last executing test programs: 2m12.295919028s ago: executing program 3 (id=165): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9"], 0x88}}, 0x0) 2m12.20149832s ago: executing program 3 (id=167): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x15, "f9808039360bcc2b16d413871108db2bf1b8e11467"}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, 0x0, 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 2m12.124844521s ago: executing program 3 (id=168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(0x0, 0x80000000000b, 0x3, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@x86={0xbc, 0x3, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0xf, 0x5, 0x70, 0x0, 0x200000d, 0x9, 0x0, 0x0, 0x0, 0xe3, '\x00', 0x4, 0xd}) 2m11.727399789s ago: executing program 3 (id=174): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000740)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b28c52096d13d6b9aac338f27ca2d2108c51ad7bbbc6ec9d577b00c703c4ef2ee9f16febbb7afdafc59e817dc8edb56d445c74fa48cdccf79223640f685b92b26c62d7d65dd4fdd6f73c1d9c70f1bca7a7150f62de63f2f579f1fb2d10f3a770f2b9ce8cd8be9414e0444fd357b3fad5b16d91c91c0f1aa3e11d39426af77180bdb588060a2546b369655c02eb52709e0e03785f8010bfd1a72a817dad46c854ebb0a8aa5d59cae56089e2aac882b33018aa4006a44968a267cde827c86aa1abccb51cb152459f91a39a5cbbd8d218d37f4cf35d339694a379", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a1c6261571866a21a54d762495480"], 0xf, 0x2a4, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m11.339407447s ago: executing program 3 (id=179): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file3\x00', 0x40, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d8, &(0x7f0000000640)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2m10.15823351s ago: executing program 3 (id=187): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x500, 0x0, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) r6 = syz_open_dev$sg(&(0x7f0000002c40), 0x0, 0x100) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a2c6b43b591690b040000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1008004500001d0000000000019078ac1414bbac14140eb8e4ec79219ea949933d621b546e7fd834936f34ddb0c512d57834916bdacb781996fdd8bd281cc1187d00f2adf8d97273e87b1b444c756ce436f8faccde3dda5ffb2d3f2043ac44a49931714d382d847da3f590a169470ea8"], 0x0) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000002c80)) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 2m9.944641963s ago: executing program 32 (id=187): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x500, 0x0, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) r6 = syz_open_dev$sg(&(0x7f0000002c40), 0x0, 0x100) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a2c6b43b591690b040000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1008004500001d0000000000019078ac1414bbac14140eb8e4ec79219ea949933d621b546e7fd834936f34ddb0c512d57834916bdacb781996fdd8bd281cc1187d00f2adf8d97273e87b1b444c756ce436f8faccde3dda5ffb2d3f2043ac44a49931714d382d847da3f590a169470ea8"], 0x0) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000002c80)) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 1m45.491446339s ago: executing program 1 (id=324): syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902120001000000000904000000ef"], 0x0) 1m42.711741613s ago: executing program 1 (id=344): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m41.353113969s ago: executing program 1 (id=350): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@delalloc}, {@dioread_nolock}, {@nobarrier}, {@nouser_xattr}, {@dioread_nolock}, {@nodioread_nolock}, {@sb={'sb', 0x3d, 0x6}}, {@noauto_da_alloc}, {@jqfmt_vfsold}]}, 0x1, 0x790, &(0x7f0000001740)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0xb) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f00000004c0), 0x9) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) 1m40.845379869s ago: executing program 1 (id=354): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x22d00, 0x143) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd3513000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00009a8000/0x1000)=nil, 0x1000, 0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0xfffffc00, 0x0) link(0x0, &(0x7f0000000280)='./bus\x00') 1m39.011004215s ago: executing program 1 (id=359): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x880) syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) pipe2$9p(&(0x7f00000023c0), 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x9, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m37.768894919s ago: executing program 1 (id=363): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000400)={[{@usrquota}, {@noblock_validity}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@bh}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x6, 0x5fc, &(0x7f00000004c0)="$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") 1m37.457791655s ago: executing program 33 (id=363): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000400)={[{@usrquota}, {@noblock_validity}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@bh}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x6, 0x5fc, &(0x7f00000004c0)="$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") 1m30.707066276s ago: executing program 5 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m30.234954796s ago: executing program 5 (id=402): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0'}, 0xb) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 1m29.747301215s ago: executing program 5 (id=406): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) dup3(r3, r2, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m29.462253711s ago: executing program 5 (id=410): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31) getdents(r1, &(0x7f0000001280)=""/4075, 0xffb) 1m26.340119811s ago: executing program 5 (id=428): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) r2 = syz_open_pts(r1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r4 = eventfd(0x10) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f00000003c0)='z', 0x1, 0xcead, 0x0, 0x5, r4}]) close_range(r1, 0xffffffffffffffff, 0x0) 1m23.731313072s ago: executing program 5 (id=444): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m23.30935534s ago: executing program 34 (id=444): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 55.990688021s ago: executing program 4 (id=562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001140)=""/4097, 0x1001}], 0x1, 0x772, 0x0) 54.906618933s ago: executing program 4 (id=570): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[], 0x2, 0x150f, &(0x7f0000004bc0)="$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") 52.44573114s ago: executing program 4 (id=577): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x45c, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 51.211368544s ago: executing program 4 (id=579): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000140)={[{@map_off}, {@check_strict}, {@hide}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 50.783368843s ago: executing program 4 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) chmod(&(0x7f0000000000)='./file1\x00', 0x2) 49.795443012s ago: executing program 4 (id=586): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103942, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100001) 49.542441197s ago: executing program 35 (id=586): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103942, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100001) 20.380069554s ago: executing program 8 (id=721): r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) socket$kcm(0x10, 0x2, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32={[0x3fff]}}], 0xffc8) pread64(r0, &(0x7f0000004e00)=""/101, 0x22, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 16.96111852s ago: executing program 8 (id=741): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x0, 0x80, 0x44000, r0, 0x4, '\x00', 0x0, r1, 0x4, 0x5, 0x1, 0x6}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000024c0)={r2, 0x787f, 0x18}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() getrlimit(0x9, &(0x7f0000000000)) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) poll(&(0x7f0000000180)=[{r8, 0xa}], 0x1, 0x2) 15.619152456s ago: executing program 8 (id=747): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000300)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0xf8}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x104}}, 0x0) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x100) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3]}) 14.711328224s ago: executing program 8 (id=757): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2018000, &(0x7f0000003f80)=ANY=[], 0x1, 0x31a, &(0x7f0000000780)="$eJzs3MtrO1UUwPGTZ5OUNl2IoiA96EY3Qxtda4O0IAYssREfIEzbiYaMScmESkSsrtyKf4SL0p3dFbT/QDfudOPGhdCN4MIuxPmReSRpHm3TX9r08f1AmcO992TunZnAuSXJ6Qfff14tO0bZbEo0pRIRETkTWZCozIgvEhyjXpyUXt/Iq7P//Pbiex9+9E6+UFhdy/jNqjq/+PMXX6WDYUczcrLwyenfuT9Pnj15/vT/jc8qjlYcrdWbaupm/Y+muWlbul1xqobqum2ZjqWVmmM1/P6631+26zs7LTVr23OZnYblOGrWWlq1Wtqsa7PR0tinZqWmhmHoXEZwmdJ+sWjmr5m8NeHJ4IY0GnkzJiLpgZ7S/lQmBAAApqq//o+Kdur/0Bj1f1F1Lb/xWi6s/w9eOm7Ovn84H9T/R8lh9f/rv/uvda7+T4nI0Po/PP/Q+t8cr/5Pu3uTupD30lPV/7gbFpMDTZFu2O5s5M1M8P71fPvxwZIXUP8DAAAAAAAAAAAAAAAAAAAAAHAfnLlu1nXdbHhsFbt9KRFxg/YhqTERefM254rJ67//4d/M4P133WlPFhPX/eJefF7E/m63tFvyj8GAYxGxxZIlycp/3vMQaMfhN4+0bUF+sfeC/L3dUszryZel4uUvSzYh/fmuu/Z2YXVZfefzE5Lpzc9JVp4Znp9T1b8G8pPyyss9+YZk5dctqYst28HDHOZ/vaz61ruFdr5IJz/tjQMAAAAA4CEwtGPo/t0wRvX7+Z39df//B2Ld/fXS0P19XF6IS2K6qwcAAAAA4HFwWl9WTdu2GhcEabl8jB8krjCmP4iPM3iMIFzhVbPCzzJMeBpXC8KTn+tKBY0TvyyRMS7LiCAq18labK9Ge1t+io7/OvHguowaI+srN3q/kiPfO8/98OO/EziFpLzgjcPUJSu9fhC7+AFIBB//AgAAAPCAdIv+sGVluhMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOARuo3ft5v2GgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC74kkAAAD//47f/OE=") open(&(0x7f0000000140)='./file1\x00', 0x167842, 0x21) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x80) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000340)='./file1\x00') 14.205146894s ago: executing program 8 (id=758): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="b7a395420f5b2fc7e0e70eacd35b727c", 0x10}], 0x1}}], 0x1, 0x4000000) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000006c0)=""/131, 0x83}], 0x1}, 0x60) 13.487408277s ago: executing program 8 (id=759): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x880) syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x9, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.330280731s ago: executing program 36 (id=759): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x880) syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x9, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.379408248s ago: executing program 2 (id=771): r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) socket$kcm(0x10, 0x2, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32={[0x3fff]}}], 0xffc8) pread64(r0, &(0x7f0000004e00)=""/101, 0x22, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 8.259779499s ago: executing program 2 (id=775): r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000280), 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, r4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff, 0x1, 0x2, 0x1, 0x0, 0x6}, 0x20) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 7.1652392s ago: executing program 2 (id=779): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000300)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0xf8}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x104}}, 0x0) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x100) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3]}) 7.076102342s ago: executing program 7 (id=780): syz_mount_image$udf(&(0x7f0000000140), &(0x7f00000000c0)='.\x02\x00', 0x1000882, &(0x7f0000001cc0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYBLOB="1cbb2cdd171d492deb19cb4b50f57fe03514acd1d4c838e2c6f896f71319f9927bb900ea7fd140c59552b18fd7fa112f3255fd02c04423cea65c50f3f1131a9644733abcb0218bbfab259417ec021df71f9bd9568e390396358819c94ed2351551a96eeff9b964e5f961027ae3a3a71b49c7364d5ebe1d6525c6437993d4082972d57be58928184da45cbf987f0a13f648dc9a6621c8392b2f1fedc71c85812425a68ba4edb0552df5b8e74af9249846923776c821deddd2f02d473b436ba514df04522dddad1cb5e75766d125d5eafcc652fbd3deaac0bf7eaf7ed8a586d36bffdb2f61bced8a3fd75f66c8eca0de326c41a8993c3ef39131", @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES8], 0x10, 0xc34, &(0x7f0000001080)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LMkkJcr+fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lhtwIAeJDOT3/1+AnPfwD4RLng//8BAAAAAAAAAAAAAOCgS1HEE5Fi6fxWmq0+dw2fa3euXpuZmLx9tZFU1Ryoypc/w8+fOHnqSy+Mn+7lh9ffa0/Fa9MXztZfXryytNxaWWnN12c67bnF+dY9b2G39W82Vh2A+pXXr85furRSP/HcyRu+vjb6wdDjR0bPjD9z7Ole2ZmJycnpvjK1wY+891vcaYTHoSjiWKR49vs/Ts2IKGL3x+Iu185+G6k6MVZ1YmZisurIQrvZWS2/nOodiCKi3lep0TtGD+Bc7EojYq1sftngsbJ700vN5ebFhVZ9qrm82l5tL3amUre1ZX/qUcTpFLEeEZtDt25uMIqoRYrvHt5KFyNioHccvlgNDL5zO4p97OM9KNtZH4xYLx6Bc3aADUURr0aKn7xTxFx5zPJPfCHi1TL/MeKtMl+KSOWFcSri/eo6GnnILWcv1KKIPyvP/5mtNF/dD3r3lXNfq3+lc2mxr2zvvvLIPx8epAN+bxqOIprVHX8rffTf7AAAAAAAAAAAAAAAAACw10aiiKcixSv//gfVuOKoxqUfPjP+u6M/3z9m/Mm7bKcs+1xErBX3Nib3UB5CPJWmUnrIY4k/yYajiD/K4/++/bAbAwAAAAAAAAAAAAAAAAAA8IlWxHuR4sV3j6b16J9TvN25XL/QvLjQnRW2N/dvb8707e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjluvnbOSczbmWcz3nRs7NnHFA5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIn0WK73xjK0WKiEbEbHRzY6hXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mIZSET+IFPXfa1xfV4uIVP3bdbT85VQ0DpX56WiMl/lSNM7mbFZZa3z7IbSf3RlMRfwoUgwNv339hOfzP9j9dP0yiLe+ufPpl2rdHOh9OfrB0ONHDp8Zn/yVJ++0nG7XgLFz7c7Va/WZicnJ6b7Vtbz3T/etG837Lfam60TEyhtvvt5cWGgtW/hkLNS6C7XY0y2PROztBvduodZdyPereOjtucNC42A0Y2chqnv/be/ZfGyUz//3I8VvvvsfvQd+7/n/c91P15/w8dM/3nn+v3jzhvbp+f9E37oX8+9GBmsRw6tXlgaPRAyvvPHmsfaV5uXW5Vbn1PHjXx4f//LJ44OHIoYvtRdafUu7PlQAAAAAAAAAAAAAAAAAD1Yq4rcjRfNHW6keEdeq8VqjZ8afOfb0QAxU461uGLf12vSFs/WXF68sLbdWVlrz9ZlOe25xvnWvuxuuhnvNTEzuS2fuamSf2z8y/PLi0hvL7cu/v3rb7x8bPntxZXW5OXf7r2MkiohG/5qxqsEzE5NVoxfazU5VdWqPBmYOpiL+M1LMnaqnz+d1efxfGe8N9pXtH/+/1re+Wt6n8X+fumk/KRXx00jxG3/+ZHy+audjccsxy+X+OlKMnf5cLheHynK9NnTfK9AdGViW/d9I8fc/u7Fsr+9P7JR9/v6O7sFXnv/DkeIHf/q9+NW87sb3P+yM/+w//4/dvKF9Ov+f6Vv32A3vK9h118nn/1ikeOmJt+PX8roPe/9HEdvb29+KOJoLX38/xz6d/8/2rRuN7n5/fe+6DwAAAAAAAAAA8MgaTEX8TaR4erKWXsjr7uXv/83fvKF9+vtfv9i3bv4BzVe064MKAAAAAAfEYCrivUhxefXt62Oo+8Z/3zj+87d25l6fSDd9W/053y9U7w3Yyz//6zea9zu7+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dRn7zKf+kakeOW/n83l0pGyXG8e+NHq1+Hzi51jZxcWFueaq82LC6369FJzrlXW/Uyk2Pqrz+W6RTW/em+++e4c78PbvbnYlyPF5N/2ynbnYu/NTd6dD7w7F3tZ9lOR4r/+7sayvXmsP7tT9kRZ9i8jxdf/6fZlj+yUPVmW/V6k+OHX672yj5Vle+9H7b6TdLgWC63n5hYXbnkVKgAAAAAAAAAAAAAAAAAAANyvwVTEn0SK/7myHmt52H+e/783A3+tV/atb/bN93+Ta9U8/6PV/P93Wv4o8/+P7llPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0ZGiiDcjxdL5rbQxVH7uGj7X7ly9NjMxeftqI6mqOVCVL3+Gnz9x8tSXXhg/3csPr7/XnorXpi+crb+8eGVpubWy0pqvz3Tac4vzrXvewm7r7xy6rrHqANSvvH51/tKllfqJ507e8PW10Q+GHj8yemb8mWNP98rOTExOTveVqQ3ex97vq3E7DkURfxEpnv3+j9M/D0UUsftjcZdrZ7+NVJ0YqzoxMzFZdWSh3eysll9O9Q5EEVHvq9ToHaMHcC52pRGxVja/bPBY2b3ppeZy8+JCqz7VXF5tr7YXO1Op29qyP/Uo4nSKWI+IzaFbNzcYRbweKb57eCv9y1DEQO84fPH89FePn7hzO4p97OM9KNtZH4xYLx6Bc3aADUUR/xApfvLO0fjXoYhadH/iCxGv9hd8KSKVF8apiPdvcx3xaKpFEf9Xnv8zW+mdofJ+0LuvnPta/SudS4t9ZXv3lYP0fNi+/2txZA92e+8O+L1pOIr4YXXH30r/5r9rAAAAAAAAAAAAAAAAgAOkiF+OFC++ezRV44Ovjyludy7XLzQvLnSH9fXG/tUj/rDM7e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjVsX29va3uvVruX7OtZzrtYiirJ8/b+aMAzJ2DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfOcbW6maS7URMRvd3DAf6Mfe/wcAAP//3sf+xA==") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00') lstat(&(0x7f000000c3c0)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100, 0x40, 0x0) 4.913997885s ago: executing program 2 (id=782): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) 4.727385678s ago: executing program 2 (id=785): r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) socket$kcm(0x10, 0x2, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{0x0, 0x114}], 0x1}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32={[0x3fff]}}], 0xffc8) pread64(r0, &(0x7f0000004e00)=""/101, 0x22, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 4.582890121s ago: executing program 6 (id=787): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.491394733s ago: executing program 7 (id=788): syz_mount_image$vfat(&(0x7f0000002380), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b1, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='block_bio_remap\x00', r0, 0x0, 0x1}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 3.250972027s ago: executing program 6 (id=791): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c"]) chdir(&(0x7f0000000300)='./file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0xf8}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x104}}, 0x0) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x100) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3]}) 2.419847893s ago: executing program 0 (id=793): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000400)=r2, 0x12) 2.177302897s ago: executing program 