last executing test programs: 28m46.088305049s ago: executing program 3 (id=65): r0 = socket$inet(0x2, 0x3, 0x2) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xd0, 0x1c8, 0xd0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @remote}, [0xffffffff, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'syz_tun\x00', 'dummy0\x00', {}, {}, 0x70, 0x5c, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x2000}, {0x1, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1b, 0x9, 0xfff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x41f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x1, 0x2, r5, 0x0) 28m39.154768153s ago: executing program 3 (id=72): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xa) r5 = fanotify_init(0x40, 0x80000) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) fanotify_mark(r5, 0x1, 0x40001019, r6, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f0000000940)=""/229, 0xe5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8) 28m33.836472024s ago: executing program 3 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 28m23.789910981s ago: executing program 3 (id=85): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@mblk_io_submit}, {@mblk_io_submit}, {@commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x428}}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @mcast1, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f0000019300)='./file1\x00', 0x2000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc050) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x10fe}}) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 28m18.190434138s ago: executing program 3 (id=90): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) 28m15.646630906s ago: executing program 3 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 28m0.288007663s ago: executing program 32 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 20m58.942868369s ago: executing program 0 (id=652): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 20m57.852523092s ago: executing program 0 (id=655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x24) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x2) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x66, &(0x7f0000000080), &(0x7f000009de80)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31) 20m52.74261275s ago: executing program 0 (id=663): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 20m51.73153228s ago: executing program 0 (id=664): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) lseek(0xffffffffffffffff, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000180), 0x1, 0x6da, &(0x7f0000000940)="$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") connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x803}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) 20m46.484383286s ago: executing program 0 (id=672): r0 = socket$inet(0x2, 0x3, 0x2) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xd0, 0x1c8, 0xd0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @remote}, [0xffffffff, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'syz_tun\x00', 'dummy0\x00', {}, {}, 0x70, 0x5c, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x2000}, {0x1, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1b, 0x9, 0xfff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x41f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x1, 0x2, r5, 0x0) vmsplice(r6, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x10a) 20m45.202910871s ago: executing program 0 (id=674): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="68479787f676", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x8000, 0xc, 0x5}}}}}}, 0x0) 20m30.066637735s ago: executing program 33 (id=674): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="68479787f676", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x8000, 0xc, 0x5}}}}}}, 0x0) 16m45.47843605s ago: executing program 2 (id=1025): syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 16m45.317849129s ago: executing program 2 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0x67b7cbbd6e592237, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x400) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x32, 0x800000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) socket$inet6(0xa, 0x80002, 0x0) 16m43.721382333s ago: executing program 2 (id=1027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3222502000000", @ANYRES32, @ANYBLOB], 0x30}}, 0x80c0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) 16m41.585712927s ago: executing program 2 (id=1031): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9c) 16m38.368602015s ago: executing program 2 (id=1039): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='setgroups\x00') lseek(r0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000180), 0x1, 0x6da, &(0x7f0000000940)="$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") connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x803}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) 16m36.781972458s ago: executing program 2 (id=1042): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df4000000050002000700000008000300"], 0x44}}, 0x0) 16m21.424530705s ago: executing program 34 (id=1042): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r2, @ANYBLOB="28005080140001004abee33957edf8aaae14574df4000000050002000700000008000300"], 0x44}}, 0x0) 4m20.866316098s ago: executing program 5 (id=2767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 4m15.716286018s ago: executing program 5 (id=2773): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x33}, @in6=@mcast1, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000000}, {0x1, 0x2}, {0x8}, 0x0, 0x0, 0xa, 0x3, 0x2}, 0x4}}, 0xf8}, 0x1, 0x0, 0x0, 0x4041}, 0x0) accept$alg(r0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', 0x0, 0x200840d, &(0x7f00000001c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 4m12.567809392s ago: executing program 5 (id=2777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000011180)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m10.268965145s ago: executing program 5 (id=2778): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x76, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002340)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247", 0xad}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5", 0xd4}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)='1', 0xfffffffffffffc21, 0x10008095, 0x0, 0x21) 4m9.606420514s ago: executing program 5 (id=2781): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) 4m5.891285191s ago: executing program 5 (id=2784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) request_key(0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r1, 0x321, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 3m50.170179787s ago: executing program 35 (id=2784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) request_key(0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r1, 0x321, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 3m22.038048076s ago: executing program 1 (id=2836): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000040)) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50"], 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850", 0x4, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) io_submit(0x0, 0x3, &(0x7f0000000740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f5e6be907f85178}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0xd, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x422, r4, &(0x7f00000004c0)="591f1f2423d7f9d4496ff8bf60e98e0e4708338bc9b970cb479f9e4a056e1acf1fa369320c6f6fb3d0ecc42a6e7c2a82fb8a09f40b592215b06f1bd6bddb85de8cfc252a2e81644c2bfc4fd0383b525bcc8fd2a5c32488284d30b0f2e4691a4c024db723fdeb87b5e03c4a50637170589d78dfbc30828e289bd004d1f71c86680d946c470d3ad3ae9e47842a6f4e1a9becbd9f3bc54607d4454f4de76816c7d3ce036c13f85cf9c6da85fc4dd01a0697326832261e1196", 0xb7, 0x9, 0x0, 0x2}]) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000600)={[{@check_relaxed}, {@utf8}, {@overriderock}, {@nojoliet}, {@map_acorn}, {@block={'block', 0x3d, 0x400}}, {@check_strict}, {@showassoc}, {@mode={'mode', 0x3d, 0x80}}, {@nocompress}, {@block}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}, {@map_off}, {@check_relaxed}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x50}}]}, 0x5, 0xa51, &(0x7f0000001240)="$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") 3m20.680448855s ago: executing program 1 (id=2838): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000040)={0x2, 0x200, 0x7}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x9, @local, 0xf}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e28, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) msgsnd(0x0, 0x0, 0x0, 0x800) socket(0x11, 0xa, 0x5) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x56, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) io_uring_setup(0x85b, &(0x7f0000000180)={0x0, 0x9933, 0x400, 0x2, 0x384}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r5, 0x0) 3m17.804831823s ago: executing program 1 (id=2842): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000fc00000000000000000000000000000100040000000010020a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e00000010000000000000000000000000000000033000000ff010000000000000000000000000001ffffffffffff60bc4fcf24b9a0eadcfeffff01000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000080000010000000000000002000000000000000000000000000000000000000000000008000000fcffffff0000000000000000000000000a00030200000000000000000400"/186], 0xf8}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 3m12.611218425s ago: executing program 1 (id=2847): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000040)={0x2, 0x200, 0x7}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x9, @local, 0xf}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e28, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) msgsnd(0x0, 0x0, 0x0, 0x800) socket(0x11, 0xa, 0x5) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x56, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) io_uring_setup(0x85b, &(0x7f0000000180)={0x0, 0x9933, 0x400, 0x2, 0x384}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r5, 0x0) 3m9.226114633s ago: executing program 1 (id=2850): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x76, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002340)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb26", 0xbf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5", 0xd4}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)='1', 0xfffffffffffffc21, 0x10008095, 0x0, 0x21) 3m5.865920549s ago: executing program 1 (id=2854): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000040)={0x2, 0x200, 0x7}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x9, @local, 0xf}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e28, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) msgsnd(0x0, 0x0, 0x0, 0x800) socket(0x11, 0xa, 0x5) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x56, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r5, 0x0) 2m50.405905729s ago: executing program 36 (id=2854): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000040)={0x2, 0x200, 0x7}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x9, @local, 0xf}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e28, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) msgsnd(0x0, 0x0, 0x0, 0x800) socket(0x11, 0xa, 0x5) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x56, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r5, 0x0) 1m11.643422095s ago: executing program 6 (id=2965): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x33}, @in6=@mcast1, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000000}, {0x1, 0x2}, {0x8}, 0x0, 0x0, 0xa, 0x3, 0x2}, 0x4}}, 0xf8}, 0x1, 0x0, 0x0, 0x4041}, 0x0) accept$alg(r0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', 0x0, 0x200840d, &(0x7f00000001c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 1m5.71446s ago: executing program 6 (id=2970): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="111e00000000feffffff05"], 0x21}}, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1m4.478680972s ago: executing program 6 (id=2972): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000000040)) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000180)={{@my=0x1, 0xffffffff}, @my=0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000060f94d100d0502002723010203010902484002000000000904"], 0x0) 1m0.245376179s ago: executing program 6 (id=2977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 46.777080644s ago: executing program 6 (id=2986): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900) syz_open_dev$loop(&(0x7f0000000040), 0x8c44, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000340)={[{@discard}, {@nodatacow}, {@nossd_spread}, {@usebackuproot}, {@notreelog}, {@autodefrag}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x65, 0x67, 0x70, 0x67, 0x65, 0x6d]}}]}, 0x3, 0x510e, &(0x7f000000a240)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) 42.365072011s ago: executing program 6 (id=2990): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) socket$inet(0x2, 0x80000, 0x9) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) tgkill(r1, r1, 0xa) 27.924421253s ago: executing program 4 (id=2998): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xd, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xc, "09e12e5f0b6bdcf72f2ec700"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x158, 0x29, 0x36, {0x5e, 0x27, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2a8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 25.782998837s ago: executing program 37 (id=2990): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) socket$inet(0x2, 0x80000, 0x9) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) tgkill(r1, r1, 0xa) 24.826358943s ago: executing program 4 (id=3002): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x1) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) 22.664687499s ago: executing program 4 (id=3003): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000040)={0x2, 0x200, 0x7}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e28, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) msgsnd(0x0, 0x0, 0x0, 0x800) socket(0x11, 0xa, 0x5) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x56, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) io_uring_setup(0x85b, &(0x7f0000000180)={0x0, 0x9933, 0x400, 0x2, 0x384}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r5, 0x0) 12.516926211s ago: executing program 4 (id=3011): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x208c, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000001f40)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "51f435b675ba491895df818c52f9e875d9b1bd2c20f5c6b1e36d59e2036887f264d726807797b2e0d0768e1791a519f4aac513fc3713901f18f58a56f75b0121", 0x2d}, 0x48, 0xfffffffffffffffe) syz_init_net_socket$x25(0x9, 0x5, 0x27) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) recvfrom$inet_nvme(r3, &(0x7f00000001c0)=""/251, 0xfb, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_mount_image$minix(&(0x7f0000000340), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x197, &(0x7f0000000900)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9) 12.516007341s ago: executing program 7 (id=3018): openat$rfkill(0xffffffffffffff9c, 0x0, 0x94000, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX]) 9.916327822s ago: executing program 7 (id=3012): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000040)={0x2, 0x200, 0x7}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x9, @local, 0xf}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) msgsnd(0x0, 0x0, 0x0, 0x800) socket(0x11, 0xa, 0x5) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x56, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) io_uring_setup(0x85b, &(0x7f0000000180)={0x0, 0x9933, 0x400, 0x2, 0x384}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r5, 0x0) 9.903924293s ago: executing program 8 (id=3020): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xd, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xc, "09e12e5f0b6bdcf72f2ec700"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x158, 0x29, 0x36, {0x5e, 0x27, '\x00', [@generic={0xff, 0x21, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2a8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.755067652s ago: executing program 4 (id=3013): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000000040)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@my=0x1, 0xffffffff}, @my=0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000060f94d100d0502002723010203010902484002000000000904"], 0x0) 8.505803284s ago: executing program 8 (id=3014): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x20040010) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x8000056, 0x280}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50"], 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850", 0x4, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) io_submit(0x0, 0x3, &(0x7f0000000740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f5e6be907f85178}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x800, r0, &(0x7f0000000300), 0x0, 0xd, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x422, r3, &(0x7f00000004c0)="591f1f2423d7f9d4496ff8bf60e98e0e4708338bc9b970cb479f9e4a056e1acf1fa369320c6f6fb3d0ecc42a6e7c2a82fb8a09f40b592215b06f1bd6bddb85de8cfc252a2e81644c2bfc4fd0383b525bcc8fd2a5c32488284d30b0f2e4691a4c024db723fdeb87b5e03c4a50637170589d78dfbc30828e289bd004d1f71c86680d946c470d3ad3ae9e47842a6f4e1a9becbd9f3bc54607d4454f4de76816c7d3ce036c13f85cf9c6da85fc4dd01a0697326832261e1196", 