_image+0x3b0/0x3b0 [ 398.938985][ T146] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 398.944380][ T146] print_address_description+0x60/0x2d0 [ 398.949948][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 398.955076][ T146] kasan_report+0xdf/0x130 [ 398.959507][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 398.964635][ T146] hci_le_meta_evt+0x12c0/0x3b80 [ 398.969584][ T146] ? hci_event_packet+0x2a0/0x12f0 [ 398.974732][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 398.980824][ T146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 398.986474][ T146] ? mark_lock+0x94/0x320 [ 398.990831][ T146] ? mutex_unlock+0x10/0x10 [ 398.995347][ T146] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 399.001342][ T146] ? lock_chain_count+0x20/0x20 [ 399.006209][ T146] ? __rwlock_init+0x140/0x140 [ 399.010986][ T146] hci_event_packet+0xe05/0x12f0 [ 399.015937][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 399.021153][ T146] ? rcu_lock_release+0x20/0x20 [ 399.026020][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 399.031225][ T146] hci_rx_work+0x255/0xa10 [ 399.035645][ T146] process_one_work+0x863/0x1000 [ 399.040581][ T146] ? worker_detach_from_pool+0x240/0x240 [ 399.046198][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 399.051473][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 399.056478][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 399.061832][ T146] ? wq_worker_running+0x97/0x170 [ 399.066857][ T146] worker_thread+0xaa8/0x12a0 [ 399.071670][ T146] kthread+0x436/0x520 [ 399.075743][ T146] ? rcu_lock_release+0x20/0x20 [ 399.080599][ T146] ? kthread_blkcg+0xd0/0xd0 [ 399.085179][ T146] ret_from_fork+0x1f/0x30 [ 399.089594][ T146] [ 399.092693][ T146] [ 399.095005][ T146] Allocated by task 8437: [ 399.099329][ T146] __kasan_kmalloc+0xb5/0xf0 [ 399.103923][ T146] __alloc_skb+0x22c/0x750 [ 399.108431][ T146] vhci_write+0xbc/0x450 [ 399.112671][ T146] vfs_write+0x712/0xd00 [ 399.116996][ T146] ksys_write+0x14d/0x250 [ 399.121319][ T146] do_syscall_64+0x4c/0xa0 [ 399.125724][ T146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 399.131633][ T146] [ 399.133938][ T146] Last potentially related work creation: [ 399.139633][ T146] kasan_save_stack+0x35/0x60 [ 399.144393][ T146] kasan_record_aux_stack+0xb8/0x100 [ 399.149660][ T146] kvfree_call_rcu+0x10a/0x7c0 [ 399.154839][ T146] neigh_periodic_work+0x407/0xc70 [ 399.159930][ T146] process_one_work+0x863/0x1000 [ 399.164851][ T146] worker_thread+0xaa8/0x12a0 [ 399.169507][ T146] kthread+0x436/0x520 [ 399.173573][ T146] ret_from_fork+0x1f/0x30 [ 399.177969][ T146] [ 399.180270][ T146] The buggy address belongs to the object at ffff88805f737800 [ 399.180270][ T146] which belongs to the cache kmalloc-1k of size 1024 [ 399.194309][ T146] The buggy address is located 6 bytes to the right of [ 399.194309][ T146] 1024-byte region [ffff88805f737800, ffff88805f737c00) [ 399.208011][ T146] The buggy address belongs to the page: [ 399.213658][ T146] page:ffffea00017dcc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f730 [ 399.223792][ T146] head:ffffea00017dcc00 order:3 compound_mapcount:0 compound_pincount:0 [ 399.232117][ T146] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 399.240095][ T146] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841dc0 [ 399.248661][ T146] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 399.257221][ T146] page dumped because: kasan: bad access detected [ 399.263620][ T146] page_owner tracks the page as allocated [ 399.269314][ T146] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4186, ts 54789780118, free_ts 11622710573 [ 399.288489][ T146] get_page_from_freelist+0x1b77/0x1c60 [ 399.294021][ T146] __alloc_pages+0x1e1/0x470 [ 399.298592][ T146] new_slab+0xc0/0x4b0 [ 399.302639][ T146] ___slab_alloc+0x81e/0xdf0 [ 399.307209][ T146] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 399.312995][ T146] __alloc_skb+0x22c/0x750 [ 399.317389][ T146] rtmsg_fib+0xe7/0x4b0 [ 399.321531][ T146] fib_table_insert+0x987/0x1b20 [ 399.326460][ T146] fib_magic+0x2c1/0x390 [ 399.330687][ T146] fib_add_ifaddr+0x3f7/0x5e0 [ 399.335342][ T146] fib_netdev_event+0x35c/0x480 [ 399.340168][ T146] raw_notifier_call_chain+0xcb/0x160 [ 399.345518][ T146] __dev_notify_flags+0x178/0x2d0 [ 399.350526][ T146] dev_change_flags+0xe3/0x1a0 [ 399.355278][ T146] do_setlink+0xc01/0x3980 [ 399.359674][ T146] rtnl_newlink+0x1419/0x17d0 [ 399.364328][ T146] page last free stack trace: [ 399.368977][ T146] free_unref_page_prepare+0x637/0x6c0 [ 399.374429][ T146] free_unref_page+0x94/0x280 [ 399.379087][ T146] free_contig_range+0x96/0xf0 [ 399.383832][ T146] destroy_args+0x100/0xa20 [ 399.388320][ T146] debug_vm_pgtable+0x318/0x370 [ 399.393160][ T146] do_one_initcall+0x1ee/0x680 [ 399.397904][ T146] do_initcall_level+0x137/0x1f0 [ 399.402823][ T146] do_initcalls+0x4b/0x90 [ 399.407130][ T146] kernel_init_freeable+0x3ce/0x560 [ 399.412311][ T146] kernel_init+0x19/0x1b0 [ 399.416620][ T146] ret_from_fork+0x1f/0x30 [ 399.421022][ T146] [ 399.423331][ T146] Memory state around the buggy address: [ 399.428935][ T146] ffff88805f737b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 399.436977][ T146] ffff88805f737b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 399.445021][ T146] >ffff88805f737c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.453061][ T146] ^ [ 399.457109][ T146] ffff88805f737c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.465146][ T146] ffff88805f737d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.473183][ T146] ================================================================== [ 399.481221][ T146] Disabling lock debugging due to kernel taint [ 399.553700][ T146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 399.561031][ T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 399.569882][ T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.579945][ T146] Workqueue: hci4 hci_rx_work [ 399.584651][ T146] Call Trace: [ 399.588288][ T146] [ 399.591223][ T146] dump_stack_lvl+0x168/0x230 [ 399.595908][ T146] ? show_regs_print_info+0x20/0x20 [ 399.601112][ T146] ? load_image+0x3b0/0x3b0 [ 399.605635][ T146] panic+0x2c9/0x7f0 [ 399.609537][ T146] ? bpf_jit_dump+0xd0/0xd0 [ 399.614042][ T146] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 399.619939][ T146] ? _raw_spin_unlock+0x40/0x40 [ 399.624791][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 399.629905][ T146] check_panic_on_warn+0x80/0xa0 [ 399.634847][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 399.639957][ T146] end_report+0x6d/0xf0 [ 399.644119][ T146] kasan_report+0x102/0x130 [ 399.648711][ T146] ? hci_le_meta_evt+0x12c0/0x3b80 [ 399.653829][ T146] hci_le_meta_evt+0x12c0/0x3b80 [ 399.658774][ T146] ? hci_event_packet+0x2a0/0x12f0 [ 399.663898][ T146] ? hci_remote_host_features_evt+0x280/0x280 [ 399.670086][ T146] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 399.675926][ T146] ? mark_lock+0x94/0x320 [ 399.680271][ T146] ? mutex_unlock+0x10/0x10 [ 399.684780][ T146] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 399.690773][ T146] ? lock_chain_count+0x20/0x20 [ 399.695642][ T146] ? __rwlock_init+0x140/0x140 [ 399.700410][ T146] hci_event_packet+0xe05/0x12f0 [ 399.705352][ T146] ? lockdep_hardirqs_on+0x94/0x140 [ 399.710560][ T146] ? rcu_lock_release+0x20/0x20 [ 399.715420][ T146] ? hci_send_to_monitor+0x9c/0x4a0 [ 399.720620][ T146] hci_rx_work+0x255/0xa10 [ 399.725044][ T146] process_one_work+0x863/0x1000 [ 399.729991][ T146] ? worker_detach_from_pool+0x240/0x240 [ 399.735751][ T146] ? lockdep_hardirqs_off+0x70/0x100 [ 399.741065][ T146] ? _raw_spin_lock_irq+0xab/0xe0 [ 399.746096][ T146] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 399.751483][ T146] ? wq_worker_running+0x97/0x170 [ 399.756607][ T146] worker_thread+0xaa8/0x12a0 [ 399.761304][ T146] kthread+0x436/0x520 [ 399.765376][ T146] ? rcu_lock_release+0x20/0x20 [ 399.770227][ T146] ? kthread_blkcg+0xd0/0xd0 [ 399.774818][ T146] ret_from_fork+0x1f/0x30 [ 399.779245][ T146] [ 399.782464][ T146] Kernel Offset: disabled [ 399.786786][ T146] Rebooting in 86400 seconds..