6 (id=794): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x4, 0x0, 0xfffffffffffff000}]}}}}}}}}, 0x0) 1.999408121s ago: executing program 6 (id=795): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a00)={'bridge0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.919573023s ago: executing program 0 (id=796): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)={0x93fd, 0x1, [{0x3, 0x1}]}) 1.868148063s ago: executing program 6 (id=797): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0, 0x17f, &(0x7f0000000240)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x601, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 790.715294ms ago: executing program 0 (id=798): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r3) 694.593716ms ago: executing program 0 (id=799): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$eJzsmbFrFEEUxr+Z3ds7gwRtLGwsDBjR7O3uqaSJEMFSEKKo5WHWEN3k5LJC7kDwsLHRzkKwtbG0sLCy8C+w1UIFwcIrBQthZGZnd4e93fMOTwXzfpDJN/PezLz3YF6xB4Ig9iyfPn778PDc8qWTAPZjAXW9/sXKfbjh//7JnROPV84/ffHu2Zvt+buviucxAEJUXve9aHIAvF61EIPZyYoQmM/tC0YIWuMyOI5rfQUMbiJ/CEUyCcFwTfvcNHRnnxZR6F7vROs3NqPQk4Mvh0AOLTM+GdRwwLAOoKGiE4IZ9p1e/1Y7isJuUdREes+IaVrBK8up41vlWEFaPSGk/9UH9wdyrmsDDzyrnw8OX+sWGNa0XkYdruvmJTHyP2zn51uT5D9jcVbd9WjSXc+VOLj05wNLRPpGptkly/g3SvcfidpMzmHFFfmgs5VDw7QHmj6f/1nu+LVPY/xjhLaPmN7ORdGF34jQKSlUJvL+JDv7MaM/2bCz/tGMt243d3r9pc2t9ka4EW4HQeuMd8rzTgdN1YiScUz/a6j+NGecX6vwdZiD3XYcd/1dIO762TxIxjwBrL3sfJVbDkD1P47Fo+oI1VNV2vXyO5j+4+q/VItWuee9ypwIgiAIgiAIgiAIgiAIgiDKOQKG5JcwwfQH0TKCi+oL5c8AAAD//40vYXw=") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) prctl$PR_SET_MM_EXE_FILE(0x29, 0xd, 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 594.009268ms ago: executing program 6 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001e0043"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) readv(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x482, 0x81) syz_usb_connect(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xcb, 0xe8, 0x85, 0x20, 0xdd8, 0x1060, 0xd7ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x2f, 0x8, 0x0, 0xff, 0x3, 0x6b}}]}}]}}, 0x0) 528.30133ms ago: executing program 7 (id=801): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x15, "f9808039360bcc2b16d413871108db2bf1b8e11467"}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 362.350143ms ago: executing program 2 (id=802): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb000800103aff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10e, 0x0, &(0x7f0000000340), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x7ffffffe) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000380)={0x2, r5}) socket$netlink(0x10, 0x3, 0x8000000004) 331.028643ms ago: executing program 0 (id=803): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{0x0, 0x32, 0xffffffffffffffff, 0xe, 0x2, 0x2, 0x1, 0x61, 0x0, 0xfffffffc, 0x100, 0x200, 0x7, 0xffff, 0x6}, 0x8, [0x0]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="09000000010001", 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40808}, 0x40040) close(r4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3012db", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060003000000"], 0x30}}, 0x0) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 330.573533ms ago: executing program 7 (id=804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000a80)) 147.570107ms ago: executing program 7 (id=805): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) getdents64(r0, 0x0, 0x2e) 19.8411ms ago: executing program 0 (id=806): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r3) sendmmsg$unix(r2, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) 0s ago: executing program 7 (id=807): socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_procfs$userns(r1, &(0x7f0000000000)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa7, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) truncate(0x0, 0xbf39) close(0x3) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) kernel console output (not intermixed with test programs): werdir path [ 100.635241][ T4929] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.730367][ T4352] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.751250][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.776956][ T1108] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.805486][ T1108] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.896613][ T4352] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.981320][ T1108] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 100.996827][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 101.005610][ T1108] usb 1-1: Product: syz [ 101.041943][ T1108] usb 1-1: Manufacturer: syz [ 101.082367][ T1108] usb 1-1: SerialNumber: syz [ 102.181810][ T4352] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.209830][ T4944] qrtr: Invalid version 0 [ 102.318865][ T4352] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.380748][ T1108] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 103.329464][ T1108] usb 1-1: USB disconnect, device number 4 [ 103.351882][ T1108] usblp0: removed [ 103.409789][ T4960] loop2: detected capacity change from 0 to 1024 [ 103.518611][ T4962] overlayfs: overlapping lowerdir path [ 103.540674][ T4960] hfsplus: bad catalog entry type [ 103.652854][ T4407] hfsplus: b-tree write err: -5, ino 4 [ 103.839070][ T4946] chnl_net:caif_netlink_parms(): no params data found [ 104.046548][ T4970] loop4: detected capacity change from 0 to 8192 [ 104.874611][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 104.926380][ T4946] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.107445][ T4946] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.217878][ T4997] qrtr: Invalid version 0 [ 106.377369][ T4946] device bridge_slave_0 entered promiscuous mode [ 106.429554][ T4946] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.482199][ T4946] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.554007][ T4946] device bridge_slave_1 entered promiscuous mode [ 106.972366][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 107.493175][ T4946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.794990][ T4946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.547646][ T5026] netlink: 'syz.0.211': attribute type 10 has an invalid length. [ 108.568172][ T5028] loop2: detected capacity change from 0 to 1024 [ 108.591752][ T5026] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.628309][ T4946] team0: Port device team_slave_0 added [ 108.681702][ T4352] bond0: (slave wlan1): Releasing backup interface [ 108.714222][ T5028] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,norecovery,,errors=continue. Quota mode: writeback. [ 108.718240][ T4946] team0: Port device team_slave_1 added [ 108.738559][ T5028] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.829350][ T26] audit: type=1800 audit(1756895000.361:2): pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.210" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 108.850602][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.958648][ T5028] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 1: comm syz.2.210: lblock 1 mapped to illegal pblock 1 (length 15) [ 108.976256][ T26] audit: type=1800 audit(1756895000.421:3): pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.210" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 109.063184][ T4946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.126518][ T4946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.229311][ T4946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.285412][ T4946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.298593][ T4946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.308616][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.387828][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.428160][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.452347][ T4946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.486971][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 109.575352][ T4352] device hsr_slave_0 left promiscuous mode [ 109.591232][ T4352] device hsr_slave_1 left promiscuous mode [ 109.658623][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 109.677332][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 109.705223][ T23] usb 2-1: Product: syz [ 109.735016][ T23] usb 2-1: Manufacturer: syz [ 109.740792][ T23] usb 2-1: SerialNumber: syz [ 109.762115][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.789604][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.840947][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.870418][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.891560][ T4352] device bridge_slave_1 left promiscuous mode [ 109.899226][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.920537][ T4174] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.933111][ T4352] device bridge_slave_0 left promiscuous mode [ 109.948938][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.002901][ T4352] device veth1_macvtap left promiscuous mode [ 110.018868][ T4352] device veth0_macvtap left promiscuous mode [ 110.025093][ T4352] device veth1_vlan left promiscuous mode [ 110.038961][ T4352] device veth0_vlan left promiscuous mode [ 110.050579][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 110.290756][ T3521] usb 2-1: USB disconnect, device number 3 [ 110.314602][ T3521] usblp0: removed [ 110.434237][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 110.502935][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 110.528901][ T4174] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 110.538627][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.547082][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.560991][ T4174] usb 1-1: config 0 descriptor?? [ 110.570267][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.718029][ T4352] bond0 (unregistering): Released all slaves [ 110.765430][ T5075] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.383497][ T3521] usb 1-1: USB disconnect, device number 5 [ 111.484118][ T4946] device hsr_slave_0 entered promiscuous mode [ 111.492840][ T4946] device hsr_slave_1 entered promiscuous mode [ 111.510583][ T4946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.524154][ T4946] Cannot create hsr debugfs directory [ 111.535515][ T5083] netlink: 'syz.1.223': attribute type 10 has an invalid length. [ 111.554496][ T4174] Bluetooth: hci4: command 0x0419 tx timeout [ 111.584377][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.630813][ T5086] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 112.413406][ C0] Illegal XDP return value 16128, expect packet loss! [ 112.599959][ T5109] raw_sendmsg: syz.1.231 forgot to set AF_INET. Fix it! [ 112.744942][ T5114] netlink: 'syz.4.232': attribute type 4 has an invalid length. [ 112.857755][ T4946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.935825][ T4946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.982737][ T4946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.030692][ T4946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.038591][ T4233] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.084239][ T5128] loop1: detected capacity change from 0 to 512 [ 113.144456][ T5136] netlink: 'syz.4.236': attribute type 10 has an invalid length. [ 113.292466][ T5128] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 113.320473][ T4946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.341291][ T4946] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.348317][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.365322][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.368651][ T5128] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.392833][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.408663][ T4233] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.450988][ T4233] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.463332][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.488918][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.496125][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.504026][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.526892][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.598432][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.621075][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.635934][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.643263][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.653142][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.668733][ T4233] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 113.675667][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.678739][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.704205][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 113.714999][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.723218][ T4233] usb 3-1: Product: syz [ 113.723240][ T4233] usb 3-1: Manufacturer: syz [ 113.723256][ T4233] usb 3-1: SerialNumber: syz [ 113.776240][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.796241][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.818997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.832646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.843287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.853508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.871445][ T4946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.935124][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.958618][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 113.980058][ T4233] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 114.006599][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.040720][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.078771][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.099633][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.139500][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.168443][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.080072][ T13] usb 5-1: config 0 descriptor?? [ 115.102274][ T4233] usb 3-1: USB disconnect, device number 3 [ 115.112954][ T4233] usblp0: removed [ 115.122045][ T13] hub 5-1:0.0: USB hub found [ 115.218145][ T5183] loop1: detected capacity change from 0 to 128 [ 115.261204][ T5183] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 115.288732][ T5183] System zones: 1-3, 19-19, 35-36 [ 115.297352][ T5189] netlink: 'syz.0.246': attribute type 4 has an invalid length. [ 115.345904][ T5183] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 115.359787][ T5183] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.383944][ T5183] EXT4-fs warning (device loop1): ext4_group_extend:1852: can't read last block, resize aborted [ 115.458791][ T13] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 115.529309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.541541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.574370][ T4946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.641234][ T5200] netlink: 'syz.1.247': attribute type 10 has an invalid length. [ 115.928669][ T13] usbhid 5-1:0.0: can't add hid device: -71 [ 115.934701][ T13] usbhid: probe of 5-1:0.0 failed with error -71 [ 115.995324][ T13] usb 5-1: USB disconnect, device number 4 [ 116.416189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.436445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.483378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.504441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.638833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.688099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.736832][ T4946] device veth0_vlan entered promiscuous mode [ 116.743920][ T5249] netlink: 'syz.0.258': attribute type 4 has an invalid length. [ 116.774458][ T4946] device veth1_vlan entered promiscuous mode [ 116.805210][ T5253] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 116.911794][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.933544][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.984434][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.035333][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.107477][ T4946] device veth0_macvtap entered promiscuous mode [ 117.155532][ T4946] device veth1_macvtap entered promiscuous mode [ 117.264722][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.327062][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.347011][ T5277] loop2: detected capacity change from 0 to 256 [ 117.393206][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.452046][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.518146][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.568410][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.590764][ T4946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.603001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.614744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.627348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.651149][ T5277] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.662530][ T5277] FAT-fs (loop2): Filesystem has been set