0xb7, 0x9, 0x0, 0x2}]) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 6.666931152s ago: executing program 8 (id=3015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000011180)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.492055382s ago: executing program 7 (id=3016): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 5.179526838s ago: executing program 4 (id=3017): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xd, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xc, "09e12e5f0b6bdcf72f2ec700"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x158, 0x29, 0x36, {0x5e, 0x27, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2a8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.175000648s ago: executing program 7 (id=3019): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000040)={0x2, 0x200, 0x7}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) 4.851987117s ago: executing program 8 (id=3021): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="111e00000000fe"], 0x21}}, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1500000055003d0902000000fcdbdf2507"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="db84fd4c4ce9627c6278392c6c0000000008010300000000000000000500000306000240891400000500030021000000340004800800014000000004080001400000000708000140fffffff6080001400000004f080001ad6c31e161a6681ee75744c6d9400000000008000140000000090900010073797a310000000005000300"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f00000001c0)={0x320, 0x300, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x4}) 3.890477893s ago: executing program 7 (id=3022): openat$rfkill(0xffffffffffffff9c, 0x0, 0x94000, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX]) 2.876870972s ago: executing program 8 (id=3023): syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0), &(0x7f0000000900)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus/file0\x00', 0x401, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x4040, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2294], 0x3, 0x5edb, &(0x7f00000047c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) 2.316219795s ago: executing program 7 (id=3024): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xd, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xc, "09e12e5f0b6bdcf72f2ec700"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x158, 0x29, 0x36, {0x5e, 0x27, '\x00', [@generic={0xff, 0x21, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x2a8}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 8 (id=3025): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x20040010) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x8000056, 0x280}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50"], 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850", 0x4, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) io_submit(0x0, 0x3, &(0x7f0000000740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f5e6be907f85178}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x800, r0, &(0x7f0000000300), 0x0, 0xd, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x422, r3, &(0x7f00000004c0)="591f1f2423d7f9d4496ff8bf60e98e0e4708338bc9b970cb479f9e4a056e1acf1fa369320c6f6fb3d0ecc42a6e7c2a82fb8a09f40b592215b06f1bd6bddb85de8cfc252a2e81644c2bfc4fd0383b525bcc8fd2a5c32488284d30b0f2e4691a4c024db723fdeb87b5e03c4a50637170589d78dfbc30828e289bd004d1f71c86680d946c470d3ad3ae9e47842a6f4e1a9becbd9f3bc54607d4454f4de76816c7d3ce036c13f85cf9c6da85fc4dd01a0697326832261e1196", 0xb7, 0x9, 0x0, 0x2}]) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) kernel console output (not intermixed with test programs): d [ 822.854604][T10070] kvm: pic: level sensitive irq not supported [ 822.856220][ T8626] usb 6-1: USB disconnect, device number 3 [ 822.862874][T10070] kvm: pic: level sensitive irq not supported [ 822.873895][T10070] kvm: pic: single mode not supported [ 822.886267][T10070] kvm: pic: single mode not supported [ 822.892275][T10070] kvm: pic: level sensitive irq not supported [ 823.441774][T10078] trusted_key: encrypted_key: key user:syz not found [ 823.680719][T10079] 9pnet_virtio: no channels available for device syz [ 824.506083][T10085] loop1: detected capacity change from 0 to 1024 [ 824.523908][T10085] hfsplus: extend alloc file! (8192,8,110) [ 824.530106][T10085] hfsplus: b-tree write err: -5, ino 4 [ 824.587862][ T8152] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 826.621784][ T8249] Bluetooth: hci2: command 0x0405 tx timeout [ 826.776428][T10122] trusted_key: encrypted_key: key user:syz not found [ 828.524755][T10150] loop4: detected capacity change from 0 to 1024 [ 829.983333][T10150] hfsplus: extend alloc file! (8192,8,110) [ 829.989406][T10150] hfsplus: b-tree write err: -5, ino 4 [ 830.371894][ T5863] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 830.573911][ T5863] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 830.598263][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0 [ 830.624315][ T5863] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 830.651814][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 830.660228][ T5863] usb 3-1: Product: syz [ 830.661675][ T788] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 830.686634][ T5863] usb 3-1: Manufacturer: syz [ 830.691411][ T5863] usb 3-1: SerialNumber: syz [ 830.704598][ T5863] usb 3-1: config 0 descriptor?? [ 830.726063][ T5863] usb 3-1: selecting invalid altsetting 0 [ 830.881936][ T788] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 830.890644][ T788] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 830.931703][ T788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 830.959793][ T788] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 830.979188][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.990501][ T8433] usb 3-1: USB disconnect, device number 3 [ 831.069303][ T788] usb 5-1: config 0 descriptor?? [ 831.078590][T10162] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 831.096794][T10140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.109636][ T788] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 831.741222][T10183] trusted_key: encrypted_key: key user:syz not found [ 832.875137][ T8249] Bluetooth: hci2: command 0x0405 tx timeout [ 834.478746][ T8433] usb 5-1: USB disconnect, device number 5 [ 835.103498][T10209] trusted_key: encrypted_key: key user:syz not found [ 836.931115][T10216] netlink: 14 bytes leftover after parsing attributes in process `syz.1.972'. [ 836.992075][T10211] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 837.103366][T10211] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 837.242501][T10216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.417957][T10216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.467419][T10216] bond0 (unregistering): Released all slaves [ 838.526498][T10211] siw: device registration error -19 [ 840.502009][ T5835] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 840.885033][T10246] trusted_key: encrypted_key: key user:syz not found [ 841.653717][ T5835] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 841.672026][ T5835] usb 3-1: config 0 interface 0 has no altsetting 0 [ 841.682751][ T5835] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 841.832951][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 841.834976][T10251] xt_hashlimit: size too large, truncated to 1048576 [ 841.841774][ T5835] usb 3-1: Product: syz [ 841.853791][ T5835] usb 3-1: Manufacturer: syz [ 841.861862][ T5835] usb 3-1: SerialNumber: syz [ 841.922050][ T5835] usb 3-1: config 0 descriptor?? [ 841.953709][ T5835] usb 3-1: selecting invalid altsetting 0 [ 842.159431][ T5835] usb 3-1: USB disconnect, device number 4 [ 843.561943][T10265] netlink: 'syz.2.995': attribute type 1 has an invalid length. [ 843.758213][T10265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 843.903576][T10269] bond1: (slave geneve2): making interface the new active one [ 843.942145][T10269] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 844.087526][T10269] syz.2.995 (10269) used greatest stack depth: 20264 bytes left [ 846.451875][T10277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 846.458565][T10277] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 846.549295][T10277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 846.581786][T10277] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 846.613404][T10277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 846.619571][T10277] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 846.702035][ T8249] Bluetooth: hci1: command 0x0406 tx timeout [ 846.702511][T10277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 846.741752][T10277] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 848.683488][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 848.689948][T10287] Bluetooth: hci4: command 0x0405 tx timeout [ 849.572568][ T5783] Bluetooth: hci2: command 0x0405 tx timeout [ 849.578918][T10287] Bluetooth: hci1: command 0x0406 tx timeout [ 850.730909][T10287] Bluetooth: hci4: command 0x0405 tx timeout [ 850.737623][T10287] Bluetooth: hci3: command 0x0c1a tx timeout [ 852.973885][T10287] Bluetooth: hci2: command 0x0405 tx timeout [ 854.368388][ T5809] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 855.104386][ T5809] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 855.118058][ T5809] usb 6-1: config 0 interface 0 has no altsetting 0 [ 856.152195][ T5809] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 856.191581][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 856.211686][ T5809] usb 6-1: Product: syz [ 856.221994][ T5809] usb 6-1: Manufacturer: syz [ 856.230998][ T5809] usb 6-1: SerialNumber: syz [ 856.258841][ T5809] usb 6-1: config 0 descriptor?? [ 856.284852][ T5809] usb 6-1: selecting invalid altsetting 0 [ 856.461860][T10331] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50999997 out of range (51000000..2150000000) [ 856.530824][ T5809] usb 6-1: USB disconnect, device number 4 [ 863.866026][T10377] loop1: detected capacity change from 0 to 1024 [ 863.888432][T10377] hfsplus: extend alloc file! (8192,8,110) [ 863.896115][T10377] hfsplus: b-tree write err: -5, ino 4 [ 864.088097][T10382] block device autoloading is deprecated and will be removed. [ 867.091702][T10287] Bluetooth: hci2: command 0x0405 tx timeout [ 869.034031][T10424] loop2: detected capacity change from 0 to 1024 [ 870.009154][T10424] hfsplus: extend alloc file! (8192,8,110) [ 870.015187][T10424] hfsplus: b-tree write err: -5, ino 4 [ 870.626441][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.633361][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.012619][T10437] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 871.019960][T10437] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 872.648423][T10287] Bluetooth: hci2: command 0x0405 tx timeout [ 872.823100][ T5835] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 873.031680][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 873.043482][ T5835] usb 2-1: config 1 interface 0 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 873.067560][ T5835] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 873.107344][ T5835] usb 2-1: config 1 interface 0 has no altsetting 0 [ 873.194423][ T5835] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 873.214670][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.261690][ T5835] usb 2-1: Product: syz [ 873.270122][ T5835] usb 2-1: Manufacturer: syz [ 873.291605][ T5835] usb 2-1: SerialNumber: syz [ 873.327640][T10448] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 873.472985][T10459] loop5: detected capacity change from 0 to 1024 [ 873.511402][T10459] hfsplus: extend alloc file! (8192,8,110) [ 873.517750][T10459] hfsplus: b-tree write err: -5, ino 4 [ 874.366923][ T5835] usb 2-1: USB disconnect, device number 4 [ 874.778530][ T5783] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 876.125339][ T5783] Bluetooth: hci2: command 0x0405 tx timeout [ 876.980183][T10489] loop5: detected capacity change from 0 to 1024 [ 877.306815][T10489] hfsplus: extend alloc file! (8192,8,110) [ 877.313063][T10489] hfsplus: b-tree write err: -5, ino 4 [ 878.080001][T10496] syz.5.1063 uses obsolete (PF_INET,SOCK_PACKET) [ 879.900412][ T5783] Bluetooth: hci2: command 0x0405 tx timeout [ 880.357066][T10517] loop5: detected capacity change from 0 to 512 [ 880.393155][T10517] EXT4-fs: Ignoring removed orlov option [ 880.429637][T10517] EXT4-fs: Ignoring removed mblk_io_submit option [ 880.467225][T10517] EXT4-fs: Ignoring removed mblk_io_submit option [ 880.552134][T10517] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1070: corrupted in-inode xattr: e_value size too large [ 880.568436][T10517] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1070: couldn't read orphan inode 15 (err -117) [ 880.610493][T10517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.849222][T10521] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1070: corrupted in-inode xattr: e_value size too large [ 881.201891][T10524] loop4: detected capacity change from 0 to 1024 [ 882.114107][T10524] hfsplus: extend alloc file! (8192,8,110) [ 882.120802][T10524] hfsplus: b-tree write err: -5, ino 4 [ 882.487957][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.661455][T10287] Bluetooth: hci2: command 0x0405 tx timeout [ 886.161415][T10554] loop5: detected capacity change from 0 to 512 [ 886.211235][T10554] EXT4-fs: Ignoring removed orlov option [ 886.273557][T10554] EXT4-fs: Ignoring removed mblk_io_submit option [ 886.280636][T10554] EXT4-fs: Ignoring removed mblk_io_submit option [ 886.467074][T10554] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1082: corrupted in-inode xattr: e_value size too large [ 886.581928][T10554] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1082: couldn't read orphan inode 15 (err -117) [ 886.673129][T10554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.917094][T10563] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1082: corrupted in-inode xattr: e_value size too large [ 887.022979][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 887.034881][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 887.038562][T10556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 887.069197][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 887.085256][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 887.093621][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 887.101768][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 887.656323][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.832966][T10565] chnl_net:caif_netlink_parms(): no params data found [ 889.558003][ T5783] Bluetooth: hci0: command tx timeout [ 889.798497][T10565] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.911834][T10565] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.919418][T10565] bridge_slave_0: entered allmulticast mode [ 889.978162][T10565] bridge_slave_0: entered promiscuous mode [ 890.008425][T10565] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.050211][T10565] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.081823][T10565] bridge_slave_1: entered allmulticast mode [ 890.109276][T10565] bridge_slave_1: entered promiscuous mode [ 890.262774][T10565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.304417][T10565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.423571][T10592] syzkaller1: entered promiscuous mode [ 890.429325][T10592] syzkaller1: entered allmulticast mode [ 891.024620][T10565] team0: Port device team_slave_0 added [ 891.076258][T10565] team0: Port device team_slave_1 added [ 892.091891][ T5783] Bluetooth: hci0: command tx timeout [ 892.115230][T10565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.168322][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.340422][T10565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.373431][T10565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.380707][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.572047][T10565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.442965][T10565] hsr_slave_0: entered promiscuous mode [ 893.516946][T10565] hsr_slave_1: entered promiscuous mode [ 894.151970][ T5783] Bluetooth: hci0: command tx timeout [ 894.570298][T10565] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 894.600382][T10565] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 894.625155][T10565] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 894.628993][T10615] loop5: detected capacity change from 0 to 512 [ 894.663266][T10615] EXT4-fs: Ignoring removed orlov option [ 894.707962][T10615] EXT4-fs: Ignoring removed mblk_io_submit option [ 894.737764][T10565] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 894.758677][T10615] EXT4-fs: Ignoring removed mblk_io_submit option [ 894.807478][T10615] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1093: corrupted in-inode xattr: e_value size too large [ 894.822524][T10615] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1093: couldn't read orphan inode 15 (err -117) [ 894.851397][T10615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.890829][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.004639][T10619] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1093: corrupted in-inode xattr: e_value size too large [ 895.155340][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.250183][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.660982][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.680728][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.888566][T10565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.082544][T10565] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.918267][ T5783] Bluetooth: hci0: command tx timeout [ 897.074140][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.081990][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.149989][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.157507][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.534480][T10662] Bluetooth: MGMT ver 1.22 [ 898.777195][T10671] loop5: detected capacity change from 0 to 512 [ 898.807871][T10671] EXT4-fs: Ignoring removed orlov option [ 898.840984][T10671] EXT4-fs: Ignoring removed mblk_io_submit option [ 898.873497][T10671] EXT4-fs: Ignoring removed mblk_io_submit option [ 898.931076][T10671] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1105: corrupted in-inode xattr: e_value size too large [ 898.991625][T10671] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1105: couldn't read orphan inode 15 (err -117) [ 899.014309][T10671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.216414][T10681] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1105: corrupted in-inode xattr: e_value size too large [ 899.310909][T10565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.785210][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.451661][T10565] veth0_vlan: entered promiscuous mode [ 903.533866][ T49] hsr_slave_0: left promiscuous mode [ 903.586074][ T49] hsr_slave_1: left promiscuous mode [ 903.592985][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.600629][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.632484][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.639962][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.687695][ T49] bridge_slave_1: left allmulticast mode [ 903.702221][ T49] bridge_slave_1: left promiscuous mode [ 903.708537][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.743884][ T49] bridge_slave_0: left allmulticast mode [ 903.749778][ T49] bridge_slave_0: left promiscuous mode [ 903.762178][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.849445][ T49] veth1_macvtap: left promiscuous mode [ 903.861888][ T49] veth0_macvtap: left promiscuous mode [ 903.874128][ T49] veth1_vlan: left promiscuous mode [ 903.879546][ T49] veth0_vlan: left promiscuous mode [ 904.299260][T10727] 9pnet_virtio: no channels available for device syz [ 904.390174][ T49] bond1 (unregistering): (slave geneve2): Releasing active interface [ 904.754757][ T49] bond1 (unregistering): Released all slaves [ 905.708801][T10740] loop5: detected capacity change from 0 to 512 [ 905.716637][T10740] EXT4-fs: Ignoring removed orlov option [ 905.728225][T10740] EXT4-fs: Ignoring removed mblk_io_submit option [ 905.735081][T10740] EXT4-fs: Ignoring removed mblk_io_submit option [ 905.791619][T10740] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1116: corrupted in-inode xattr: e_value size too large [ 905.807163][T10740] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1116: couldn't read orphan inode 15 (err -117) [ 905.882431][T10740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.974994][T10743] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1116: corrupted in-inode xattr: e_value size too large [ 906.235984][ T8872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.313280][ T49] team0 (unregistering): Port device team_slave_1 removed [ 906.405142][ T49] team0 (unregistering): Port device team_slave_0 removed [ 906.513427][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.633195][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.186541][ T49] bond0 (unregistering): Released all slaves [ 908.344364][T10565] veth1_vlan: entered promiscuous mode [ 908.499369][T10565] veth0_macvtap: entered promiscuous mode [ 908.529125][T10565] veth1_macvtap: entered promiscuous mode [ 908.600097][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.632002][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.657246][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.695814][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.720290][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 908.733917][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.763037][T10565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.837105][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.871596][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.891615][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.937798][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.969232][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 908.985810][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 908.999530][T10565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.025957][T10565] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.063653][T10565] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.091312][T10565] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.111655][T10565] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.493666][ T8433] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 909.564488][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.587126][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.642625][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.658455][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.704690][ T8433] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.726175][ T8433] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 909.750413][ T8433] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 909.780964][ T8433] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10496, setting to 8 [ 909.793040][ T8433] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 909.811836][ T8433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.834826][T10772] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 909.859756][ T8433] hub 6-1:1.0: bad descriptor, ignoring hub [ 909.901249][ T8433] hub: probe of 6-1:1.0 failed with error -5 [ 909.932163][ T8433] cdc_wdm 6-1:1.0: skipping garbage [ 909.937622][ T8433] cdc_wdm 6-1:1.0: skipping garbage [ 909.990340][ T8433] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 910.030773][ T8433] cdc_wdm 6-1:1.0: Unknown control protocol [ 910.064941][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 910.071719][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 910.079896][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 910.086630][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 910.093195][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 910.099845][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 910.106168][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 910.112973][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 910.113674][T10788] loop1: detected capacity change from 0 to 512 [ 910.119524][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 910.132144][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 910.139747][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 910.146497][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 910.152936][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 910.159675][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 910.171826][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 910.172014][T10772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.178733][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 910.179117][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 910.189868][T10788] EXT4-fs: Ignoring removed orlov option [ 910.194029][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 910.292687][T10788] EXT4-fs: Ignoring removed mblk_io_submit option [ 910.383978][T10791] loop6: detected capacity change from 0 to 1024 [ 910.406202][T10772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.454113][T10791] hfsplus: extend alloc file! (8192,8,110) [ 910.460456][T10791] hfsplus: b-tree write err: -5, ino 4 [ 910.694769][T10788] EXT4-fs: Ignoring removed mblk_io_submit option [ 910.959050][T10788] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.1126: corrupted in-inode xattr: e_value size too large [ 911.096025][T10788] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1126: couldn't read orphan inode 15 (err -117) [ 911.150246][T10799] loop5: detected capacity change from 0 to 7 [ 911.172075][T10788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.188710][T10799] Dev loop5: unable to read RDB block 7 [ 911.200312][T10799] loop5: unable to read partition table [ 911.223709][T10799] loop5: partition table beyond EOD, truncated [ 911.223765][ T23] usb 6-1: USB disconnect, device number 5 [ 911.248997][T10799] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 911.386388][T10803] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.1126: corrupted in-inode xattr: e_value size too large [ 911.799160][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.701815][ T5783] Bluetooth: hci0: command tx timeout [ 913.559019][T10851] loop1: detected capacity change from 0 to 1024 [ 913.610117][T10851] hfsplus: extend alloc file! (8192,8,110) [ 913.616781][T10851] hfsplus: b-tree write err: -5, ino 4 [ 914.365598][T10287] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 914.442479][T10856] loop4: detected capacity change from 0 to 512 [ 914.449969][T10856] EXT4-fs: Ignoring removed orlov option [ 914.511428][T10856] EXT4-fs: Ignoring removed mblk_io_submit option [ 914.519283][T10856] EXT4-fs: Ignoring removed mblk_io_submit option [ 914.551381][T10856] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.1138: corrupted in-inode xattr: e_value size too large [ 914.614351][T10856] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1138: couldn't read orphan inode 15 (err -117) [ 914.633478][T10856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.877037][T10872] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.1138: corrupted in-inode xattr: e_value size too large [ 915.503731][ T6290] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.661672][T10287] Bluetooth: hci0: command tx timeout [ 916.013832][T10903] loop1: detected capacity change from 0 to 1024 [ 916.083094][T10903] hfsplus: extend alloc file! (8192,8,110) [ 916.089988][T10903] hfsplus: b-tree write err: -5, ino 4 [ 917.316720][T10927] loop1: detected capacity change from 0 to 512 [ 917.328681][T10927] EXT4-fs: Ignoring removed orlov option [ 917.366131][T10927] EXT4-fs: Ignoring removed mblk_io_submit option [ 917.388250][T10927] EXT4-fs: Ignoring removed mblk_io_submit option [ 917.422548][T10927] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.1159: corrupted in-inode xattr: e_value size too large [ 917.454336][T10927] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1159: couldn't read orphan inode 15 (err -117) [ 917.490018][T10927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.675534][T10936] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.1159: corrupted in-inode xattr: e_value size too large [ 918.221771][T10287] Bluetooth: hci0: command 0x0405 tx timeout [ 918.430028][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.008997][T10957] loop4: detected capacity change from 0 to 1024 [ 919.114271][T10957] hfsplus: extend alloc file! (8192,8,110) [ 919.120726][T10957] hfsplus: b-tree write err: -5, ino 4 [ 919.705693][T10963] xt_hashlimit: size too large, truncated to 1048576 [ 919.832493][T10966] capability: warning: `syz.5.1167' uses 32-bit capabilities (legacy support in use) [ 922.071531][T10287] Bluetooth: hci0: command 0x0405 tx timeout [ 923.458586][T11016] loop4: detected capacity change from 0 to 1024 [ 923.760800][T11016] hfsplus: extend alloc file! (8192,8,110) [ 923.767362][T11016] hfsplus: b-tree write err: -5, ino 4 [ 924.283546][ T8152] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 926.494556][ T5783] Bluetooth: hci0: command 0x0405 tx timeout [ 926.651580][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 926.903928][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.925677][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.956455][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 927.030935][ T23] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.061675][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.093187][ T23] usb 6-1: config 0 descriptor?? [ 927.542394][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.601568][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.611320][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.631566][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.639129][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.677789][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.701605][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.737422][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.761570][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.786165][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.814588][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.834880][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.861582][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.884605][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.914516][ T23] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 927.937650][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 928.043602][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 928.131076][ T23] usb 6-1: USB disconnect, device number 6 [ 928.699417][T11050] fido_id[11050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 932.073755][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.080311][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.655494][T11087] loop4: detected capacity change from 0 to 1024 [ 934.813106][T11087] hfsplus: extend alloc file! (8192,8,110) [ 934.819282][T11087] hfsplus: b-tree write err: -5, ino 4 [ 937.361393][ T5783] Bluetooth: hci0: command 0x0405 tx timeout [ 937.931831][ T5822] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 938.131732][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 938.144197][ T5822] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 938.172570][ T5822] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 938.191842][ T5822] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 938.231792][ T5822] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 938.269311][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 938.295259][ T5822] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 938.317716][ T5822] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 938.351617][ T5822] usb 5-1: Product: syz [ 938.362654][ T5822] usb 5-1: Manufacturer: syz [ 938.371635][ T5822] usb 5-1: SerialNumber: syz [ 938.380949][ T5822] usb 5-1: config 0 descriptor?? [ 938.405288][ T5822] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 938.434881][ T5822] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 938.649651][ T5822] usb 5-1: USB disconnect, device number 6 [ 938.651412][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 938.682672][ T5822] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 938.866235][T11147] fuse: Bad value for 'fd' [ 943.769183][T11197] netlink: 'syz.4.1215': attribute type 10 has an invalid length. [ 943.781631][T11197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1215'. [ 943.812361][T11197] batadv0: entered promiscuous mode [ 943.818101][T11197] batadv0: entered allmulticast mode [ 943.872616][T11197] bridge0: port 3(batadv0) entered blocking state [ 943.882605][T11197] bridge0: port 3(batadv0) entered disabled state [ 943.932523][T11197] bridge0: port 3(batadv0) entered blocking state [ 943.939855][T11197] bridge0: port 3(batadv0) entered forwarding state [ 943.971898][ T2914] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 943.982293][ T2914] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 947.593191][T10287] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 955.578709][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1237'. [ 955.914447][T11325] block device autoloading is deprecated and will be removed. [ 960.082059][T10287] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 960.768964][T11370] loop6: detected capacity change from 0 to 1024 [ 961.192967][T11370] hfsplus: extend alloc file! (8192,8,110) [ 961.199517][T11370] hfsplus: b-tree write err: -5, ino 4 [ 963.272758][T10287] Bluetooth: hci0: command 0x0405 tx timeout [ 971.715379][T11447] loop6: detected capacity change from 0 to 1024 [ 971.809798][T11447] hfsplus: extend alloc file! (8192,8,110) [ 971.816220][T11447] hfsplus: b-tree write err: -5, ino 4 [ 975.192189][T10287] Bluetooth: hci0: command 0x0405 tx timeout [ 979.633058][ T8433] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 979.835218][ T8433] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.847800][ T8433] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 979.876373][ T8433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 979.893784][ T8433] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 979.913411][ T8433] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 979.926527][ T8433] usb 7-1: Product: syz [ 979.933104][ T8433] usb 7-1: Manufacturer: syz [ 979.938228][ T8433] usb 7-1: SerialNumber: syz [ 979.951645][ T8433] usb 7-1: config 0 descriptor?? [ 979.990882][ T8433] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 980.035944][ T8152] udevd[8152]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.137105][T11508] fuse: Bad value for 'fd' [ 980.193452][ T8433] usb 7-1: USB disconnect, device number 2 [ 980.309626][T11510] syzkaller0: entered promiscuous mode [ 980.315516][T11510] syzkaller0: entered allmulticast mode [ 981.888404][ T1099] Bluetooth: hci1: Frame reassembly failed (-84) [ 981.928378][T11522] Bluetooth: hci1: Frame reassembly failed (-84) [ 984.354829][T10287] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 