read-only [ 117.667116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.671642][ T5277] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.695563][ T5277] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.710076][ T5285] netlink: 'syz.1.269': attribute type 4 has an invalid length. [ 117.739751][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.749103][ T26] audit: type=1800 audit(1756895009.311:4): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.266" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 117.790356][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.817197][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.841672][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.871969][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.885353][ T5295] loop1: detected capacity change from 0 to 2048 [ 117.903074][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.925782][ T4946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.933576][ T5288] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 117.958123][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.991579][ T5295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.011604][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.034053][ T5298] loop2: detected capacity change from 0 to 256 [ 118.047881][ T4946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.063934][ T4946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.083303][ T4946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.097718][ T4946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.166167][ T5298] FAT-fs (loop2): Directory bread(block 64) failed [ 118.298641][ T5298] FAT-fs (loop2): Directory bread(block 65) failed [ 118.338742][ T5298] FAT-fs (loop2): Directory bread(block 66) failed [ 118.360082][ T5298] FAT-fs (loop2): Directory bread(block 67) failed [ 118.397455][ T5298] FAT-fs (loop2): Directory bread(block 68) failed [ 118.448070][ T5298] FAT-fs (loop2): Directory bread(block 69) failed [ 118.478868][ T5298] FAT-fs (loop2): Directory bread(block 70) failed [ 118.485730][ T5298] FAT-fs (loop2): Directory bread(block 71) failed [ 118.511362][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.529934][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.560981][ T5298] FAT-fs (loop2): Directory bread(block 72) failed [ 118.599505][ T5298] FAT-fs (loop2): Directory bread(block 73) failed [ 118.616841][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.655108][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.681294][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.747297][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.874153][ T5298] attempt to access beyond end of device [ 118.874153][ T5298] loop2: rw=2049, want=1772, limit=256 [ 118.934483][ T26] audit: type=1804 audit(1756895010.501:5): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.272" name="/newroot/64/file1/file1" dev="loop2" ino=1048612 res=1 errno=0 [ 119.020506][ T5327] netlink: 'syz.0.280': attribute type 4 has an invalid length. [ 119.319933][ T5324] loop5: detected capacity change from 0 to 8192 [ 119.871899][ T5338] netlink: 'syz.1.283': attribute type 10 has an invalid length. [ 120.383342][ T5365] netlink: 'syz.0.292': attribute type 4 has an invalid length. [ 120.445819][ T5369] loop2: detected capacity change from 0 to 8 [ 120.624788][ T5376] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 121.027729][ T5382] loop2: detected capacity change from 0 to 1024 [ 121.035466][ T5382] hfsplus: unable to parse mount options [ 121.876463][ T5400] netlink: 'syz.2.304': attribute type 4 has an invalid length. [ 122.270020][ T5379] loop1: detected capacity change from 0 to 8192 [ 123.533225][ T5438] netlink: 'syz.2.312': attribute type 10 has an invalid length. [ 124.102641][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 124.142893][ T5460] netlink: 'syz.4.318': attribute type 4 has an invalid length. [ 125.126303][ T5467] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 125.831650][ T5490] netlink: 'syz.0.327': attribute type 10 has an invalid length. [ 126.018558][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.249470][ T5500] netlink: 'syz.0.329': attribute type 4 has an invalid length. [ 126.778979][ T23] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 126.870466][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.149806][ T5513] loop5: detected capacity change from 0 to 1024 [ 127.356016][ T23] usb 2-1: config 0 descriptor?? [ 127.565945][ T5513] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.607783][ T5530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.336'. [ 127.633070][ T4290] usb 2-1: USB disconnect, device number 4 [ 127.638781][ T5513] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.739103][ T26] audit: type=1800 audit(1756895019.311:6): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.332" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 127.851362][ T5537] netlink: 'syz.2.339': attribute type 10 has an invalid length. [ 128.080932][ T5547] netlink: 'syz.0.342': attribute type 4 has an invalid length. [ 129.258830][ T5552] binder: 5550:5552 ioctl 4018620d 0 returned -22 [ 129.593853][ T5572] loop5: detected capacity change from 0 to 512 [ 129.628616][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.665245][ T5574] loop1: detected capacity change from 0 to 2048 [ 129.692433][ T5577] loop4: detected capacity change from 0 to 1024 [ 129.722259][ T5574] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 129.722259][ T5574] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 129.722259][ T5574] [ 129.740923][ T5574] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 129.778617][ T4409] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.806146][ T5574] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,delalloc,dioread_nolock,nobarrier,nouser_xattr,dioread_nolock,nodioread_nolock,sb=0x0000000000000006,noauto_da_alloc,jqfmt=vfsold,. Quota mode: writeback. [ 129.808805][ T5572] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.861860][ T5572] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.877017][ T4352] hfsplus: b-tree write err: -5, ino 4 [ 129.898467][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 129.979538][ T5572] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.349: corrupted inode contents [ 130.032174][ T5587] netlink: 'syz.4.353': attribute type 10 has an invalid length. [ 130.040757][ T23] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 130.049874][ T4409] usb 1-1: Using ep0 maxpacket: 16 [ 130.064638][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.096461][ T23] usb 3-1: config 0 descriptor?? [ 130.098928][ T5572] EXT4-fs error (device loop5): ext4_dirty_inode:6040: inode #2: comm syz.5.349: mark_inode_dirty error [ 130.156224][ T5590] netlink: 'syz.4.355': attribute type 4 has an invalid length. [ 130.170010][ T23] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 130.190349][ T4409] usb 1-1: config 1 interface 1 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 130.205627][ T5572] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.349: corrupted inode contents [ 130.245851][ T4409] usb 1-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.268724][ T5572] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.349: mark_inode_dirty error [ 130.295627][ T4409] usb 1-1: config 1 interface 1 has no altsetting 2 [ 130.322526][ T5594] loop1: detected capacity change from 0 to 512 [ 130.358692][ T23] usb 3-1: Detected FT232BM [ 130.372178][ T5572] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 130.471234][ T5594] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.498947][ T4409] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.513335][ T5594] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.513528][ T4409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.638074][ T4174] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.650100][ T4409] usb 1-1: Product: syz [ 130.654290][ T4409] usb 1-1: Manufacturer: syz [ 130.911542][ T4409] usb 1-1: SerialNumber: syz [ 130.968870][ T23] ftdi_sio ttyUSB0: Unable to read latency timer: -5 [ 131.765766][ T23] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 131.775328][ T23] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 131.790343][ T23] usb 3-1: USB disconnect, device number 4 [ 131.800596][ T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 131.811647][ T23] ftdi_sio 3-1:0.0: device disconnected [ 132.239047][ T4174] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 132.429424][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.549257][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.657812][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.718261][ T4409] usb 1-1: USB disconnect, device number 6 [ 132.740896][ T4174] usb 5-1: config 0 descriptor?? [ 132.947473][ T5622] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 133.080309][ T5622] netlink: 'syz.0.360': attribute type 2 has an invalid length. [ 133.087392][ T23] usb 5-1: USB disconnect, device number 5 [ 133.112597][ T5624] loop5: detected capacity change from 0 to 1024 [ 133.213908][ T5624] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 133.308334][ T5624] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 133.498828][ T5643] netlink: 'syz.0.366': attribute type 4 has an invalid length. [ 133.676469][ T5647] loop4: detected capacity change from 0 to 1024 [ 133.754615][ T5647] attempt to access beyond end of device [ 133.754615][ T5647] loop4: rw=0, want=201326594, limit=1024 [ 133.798701][ T5647] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 133.817887][ T5647] hfsplus: unable to mark blocks free: error -5 [ 133.826358][ T5647] hfsplus: can't free extent [ 133.844157][ T26] audit: type=1107 audit(1756895025.411:7): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 133.974385][ T5657] bridge0: port 3(syz_tun) entered blocking state [ 133.998498][ T5657] bridge0: port 3(syz_tun) entered disabled state [ 134.045332][ T5657] device syz_tun entered promiscuous mode [ 134.059137][ T5657] bridge0: port 3(syz_tun) entered blocking state [ 134.066010][ T5657] bridge0: port 3(syz_tun) entered forwarding state [ 134.688445][ T4290] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 135.649459][ T5651] chnl_net:caif_netlink_parms(): no params data found [ 135.859791][ T4290] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.884417][ T4290] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.946315][ T4290] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.987984][ T5695] netlink: 'syz.0.377': attribute type 4 has an invalid length. [ 136.018587][ T4233] Bluetooth: hci3: command 0x0409 tx timeout [ 136.058307][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.076901][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.124699][ T5651] device bridge_slave_0 entered promiscuous mode [ 136.146280][ T5706] loop2: detected capacity change from 0 to 1024 [ 136.148647][ T4290] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 136.187074][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.196012][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.214778][ T5651] device bridge_slave_1 entered promiscuous mode [ 136.226710][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.275502][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.310533][ T4290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 136.319169][ T4290] usb 6-1: Product: syz [ 136.323358][ T4290] usb 6-1: Manufacturer: syz [ 136.328069][ T4290] usb 6-1: SerialNumber: syz [ 136.364280][ T26] audit: type=1800 audit(1756895027.931:8): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.381" name="file2" dev="loop2" ino=22 res=0 errno=0 [ 136.483252][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.778918][ T23] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 136.845139][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.983661][ T23] usb 5-1: config 0 descriptor?? [ 137.129814][ T4274] hfsplus: b-tree write err: -5, ino 4 [ 137.150565][ T4290] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 137.180688][ T5651] team0: Port device team_slave_0 added [ 137.191153][ T5651] team0: Port device team_slave_1 added [ 137.193159][ T4290] usb 6-1: USB disconnect, device number 2 [ 137.249054][ T4290] usblp0: removed [ 137.282087][ T4409] usb 5-1: USB disconnect, device number 6 [ 137.344001][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.359199][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.404699][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.430763][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.437738][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.469224][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.584360][ T5651] device hsr_slave_0 entered promiscuous mode [ 137.599120][ T5651] device hsr_slave_1 entered promiscuous mode [ 137.605987][ T5651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.630649][ T5651] Cannot create hsr debugfs directory [ 137.913775][ T5734] loop4: detected capacity change from 0 to 256 [ 137.920394][ T5729] loop2: detected capacity change from 0 to 2048 [ 138.016262][ T5734] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 138.080351][ T5729] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.121770][ T3521] Bluetooth: hci3: command 0x041b tx timeout [ 138.322826][ T5738] netlink: 'syz.5.388': attribute type 4 has an invalid length. [ 138.404605][ T5651] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.631066][ T5651] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.653693][ T5753] loop5: detected capacity change from 0 to 16 [ 138.718282][ T5651] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.835902][ T5753] erofs: (device loop5): mounted with root inode @ nid 36. [ 138.930960][ T5651] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 139.733302][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.831676][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.863718][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.893779][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.960352][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.011299][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.050270][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.057443][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.107324][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.158574][ T4409] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.168742][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.178486][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 140.205024][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.255628][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.262804][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.282399][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.291879][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.301636][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.317957][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.385693][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.401658][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.414614][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.426186][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.442169][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.453846][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.462843][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.485131][ T5651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.688694][ T4409] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 140.802124][ T5808] loop5: detected capacity change from 0 to 256 [ 140.819275][ T4409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.829815][ T4409] usb 5-1: config 0 descriptor?? [ 140.931602][ T5808] exfat: Deprecated parameter 'namecase' [ 140.964275][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.983577][ T5808] exfat: Deprecated parameter 'namecase' [ 141.008666][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.041818][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.057104][ T5808] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 141.073394][ T4174] usb 5-1: USB disconnect, device number 7 [ 141.570401][ T5841] loop5: detected capacity change from 0 to 2048 [ 141.587128][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.667607][ T5841] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 141.679865][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.706872][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.726714][ T5850] loop4: detected capacity change from 0 to 512 [ 141.753516][ T5651] device veth0_vlan entered promiscuous mode [ 141.756461][ T5841] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 141.765454][ T5651] device veth1_vlan entered promiscuous mode [ 141.793386][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.824463][ T5850] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 141.872256][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.937627][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.958793][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.999944][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.024964][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.082316][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.138889][ T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.172811][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.224782][ T5651] device veth0_macvtap entered promiscuous mode [ 142.235724][ T5651] device veth1_macvtap entered promiscuous mode [ 142.252056][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.263085][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 142.298049][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.301553][ T23] usb 3-1: SerialNumber: syz [ 142.486889][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.508605][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.528399][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.567694][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.598656][ T23] usb 3-1: 0:2 : does not exist [ 142.618150][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.656994][ T23] usb 3-1: USB disconnect, device number 5 [ 142.658498][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.723767][ T5877] process 'syz.0.418' launched './file1' with NULL argv: empty string added [ 142.731149][ T4806] udevd[4806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.736691][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.831973][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.847331][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.876422][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.912244][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.953668][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.994574][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.034328][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.069640][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.137005][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.235837][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.409154][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.435597][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.445750][ T4409] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.491246][ T5651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.529290][ T5651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.576607][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.610799][ T5651] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.633445][ T5651] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.654997][ T5651] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.677479][ T5651] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.808755][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.837361][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.879124][ T5900] loop2: detected capacity change from 0 to 256 [ 143.974508][ T4409] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 143.985476][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.012095][ T4409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.014266][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.077074][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.086507][ T4409] usb 1-1: config 0 descriptor?? [ 144.122138][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.138477][ T5900] loop2: detected capacity change from 0 to 512 [ 144.169950][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.225967][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.233549][ T5900] EXT4-fs (loop2): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value [ 144.330292][ T4409] usb 1-1: USB disconnect, device number 7 [ 144.466371][ T5910] netlink: 'syz.6.365': attribute type 10 has an invalid length. [ 144.561643][ T5916] loop4: detected capacity change from 0 to 512 [ 144.570252][ T5854] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 144.594110][ T5910] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.624788][ T5916] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.627230][ T4946] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz-executor: bg 0: block 2: invalid block bitmap [ 144.666686][ T5854] EXT4-fs (loop5): Remounting filesystem read-only [ 144.685833][ T4946] EXT4-fs (loop5): Remounting filesystem read-only [ 144.725501][ T4946] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 144.740343][ T4946] EXT4-fs (loop5): Remounting filesystem read-only [ 144.742391][ T5916] EXT4-fs (loop4): 1 truncate cleaned up [ 144.758603][ T4946] EXT4-fs error (device loop5): ext4_read_inline_dir:1608: inode #12: block 5: comm syz-executor: path /25/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 144.783085][ T5916] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.789570][ T4946] EXT4-fs (loop5): Remounting filesystem read-only [ 144.801402][ T4946] EXT4-fs error (device loop5): ext4_read_inline_dir:1608: inode #12: block 5: comm syz-executor: path /25/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 144.825375][ T4946] EXT4-fs (loop5): Remounting filesystem read-only [ 144.837835][ T4946] EXT4-fs error (device loop5): empty_inline_dir:1863: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 144.957444][ T4946] EXT4-fs (loop5): Remounting filesystem read-only [ 144.969142][ T4946] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 145.030887][ T4946] EXT4-fs error (device loop5): ext4_read_inline_dir:1608: inode #12: block 5: comm syz-executor: path /25/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 145.125021][ T4946] EXT4-fs (loop5): Remounting filesystem read-only [ 145.149808][ T4946] EXT4-fs error (device loop5): ext4_read_inline_dir:1608: inode #12: block 5: comm syz-executor: path /25/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 145.226168][ T4946] EXT4-fs (loop5): Remounting filesystem read-only [ 145.247676][ T4946] EXT4-fs error (device loop5): empty_inline_dir:1863: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 145.371371][ T4946] EXT4-fs (loop5): Remounting filesystem read-only [ 145.398269][ T4946] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 145.454079][ T4946] EXT4-fs error (device loop5): ext4_read_inline_dir:1608: inode #12: block 5: comm syz-executor: path /25/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 145.561285][ T4946] EXT4-fs (loop5): Remounting filesystem read-only [ 145.612635][ T4946] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 145.674263][ T4946] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 145.794645][ T4946] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 146.068966][ T4946] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 146.165764][ T4946] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 146.194488][ T4946] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 146.305499][ T4946] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 146.394837][ T4946] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 146.396211][ T5969] netlink: 'syz.4.438': attribute type 4 has an invalid length. [ 146.940581][ T5981] netlink: 'syz.4.442': attribute type 10 has an invalid length. [ 147.045894][ T5985] loop4: detected capacity change from 0 to 512 [ 147.159049][ T5985] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 147.205914][ T4406] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.261044][ T5985] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.339368][ T5985] EXT4-fs (loop4): 1 truncate cleaned up [ 147.377103][ T5985] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 147.444645][ T4406] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.558558][ T4406] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.711285][ T4406] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.659552][ T6015] netlink: 'syz.4.451': attribute type 4 has an invalid length. [ 148.768317][ T4255] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.927834][ T6025] netlink: 'syz.6.453': attribute type 10 has an invalid length. [ 149.026493][ T4255] usb 1-1: Using ep0 maxpacket: 16 [ 149.106439][ T4290] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.145578][ T4255] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 149.165360][ T4255] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 149.270906][ T6016] chnl_net:caif_netlink_parms(): no params data found [ 149.334431][ T4255] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.343541][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.362785][ T4255] usb 1-1: Product: syz [ 149.382483][ T4255] usb 1-1: Manufacturer: syz [ 149.393799][ T4290] usb 5-1: Using ep0 maxpacket: 16 [ 149.408707][ T4255] usb 1-1: SerialNumber: syz [ 149.416601][ T6040] loop6: detected capacity change from 0 to 164 [ 149.532988][ T4290] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 149.541218][ T4290] usb 5-1: config 0 has no interface number 0 [ 149.634241][ T4290] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 149.672317][ T4290] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 149.782437][ T4255] usb 1-1: invalid UAC_HEADER (v1) [ 149.811059][ T4255] snd-usb-audio: probe of 1-1:3.0 failed with error -22 [ 149.840876][ T4255] usb 1-1: USB disconnect, device number 8 [ 149.851990][ T4806] udevd[4806]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.867914][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.867953][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.868960][ T6016] device bridge_slave_0 entered promiscuous mode [ 149.889217][ T4290] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 149.914218][ T4290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.940072][ T4290] usb 5-1: Product: syz [ 149.944287][ T4290] usb 5-1: Manufacturer: syz [ 149.948903][ T4290] usb 5-1: SerialNumber: syz [ 149.995052][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.020869][ T4290] usb 5-1: config 0 descriptor?? [ 150.026030][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.048132][ T6016] device bridge_slave_1 entered promiscuous mode [ 150.059699][ T6022] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.067104][ T6022] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.200960][ T6016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.259296][ T6016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.326098][ T4406] device hsr_slave_0 left promiscuous mode [ 150.350077][ T6022] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.362171][ T4406] device hsr_slave_1 left promiscuous mode [ 150.373249][ T6022] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.382921][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.402495][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.430083][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.468110][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.485966][ T4255] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 150.496181][ T4406] device bridge_slave_1 left promiscuous mode [ 150.502416][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.541802][ T4406] device bridge_slave_0 left promiscuous mode [ 150.560768][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.594187][ T4406] device veth1_macvtap left promiscuous mode [ 150.607194][ T4406] device veth0_macvtap left promiscuous mode [ 150.623558][ T4406] device veth1_vlan left promiscuous mode [ 150.632572][ T4406] device veth0_vlan left promiscuous mode [ 150.762422][ T4255] usb 7-1: Using ep0 maxpacket: 32 [ 150.783443][ T4233] Bluetooth: hci4: command 0x0409 tx timeout [ 150.863896][ T4290] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 150.889191][ T4255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.889930][ T4290] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 150.900927][ T4255] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.956558][ T4255] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 150.965813][ T4290] asix: probe of 5-1:0.251 failed with error -71 [ 150.966903][ T4255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.997164][ T4290] usb 5-1: USB disconnect, device number 8 [ 151.016208][ T4255] usb 7-1: config 0 descriptor?? [ 151.351701][ T4406] team0 (unregistering): Port device team_slave_1 removed [ 151.402663][ T4406] team0 (unregistering): Port device team_slave_0 removed [ 151.428803][ T4406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.556393][ T4406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.280361][ T4255] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 152.353162][ T4255] usb 7-1: USB disconnect, device number 2 [ 152.435556][ T4406] bond0 (unregistering): Released all slaves [ 152.631541][ T6077] fido_id[6077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 152.675127][ T6080] netlink: 'syz.6.461': attribute type 4 has an invalid length. [ 152.745993][ T6016] team0: Port device team_slave_0 added [ 152.824204][ T6016] team0: Port device team_slave_1 added [ 152.829776][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 153.011400][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.022017][ T5982] Set syz1 is full, maxelem 65536 reached [ 153.089048][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.296531][ T6016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.487949][ T6016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.494942][ T6016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.709247][ T6016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.735958][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.464'. [ 154.031987][ T6102] netlink: 'syz.2.464': attribute type 10 has an invalid length. [ 154.191347][ T6016] device hsr_slave_0 entered promiscuous mode [ 154.231903][ T6016] device hsr_slave_1 entered promiscuous mode [ 154.268536][ T6016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.298997][ T6016] Cannot create hsr debugfs directory [ 154.488609][ T4409] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 154.743216][ T6016] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 154.789389][ T6016] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 154.835925][ T6016] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 154.874222][ T6016] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 154.896001][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 155.015919][ T4409] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 155.055445][ T4409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.083398][ T4409] usb 3-1: config 0 descriptor?? [ 155.263911][ T6016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.347235][ T4409] usb 3-1: USB disconnect, device number 6 [ 155.354957][ T6016] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.362052][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.394494][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.427940][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.455112][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.501080][ T6148] loop4: detected capacity change from 0 to 512 [ 155.508414][ T515] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.515526][ T515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.541928][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.584147][ T6144] netlink: 'syz.0.471': attribute type 4 has an invalid length. [ 155.636713][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.652749][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.680666][ T6148] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.711132][ T515] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.718257][ T515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.736244][ T6148] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.766019][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.778466][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.798692][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.841332][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.858906][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.889229][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.936790][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.047569][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.090444][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.118748][ T6163] netlink: 'syz.4.475': attribute type 10 has an invalid length. [ 156.129071][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.155655][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.475'. [ 156.184646][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.197644][ T4289] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.241092][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.456166][ T4289] usb 1-1: Using ep0 maxpacket: 16 [ 156.575797][ T4289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.586489][ T4289] usb 1-1: config 0 has no interfaces? [ 156.592546][ T4289] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 156.603881][ T4289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.619875][ T4289] usb 1-1: config 0 descriptor?? [ 156.962838][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 