984.586815][T11541] fuse: Bad value for 'fd' [ 985.141581][ T8433] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 986.334078][ T8433] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.366333][ T8433] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 986.411564][ T8433] usb 5-1: config 0 interface 0 has no altsetting 0 [ 986.444977][ T8433] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 986.455232][ T8433] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 986.472022][ T8433] usb 5-1: Product: syz [ 986.476325][ T8433] usb 5-1: Manufacturer: syz [ 986.480959][ T8433] usb 5-1: SerialNumber: syz [ 986.504980][ T8433] usb 5-1: config 0 descriptor?? [ 986.592469][ T8433] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 986.736283][ T8152] udevd[8152]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 986.787147][ T8433] usb 5-1: USB disconnect, device number 7 [ 989.330322][T11575] fuse: Bad value for 'fd' [ 991.341696][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 991.544134][ T23] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 991.579079][ T23] usb 7-1: config 0 interface 0 has no altsetting 0 [ 991.604389][ T23] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 991.618895][ T23] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 991.627574][ T23] usb 7-1: Product: syz [ 991.632691][ T23] usb 7-1: Manufacturer: syz [ 991.637344][ T23] usb 7-1: SerialNumber: syz [ 991.665473][ T23] usb 7-1: config 0 descriptor?? [ 991.713892][ T23] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 991.797513][ T8152] udevd[8152]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 991.914844][ T23] usb 7-1: USB disconnect, device number 3 [ 993.544297][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.551118][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.783140][T11651] fuse: Bad value for 'fd' [ 1003.771847][ T5809] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1004.900403][T11681] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1004.941528][T11681] overlayfs: overlapping lowerdir path [ 1004.968390][ T5809] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1004.978609][T11682] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1004.983737][ T5809] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1005.003875][ T5809] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1005.013344][T11682] overlayfs: overlapping lowerdir path [ 1005.013459][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1005.038157][ T5809] usb 7-1: Product: syz [ 1005.045121][ T5809] usb 7-1: Manufacturer: syz [ 1005.054151][ T5809] usb 7-1: SerialNumber: syz [ 1005.062975][ T5809] usb 7-1: config 0 descriptor?? [ 1005.146314][ T5809] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 1005.146633][T11685] fuse: Bad value for 'fd' [ 1005.287478][T11665] udevd[11665]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.309429][ T8433] usb 7-1: USB disconnect, device number 4 [ 1010.411317][T11716] fuse: Bad value for 'fd' [ 1012.021839][ T8249] Bluetooth: hci0: command 0x0405 tx timeout [ 1012.661757][ T5809] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1012.899029][ T5809] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1012.909625][ T5809] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1012.947226][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.970500][ T5809] usb 7-1: Product: syz [ 1012.981561][ T5809] usb 7-1: Manufacturer: syz [ 1012.986323][ T5809] usb 7-1: SerialNumber: syz [ 1016.884750][ T5809] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1017.016641][ T5809] usb 7-1: USB disconnect, device number 5 [ 1017.045979][ T5809] usblp0: removed [ 1018.291981][ T8626] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1018.411688][ T5809] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1018.471652][ T8626] usb 5-1: Using ep0 maxpacket: 8 [ 1018.480286][ T8626] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.492042][ T8626] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.503688][ T8626] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1018.510524][ T8626] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1018.519733][ T8626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.529927][ T8626] usb 5-1: config 0 descriptor?? [ 1018.605313][ T5809] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1018.615719][ T5809] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1018.625220][ T5809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.634018][ T5809] usb 6-1: Product: syz [ 1018.638497][ T5809] usb 6-1: Manufacturer: syz [ 1018.643639][ T5809] usb 6-1: SerialNumber: syz [ 1018.975076][ T8626] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1018.982829][ T8626] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1018.990151][ T8626] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1018.998149][ T8626] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1019.006964][ T8626] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 1019.020769][ T8626] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1019.112999][ T5809] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1019.200625][ T8626] usb 5-1: USB disconnect, device number 8 [ 1020.459071][T11823] syzkaller0: entered promiscuous mode [ 1020.465750][T11823] syzkaller0: entered allmulticast mode [ 1021.034400][ C0] usblp0: nonzero write bulk status received: -71 [ 1021.056988][ T8626] usb 6-1: USB disconnect, device number 7 [ 1021.070266][ T8626] usblp0: removed [ 1021.520463][T10287] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 1021.751614][T10287] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1022.812575][T11882] overlayfs: failed to get inode (-116) [ 1022.828009][T11882] overlayfs: failed to get inode (-116) [ 1023.111607][ T23] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1024.763972][ T23] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1024.783532][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1024.807492][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.816798][ T23] usb 2-1: Product: syz [ 1024.822984][ T23] usb 2-1: Manufacturer: syz [ 1024.827745][ T23] usb 2-1: SerialNumber: syz [ 1025.306192][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1025.341578][ T8249] Bluetooth: hci0: command 0x0405 tx timeout [ 1025.795342][T11920] syzkaller0: entered promiscuous mode [ 1025.811129][T11920] syzkaller0: entered allmulticast mode [ 1025.982813][ T8249] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1025.994864][ T8249] CPU: 0 PID: 8249 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1026.002489][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1026.012776][ T8249] Workqueue: hci0 hci_rx_work [ 1026.017865][ T8249] Call Trace: [ 1026.021191][ T8249] [ 1026.024245][ T8249] dump_stack_lvl+0x18c/0x250 [ 1026.028981][ T8249] ? show_regs_print_info+0x20/0x20 [ 1026.034492][ T8249] ? load_image+0x400/0x400 [ 1026.039321][ T8249] sysfs_create_dir_ns+0x26e/0x2a0 [ 1026.044484][ T8249] ? sysfs_warn_dup+0xa0/0xa0 [ 1026.049208][ T8249] ? do_raw_spin_unlock+0x121/0x230 [ 1026.054640][ T8249] kobject_add_internal+0x61c/0xcc0 [ 1026.060174][ T8249] kobject_add+0x164/0x240 [ 1026.064922][ T8249] ? __rwlock_init+0x150/0x150 [ 1026.069828][ T8249] ? kobject_init+0x1e0/0x1e0 [ 1026.074658][ T8249] ? _raw_spin_unlock+0x28/0x40 [ 1026.079593][ T8249] ? get_device_parent+0x366/0x390 [ 1026.084779][ T8249] device_add+0x408/0xc20 [ 1026.089173][ T8249] hci_conn_add_sysfs+0xd5/0x1e0 [ 1026.094186][ T8249] le_conn_complete_evt+0xf5d/0x1540 [ 1026.099617][ T8249] ? hci_event_packet+0x4cb/0x1270 [ 1026.105076][ T8249] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1026.111569][ T8249] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1026.117272][ T8249] ? skb_pull_data+0xfb/0x200 [ 1026.122006][ T8249] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1026.128058][ T8249] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 1026.134621][ T8249] ? hci_remote_host_features_evt+0x150/0x150 [ 1026.140828][ T8249] hci_event_packet+0x7ba/0x1270 [ 1026.145830][ T8249] ? bis_list+0x290/0x290 [ 1026.150485][ T8249] ? lockdep_hardirqs_on+0x98/0x150 [ 1026.155745][ T8249] ? hci_send_to_monitor+0xd7/0x4f0 [ 1026.161269][ T8249] hci_rx_work+0x43a/0xd60 [ 1026.165753][ T8249] ? process_scheduled_works+0x96f/0x15d0 [ 1026.171525][ T8249] process_scheduled_works+0xa5d/0x15d0 [ 1026.177312][ T8249] ? assign_work+0x430/0x430 [ 1026.182111][ T8249] ? assign_work+0x3d0/0x430 [ 1026.186857][ T8249] worker_thread+0xa55/0xfc0 [ 1026.191593][ T8249] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1026.197797][ T8249] ? _raw_spin_unlock+0x40/0x40 [ 1026.202699][ T8249] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1026.208670][ T8249] kthread+0x2fa/0x390 [ 1026.212784][ T8249] ? pr_cont_work+0x560/0x560 [ 1026.217521][ T8249] ? kthread_blkcg+0xd0/0xd0 [ 1026.222247][ T8249] ret_from_fork+0x48/0x80 [ 1026.226714][ T8249] ? kthread_blkcg+0xd0/0xd0 [ 1026.231442][ T8249] ret_from_fork_asm+0x11/0x20 [ 1026.236276][ T8249] [ 1026.243794][ T8249] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1026.258497][ T8249] Bluetooth: hci0: failed to register connection device [ 1028.372534][ C0] usblp0: nonzero write bulk status received: -71 [ 1028.375404][ T23] usb 2-1: USB disconnect, device number 5 [ 1028.390652][ T23] usblp0: removed [ 1028.975541][T11951] netlink: 'syz.5.1421': attribute type 2 has an invalid length. [ 1029.033211][T11951] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1421'. [ 1033.099563][T11994] netlink: 'syz.1.1432': attribute type 2 has an invalid length. [ 1033.164550][T11994] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1432'. [ 1035.871780][ T5863] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1036.083389][ T5863] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1036.111820][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1036.131312][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.147108][ T5863] usb 2-1: Product: syz [ 1036.154410][ T5863] usb 2-1: Manufacturer: syz [ 1036.159658][ T5863] usb 2-1: SerialNumber: syz [ 1036.226587][T12028] syzkaller0: entered promiscuous mode [ 1036.239992][T12028] syzkaller0: entered allmulticast mode [ 1036.597334][ T5863] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1036.847394][T12035] tipc: Started in network mode [ 1036.852836][T12035] tipc: Node identity 4, cluster identity 4711 [ 1036.859688][T12035] tipc: Node number set to 4 [ 1037.492061][T12041] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1448'. [ 1037.846360][T12046] fuse: Unknown parameter 'grou00000000000000000000' [ 1038.024644][T12053] syzkaller0: entered promiscuous mode [ 1038.030829][T12053] syzkaller0: entered allmulticast mode [ 1038.251717][ T8626] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1038.464645][ T8626] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1038.497997][ T8626] usb 7-1: config 0 has no interface number 0 [ 1038.515010][ T8626] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1038.551556][ T8626] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1038.581705][ T8626] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1038.606061][ T8626] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1038.621680][ T8626] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1038.632851][ T8626] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.654273][ T8626] usb 7-1: config 0 descriptor?? [ 1038.671864][T12051] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1038.695873][T12051] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1038.732045][ T8626] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1038.945857][ T788] usb 7-1: USB disconnect, device number 6 [ 1039.598189][ T5863] usb 2-1: USB disconnect, device number 6 [ 1039.626184][ T5863] usblp0: removed [ 1039.797668][T12078] fuse: Unknown parameter 'grou00000000000000000000' [ 1039.946729][T12081] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1462'. [ 1039.991000][T12082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.162204][T12085] syzkaller0: entered promiscuous mode [ 1040.170887][T12085] syzkaller0: entered allmulticast mode [ 1040.350544][T12092] fuse: Unknown parameter 'grou00000000000000000000' [ 1040.467110][T12096] fuse: Bad value for 'group_id' [ 1040.503944][T12098] fuse: Unknown parameter 'grou00000000000000000000' [ 1040.651667][ T5835] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1040.676057][T12105] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1473'. [ 1040.854925][ T5835] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1040.872657][ T5835] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1040.893127][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.920078][ T5835] usb 2-1: Product: syz [ 1040.940346][ T5835] usb 2-1: Manufacturer: syz [ 1040.962235][ T5835] usb 2-1: SerialNumber: syz [ 1041.258834][T12118] syzkaller0: entered promiscuous mode [ 1041.268977][T12118] syzkaller0: entered allmulticast mode [ 1041.411844][ T5835] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1041.507273][T12121] fuse: Unknown parameter 'group_i00000000000000000000' [ 1041.675922][T12125] fuse: Bad value for 'group_id' [ 1042.847017][T12139] netlink: 'syz.4.1485': attribute type 2 has an invalid length. [ 1043.075948][T12142] syzkaller0: entered promiscuous mode [ 1043.082515][T12142] syzkaller0: entered allmulticast mode [ 1043.417369][T12147] fuse: Unknown parameter 'group_i00000000000000000000' [ 1043.515002][T12149] fuse: Bad value for 'group_id' [ 1044.431005][ T8626] usb 2-1: USB disconnect, device number 7 [ 1044.470560][ T8626] usblp0: removed [ 1044.558366][T12163] netlink: 'syz.1.1494': attribute type 2 has an invalid length. [ 1044.800073][T12169] syzkaller0: entered promiscuous mode [ 1044.821591][T12169] syzkaller0: entered allmulticast mode [ 1045.250757][T12175] fuse: Unknown parameter 'group_i00000000000000000000' [ 1045.603679][T12182] fuse: Bad value for 'group_id' [ 1045.862135][ T5822] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1046.063543][ T5822] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1046.084671][ T5822] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1046.097524][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.122843][ T5822] usb 7-1: Product: syz [ 1046.134236][ T5822] usb 7-1: Manufacturer: syz [ 1046.144648][ T5822] usb 7-1: SerialNumber: syz [ 1046.569526][T12200] fuse: Unknown parameter 'group_id00000000000000000000' [ 1046.605449][ T5822] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1047.498387][T12215] fuse: Bad value for 'fd' [ 1047.747139][T12219] syzkaller0: entered promiscuous mode [ 1047.761624][T12219] syzkaller0: entered allmulticast mode [ 1048.023815][T12222] fuse: Bad value for 'user_id' [ 1048.221966][T12224] netlink: 'syz.1.1517': attribute type 2 has an invalid length. [ 1048.252234][T12224] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1517'. [ 1049.260979][T12242] syzkaller0: entered promiscuous mode [ 1049.279864][T12242] syzkaller0: entered allmulticast mode [ 1049.423085][T12245] fuse: Bad value for 'user_id' [ 1049.568751][ T788] usb 7-1: USB disconnect, device number 7 [ 1049.606270][ T788] usblp0: removed [ 1049.705332][T12247] netlink: 'syz.1.1527': attribute type 2 has an invalid length. [ 1049.748658][T12247] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1527'. [ 1049.973829][T12256] fuse: Bad value for 'user_id' [ 1050.369885][T12265] fuse: Bad value for 'fd' [ 1050.543668][T12269] syzkaller0: entered promiscuous mode [ 1050.557174][T12269] syzkaller0: entered allmulticast mode [ 1050.566797][T12271] netlink: 'syz.6.1538': attribute type 2 has an invalid length. [ 1050.609024][T12271] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1538'. [ 1050.796379][ T8249] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 1050.895828][T12279] fuse: Bad value for 'user_id' [ 1051.259965][T12287] fuse: Bad value for 'fd' [ 1051.494202][T12293] syzkaller0: entered promiscuous mode [ 1051.507367][T12293] syzkaller0: entered allmulticast mode [ 1051.672927][T12298] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1052.128538][T12311] fuse: Bad value for 'fd' [ 1052.415035][T12318] syzkaller0: entered promiscuous mode [ 1052.420915][T12318] syzkaller0: entered allmulticast mode [ 1052.791201][T12327] fuse: Bad value for 'fd' [ 1053.338841][T12336] fuse: Bad value for 'fd' [ 1053.577357][ T8249] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1053.821379][T12346] syzkaller0: entered promiscuous mode [ 1053.842869][T12350] fuse: Unknown parameter 'grou00000000000000000000' [ 1053.861600][T12346] syzkaller0: entered allmulticast mode [ 1053.987400][T12353] netlink: 'syz.5.1573': attribute type 2 has an invalid length. [ 1054.008514][T12353] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1573'. [ 1054.358650][T12359] fuse: Bad value for 'fd' [ 1054.894465][T12370] syzkaller0: entered promiscuous mode [ 1054.919591][T12370] syzkaller0: entered allmulticast mode [ 1054.959968][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.966640][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.219007][T12378] fuse: Bad value for 'fd' [ 1055.555762][T12386] fuse: Bad value for 'fd' [ 1056.312071][T12396] 9pnet_virtio: no channels available for device ./file0 [ 1056.464631][T12402] fuse: Invalid rootmode [ 1056.477049][T12400] syzkaller0: entered promiscuous mode [ 1056.501510][T12400] syzkaller0: entered allmulticast mode [ 1056.685234][T12410] fuse: Bad value for 'fd' [ 1058.531952][ T5863] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1058.631358][T12444] fuse: Unknown parameter 'group_i00000000000000000000' [ 1058.728886][T12448] fuse: Invalid