157.117255][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.145448][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.180558][ T6016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.834865][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.889935][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.969411][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.017209][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.054200][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.088655][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.120349][ T6016] device veth0_vlan entered promiscuous mode [ 158.174706][ T6016] device veth1_vlan entered promiscuous mode [ 158.274178][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.289129][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.334564][ T6016] device veth0_macvtap entered promiscuous mode [ 158.344624][ T6016] device veth1_macvtap entered promiscuous mode [ 158.407258][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.450520][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.493094][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.523585][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.551275][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.581995][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.620661][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.656877][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.680086][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.697226][ T6214] netlink: 'syz.2.482': attribute type 4 has an invalid length. [ 158.713537][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.724928][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.752268][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.785940][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.843496][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.872000][ T4409] usb 1-1: USB disconnect, device number 9 [ 158.890500][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.911999][ T6225] loop2: detected capacity change from 0 to 764 [ 158.922857][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.974370][ T6225] rock: directory entry would overflow storage [ 158.979993][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.010921][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.021645][ T6225] rock: sig=0x5245, size=8, remaining=5 [ 159.042787][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.069497][ T6016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.116851][ T6016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.167124][ T6016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.210531][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.230184][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.288768][ T6016] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.308676][ T6016] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.332500][ T6238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.486'. [ 159.344836][ T6016] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.387722][ T6016] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.415953][ T6236] netlink: 'syz.2.486': attribute type 10 has an invalid length. [ 159.566478][ T4289] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.602651][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.625004][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.662647][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.695584][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.702331][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.747544][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.954248][ T4289] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.976759][ T4289] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.994345][ T6248] loop7: detected capacity change from 0 to 1024 [ 160.016414][ T4289] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.145197][ T6248] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,nojournal_checksum,,errors=continue. Quota mode: none. [ 160.223205][ T4289] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 160.264198][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 160.320261][ T4289] usb 1-1: Product: syz [ 160.345228][ T4289] usb 1-1: Manufacturer: syz [ 160.371598][ T4289] usb 1-1: SerialNumber: syz [ 160.663936][ T4289] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 160.770538][ T6269] netlink: 'syz.4.492': attribute type 4 has an invalid length. [ 160.866607][ T4289] usb 1-1: USB disconnect, device number 10 [ 160.923550][ T4289] usblp0: removed [ 161.221169][ T6275] loop4: detected capacity change from 0 to 512 [ 161.589732][ T6275] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.493: invalid block [ 161.666583][ T6275] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.493: Invalid block bitmap block 0 in block_group 0 [ 161.759062][ T6275] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 161.769626][ T6275] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.493: attempt to clear invalid blocks 983261 len 1 [ 161.792014][ T6285] binder: 6281:6285 ioctl c0306201 0 returned -14 [ 161.804949][ T6275] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.493: invalid indirect mapped block 2683928664 (level 0) [ 161.838352][ T6275] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.493: Invalid inode table block 0 in block_group 0 [ 161.868215][ T6287] netlink: 'syz.2.498': attribute type 10 has an invalid length. [ 161.879264][ T6275] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 161.896426][ T6287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.498'. [ 161.913988][ T6275] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 161.931144][ T6275] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.493: Invalid inode table block 0 in block_group 0 [ 161.959004][ T6275] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 162.013675][ T6275] EXT4-fs error (device loop4): ext4_truncate:4273: inode #13: comm syz.4.493: mark_inode_dirty error [ 162.117342][ T6275] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 162.155302][ T6275] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.493: Invalid inode table block 0 in block_group 0 [ 162.201149][ T6275] EXT4-fs (loop4): 1 truncate cleaned up [ 162.206857][ T6275] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 162.538761][ T4289] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 162.558493][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.757252][ T6311] netlink: 'syz.7.503': attribute type 4 has an invalid length. [ 162.856816][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 162.899537][ T4289] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.923188][ T4289] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.962926][ T4289] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.986304][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.002655][ T4289] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.016127][ T13] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 163.036095][ T4289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.054538][ T4289] usb 7-1: config 0 descriptor?? [ 163.055794][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.114183][ T13] usb 5-1: config 0 descriptor?? [ 163.177383][ T13] usb 5-1: Found UVC 0.00 device (05a9:2630) [ 163.194957][ T13] usb 5-1: No valid video chain found. [ 163.264459][ T4233] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 163.379560][ T4290] usb 5-1: USB disconnect, device number 9 [ 163.535990][ T4289] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 163.579667][ T4289] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 163.777692][ T6341] loop2: detected capacity change from 0 to 2048 [ 163.814612][ T4409] usb 7-1: USB disconnect, device number 3 [ 163.842516][ T6341] EXT4-fs (loop2): inline encryption not supported [ 163.871187][ T4233] usb 8-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 163.900302][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.910571][ T6341] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,inlinecrypt,sysvgroups,nodioread_nolock,. Quota mode: none. [ 163.977406][ T4233] usb 8-1: config 0 descriptor?? [ 164.048634][ T6347] netlink: 'syz.4.509': attribute type 10 has an invalid length. [ 164.215390][ T6347] netlink: 40 bytes leftover after parsing attributes in process `syz.4.509'. [ 164.262398][ T4233] usb 8-1: USB disconnect, device number 2 [ 164.368919][ T6352] loop6: detected capacity change from 0 to 512 [ 164.446330][ T6352] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2228: inode #15: comm syz.6.510: corrupted in-inode xattr [ 164.626489][ T6352] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.510: couldn't read orphan inode 15 (err -117) [ 164.755304][ T6362] loop4: detected capacity change from 0 to 1024 [ 164.782399][ T6352] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.793802][ T4233] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 165.000245][ T6362] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 165.034571][ T6362] EXT4-fs (loop4): Ignoring removed nobh option [ 165.040947][ T6362] EXT4-fs (loop4): Ignoring removed oldalloc option [ 165.097179][ T4233] usb 3-1: Using ep0 maxpacket: 16 [ 165.169759][ T6362] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a816c118, mo2=0003] [ 165.199612][ T6382] loop6: detected capacity change from 0 to 256 [ 165.226756][ T6362] System zones: 0-1, 3-12 [ 165.234032][ T4233] usb 3-1: config 3 has an invalid interface number: 201 but max is 0 [ 165.254098][ T6383] netlink: 'syz.0.516': attribute type 4 has an invalid length. [ 165.264248][ T4233] usb 3-1: config 3 has no interface number 0 [ 165.321541][ T4233] usb 3-1: config 3 interface 201 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 165.378264][ T6362] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,data_err=ignore,nomblk_io_submit,nobh,init_itable=0x0000000000000008,delalloc,debug,norecovery,auto_da_alloc=0x00000000000007ff,oldalloc,,errors=continue. Quota mode: writeback. [ 165.474175][ T4233] usb 3-1: config 3 interface 201 has no altsetting 0 [ 165.681004][ T4233] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=a4.e0 [ 165.742999][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.750654][ T6376] loop6: detected capacity change from 0 to 512 [ 165.800221][ T4290] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 165.815435][ T6376] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 165.830281][ T6376] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 165.837623][ T4233] usb 3-1: Product: syz [ 165.853399][ T6376] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 165.889193][ T4233] usb 3-1: Manufacturer: syz [ 165.903013][ T4233] usb 3-1: SerialNumber: syz [ 165.949446][ T6376] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 166.037375][ T6376] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 166.099458][ T6376] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 166.156221][ T6376] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce11c, mo2=0000] [ 166.178311][ T6376] EXT4-fs (loop6): failed to initialize system zone (-117) [ 166.199214][ T6376] EXT4-fs (loop6): mount failed [ 166.277890][ T4290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.310987][ T4290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.331874][ T6376] loop6: detected capacity change from 0 to 512 [ 166.334812][ T4233] usb 3-1: USB disconnect, device number 7 [ 166.374414][ T4290] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.395888][ T4290] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.411936][ T6376] EXT4-fs (loop6): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value [ 166.420163][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.463746][ T4290] usb 1-1: config 0 descriptor?? [ 166.971023][ T4290] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xe [ 166.974774][ T6413] netlink: 'syz.7.522': attribute type 10 has an invalid length. [ 167.008431][ T4290] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 167.048074][ T4290] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 167.051906][ T6414] netlink: 40 bytes leftover after parsing attributes in process `syz.7.522'. [ 167.077454][ T4290] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 167.128367][ T6419] loop6: detected capacity change from 0 to 256 [ 167.157319][ T6413] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 167.234007][ T6419] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.257462][ T4290] usb 1-1: USB disconnect, device number 11 [ 167.282131][ T6419] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 167.336352][ T6420] fido_id[6420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 167.342958][ T6419] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 167.431699][ T4255] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 167.514531][ T6432] loop7: detected capacity change from 0 to 512 [ 167.605353][ T6432] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2228: inode #12: comm syz.7.526: corrupted in-inode xattr [ 167.681703][ T6432] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.526: couldn't read orphan inode 12 (err -117) [ 167.717134][ T6432] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000084,noload,noload,barrier=0x0000000000000001,,errors=continue. Quota mode: none. [ 167.830942][ T6439] netlink: 'syz.0.528': attribute type 4 has an invalid length. [ 167.979187][ T4255] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 167.999401][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.087248][ T6453] loop4: detected capacity change from 0 to 512 [ 169.094941][ T4255] usb 3-1: config 0 descriptor?? [ 169.258377][ T6453] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.532: casefold flag without casefold feature [ 169.299989][ T6453] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.532: couldn't read orphan inode 15 (err -117) [ 169.319704][ T6453] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.337895][ T4255] usb 3-1: USB disconnect, device number 8 [ 169.550640][ T4290] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 169.606621][ T6461] loop4: detected capacity change from 0 to 8 [ 169.653140][ T6461] SQUASHFS error: lzo decompression failed, data probably corrupt [ 169.690968][ T6461] SQUASHFS error: Failed to read block 0x91: -5 [ 169.697236][ T6461] SQUASHFS error: Unable to read metadata cache entry [8f] [ 169.743116][ T6461] SQUASHFS error: Unable to read inode 0x11f [ 169.968119][ T4290] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.432240][ T4290] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.456442][ T4290] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.481728][ T6465] loop2: detected capacity change from 0 to 512 [ 170.532993][ T6467] netlink: 'syz.4.536': attribute type 10 has an invalid length. [ 170.576238][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 170.627493][ T4290] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 170.654365][ T4290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 170.671356][ T4290] usb 8-1: Product: syz [ 170.679105][ T4290] usb 8-1: Manufacturer: syz [ 170.683822][ T4290] usb 8-1: SerialNumber: syz [ 170.742826][ T6465] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.763956][ T6465] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.773564][ T6472] loop4: detected capacity change from 0 to 1024 [ 170.821996][ T6472] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 170.874474][ T6472] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.881771][ T6472] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.537: Freeing blocks not in datazone - block = 0, count = 4096 [ 170.964134][ T6472] EXT4-fs (loop4): 1 orphan inode deleted [ 170.969879][ T6472] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.994117][ T4290] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 171.195632][ T4409] usb 8-1: USB disconnect, device number 3 [ 171.213591][ T4409] usblp0: removed [ 171.255978][ T6479] loop2: detected capacity change from 0 to 512 [ 171.383250][ T6481] netlink: 'syz.4.540': attribute type 4 has an invalid length. [ 171.498149][ T6479] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 171.534052][ T6479] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.739715][ T6479] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.538: No space for directory leaf checksum. Please run e2fsck -D. [ 171.793491][ T6479] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.538: checksumming directory block 0 [ 171.882312][ T4184] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 3874091957 in block_group 0 [ 171.907224][ T6494] loop7: detected capacity change from 0 to 1024 [ 171.921000][ T4184] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 171.968982][ T4184] EXT4-fs error (device loop2): ext4_quota_off:6515: inode #4: comm syz-executor: mark_inode_dirty error [ 171.991527][ T6494] EXT4-fs (loop7): Test dummy encryption mode enabled [ 172.042837][ T6494] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,block_validity,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 172.229656][ T6494] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 172.242048][ T26] audit: type=1800 audit(1756895063.983:9): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.543" name="file1" dev="loop7" ino=19 res=0 errno=0 [ 172.549922][ T6513] netlink: 'syz.7.547': attribute type 10 has an invalid length. [ 172.597117][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.7.547'. [ 172.757034][ T6522] device syzkaller0 entered promiscuous mode [ 172.942623][ T6527] netlink: 'syz.7.551': attribute type 4 has an invalid length. [ 173.460730][ T4290] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 173.828820][ T4290] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.858595][ T4290] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 173.909693][ T4290] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.157116][ T4290] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 174.176986][ T4290] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 174.213741][ T4290] usb 8-1: Product: syz [ 174.231328][ T4290] usb 8-1: Manufacturer: syz [ 174.261302][ T4290] usb 8-1: SerialNumber: syz [ 174.332503][ T6551] binder: BC_ACQUIRE_RESULT not supported [ 174.357323][ T6551] binder: 6550:6551 ioctl c0306201 200000000500 returned -22 [ 174.550246][ T4290] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 174.698543][ T515] device hsr_slave_0 left promiscuous mode [ 174.713824][ T515] device hsr_slave_1 left promiscuous mode [ 174.747299][ T4290] usb 8-1: USB disconnect, device number 4 [ 174.781766][ T515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.793345][ T4290] usblp0: removed [ 174.842488][ T515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.887959][ T515] device bridge_slave_1 left promiscuous mode [ 174.900509][ T515] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.923935][ T515] device bridge_slave_0 left promiscuous mode [ 174.960093][ T515] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.038681][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.6.561'. [ 175.341348][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 175.351217][ T1110] Bluetooth: hci1: command 0x0406 tx timeout [ 175.483791][ T6578] loop7: detected capacity change from 0 to 164 [ 175.615970][ T515] team0 (unregistering): Port device team_slave_1 removed [ 175.650359][ T515] team0 (unregistering): Port device team_slave_0 removed [ 175.690191][ T515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.722277][ T515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.818290][ T515] bond0 (unregistering): Released all slaves [ 175.880406][ T6567] netlink: 'syz.6.561': attribute type 10 has an invalid length. [ 175.909716][ T6580] netlink: 'syz.2.564': attribute type 4 has an invalid length. [ 176.054986][ T6592] loop2: detected capacity change from 0 to 128 [ 176.085428][ T6597] loop4: detected capacity change from 0 to 256 [ 176.501915][ T6597] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.686784][ T6592] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 176.854423][ T6597] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 176.993953][ T6592] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.041077][ T6597] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe76d4fbc, utbl_chksum : 0xe619d30d) [ 177.113665][ T6597] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0xf379ffff) [ 177.200405][ T6597] exFAT-fs (loop4): Filesystem has been set read-only [ 177.267690][ T6597] exFAT-fs (loop4): failed to initialize root inode [ 177.530665][ T6626] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.546693][ T6626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.715924][ T6626] loop2: detected capacity change from 0 to 4096 [ 177.746980][ T6626] EXT4-fs (loop2): Test dummy encryption mode enabled [ 178.405708][ T6626] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,norecovery,nodioread_nolock,test_dummy_encryption,nogrpid,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 179.268812][ T6636] loop4: detected capacity change from 0 to 512 [ 179.276176][ T6638] netlink: 'syz.0.578': attribute type 10 has an invalid length. [ 179.324762][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 179.370644][ T6636] EXT4-fs (loop4): Ignoring removed bh option [ 179.418561][ T6636] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 179.458029][ T6636] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 179.475273][ T6636] EXT4-fs (loop4): orphan cleanup on readonly fs [ 179.505054][ T6636] EXT4-fs (loop4): 1 truncate cleaned up [ 179.510749][ T6636] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 179.885182][ T6653] loop4: detected capacity change from 0 to 164 [ 179.921404][ T6648] netlink: 'syz.0.580': attribute type 4 has an invalid length. [ 180.120855][ T4185] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 180.297416][ T4185] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 180.440728][ T4185] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 180.516226][ T4185] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 181.489101][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.6.588'. [ 181.971440][ T6690] netlink: 'syz.0.590': attribute type 10 has an invalid length. [ 182.013079][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 182.071085][ T6692] loop2: detected capacity change from 0 to 1024 [ 182.132145][ T6692] EXT4-fs (loop2): Test dummy encryption mode enabled [ 182.222130][ T6692] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,barrier=0x00000000000083fc,noblock_validity,discard,acl,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 182.319339][ T6700] netlink: 'syz.6.592': attribute type 4 has an invalid length. [ 182.553372][ T6687] chnl_net:caif_netlink_parms(): no params data found [ 182.769988][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.832974][ T4233] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.949564][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.211742][ T6687] device bridge_slave_0 entered promiscuous mode [ 183.232074][ T6725] loop2: detected capacity change from 0 to 1024 [ 183.492595][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.666008][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.705701][ T6687] device bridge_slave_1 entered promiscuous mode [ 183.834263][ T4233] usb 1-1: device descriptor read/64, error -71 [ 183.921412][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.933648][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 183.982259][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.112107][ T4233] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 184.147130][ T6687] team0: Port device team_slave_0 added [ 184.187670][ T6687] team0: Port device team_slave_1 added [ 184.326094][ T4233] usb 1-1: device descriptor read/64, error -71 [ 184.338647][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.354972][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.417090][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.462227][ T4233] usb usb1-port1: attempt power cycle [ 184.478067][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.492930][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.523611][ T6687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.679826][ T6687] device hsr_slave_0 entered promiscuous mode [ 184.743206][ T6687] device hsr_slave_1 entered promiscuous mode [ 185.006141][ T4233] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 185.114393][ T4233] usb 1-1: device descriptor read/8, error -71 [ 185.253442][ T515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.368402][ T515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.404933][ T4233] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 185.468206][ T515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.501475][ T4233] usb 1-1: device descriptor read/8, error -71 [ 185.594261][ T515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.620761][ T4233] usb usb1-port1: unable to enumerate USB device [ 185.859930][ T6687] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 185.935710][ T6687] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 185.994995][ T6687] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 186.007833][ T4409] Bluetooth: hci2: command 0x041b tx timeout [ 186.202659][ T6766] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 186.216272][ T6687] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 186.234079][ T6769] netlink: 'syz.6.603': attribute type 10 has an invalid length. [ 186.239466][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.603'. [ 186.269871][ T6617] Set syz1 is full, maxelem 65536 reached [ 186.500699][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.548419][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.566574][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.600946][ T6687] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.629959][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.659954][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.692510][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.699590][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.718752][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.756305][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.090027][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.097158][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.261119][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.308565][ T4289] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 187.338277][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.411733][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.517249][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.534590][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.534597][ T6811] loop7: detected capacity change from 0 to 512 [ 187.549005][ T4289] usb 7-1: device descriptor read/64, error -71 [ 187.621138][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.636495][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.650629][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.657264][ T6811] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 187.662004][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.695891][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.749766][ T6811] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.784743][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.833777][ T4289] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 187.887002][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.957468][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.025099][ T515] bond0: (slave wlan1): Releasing backup interface [ 188.032481][ T4289] usb 7-1: device descriptor read/64, error -71 [ 188.072656][ T4174] Bluetooth: hci2: command 0x040f tx timeout [ 188.161630][ T4289] usb usb7-port1: attempt power cycle [ 188.282129][ T515] device hsr_slave_0 left promiscuous mode [ 188.303098][ T515] device hsr_slave_1 left promiscuous mode [ 188.329431][ T515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.345764][ T515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.367263][ T515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.383538][ T515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.405718][ T515] device bridge_slave_1 left promiscuous mode [ 188.414611][ T515] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.451374][ T515] device bridge_slave_0 left promiscuous mode [ 188.482804][ T515] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.517745][ T515] device veth1_macvtap left promiscuous mode [ 188.524416][ T515] device veth0_macvtap left promiscuous mode [ 188.554927][ T515] device veth1_vlan left promiscuous mode [ 188.568442][ T4289] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 188.581620][ T515] device veth0_vlan left promiscuous mode [ 188.677903][ T4289] usb 7-1: device descriptor read/8, error -71 [ 188.975553][ T4289] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 189.075036][ T4289] usb 7-1: device descriptor read/8, error -71 [ 189.194342][ T4289] usb usb7-port1: unable to enumerate USB device [ 189.247666][ T515] team0 (unregistering): Port device team_slave_1 removed [ 189.279585][ T515] team0 (unregistering): Port device team_slave_0 removed [ 189.294659][ T515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.311371][ T515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.406991][ T515] bond0 (unregistering): Released all slaves [ 189.468874][ T6828] netlink: 'syz.7.613': attribute type 4 has an invalid length. [ 189.483034][ T6842] netlink: 'syz.2.617': attribute type 10 has an invalid length. [ 189.806014][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.873930][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.932630][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.127517][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 191.240923][ T6901] netlink: 'syz.7.629': attribute type 4 has an invalid length. [ 191.302709][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.324466][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.376689][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.415969][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.462862][ T6687] device veth0_vlan entered promiscuous mode [ 191.472424][ T6908] netlink: 'syz.7.630': attribute type 10 has an invalid length. [ 191.556343][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.581034][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.619570][ T6687] device veth1_vlan entered promiscuous mode [ 191.730062][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.751335][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.781920][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.832211][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.881499][ T6687] device veth0_macvtap entered promiscuous mode [ 191.935807][ T6687] device veth1_macvtap entered promiscuous mode [ 191.967398][ T4254] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.064860][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.144345][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.162892][ T4254] usb 3-1: device descriptor read/64, error -71 [ 192.240003][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.304100][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.401527][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.451034][ T4254] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 192.663905][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.716313][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.774754][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.824203][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.848289][ T4254] usb 3-1: device descriptor read/64, error -71 [ 192.941187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.983969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.993657][ T4254] usb usb3-port1: attempt power cycle [ 193.112585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.202344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.220282][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.271327][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.330692][ T6937] loop7: detected capacity change from 0 to 8192 [ 193.345562][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.362864][ T6943] loop6: detected capacity change from 0 to 16 [ 193.374661][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.404453][ T4254] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 193.422278][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.443027][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.459580][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.480627][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.506336][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.514839][ T4254] usb 3-1: device descriptor read/8, error -71 [ 193.538994][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.620836][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.678457][ T6687] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.703130][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.709525][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.742200][ T6687] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.810261][ T6687] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.152733][ T6687] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.588742][ T4254] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 194.715749][ T4254] usb 3-1: device descriptor read/8, error -71 [ 194.749349][ T6954] netlink: 'syz.6.639': attribute type 4 has an invalid length. [ 194.807577][ T6962] netlink: 'syz.2.642': attribute type 10 has an invalid length. [ 194.850693][ T4254] usb usb3-port1: unable to enumerate USB device [ 194.926504][ T6962] device syzkaller0 left promiscuous mode [ 194.965592][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.973663][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.058512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.121486][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.190429][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.225776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.762812][ T7004] loop2: detected capacity change from 0 to 8 [ 197.536154][ T26] audit: type=1800 audit(1756895089.438:10): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.651" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 197.565616][ T26] audit: type=1800 audit(1756895089.468:11): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.651" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 197.566220][ T7001] SQUASHFS error: Failed to read block 0x6e6: -5 [ 197.592010][ T7001] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 197.599476][ T7001] SQUASHFS error: read_indexes: reading block [6e4:0] [ 197.606315][ T7001] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 197.613618][ T7001] SQUASHFS error: read_indexes: reading block [6e4:0] [ 197.621037][ T7001] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 197.628362][ T7001] SQUASHFS error: read_indexes: reading block [6e4:0] [ 197.635556][ T7001] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 197.643139][ T7001] SQUASHFS error: read_indexes: reading block [6e4:0] [ 197.702549][ T7008] netlink: 'syz.8.653': attribute type 4 has an invalid length. [ 197.954712][ T1110] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 198.163381][ T1110] usb 7-1: device descriptor read/64, error -71 [ 198.182553][ T7019] netlink: 'syz.2.657': attribute type 10 has an invalid length. [ 198.431593][ T1110] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 198.586204][ T7033] loop2: detected capacity change from 0 to 16 [ 198.650242][ T1110] usb 7-1: device descriptor read/64, error -71 [ 198.693468][ T7033] erofs: (device loop2): mounted with root inode @ nid 36. [ 198.769610][ T1110] usb usb7-port1: attempt power cycle [ 198.781036][ T7033] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 198.848606][ T7033] attempt to access beyond end of device [ 198.848606][ T7033] loop2: rw=524288, want=524304, limit=16 [ 198.940154][ T146] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4100] [ 199.014011][ T7033] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 199.107565][ T26] audit: type=1800 audit(1756895091.028:12): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.660" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 199.186908][ T1110] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 199.306341][ T1110] usb 7-1: device descriptor read/8, error -71 [ 199.574589][ T1110] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 199.673945][ T1110] usb 7-1: device descriptor read/8, error -71 [ 199.793385][ T1110] usb usb7-port1: unable to enumerate USB device [ 200.122250][ T7061] netlink: 'syz.7.666': attribute type 4 has an invalid length. [ 200.474465][ T7072] loop7: detected capacity change from 0 to 512 [ 200.566177][ T7075] netlink: 'syz.6.669': attribute type 10 has an invalid length. [ 200.689317][ T7072] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.777919][ T7072] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.021493][ T7093] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 201.388149][ T7107] loop7: detected capacity change from 0 to 1024 [ 201.628674][ T4406] hfsplus: b-tree write err: -5, ino 8 [ 201.826162][ T7114] netlink: 'syz.7.677': attribute type 4 has an invalid length. [ 202.521743][ T7130] loop7: detected capacity change from 0 to 512 [ 202.546585][ T4289] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 202.597330][ T7130] EXT4-fs (loop7): Test dummy encryption mode enabled [ 202.648209][ T7130] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 202.701046][ T7130] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.681: bad orphan inode 131083 [ 202.732041][ T7130] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 202.755330][ T4289] usb 3-1: device descriptor read/64, error -71 [ 203.023758][ T4289] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 203.133989][ T7138] netlink: 'syz.7.682': attribute type 10 has an invalid length. [ 203.222596][ T4289] usb 3-1: device descriptor read/64, error -71 [ 203.341985][ T4289] usb usb3-port1: attempt power cycle [ 203.749528][ T4289] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 203.839280][ T4289] usb 3-1: device descriptor read/8, error -71 [ 204.133107][ T4289] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 204.246716][ T4289] usb 3-1: device descriptor read/8, error -71 [ 204.375989][ T4289] usb usb3-port1: unable to enumerate USB device [ 204.863767][ T7168] netlink: 'syz.0.688': attribute type 4 has an invalid length. [ 206.003656][ T7196] netlink: 'syz.0.694': attribute type 10 has an invalid length. [ 206.419387][ T7022] Set syz1 is full, maxelem 65536 reached [ 206.666069][ T7211] loop8: detected capacity change from 0 to 1024 [ 206.780075][ T26] audit: type=1800 audit(1756895098.733:13): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.698" name="file2" dev="loop8" ino=21 res=0 errno=0 [ 206.809926][ T4255] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 207.036398][ T7221] netlink: 'syz.8.700': attribute type 4 has an invalid length. [ 207.110654][ T4255] usb 8-1: Using ep0 maxpacket: 32 [ 207.239990][ T4255] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 207.262201][ T4255] usb 8-1: config 0 has no interface number 0 [ 207.323291][ T7228] loop8: detected capacity change from 0 to 512 [ 207.440965][ T7228] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2228: inode #15: comm syz.8.702: corrupted in-inode xattr [ 207.458824][ T4255] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 207.468069][ T4333] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 207.478922][ T4255] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.487361][ T4255] usb 8-1: Product: syz [ 207.491849][ T4255] usb 8-1: Manufacturer: syz [ 207.496747][ T4255] usb 8-1: SerialNumber: syz [ 207.515732][ T4255] usb 8-1: config 0 descriptor?? [ 207.568932][ T7228] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.702: couldn't read orphan inode 15 (err -117) [ 207.568965][ T4255] smsc95xx v2.0.0 [ 207.677397][ T4333] usb 7-1: device descriptor read/64, error -71 [ 207.694389][ T7228] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,abort,noload,delalloc,max_batch_time=0x0000000000000001,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000800,bsdgroups,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 207.945895][ T4333] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 209.050005][ T4333] usb 7-1: device descriptor read/64, error -71 [ 209.166046][ T7257] loop8: detected capacity change from 0 to 2048 [ 209.172732][ T4333] usb usb7-port1: attempt power cycle [ 209.215640][ T7257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.299365][ T4255] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 209.321080][ T4255] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 209.359267][ T4255] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 209.403994][ T4255] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 209.444848][ T4255] usb 8-1: USB disconnect, device number 5 [ 209.458319][ T7267] netlink: 'syz.8.708': attribute type 10 has an invalid length. [ 209.573931][ T7267] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.597112][ T4333] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 209.614451][ T7271] loop2: detected capacity change from 0 to 512 [ 209.663624][ T7271] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.706606][ T4333] usb 7-1: device descriptor read/8, error -71 [ 209.747899][ T7271] EXT4-fs (loop2): 1 truncate cleaned up [ 209.786095][ T7271] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nodiscard,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 209.973168][ T7284] netlink: 'syz.7.712': attribute type 4 has an invalid length. [ 210.117960][ T4333] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 210.174332][ T7289] loop7: detected capacity change from 0 to 512 [ 210.177631][ T7293] capability: warning: `syz.6.717' uses deprecated v2 capabilities in a way that may be insecure [ 210.248300][ T7289] EXT4-fs (loop7): Ignoring removed bh option [ 210.282911][ T7289] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 210.319438][ T7289] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 210.345069][ T7289] EXT4-fs (loop7): orphan cleanup on readonly fs [ 210.393790][ T4333] usb 7-1: device not accepting address 15, error -71 [ 210.402096][ T7289] EXT4-fs (loop7): 1 truncate cleaned up [ 210.407859][ T7289] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 210.410275][ T4333] usb usb7-port1: unable to enumerate USB device [ 210.517380][ T7305] loop6: detected capacity change from 0 to 2048 [ 210.604150][ T7305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.700583][ T1110] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 210.748067][ T7312] loop7: detected capacity change from 0 to 512 [ 210.845757][ T7316] netlink: 'syz.0.722': attribute type 10 has an invalid length. [ 210.978105][ T7312] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 210.999715][ T7312] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.099235][ T1110] usb 3-1: config 0 has no interfaces? [ 211.318120][ T1110] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 211.332719][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 211.360074][ T1110] usb 3-1: Product: syz [ 211.377065][ T1110] usb 3-1: Manufacturer: syz [ 211.382533][ T1110] usb 3-1: SerialNumber: syz [ 211.428661][ T1110] usb 3-1: config 0 descriptor?? [ 211.432768][ T7332] loop7: detected capacity change from 0 to 512 [ 211.681965][ T7332] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=continue,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 211.770997][ T7332] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.716646][ T7369] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 212.729719][ T7369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.734'. [ 213.892350][ T4333] usb 3-1: USB disconnect, device number 17 [ 213.928710][ T7390] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 213.967871][ T7393] loop7: detected capacity change from 0 to 512 [ 214.156023][ T7393] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.689125][ T7393] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.740: bg 0: block 5: invalid block bitmap [ 215.100915][ T7393] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 215.109965][ T7413] netlink: 'syz.0.745': attribute type 10 has an invalid length. [ 215.114436][ T7393] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.740: invalid indirect mapped block 3 (level 2) [ 215.132128][ T7413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.745'. [ 215.179419][ T7393] EXT4-fs (loop7): 2 truncates cleaned up [ 215.185335][ T7393] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,grpquota,,errors=continue. Quota mode: writeback. [ 215.208513][ T7416] loop6: detected capacity change from 0 to 512 [ 215.906385][ T1110] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 216.263409][ T3521] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 216.279340][ T7451] loop8: detected capacity change from 0 to 128 [ 216.353133][ T1110] usb 8-1: config 0 has no interfaces? [ 216.446694][ T26] audit: type=1800 audit(1756895108.453:14): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.757" name="file1" dev="loop8" ino=1048629 res=0 errno=0 [ 216.579718][ T1110] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 216.607235][ T1110] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 216.651633][ T3521] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.668056][ T1110] usb 8-1: Product: syz [ 216.680280][ T1110] usb 8-1: Manufacturer: syz [ 216.693296][ T1110] usb 8-1: SerialNumber: syz [ 216.714250][ T1110] usb 8-1: config 0 descriptor?? [ 216.803737][ T3521] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.870377][ T3521] usb 7-1: config 0 interface 0 has no altsetting 0 [ 216.897357][ T3521] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 216.939664][ T3521] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.973366][ T3521] usb 7-1: config 0 descriptor?? [ 217.402438][ T4407] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.473019][ T3521] input: HID 054c:03d5 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:054C:03D5.0007/input/input12 [ 217.524020][ T4407] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.613373][ T3521] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.6-1/input0 [ 217.641237][ T4407] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.686865][ T3521] usb 7-1: USB disconnect, device number 16 [ 217.783055][ T4407] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.854521][ T7468] fido_id[7468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 218.162183][ T7480] netlink: 'syz.2.762': attribute type 10 has an invalid length. [ 218.251470][ T7480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.762'. [ 218.403584][ T7491] loop2: detected capacity change from 0 to 1024 [ 219.142266][ T3521] usb 8-1: USB disconnect, device number 6 [ 219.439242][ T7491] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 219.450443][ T7491] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.462224][ T7506] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 220.001287][ T26] audit: type=1800 audit(1756895112.009:15): pid=7491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.765" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 220.191654][ T7491] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: comm syz.2.765: lblock 0 mapped to illegal pblock 0 (length 1) [ 220.229585][ T7512] loop6: detected capacity change from 0 to 512 [ 220.284909][ T4254] Bluetooth: hci2: command 0x0409 tx timeout [ 220.299540][ T7491] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.765: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 220.466450][ T7512] loop6: detected capacity change from 0 to 256 [ 220.482049][ T7479] chnl_net:caif_netlink_parms(): no params data found [ 220.572282][ T7512] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 220.642136][ T4407] bond0: (slave wlan1): Releasing backup interface [ 220.877142][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.931692][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.981558][ T4254] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 221.035338][ T7479] device bridge_slave_0 entered promiscuous mode [ 221.227563][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.265176][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.328790][ T7479] device bridge_slave_1 entered promiscuous mode [ 221.349968][ T4254] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.392115][ T4254] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.658577][ T4254] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.695398][ T4254] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.712637][ T4254] usb 7-1: Product: syz [ 221.734290][ T4254] usb 7-1: Manufacturer: syz [ 221.753482][ T4254] usb 7-1: SerialNumber: syz [ 221.807314][ T4407] device hsr_slave_0 left promiscuous mode [ 221.818635][ T4407] device hsr_slave_1 left promiscuous mode [ 221.842156][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.868922][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.896047][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.914315][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.952249][ T4407] device bridge_slave_1 left promiscuous mode [ 221.972355][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.008159][ T4407] device bridge_slave_0 left promiscuous mode [ 222.014787][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.072515][ T4407] device veth1_macvtap left promiscuous mode [ 222.079798][ T4407] device veth0_macvtap left promiscuous mode [ 222.097308][ T4407] device veth1_vlan left promiscuous mode [ 222.112412][ T4407] device veth0_vlan left promiscuous mode [ 222.196031][ T4254] usb 7-1: 0:2 : does not exist [ 222.226889][ T4254] usb 7-1: USB disconnect, device number 17 [ 222.345334][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 222.488053][ T7475] udevd[7475]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.525298][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 222.581250][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 222.624489][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.664283][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.809882][ T4407] bond0 (unregistering): Released all slaves [ 222.934050][ T7558] netlink: 'syz.7.774': attribute type 10 has an invalid length. [ 222.948735][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.957043][ T7577] loop6: detected capacity change from 0 to 128 [ 223.032784][ T4333] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 223.069756][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.221167][ T7577] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 223.520971][ T4333] usb 1-1: config 0 has no interfaces? [ 223.843183][ T4333] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 225.649379][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 225.668512][ T7479] team0: Port device team_slave_0 added [ 225.701013][ T4333] usb 1-1: Product: syz [ 225.705244][ T4333] usb 1-1: Manufacturer: syz [ 225.765551][ T4333] usb 1-1: SerialNumber: syz [ 225.801584][ T7588] loop7: detected capacity change from 0 to 2048 [ 225.809122][ T4333] usb 1-1: config 0 descriptor?? [ 225.828656][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 225.850814][ T4333] usb 1-1: can't set config #0, error -71 [ 225.879306][ T7588] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 225.901604][ T4333] usb 1-1: USB disconnect, device number 16 [ 226.033506][ T7588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.054378][ T7479] team0: Port device team_slave_1 added [ 226.062748][ T4352] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.371266][ T7605] netlink: 'syz.6.787': attribute type 10 has an invalid length. [ 226.388772][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.395856][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.458093][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.586418][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.620115][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.396470][ T7620] loop7: detected capacity change from 0 to 256 [ 227.434295][ T7620] FAT-fs (loop7): Unrecognized mount option "utf8=1" or missing value [ 227.613062][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.893182][ T7479] device hsr_slave_0 entered promiscuous mode [ 227.969008][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 228.776954][ T7479] device hsr_slave_1 entered promiscuous mode [ 228.975818][ T7646] Zero length message leads to an empty skb [ 230.050390][ T7653] loop6: detected capacity change from 0 to 8 [ 230.123788][ T7653] squashfs: Unknown parameter '00000000000000000000' [ 230.276170][ T7479] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 230.349673][ T7479] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 230.424121][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 230.489326][ T7660] netlink: 22 bytes leftover after parsing attributes in process `syz.0.799'. [ 230.521342][ T7665] qrtr: Invalid version 0 [ 230.532086][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.6.800'. [ 230.570172][ T7479] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 230.602860][ T7479] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 230.730752][ T1110] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 230.947655][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.001236][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.009723][ T1110] usb 7-1: Using ep0 maxpacket: 32 [ 232.563013][ T1110] usb 7-1: config 0 has an invalid interface number: 47 but max is 0 [ 337.234359][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 337.240972][ C0] rcu: 0-...!: (10643 ticks this GP) idle=0c5/1/0x4000000000000000 softirq=21350/21352 fqs=743 [ 337.252326][ C0] (t=10502 jiffies g=27989 q=233) [ 337.257431][ C0] rcu: rcu_preempt kthread starved for 9016 jiffies! g27989 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 337.268600][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 337.278646][ C0] rcu: RCU grace-period kthread stack dump: [ 337.284512][ C0] task:rcu_preempt state:R running task stack:28032 pid: 15 ppid: 2 flags:0x00004000 [ 337.295259][ C0] Call Trace: [ 337.298517][ C0] [ 337.301430][ C0] __schedule+0x11bb/0x4390 [ 337.305940][ C0] ? release_firmware_map_entry+0x190/0x190 [ 337.311815][ C0] schedule+0x11b/0x1e0 [ 337.316034][ C0] schedule_timeout+0x15c/0x280 [ 337.320886][ C0] ? console_conditional_schedule+0x40/0x40 [ 337.326920][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 337.332815][ C0] ? update_process_times+0x200/0x200 [ 337.338181][ C0] ? prepare_to_swait_event+0x331/0x350 [ 337.343820][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 337.348660][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 337.354799][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 337.359572][ C0] ? finish_swait+0xc0/0x1d0 [ 337.364137][ C0] rcu_gp_kthread+0x98/0x350 [ 337.368701][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 337.373788][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 337.379658][ C0] ? __kthread_parkme+0x157/0x1b0 [ 337.384748][ C0] kthread+0x436/0x520 [ 337.388795][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 337.393890][ C0] ? kthread_blkcg+0xd0/0xd0 [ 337.398583][ C0] ret_from_fork+0x1f/0x30 [ 337.403018][ C0] [ 337.406036][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 337.412442][ C0] Sending NMI from CPU 0 to CPUs 1: [ 337.417635][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 337.418622][ C0] NMI backtrace for cpu 0 [ 337.430822][ C0] CPU: 0 PID: 7686 Comm: syz.7.807 Not tainted syzkaller #0 [ 337.438090][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.448126][ C0] Call Trace: [ 337.451399][ C0] [ 337.454225][ C0] dump_stack_lvl+0x168/0x230 [ 337.458908][ C0] ? show_regs_print_info+0x20/0x20 [ 337.464090][ C0] ? load_image+0x3b0/0x3b0 [ 337.468658][ C0] ? try_to_wake_up+0x3d4/0x1050 [ 337.473593][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 337.478822][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 337.485128][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 337.490498][ C0] ? _raw_spin_lock+0x40/0x40 [ 337.495155][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 337.501226][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 337.507443][ C0] rcu_dump_cpu_stacks+0x22f/0x380 [ 337.512620][ C0] print_cpu_stall+0x31d/0x5f0 [ 337.517456][ C0] rcu_sched_clock_irq+0x6d8/0x1110 [ 337.522795][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 337.527643][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 337.533528][ C0] ? account_process_tick+0x227/0x3a0 [ 337.538965][ C0] update_process_times+0x193/0x200 [ 337.544157][ C0] tick_sched_timer+0x37d/0x560 [ 337.548999][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 337.554191][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 337.559821][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 337.565003][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 337.571055][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 337.575981][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 337.581971][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 337.587684][ C0] [ 337.590593][ C0] [ 337.593706][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 337.599663][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 337.605534][ C0] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 1d aa f7 48 89 df e8 56 f2 aa f7 e8 d1 8c cb f7 fb bf 01 00 00 00 a6 15 9f f7 65 8b 05 a7 13 50 76 85 c0 74 02 5b c3 e8 54 1e 4e [ 337.625130][ C0] RSP: 0018:ffffc90003ff7bc0 EFLAGS: 00000282 [ 337.631263][ C0] RAX: 02e5713d3ebb8600 RBX: ffff888056ddef00 RCX: 02e5713d3ebb8600 [ 337.639210][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1620 RDI: 0000000000000001 [ 337.647346][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100adbbde1 [ 337.655294][ C0] R10: ffffed100adbbde1 R11: 1ffff1100adbbde0 R12: ffff888056ddef00 [ 337.663245][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 337.671286][ C0] get_signal+0x11d6/0x12c0 [ 337.675777][ C0] arch_do_signal_or_restart+0xc1/0x1300 [ 337.681383][ C0] ? _copy_from_user+0x111/0x170 [ 337.686295][ C0] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 337.691903][ C0] ? load_gs_index+0x120/0x120 [ 337.696640][ C0] ? get_sigframe_size+0x10/0x10 [ 337.701558][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 337.707004][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 337.714763][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 337.720472][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 337.725910][ C0] do_syscall_64+0x58/0xa0 [ 337.730301][ C0] ? clear_bhb_loop+0x30/0x80 [ 337.734961][ C0] ? clear_bhb_loop+0x30/0x80 [ 337.739619][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 337.745485][ C0] RIP: 0033:0x7f0f52d15ca7 [ 337.749879][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.769467][ C0] RSP: 002b:00007ffe52447068 EFLAGS: 00000206 [ 337.775955][ C0] RAX: 0000000000000000 RBX: 00007f0f50f5c6c0 RCX: 00007f0f52d15ca7 [ 337.783989][ C0] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f0f50f3d000 [ 337.792111][ C0] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 337.800067][ C0] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe524471c0 [ 337.808014][ C0] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 337.815967][ C0] [ 337.890683][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.897009][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.120358][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.148543][ T1110] usb 7-1: config 0 has no interface number 0 [ 338.236074][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.438921][ T1110] usb 7-1: config 0 interface 47 has no altsetting 0 SYZFAIL: failed to send rpc fd=3 want=288 sent=0 n=-1 (errno 32: Broken pipe) [ 338.498388][ T4409] Bluetooth: hci4: command 0x0406 tx timeout [ 338.515030][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 338.543653][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.553328][ T1110] usb 7-1: string descriptor 0 read error: -71 [ 338.559693][ T1110] usb 7-1: New USB device found, idVendor=0dd8, idProduct=1060, bcdDevice=d7.ad [ 338.561506][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.576511][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.654843][ T1110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.705052][ T1110] usb 7-1: config 0 descriptor?? [ 338.773189][ T1110] usb 7-1: can't set config #0, error -71 [ 338.788299][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 338.808959][ T1110] usb 7-1: USB disconnect, device number 18 [ 339.153550][ T4183] bridge0: port 3(syz_tun) entered disabled state [ 339.244917][ T4183] device syz_tun left promiscuous mode [ 339.251010][ T4183] bridge0: port 3(syz_tun) entered disabled state [ 340.133205][ T4407] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.189058][ T4407] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.260003][ T4407] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.316992][ T4407] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.429232][ T4407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.479852][ T4407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.527308][ T4407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.577285][ T4407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.712531][ T4407] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.756702][ T4407] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.848173][ T4407] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.918593][ T4407] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.033962][ T4407] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.094588][ T4407] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.163013][ T4407] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.205069][ T4407] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.323653][ T4407] bond0: (slave wlan1): Releasing backup interface [ 342.503500][ T4407] bond0: (slave wlan1): Releasing backup interface [ 342.630718][ T4407] bond0: (slave wlan1): Releasing backup interface [ 342.776156][ T4407] bond0: (slave wlan1): Releasing backup interface [ 342.905111][ T4407] device hsr_slave_0 left promiscuous mode [ 342.912462][ T4407] device hsr_slave_1 left promiscuous mode [ 342.918940][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.927284][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.936624][ T4407] device bridge_slave_1 left promiscuous mode [ 342.943471][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.951943][ T4407] device bridge_slave_0 left promiscuous mode [ 342.958329][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.971742][ T4407] device hsr_slave_0 left promiscuous mode [ 342.977951][ T4407] device hsr_slave_1 left promiscuous mode [ 342.984594][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.992182][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.001365][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.008813][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.016779][ T4407] device bridge_slave_1 left promiscuous mode [ 343.022994][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.032992][ T4407] device bridge_slave_0 left promiscuous mode [ 343.039529][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.050114][ T4407] device hsr_slave_0 left promiscuous mode [ 343.056198][ T4407] device hsr_slave_1 left promiscuous mode [ 343.062519][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.070125][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.077570][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.086246][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.094036][ T4407] device bridge_slave_1 left promiscuous mode [ 343.100581][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.109230][ T4407] device bridge_slave_0 left promiscuous mode [ 343.115365][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.125540][ T4407] device hsr_slave_0 left promiscuous mode [ 343.131992][ T4407] device hsr_slave_1 left promiscuous mode [ 343.138113][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.145620][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.153153][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.161073][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.168637][ T4407] device bridge_slave_1 left promiscuous mode [ 343.174851][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.182632][ T4407] device bridge_slave_0 left promiscuous mode [ 343.188755][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.200240][ T4407] device hsr_slave_0 left promiscuous mode [ 343.206379][ T4407] device hsr_slave_1 left promiscuous mode [ 343.212776][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.220369][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.227956][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.235524][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.243177][ T4407] device bridge_slave_1 left promiscuous mode [ 343.249605][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.257671][ T4407] device bridge_slave_0 left promiscuous mode [ 343.264147][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.278057][ T4407] device veth1_macvtap left promiscuous mode [ 343.284167][ T4407] device veth0_macvtap left promiscuous mode [ 343.290964][ T4407] device veth1_vlan left promiscuous mode [ 343.296707][ T4407] device veth0_vlan left promiscuous mode [ 343.305764][ T4407] device veth1_macvtap left promiscuous mode [ 343.311925][ T4407] device veth0_macvtap left promiscuous mode [ 343.317916][ T4407] device veth1_vlan left promiscuous mode [ 343.323855][ T4407] device veth0_vlan left promiscuous mode [ 343.331170][ T4407] device veth1_macvtap left promiscuous mode [ 343.337150][ T4407] device veth0_macvtap left promiscuous mode [ 343.343726][ T4407] device veth1_vlan left promiscuous mode [ 343.349631][ T4407] device veth0_vlan left promiscuous mode [ 343.356024][ T4407] device veth1_macvtap left promiscuous mode [ 343.362447][ T4407] device veth0_macvtap left promiscuous mode [ 343.368465][ T4407] device veth1_vlan left promiscuous mode [ 343.374662][ T4407] device veth0_vlan left promiscuous mode [ 343.644360][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 343.656703][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 343.666825][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.679654][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.722577][ T4407] bond0 (unregistering): Released all slaves [ 343.826987][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 343.840426][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 343.855319][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.867172][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.917984][ T4407] bond0 (unregistering): Released all slaves [ 344.024106][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 344.036454][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 344.048178][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.061247][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.108932][ T4407] bond0 (unregistering): Released all slaves [ 344.220480][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 344.234813][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 344.246549][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.259834][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.313496][ T4407] bond0 (unregistering): Released all slaves [ 344.414012][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 344.430006][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 344.440343][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.452036][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.498847][ T4407] bond0 (unregistering): Released all slaves