rootmode [ 1058.782951][ T5863] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1058.794165][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1058.821484][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.829643][ T5863] usb 2-1: Product: syz [ 1058.845989][ T5863] usb 2-1: Manufacturer: syz [ 1058.850920][ T5863] usb 2-1: SerialNumber: syz [ 1059.307529][ T5863] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1059.908535][T12467] loop5: detected capacity change from 0 to 512 [ 1059.935036][T12467] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1061.018526][T12474] fuse: Unknown parameter 'group_i00000000000000000000' [ 1061.041515][T10287] Bluetooth: hci3: command 0x0c1a tx timeout [ 1061.093627][T12476] fuse: Bad value for 'rootmode' [ 1061.252699][ T5863] usb 2-1: USB disconnect, device number 8 [ 1061.280252][ T5863] usblp0: removed [ 1062.484096][T12499] fuse: Unknown parameter 'group_id00000000000000000000' [ 1062.712174][T12504] fuse: Bad value for 'rootmode' [ 1063.161567][ T788] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1063.387387][ T788] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1063.406341][ T788] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1063.432300][ T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.462734][ T788] usb 6-1: Product: syz [ 1063.467088][ T788] usb 6-1: Manufacturer: syz [ 1063.491608][ T788] usb 6-1: SerialNumber: syz [ 1063.922160][ T788] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1063.940787][T12521] fuse: Unknown parameter 'group_id00000000000000000000' [ 1064.413659][T12533] fuse: Bad value for 'rootmode' [ 1065.090227][T12541] fuse: Bad value for 'rootmode' [ 1065.326395][T12546] fuse: Unknown parameter 'group_id00000000000000000000' [ 1065.594504][T12551] loop4: detected capacity change from 0 to 512 [ 1065.645268][T12551] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1065.883400][ T788] usb 6-1: USB disconnect, device number 8 [ 1065.910369][ T788] usblp0: removed [ 1066.086783][T12558] fuse: Unknown parameter 'use00000000000000000000' [ 1066.580817][T12566] fuse: Bad value for 'rootmode' [ 1067.072205][T12570] fuse: Bad value for 'user_id' [ 1068.362370][T12582] fuse: Unknown parameter 'use00000000000000000000' [ 1068.471589][ T788] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1068.605754][T12586] fuse: Unknown parameter 'use00000000000000000000' [ 1068.676955][ T788] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1068.700628][ T788] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1068.721682][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.729832][ T788] usb 7-1: Product: syz [ 1068.748481][ T788] usb 7-1: Manufacturer: syz [ 1068.760936][ T788] usb 7-1: SerialNumber: syz [ 1069.201926][ T788] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1069.422536][T12602] fuse: Unknown parameter 'use00000000000000000000' [ 1070.016887][T12609] fuse: Unknown parameter 'use00000000000000000000' [ 1070.449902][T12612] fuse: Bad value for 'user_id' [ 1071.177156][ T5859] usb 7-1: USB disconnect, device number 8 [ 1071.334020][ T5859] usblp0: removed [ 1071.683638][T12631] fuse: Unknown parameter 'user_i00000000000000000000' [ 1072.791759][T12645] fuse: Bad value for 'fd' [ 1073.261680][ T5835] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1073.467617][ T5835] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1073.477839][ T5835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1073.496110][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.507364][ T5835] usb 7-1: Product: syz [ 1073.512459][ T5835] usb 7-1: Manufacturer: syz [ 1073.517427][ T5835] usb 7-1: SerialNumber: syz [ 1073.705435][T12657] fuse: Unknown parameter 'user_i00000000000000000000' [ 1073.960236][ T5835] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1073.992027][ T5835] usb 7-1: USB disconnect, device number 9 [ 1074.017404][ T5835] usblp0: removed [ 1074.883406][T12671] fuse: Bad value for 'fd' [ 1075.054518][T12675] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1698'. [ 1075.289749][T12681] fuse: Unknown parameter 'user_i00000000000000000000' [ 1075.791664][ T5863] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1075.993697][ T5863] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1076.008260][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1076.030168][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.048856][ T5863] usb 2-1: Product: syz [ 1076.054811][ T5863] usb 2-1: Manufacturer: syz [ 1076.059587][ T5863] usb 2-1: SerialNumber: syz [ 1076.470611][T12697] fuse: Bad value for 'fd' [ 1076.510331][ T5863] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1076.566185][ T5863] usb 2-1: USB disconnect, device number 9 [ 1076.602200][ T5863] usblp0: removed [ 1076.875065][T12706] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1709'. [ 1077.633199][T12717] fuse: Unknown parameter 'user_id00000000000000000000' [ 1077.953511][T12725] fuse: Bad value for 'fd' [ 1077.982743][T12728] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1718'. [ 1077.995990][T12729] fuse: Bad value for 'group_id' [ 1078.400596][ T5863] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1078.615656][ T5863] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1078.625827][ T5863] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1078.641485][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.662718][ T5863] usb 7-1: Product: syz [ 1078.675453][ T5863] usb 7-1: Manufacturer: syz [ 1078.690733][ T5863] usb 7-1: SerialNumber: syz [ 1079.118923][ T5863] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1079.157917][ T5863] usb 7-1: USB disconnect, device number 10 [ 1079.210590][ T5863] usblp0: removed [ 1079.294395][T12744] fuse: Unknown parameter 'user_id00000000000000000000' [ 1080.167068][T12754] fuse: Bad value for 'fd' [ 1080.776711][T12763] fuse: Bad value for 'group_id' [ 1080.841195][T12767] fuse: Unknown parameter 'user_id00000000000000000000' [ 1081.392817][ T788] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1081.593946][ T788] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1081.614205][ T788] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1081.624074][ T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.633423][ T788] usb 6-1: Product: syz [ 1081.639360][ T788] usb 6-1: Manufacturer: syz [ 1081.647403][ T788] usb 6-1: SerialNumber: syz [ 1081.770351][T12781] fuse: Bad value for 'fd' [ 1081.908696][ T788] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1081.950576][T12783] loop1: detected capacity change from 0 to 512 [ 1081.963176][ T788] usb 6-1: USB disconnect, device number 9 [ 1081.999403][ T788] usblp0: removed [ 1082.007775][T12783] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1082.568247][T12796] fuse: Bad value for 'group_id' [ 1082.597129][T12798] fuse: Bad value for 'fd' [ 1082.717736][T12801] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1746'. [ 1082.932373][T12806] fuse: Invalid rootmode [ 1082.944084][T12805] fuse: Invalid rootmode [ 1084.940576][T12828] fuse: Bad value for 'fd' [ 1085.301808][ T8626] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1085.319862][T12836] fuse: Invalid rootmode [ 1085.360723][T12838] fuse: Invalid rootmode [ 1085.499556][T12840] fuse: Unknown parameter 'user_id00000000000000000000' [ 1085.504121][ T8626] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1085.524687][ T8626] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1085.541111][ T8626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.557928][ T8626] usb 7-1: Product: syz [ 1085.562566][ T8626] usb 7-1: Manufacturer: syz [ 1085.567494][ T8626] usb 7-1: SerialNumber: syz [ 1086.026433][ T8626] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1086.044438][ T8626] usb 7-1: USB disconnect, device number 11 [ 1086.665578][T12853] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1757'. [ 1086.809446][T12855] fuse: Bad value for 'fd' [ 1086.816596][ T8626] usblp0: removed [ 1086.990211][T12859] loop1: detected capacity change from 0 to 24 [ 1087.003526][T12859] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1087.064510][T12859] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1087.167671][T12864] fuse: Bad value for 'rootmode' [ 1087.178643][T12865] fuse: Invalid rootmode [ 1087.338161][T12869] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1774'. [ 1087.360324][T12867] fuse: Bad value for 'fd' [ 1087.505731][T12874] fuse: Unknown parameter '0x0000000000000003' [ 1088.503140][ T788] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1088.697196][T12891] fuse: Bad value for 'rootmode' [ 1088.804667][ T788] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1088.844252][ T788] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1088.848468][T12895] fuse: Bad value for 'rootmode' [ 1088.862544][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.870992][ T788] usb 5-1: Product: syz [ 1088.905841][ T788] usb 5-1: Manufacturer: syz [ 1088.910688][ T788] usb 5-1: SerialNumber: syz [ 1089.009432][T12898] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1783'. [ 1089.037223][T12900] fuse: Bad value for 'fd' [ 1089.192339][ T788] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1089.215847][ T788] usb 5-1: USB disconnect, device number 9 [ 1089.235310][ T788] usblp0: removed [ 1090.018850][T12912] fuse: Bad value for 'rootmode' [ 1091.112930][T12923] fuse: Bad value for 'fd' [ 1091.348987][T12929] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1793'. [ 1091.479424][T12936] fuse: Unknown parameter 'use00000000000000000000' [ 1092.682167][T12951] fuse: Unknown parameter '0x0000000000000003' [ 1093.028125][T12964] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1807'. [ 1093.225061][T12971] fuse: Unknown parameter 'use00000000000000000000' [ 1094.629283][T12984] fuse: Unknown parameter '0x0000000000000003' [ 1095.187327][T12991] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1817'. [ 1095.202621][T12992] fuse: Unknown parameter 'use00000000000000000000' [ 1095.469718][T12995] fuse: Unknown parameter '0x0000000000000003' [ 1095.833324][T12975] loop6: detected capacity change from 0 to 262144 [ 1095.907063][T12975] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by syz.6.1811 (12975) [ 1096.473869][T12975] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 1096.484884][T12975] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 1096.494865][T12975] BTRFS info (device loop6): using free space tree [ 1096.506131][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1096.509077][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1096.520962][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1096.532108][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1096.544817][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1096.557321][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1096.567291][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1096.590602][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1096.602092][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1096.611808][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1096.622037][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1096.633849][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1096.644695][T12975] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1096.670289][T12975] BTRFS error (device loop6): open_ctree failed: -12 [ 1096.776584][T13018] fuse: Unknown parameter '0x0000000000000003' [ 1096.793848][T11799] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by udevd (11799) [ 1098.002927][T13035] fuse: Unknown parameter 'user_i00000000000000000000' [ 1098.013756][T13033] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1827'. [ 1098.064395][T13037] fuse: Unknown parameter '0x0000000000000003' [ 1098.304920][T13045] fuse: Unknown parameter '0x0000000000000003' [ 1099.692041][T13063] fuse: Unknown parameter 'user_i00000000000000000000' [ 1099.752366][T13066] fuse: Unknown parameter 'fd0x0000000000000003' [ 1099.862604][T13068] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1841'. [ 1100.036945][T13073] fuse: Unknown parameter '0x0000000000000003' [ 1101.924335][T13094] fuse: Unknown parameter 'user_i00000000000000000000' [ 1102.014558][T13098] fuse: Unknown parameter 'fd0x0000000000000003' [ 1102.254574][T13103] fuse: Unknown parameter '0x0000000000000003' [ 1104.152354][T13130] fuse: Unknown parameter 'user_id00000000000000000000' [ 1104.274855][T13133] fuse: Unknown parameter 'fd0x0000000000000003' [ 1104.302524][T13134] autofs4:pid:13134:autofs_fill_super: called with bogus options [ 1104.341251][T13136] fuse: Unknown parameter 'fd0x0000000000000003' [ 1105.805511][T13160] fuse: Unknown parameter 'user_id00000000000000000000' [ 1106.774974][T13168] fuse: Unknown parameter 'fd0x0000000000000003' [ 1107.181185][T13178] loop6: detected capacity change from 0 to 512 [ 1107.242270][T13178] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1107.302650][ T5859] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1108.343826][ T5859] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1108.451727][T13186] fuse: Unknown parameter 'user_id00000000000000000000' [ 1108.940066][T13191] fuse: Unknown parameter 'group_i00000000000000000000' [ 1109.148275][ T5859] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1109.159536][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.250160][T13195] fuse: Unknown parameter 'fd0x0000000000000003' [ 1109.369313][ T5859] usb 2-1: Product: syz [ 1109.375220][ T5859] usb 2-1: Manufacturer: syz [ 1109.380059][ T5859] usb 2-1: SerialNumber: syz [ 1110.211884][ T5859] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1110.226015][ T5859] usb 2-1: USB disconnect, device number 10 [ 1110.234648][ T5859] usblp0: removed [ 1110.665746][T13218] fuse: Bad value for 'fd' [ 1110.769677][T13220] fuse: Unknown parameter 'group_i00000000000000000000' [ 1112.318953][T13236] 9pnet_fd: Insufficient options for proto=fd [ 1112.607960][T13243] fuse: Bad value for 'fd' [ 1112.631134][T13245] fuse: Unknown parameter 'group_id00000000000000000000' [ 1113.681701][ T23] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1113.883768][ T23] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1113.907286][ T23] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1113.916673][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.925166][ T23] usb 7-1: Product: syz [ 1113.929372][ T23] usb 7-1: Manufacturer: syz [ 1113.934893][ T23] usb 7-1: SerialNumber: syz [ 1114.195679][ T23] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1114.242222][ T23] usb 7-1: USB disconnect, device number 12 [ 1114.256650][ T23] usblp0: removed [ 1115.487515][T13271] fuse: Unknown parameter 'group_id00000000000000000000' [ 1115.497339][T13274] fuse: Bad value for 'fd' [ 1115.515802][T13275] 9pnet_fd: Insufficient options for proto=fd [ 1116.336787][T13292] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1917'. [ 1116.387691][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.395346][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.681873][ T23] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1116.696872][T13302] fuse: Unknown parameter '0x0000000000000004' [ 1116.819142][T13306] fuse: Unknown parameter 'group_id00000000000000000000' [ 1116.882730][ T23] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1116.917401][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1116.950121][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.970953][ T23] usb 2-1: Product: syz [ 1116.991671][ T23] usb 2-1: Manufacturer: syz [ 1116.996340][ T23] usb 2-1: SerialNumber: syz [ 1117.642065][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1117.955513][ T23] usb 2-1: USB disconnect, device number 11 [ 1118.852002][ T23] usblp0: removed [ 1119.079465][T13312] loop5: detected capacity change from 0 to 64 [ 1119.218825][T13312] Trying to free block not in datazone [ 1119.839818][T13322] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1929'. [ 1120.269289][T13332] fuse: Unknown parameter '0x0000000000000004' [ 1120.410672][T13334] fuse: Bad value for 'user_id' [ 1121.251605][ T23] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1121.579845][ T23] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1121.592884][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1121.611539][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.624577][ T23] usb 5-1: Product: syz [ 1121.628981][ T23] usb 5-1: Manufacturer: syz [ 1121.639438][T13350] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1938'. [ 1121.642185][ T23] usb 5-1: SerialNumber: syz [ 1123.921701][ T23] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1123.972067][ T23] usb 5-1: USB disconnect, device number 10 [ 1123.996781][ T23] usblp0: removed [ 1124.208030][T13360] fuse: Bad value for 'user_id' [ 1124.904819][T13367] fuse: Unknown parameter '0x0000000000000004' [ 1125.180308][T13374] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1947'. [ 1127.979426][T13393] fuse: Bad value for 'user_id' [ 1128.231530][ T5822] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1128.278719][T13396] loop6: detected capacity change from 0 to 64 [ 1128.469392][T13394] Trying to free block not in datazone [ 1128.966309][ T5822] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1129.012091][ T5822] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1129.022548][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.030605][ T5822] usb 2-1: Product: syz [ 1129.035712][ T5822] usb 2-1: Manufacturer: syz [ 1129.040441][ T5822] usb 2-1: SerialNumber: syz [ 1129.122360][T13400] loop6: detected capacity change from 0 to 512 [ 1129.206452][T13400] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1129.371708][ T5822] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1129.443165][ T5822] usb 2-1: USB disconnect, device number 12 [ 1129.528891][ T5822] usblp0: removed [ 1130.560175][T13414] fuse: Unknown parameter '0x0000000000000004' [ 1131.400588][T13425] fuse: Bad value for 'fd' [ 1131.625522][T13427] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1964'. [ 1131.988320][T13434] loop4: detected capacity change from 0 to 512 [ 1132.024090][T13434] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1133.089744][T13440] fuse: Unknown parameter '0x0000000000000004' [ 1133.256539][T13446] fuse: Bad value for 'fd' [ 1133.265067][ T5835] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1133.473834][ T5835] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1133.485968][ T5835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1133.504325][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.525943][ T5835] usb 7-1: Product: syz [ 1133.530354][ T5835] usb 7-1: Manufacturer: syz [ 1133.551581][ T5835] usb 7-1: SerialNumber: syz [ 1133.758949][T13452] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1974'. [ 1133.791950][ T5835] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1133.826670][ T5835] usb 7-1: USB disconnect, device number 13 [ 1133.852610][ T5835] usblp0: removed [ 1134.649620][T13462] loop4: detected capacity change from 0 to 1764 [ 1135.432533][T13471] fuse: Unknown parameter '0x0000000000000004' [ 1135.607237][T13476] fuse: Bad value for 'fd' [ 1136.383387][T13484] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1983'. [ 1136.811791][ T5859] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1137.026561][ T5859] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1137.091076][ T5859] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1137.101257][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.110504][ T5859] usb 7-1: Product: syz [ 1137.115177][ T5859] usb 7-1: Manufacturer: syz [ 1137.119906][ T5859] usb 7-1: SerialNumber: syz [ 1137.481214][T13501] fuse: Unknown parameter 'fd0x0000000000000004' [ 1137.560120][T13503] fuse: Bad value for 'fd' [ 1137.573401][ T5859] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1138.886975][T13520] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1996'. [ 1139.108907][T13525] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2006'. [ 1139.520544][ T787] usb 7-1: USB disconnect, device number 14 [ 1140.035720][T13528] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1140.138626][T13531] fuse: Unknown parameter 'fd0x0000000000000004' [ 1140.196549][T13490] usblp0: removed [ 1140.924468][T13542] fuse: Bad value for 'fd' [ 1142.224038][T13565] loop5: detected capacity change from 0 to 128 [ 1142.349519][T13565] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1142.376732][T13565] ext4 filesystem being mounted at /323/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.611645][ T28] audit: type=1800 audit(1771165246.049:14): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2009" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1142.642461][ T5835] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1142.696549][T13575] fuse: Unknown parameter 'fd0x0000000000000004' [ 1142.863749][ T5835] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1142.875231][ T5835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1142.885594][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.891701][T13578] fuse: Bad value for 'fd' [ 1142.909959][ T5835] usb 7-1: Product: syz [ 1142.915472][ T5835] usb 7-1: Manufacturer: syz [ 1142.920332][ T5835] usb 7-1: SerialNumber: syz [ 1143.359895][ T5835] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1143.675762][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1144.706805][T13592] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1145.000283][T13596] netlink: 'syz.5.2019': attribute type 2 has an invalid length. [ 1145.015626][T13596] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2019'. [ 1145.352184][ T787] usb 7-1: USB disconnect, device number 15 [ 1145.553723][T13604] loop5: detected capacity change from 0 to 1764 [ 1145.620070][T13571] usblp0: removed [ 1148.491238][T13631] netlink: 'syz.5.2029': attribute type 2 has an invalid length. [ 1148.506693][T13631] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2029'. [ 1150.159514][T13643] loop4: detected capacity change from 0 to 1764 [ 1150.251951][T11799] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1150.661688][ T5863] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1150.870928][ T5863] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1150.975112][ T5863] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1151.114591][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.208487][ T5863] usb 7-1: Product: syz [ 1151.224118][ T5863] usb 7-1: Manufacturer: syz [ 1151.256752][ T5863] usb 7-1: SerialNumber: syz [ 1151.444685][T13657] netlink: 'syz.5.2039': attribute type 2 has an invalid length. [ 1151.455224][T13657] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2039'. [ 1151.709713][ T5863] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1153.382081][ T5835] usb 7-1: USB disconnect, device number 16 [ 1153.492869][T13638] usblp0: removed [ 1154.044278][T13680] loop6: detected capacity change from 0 to 1764 [ 1155.062291][T13686] netlink: 'syz.4.2048': attribute type 2 has an invalid length. [ 1155.144691][T13686] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2048'. [ 1156.421958][ T5863] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1157.052694][ T5863] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1157.083449][ T5863] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1157.109875][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.203482][ T5863] usb 2-1: Product: syz [ 1157.207817][ T5863] usb 2-1: Manufacturer: syz [ 1157.229649][ T5863] usb 2-1: SerialNumber: syz [ 1157.974737][ T5863] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1158.257470][T13729] loop4: detected capacity change from 0 to 64 [ 1158.431208][T13727] Trying to free block not in datazone [ 1158.851024][T13731] netlink: 'syz.5.2059': attribute type 2 has an invalid length. [ 1158.912443][T13731] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2059'. [ 1159.366614][ T5863] usb 2-1: USB disconnect, device number 13 [ 1159.542177][ T5863] usblp0: removed [ 1162.035868][T13768] loop5: detected capacity change from 0 to 1764 [ 1164.244187][T13771] loop5: detected capacity change from 0 to 64 [ 1164.491217][T13771] Trying to free block not in datazone [ 1164.862909][T13774] netlink: 'syz.4.2070': attribute type 2 has an invalid length. [ 1164.939899][T13774] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2070'. [ 1166.665594][T13804] loop6: detected capacity change from 0 to 1764 [ 1168.266977][T13824] netlink: 'syz.1.2083': attribute type 2 has an invalid length. [ 1168.282507][T13824] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2083'. [ 1168.454673][T13827] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1168.462696][ T5835] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1168.647894][T13833] loop4: detected capacity change from 0 to 128 [ 1168.670114][ T5835] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1168.681229][ T5835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1168.708888][T13833] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1168.741083][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.763320][ T5835] usb 7-1: Product: syz [ 1168.774704][ T5835] usb 7-1: Manufacturer: syz [ 1168.787845][T13833] ext4 filesystem being mounted at /529/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1168.831623][ T5835] usb 7-1: SerialNumber: syz [ 1168.987531][ T28] audit: type=1800 audit(1771165272.419:15): pid=13838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2086" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1169.484063][ T5835] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1170.093344][ T6290] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1171.233719][ T8433] usb 7-1: USB disconnect, device number 17 [ 1171.330119][T13815] usblp0: removed [ 1171.476330][T13860] loop1: detected capacity change from 0 to 1764 [ 1172.162341][T13866] netlink: 'syz.6.2092': attribute type 2 has an invalid length. [ 1172.209611][T13869] autofs4:pid:13869:autofs_fill_super: called with bogus options [ 1172.216816][T13866] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2092'. [ 1173.068278][T13875] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1176.422264][T13907] autofs4:pid:13907:autofs_fill_super: called with bogus options [ 1178.860871][T13922] loop5: detected capacity change from 0 to 32768 [ 1178.870251][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.877223][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.901543][T13922] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2109 (13922) [ 1178.939447][T13922] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1178.951103][T13922] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1178.960785][T13922] BTRFS info (device loop5): turning on sync discard [ 1178.967737][T13922] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1178.976334][T13922] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1178.987706][T13922] BTRFS info (device loop5): trying to use backup root at mount time [ 1178.996302][T13922] BTRFS info (device loop5): disabling tree log [ 1179.002740][T13922] BTRFS info (device loop5): enabling auto defrag [ 1179.009733][T13922] BTRFS info (device loop5): max_inline at 0 [ 1179.015980][T13922] BTRFS info (device loop5): using free space tree [ 1179.087744][ T1099] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1179.148907][T13922] BTRFS error (device loop5): failed to load root extent [ 1179.156355][T13922] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1179.166685][ T11] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1179.198495][T13922] BTRFS warning (device loop5): couldn't read tree root [ 1179.205922][T13922] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1179.214260][ T1324] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1179.230996][T13922] BTRFS warning (device loop5): couldn't read tree root [ 1179.238356][T13922] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1179.272407][T13922] BTRFS info (device loop5): enabling ssd optimizations [ 1179.287071][T13922] BTRFS info (device loop5): rebuilding free space tree [ 1179.341102][T13922] BTRFS info (device loop5): checking UUID tree [ 1179.563931][ T8872] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1180.011170][T13951] netlink: 'syz.6.2105': attribute type 2 has an invalid length. [ 1180.040295][T13951] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2105'. [ 1180.349194][T13955] autofs4:pid:13955:autofs_fill_super: called with bogus options [ 1180.548721][T13957] loop4: detected capacity change from 0 to 1764 [ 1182.180396][T13967] loop4: detected capacity change from 0 to 64 [ 1182.428063][T13966] Trying to free block not in datazone [ 1186.015639][T13994] netlink: 'syz.4.2123': attribute type 2 has an invalid length. [ 1186.037894][T13994] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2123'. [ 1187.100389][T14002] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1189.098397][T14021] netlink: 'syz.4.2133': attribute type 2 has an invalid length. [ 1189.114738][T14021] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2133'. [ 1189.163633][T14023] syzkaller0: entered promiscuous mode [ 1189.169386][T14023] syzkaller0: entered allmulticast mode [ 1190.168409][T14035] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1191.422189][T14038] blktrace: Concurrent blktraces are not allowed on loop8 [ 1191.910136][T14038] loop5: detected capacity change from 0 to 32768 [ 1191.927390][T14038] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2136 (14038) [ 1191.968860][T14038] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1191.979310][T14038] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1191.988608][T14038] BTRFS info (device loop5): turning on sync discard [ 1191.995371][T14038] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1192.003731][T14038] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1192.014393][T14038] BTRFS info (device loop5): trying to use backup root at mount time [ 1192.022698][T14038] BTRFS info (device loop5): disabling tree log [ 1192.029162][T14038] BTRFS info (device loop5): enabling auto defrag [ 1192.035914][T14038] BTRFS info (device loop5): max_inline at 0 [ 1192.042041][T14038] BTRFS info (device loop5): using free space tree [ 1192.127612][ T49] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1192.178589][T14038] BTRFS error (device loop5): failed to load root extent [ 1192.186367][T14038] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1192.197715][ T1099] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1192.244750][T14038] BTRFS warning (device loop5): couldn't read tree root [ 1192.252034][T14038] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1192.260471][ T1099] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1192.288191][T14038] BTRFS warning (device loop5): couldn't read tree root [ 1192.295725][T14038] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1192.313428][T14038] BTRFS info (device loop5): enabling ssd optimizations [ 1192.321120][T14038] BTRFS info (device loop5): rebuilding free space tree [ 1192.346136][T14038] BTRFS info (device loop5): checking UUID tree [ 1192.461116][ T8872] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1194.269810][T14075] netlink: 'syz.1.2143': attribute type 2 has an invalid length. [ 1194.339535][T14075] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2143'. [ 1194.637146][T14078] syzkaller0: entered promiscuous mode [ 1194.649411][T14078] syzkaller0: entered allmulticast mode [ 1195.448354][T14081] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1196.054789][T14089] loop6: detected capacity change from 0 to 128 [ 1196.144618][T14089] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1196.206160][T14089] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.211095][T14094] loop5: detected capacity change from 0 to 128 [ 1196.314278][T14094] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1196.354971][T14094] ext4 filesystem being mounted at /358/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1196.624011][ T28] audit: type=1800 audit(1771165300.069:16): pid=14096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2148" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 1198.399619][T10565] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1198.404332][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1198.615827][T14109] netlink: 'syz.5.2153': attribute type 2 has an invalid length. [ 1198.841934][T14115] syzkaller0: entered promiscuous mode [ 1198.862324][T14115] syzkaller0: entered allmulticast mode [ 1200.858251][T14142] netlink: 'syz.4.2162': attribute type 2 has an invalid length. [ 1203.828709][T14163] loop1: detected capacity change from 0 to 128 [ 1203.973971][T14163] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1204.181284][T14163] ext4 filesystem being mounted at /546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1205.261685][ T28] audit: type=1800 audit(1771165308.699:17): pid=14171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2168" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1205.741286][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1205.777672][T14183] syzkaller0: entered promiscuous mode [ 1205.784296][T14183] syzkaller0: entered allmulticast mode [ 1207.857140][T14206] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1208.110209][T14212] syzkaller0: entered promiscuous mode [ 1208.118896][T14212] syzkaller0: entered allmulticast mode [ 1208.561628][T14220] netlink: 'syz.1.2183': attribute type 2 has an invalid length. [ 1211.553532][T14246] syzkaller0: entered promiscuous mode [ 1211.571502][T14246] syzkaller0: entered allmulticast mode [ 1211.793615][T14248] netlink: 'syz.6.2192': attribute type 2 has an invalid length. [ 1213.657162][T14274] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1213.866683][T14281] syzkaller0: entered promiscuous mode [ 1213.872865][T14281] syzkaller0: entered allmulticast mode [ 1214.078695][T14283] netlink: 'syz.1.2202': attribute type 2 has an invalid length. [ 1216.317495][T14305] syzkaller0: entered promiscuous mode [ 1216.350591][T14305] syzkaller0: entered allmulticast mode [ 1216.967433][T14311] netlink: 'syz.6.2212': attribute type 2 has an invalid length. [ 1217.218665][T14320] fuse: Unknown parameter 'fd0x0000000000000003' [ 1217.601875][T14324] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1218.496954][T14341] syzkaller0: entered promiscuous mode [ 1218.503350][T14341] syzkaller0: entered allmulticast mode [ 1219.375312][T14348] netlink: 'syz.5.2224': attribute type 2 has an invalid length. [ 1219.485686][T14350] fuse: Unknown parameter 'fd0x0000000000000003' [ 1221.921099][T14377] loop1: detected capacity change from 0 to 64 [ 1222.185246][T14373] Trying to free block not in datazone [ 1222.971659][T14384] syzkaller0: entered promiscuous mode [ 1222.991470][T14384] syzkaller0: entered allmulticast mode [ 1223.020693][T14387] netlink: 'syz.4.2234': attribute type 2 has an invalid length. [ 1223.432248][T14393] fuse: Unknown parameter 'fd0x0000000000000003' [ 1223.713164][T14397] loop5: detected capacity change from 0 to 128 [ 1223.782734][T14397] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1223.806590][T14397] ext4 filesystem being mounted at /387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1223.849880][T14398] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1224.741439][ T28] audit: type=1800 audit(1771165328.179:18): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2237" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1225.009902][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1225.699956][T14427] netlink: 'syz.5.2243': attribute type 2 has an invalid length. [ 1226.020389][T14434] syzkaller0: entered promiscuous mode [ 1226.032442][T14434] syzkaller0: entered allmulticast mode [ 1226.470727][T14439] loop1: detected capacity change from 0 to 1764 [ 1228.345452][T14457] netlink: 'syz.5.2253': attribute type 2 has an invalid length. [ 1229.594190][T14475] syzkaller0: entered promiscuous mode [ 1229.607248][T14475] syzkaller0: entered allmulticast mode [ 1229.931916][T14488] netlink: 'syz.4.2262': attribute type 2 has an invalid length. [ 1231.665204][T14503] loop6: detected capacity change from 0 to 65536 [ 1231.918159][T14503] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1232.133613][T14503] XFS (loop6): Ending clean mount [ 1232.609986][T10565] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1234.178228][T14534] blktrace: Concurrent blktraces are not allowed on loop8 [ 1234.364004][T14534] loop5: detected capacity change from 0 to 32768 [ 1234.406586][T14534] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2270 (14534) [ 1234.435759][T14534] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1234.446333][T14534] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1234.455311][T14534] BTRFS info (device loop5): turning on sync discard [ 1234.462380][T14534] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1234.470746][T14534] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1234.482455][T14534] BTRFS info (device loop5): trying to use backup root at mount time [ 1234.490563][T14534] BTRFS info (device loop5): disabling tree log [ 1234.497103][T14534] BTRFS info (device loop5): enabling auto defrag [ 1234.503822][T14534] BTRFS info (device loop5): max_inline at 0 [ 1234.509989][T14534] BTRFS info (device loop5): using free space tree [ 1234.516924][T14535] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1234.703190][T14493] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1234.760782][T14534] BTRFS error (device loop5): failed to load root extent [ 1234.769020][T14534] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1234.790581][T14493] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1234.847885][T14534] BTRFS warning (device loop5): couldn't read tree root [ 1234.855266][T14534] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1234.884788][ T11] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1234.899648][T14534] BTRFS warning (device loop5): couldn't read tree root [ 1234.906969][T14534] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1235.038065][T14534] BTRFS info (device loop5): enabling ssd optimizations [ 1235.048783][T14534] BTRFS info (device loop5): rebuilding free space tree [ 1235.086344][T14534] BTRFS info (device loop5): checking UUID tree [ 1235.663639][ T8872] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1237.702796][T14574] netlink: 'syz.5.2274': attribute type 2 has an invalid length. [ 1238.134297][T11799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop5 scanned by udevd (11799) [ 1239.265354][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.276239][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.083000][T14584] syzkaller0: entered promiscuous mode [ 1240.121553][T14584] syzkaller0: entered allmulticast mode [ 1240.437299][T14590] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1241.383823][T14602] blktrace: Concurrent blktraces are not allowed on loop8 [ 1241.889555][T14602] loop6: detected capacity change from 0 to 32768 [ 1241.906333][T14602] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1242.187464][T11693] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1247.883149][T14640] syzkaller0: entered promiscuous mode [ 1247.888698][T14640] syzkaller0: entered allmulticast mode [ 1248.396265][T14648] loop4: detected capacity change from 0 to 128 [ 1248.439498][T14648] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1248.482543][T14648] ext4 filesystem being mounted at /579/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1249.054166][ T28] audit: type=1800 audit(1771165352.489:19): pid=14653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2295" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1250.324813][ T6290] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1253.078538][T14681] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1255.887683][T14697] loop1: detected capacity change from 0 to 128 [ 1255.984888][T14697] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1256.013135][T14697] ext4 filesystem being mounted at /580/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1256.623629][ T28] audit: type=1800 audit(1771165360.059:20): pid=14700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2307" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1257.947987][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1258.663763][T14711] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1264.851605][T14759] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1265.431005][T14765] syzkaller0: entered promiscuous mode [ 1267.063291][T14765] syzkaller0: entered allmulticast mode [ 1270.076783][T14809] loop1: detected capacity change from 0 to 24 [ 1270.099537][T14809] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1270.215053][T14809] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1272.435333][T14822] syzkaller0: entered promiscuous mode [ 1272.453047][T14822] syzkaller0: entered allmulticast mode [ 1281.243473][T14880] loop1: detected capacity change from 0 to 128 [ 1281.323326][T14880] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1281.417872][T14880] ext4 filesystem being mounted at /594/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.854981][T14885] loop5: detected capacity change from 0 to 1764 [ 1282.044423][T14886] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1282.175292][ T28] audit: type=1800 audit(1771165385.619:21): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2347" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1282.836698][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1283.356301][T14901] loop4: detected capacity change from 0 to 1764 [ 1285.095425][T14917] loop6: detected capacity change from 0 to 64 [ 1285.339146][T14915] Trying to free block not in datazone [ 1285.706251][T14919] loop5: detected capacity change from 0 to 128 [ 1285.792280][T14919] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1285.848776][T14919] ext4 filesystem being mounted at /420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1287.264382][T14925] loop6: detected capacity change from 0 to 64 [ 1288.505140][ T28] audit: type=1800 audit(1771165391.859:22): pid=14931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2357" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1289.159498][T14924] Trying to free block not in datazone [ 1289.484531][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1290.300177][T14944] loop1: detected capacity change from 0 to 1764 [ 1290.371098][T11799] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1291.443764][T14959] loop5: detected capacity change from 0 to 1764 [ 1292.195601][T14970] loop6: detected capacity change from 0 to 128 [ 1292.278106][T14970] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1292.342702][T14970] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.962600][ T28] audit: type=1800 audit(1771165396.399:23): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2369" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 1293.895282][T10565] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1295.666890][T14998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1295.677143][T14998] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1295.687885][T14998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1295.696941][T14998] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1295.706512][T14998] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1295.714796][T14998] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1296.850432][T15005] loop6: detected capacity change from 0 to 1764 [ 1297.101840][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.716503][ T8249] Bluetooth: hci1: command tx timeout [ 1298.956543][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.178743][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.394300][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.849302][T14995] chnl_net:caif_netlink_parms(): no params data found [ 1302.010480][ T8249] Bluetooth: hci1: command tx timeout [ 1302.023084][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.030191][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.198930][ T8249] Bluetooth: hci1: command tx timeout [ 1304.411925][T15065] loop6: detected capacity change from 0 to 1764 [ 1304.507577][T11799] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1304.769840][T14995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.783934][T14995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.802405][T14995] bridge_slave_0: entered allmulticast mode [ 1304.810517][T14995] bridge_slave_0: entered promiscuous mode [ 1304.835745][T14995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.877585][T14995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.956793][T14995] bridge_slave_1: entered allmulticast mode [ 1304.988495][T14995] bridge_slave_1: entered promiscuous mode [ 1306.680552][ T8249] Bluetooth: hci1: command tx timeout [ 1306.811237][T15077] loop4: detected capacity change from 0 to 64 [ 1307.087059][T15071] Trying to free block not in datazone [ 1307.603999][T14995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1307.704580][T14995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1307.954837][T15086] loop4: detected capacity change from 0 to 64 [ 1308.102710][T15083] Trying to free block not in datazone [ 1308.132631][T14995] team0: Port device team_slave_0 added [ 1308.774854][T14995] team0: Port device team_slave_1 added [ 1310.050774][T14995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1310.075065][T14995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.164943][T15096] loop4: detected capacity change from 0 to 128 [ 1310.181670][T14995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1310.250275][T15096] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1310.352695][T15096] ext4 filesystem being mounted at /603/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1310.419363][T14995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1310.427320][T14995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.631351][ T28] audit: type=1800 audit(1771165413.989:24): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2394" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1310.646359][T14995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1311.279985][T14995] hsr_slave_0: entered promiscuous mode [ 1311.302261][T14995] hsr_slave_1: entered promiscuous mode [ 1311.318088][T14995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1311.341466][T14995] Cannot create hsr debugfs directory [ 1311.485660][ T11] hsr_slave_0: left promiscuous mode [ 1311.547381][ T6290] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1311.626742][ T11] hsr_slave_1: left promiscuous mode [ 1311.639633][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.662646][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.706612][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.728445][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.797711][ T11] bridge_slave_1: left allmulticast mode [ 1311.816519][ T11] bridge_slave_1: left promiscuous mode [ 1311.831019][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.844581][ T11] bridge_slave_0: left allmulticast mode [ 1311.853759][ T11] bridge_slave_0: left promiscuous mode [ 1311.889418][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.991666][ T11] veth1_macvtap: left allmulticast mode [ 1311.997674][ T11] veth1_macvtap: left promiscuous mode [ 1312.075673][T15134] loop4: detected capacity change from 0 to 1764 [ 1312.228978][ T11] veth0_macvtap: left promiscuous mode [ 1312.436286][ T11] veth1_vlan: left promiscuous mode [ 1312.616115][ T11] veth0_vlan: left promiscuous mode [ 1313.865933][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1313.934476][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1314.619983][T15121] netlink: 'syz.6.2396': attribute type 2 has an invalid length. [ 1319.284984][T15181] loop5: detected capacity change from 0 to 64 [ 1320.277910][T15180] Trying to free block not in datazone [ 1322.207401][T15201] loop4: detected capacity change from 0 to 128 [ 1322.292403][T15203] netlink: 'syz.5.2408': attribute type 2 has an invalid length. [ 1322.356627][T15201] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1322.406792][T14995] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1322.418914][T15201] ext4 filesystem being mounted at /609/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1322.453919][T14995] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1322.600029][T14995] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1322.833375][ T28] audit: type=1800 audit(1771165426.259:25): pid=15208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2405" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1322.852318][T14995] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1324.073774][T15215] syzkaller0: entered promiscuous mode [ 1324.090167][T15215] syzkaller0: entered allmulticast mode [ 1324.369274][ T6290] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1324.574795][T14995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.658034][T14995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.783302][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.790667][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.835718][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.843358][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.970932][T15240] loop5: detected capacity change from 0 to 64 [ 1325.247988][T15235] Trying to free block not in datazone [ 1325.733059][T15242] loop5: detected capacity change from 0 to 128 [ 1325.776928][T15242] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1325.867075][T15242] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1326.331219][T15256] loop4: detected capacity change from 0 to 1764 [ 1327.826638][T11693] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1327.947531][T14995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.108213][ T28] audit: type=1800 audit(1771165431.549:26): pid=15258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2415" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1328.200116][T14995] veth0_vlan: entered promiscuous mode [ 1328.215438][T14995] veth1_vlan: entered promiscuous mode [ 1328.540677][T14995] veth0_macvtap: entered promiscuous mode [ 1328.595919][T14995] veth1_macvtap: entered promiscuous mode [ 1328.714981][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.743914][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.759004][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.781606][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.806393][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.817656][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.840481][T14995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.859960][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1328.892952][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1328.927319][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.966309][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1328.979217][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.033269][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.054515][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.073102][T14995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.097910][T14995] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.119215][T14995] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.137322][T14995] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.163260][T14995] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.115025][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.124911][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.172320][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.196481][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.354609][T15285] syzkaller0: entered promiscuous mode [ 1330.365927][T15285] syzkaller0: entered allmulticast mode [ 1334.172088][T15322] loop5: detected capacity change from 0 to 1764 [ 1334.654471][T15333] loop1: detected capacity change from 0 to 128 [ 1334.693264][T15333] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1334.721832][T15333] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1335.252905][ T28] audit: type=1800 audit(1771165438.689:27): pid=15343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2423" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1336.987471][T14995] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1338.336235][T15366] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1338.354431][T15366] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1338.373975][T15366] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1338.389437][T15366] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1338.406600][T15366] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1338.416336][T15366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1339.512448][T15375] blktrace: Concurrent blktraces are not allowed on loop8 [ 1340.340848][T15375] loop6: detected capacity change from 0 to 32768 [ 1340.552402][T15375] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1340.655100][ T8249] Bluetooth: hci3: command tx timeout [ 1340.735280][T14783] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.093310][T11799] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1341.117507][T14783] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.386006][T14783] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.594962][T14783] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.277603][T15361] chnl_net:caif_netlink_parms(): no params data found [ 1342.917048][ T8249] Bluetooth: hci3: command tx timeout [ 1343.640101][T14783] tipc: Left network mode [ 1343.705753][T15361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.741701][T15361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.749411][T15361] bridge_slave_0: entered allmulticast mode [ 1343.776395][T15361] bridge_slave_0: entered promiscuous mode [ 1343.941734][T15361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.969744][T15361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.990151][T15361] bridge_slave_1: entered allmulticast mode [ 1344.018324][T15361] bridge_slave_1: entered promiscuous mode [ 1346.351672][ T8249] Bluetooth: hci3: command tx timeout [ 1346.674910][T15361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.706947][T15361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.152424][T15361] team0: Port device team_slave_0 added [ 1347.334555][T15361] team0: Port device team_slave_1 added [ 1347.727248][T15361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.735999][T15361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.851571][T15361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.885124][T15361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.903257][T15361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.992183][T15361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.662752][T15366] Bluetooth: hci3: command tx timeout [ 1350.359288][T15361] hsr_slave_0: entered promiscuous mode [ 1350.377595][T15361] hsr_slave_1: entered promiscuous mode [ 1350.409304][T15361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1350.430340][T15361] Cannot create hsr debugfs directory [ 1350.517629][T15471] loop1: detected capacity change from 0 to 128 [ 1350.662796][T15471] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1350.781946][T15471] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1351.045806][T14783] hsr_slave_0: left promiscuous mode [ 1351.167331][T14783] hsr_slave_1: left promiscuous mode [ 1351.329851][ T28] audit: type=1800 audit(1771165454.619:28): pid=15477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2445" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1351.365628][T14783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.373740][T14783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.396430][T14783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.405334][T14783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.419410][T14783] bridge0: port 3(batadv0) entered disabled state [ 1351.652373][T14783] bridge_slave_1: left allmulticast mode [ 1351.658317][T14783] bridge_slave_1: left promiscuous mode [ 1351.669260][T14783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.715228][T14783] bridge_slave_0: left allmulticast mode [ 1351.761217][T14783] bridge_slave_0: left promiscuous mode [ 1351.793075][T14783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.018153][T14995] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1352.131959][T14783] veth1_macvtap: left promiscuous mode [ 1352.137953][T14783] veth0_macvtap: left promiscuous mode [ 1352.187600][T14783] veth1_vlan: left promiscuous mode [ 1352.201870][T14783] veth0_vlan: left promiscuous mode [ 1353.885765][T15490] loop1: detected capacity change from 0 to 64 [ 1353.974273][T15490] Trying to free block not in datazone [ 1355.498315][T14783] team0 (unregistering): Port device team_slave_1 removed [ 1355.573344][T14783] team0 (unregistering): Port device team_slave_0 removed [ 1355.646562][T14783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.723681][T14783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.259572][T14783] bond0 (unregistering): Released all slaves [ 1359.940979][T15534] loop6: detected capacity change from 0 to 128 [ 1360.066624][T15534] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1360.157284][T15534] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1360.185573][T15361] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1360.201944][T15361] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1360.229445][T15361] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1360.265326][T15361] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1360.507996][ T28] audit: type=1800 audit(1771165463.949:29): pid=15548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2455" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 1361.195374][T15361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.247857][T10565] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1361.295781][T15361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.353993][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.361214][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.450821][T14493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.458281][T14493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.225187][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.231820][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.562962][T15566] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1364.048330][T15361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.787880][T15588] blktrace: Concurrent blktraces are not allowed on loop8 [ 1365.618092][T15588] loop1: detected capacity change from 0 to 32768 [ 1365.843771][T15588] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1366.280068][T11799] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1366.996155][T15361] veth0_vlan: entered promiscuous mode [ 1367.054812][T15361] veth1_vlan: entered promiscuous mode [ 1367.174545][T15361] veth0_macvtap: entered promiscuous mode [ 1367.207029][T15361] veth1_macvtap: entered promiscuous mode [ 1367.266399][T15361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.301621][T15361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.321930][T15361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.343879][T15361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.354219][T15361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1367.365469][T15361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.378010][T15361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1367.397798][T15361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.426386][T15361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.466532][T15361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.491378][T15361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.511752][T15361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1367.532802][T15361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.553474][T15361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1367.576052][T15361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.602488][T15361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.621360][T15361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.640579][T15361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1367.903688][T14493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.933606][T14493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.046187][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.090655][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.443748][T15630] loop4: detected capacity change from 0 to 128 [ 1368.530372][T15630] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1368.646352][T15630] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.888161][ T28] audit: type=1800 audit(1771165472.329:30): pid=15635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2427" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1371.448652][T15361] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1374.424515][T15656] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1378.218825][T15678] loop6: detected capacity change from 0 to 1764 [ 1379.485982][T15681] blktrace: Concurrent blktraces are not allowed on loop8 [ 1380.321760][T15681] loop4: detected capacity change from 0 to 32768 [ 1380.526223][T15681] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1380.857716][T15198] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1381.289675][T15693] loop5: detected capacity change from 0 to 128 [ 1381.411684][T15693] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1381.433936][T15693] ext4 filesystem being mounted at /457/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1381.759621][ T28] audit: type=1800 audit(1771165485.199:31): pid=15696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2478" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1382.460961][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1383.040458][T15702] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1384.261753][ T5822] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1384.465285][ T5822] usb 7-1: Using ep0 maxpacket: 16 [ 1384.570012][ T5822] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1384.627815][ T5822] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.653077][ T5822] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1384.693788][ T5822] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1384.723236][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.749088][ T5822] usb 7-1: Product: syz [ 1384.769810][ T5822] usb 7-1: Manufacturer: syz [ 1384.787959][ T5822] usb 7-1: SerialNumber: syz [ 1384.818913][ T5822] usb 7-1: config 0 descriptor?? [ 1385.101844][ T5822] usb 7-1: USB disconnect, device number 18 [ 1385.553687][T15717] loop5: detected capacity change from 0 to 1764 [ 1385.782186][T11799] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1386.935196][T15721] loop5: detected capacity change from 0 to 128 [ 1387.008275][T15721] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1387.034683][T15721] ext4 filesystem being mounted at /461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.461614][ T28] audit: type=1800 audit(1771165490.899:32): pid=15724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2485" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1389.387879][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1392.462373][T15756] loop5: detected capacity change from 0 to 1764 [ 1393.656771][T15759] blktrace: Concurrent blktraces are not allowed on loop8 [ 1394.393269][T15759] loop1: detected capacity change from 0 to 32768 [ 1394.724048][T15759] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1394.915126][T15765] loop4: detected capacity change from 0 to 128 [ 1394.961944][T15765] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1394.995119][T15765] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.082839][T15198] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1395.354361][ T28] audit: type=1800 audit(1771165498.799:33): pid=15770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2494" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1396.010528][T15361] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1399.697798][T15783] blktrace: Concurrent blktraces are not allowed on loop8 [ 1400.530754][T15783] loop6: detected capacity change from 0 to 32768 [ 1400.735361][T15783] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 1401.033908][T11799] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1409.720726][T15837] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1409.958393][ T5835] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1410.152732][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 1410.178427][ T5835] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1410.200939][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.241654][ T5835] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1410.283052][ T5835] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1410.303183][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.324891][ T5835] usb 6-1: Product: syz [ 1410.329150][ T5835] usb 6-1: Manufacturer: syz [ 1410.341495][ T5835] usb 6-1: SerialNumber: syz [ 1410.357010][ T5835] usb 6-1: config 0 descriptor?? [ 1410.653037][ T5863] usb 6-1: USB disconnect, device number 10 [ 1412.278176][T15847] blktrace: Concurrent blktraces are not allowed on loop8 [ 1413.120969][T15847] loop4: detected capacity change from 0 to 32768 [ 1413.376103][T15847] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1413.547051][ T5822] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1413.633242][T11799] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 1416.674911][T15855] loop4: detected capacity change from 0 to 128 [ 1416.779702][T15855] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1416.812189][T15855] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1417.338739][ T28] audit: type=1800 audit(1771165520.779:34): pid=15866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2513" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1419.514988][T15361] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1421.172957][T15886] loop1: detected capacity change from 0 to 65536 [ 1421.182263][T15886] XFS: attr2 mount option is deprecated. [ 1421.260870][T15886] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1421.310479][T15886] XFS (loop1): Ending clean mount [ 1421.331912][T15886] XFS (loop1): Quotacheck needed: Please wait. [ 1421.425918][T15366] Bluetooth: hci1: command 0x0406 tx timeout [ 1421.540544][T15900] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2519'. [ 1421.541797][T15886] XFS (loop1): Quotacheck: Done. [ 1421.591510][T15900] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2519'. [ 1421.677490][T15900] gretap0: entered promiscuous mode [ 1421.714128][T15900] gretap0: left promiscuous mode [ 1421.764413][T14995] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1422.075875][T15905] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1424.574719][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.581392][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.495362][T15923] loop1: detected capacity change from 0 to 1764 [ 1425.696082][T15924] loop5: detected capacity change from 0 to 128 [ 1425.777426][T15924] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1425.825156][T15924] ext4 filesystem being mounted at /473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.010541][ T28] audit: type=1800 audit(1771165529.419:35): pid=15933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2529" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1426.837556][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1430.076921][T15968] loop5: detected capacity change from 0 to 1764 [ 1430.279569][T15970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2540'. [ 1430.311367][T15970] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2540'. [ 1430.375684][T15970] gretap0: entered promiscuous mode [ 1430.396190][T15970] gretap0: left promiscuous mode [ 1434.663203][ T5822] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1436.583169][T16000] blktrace: Concurrent blktraces are not allowed on loop8 [ 1436.786347][T16000] loop5: detected capacity change from 0 to 32768 [ 1436.834778][T16000] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1436.846107][T16000] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1436.855252][T16000] BTRFS info (device loop5): turning on sync discard [ 1436.862059][T16000] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1436.870361][T16000] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1436.881453][T16000] BTRFS info (device loop5): trying to use backup root at mount time [ 1436.890031][T16000] BTRFS info (device loop5): disabling tree log [ 1436.896498][T16000] BTRFS info (device loop5): enabling auto defrag [ 1436.903406][T16000] BTRFS info (device loop5): max_inline at 0 [ 1436.909591][T16000] BTRFS info (device loop5): using free space tree [ 1437.017424][ T49] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1437.104721][T16000] BTRFS error (device loop5): failed to load root extent [ 1437.112446][T16000] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1437.120896][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1437.157649][T16000] BTRFS warning (device loop5): couldn't read tree root [ 1437.165097][T16000] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1437.176862][ T12] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1437.200896][T16000] BTRFS warning (device loop5): couldn't read tree root [ 1437.208100][T16000] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1437.234889][T16000] BTRFS info (device loop5): enabling ssd optimizations [ 1437.245536][T16000] BTRFS info (device loop5): rebuilding free space tree [ 1437.275579][T16000] BTRFS info (device loop5): checking UUID tree [ 1437.442476][ T8872] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1439.080871][T16028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'. [ 1439.112873][T16028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'. [ 1439.207462][T16028] gretap0: entered promiscuous mode [ 1439.285099][T16028] gretap0: left promiscuous mode [ 1439.429315][T16031] loop6: detected capacity change from 0 to 1764 [ 1441.131980][T16042] loop1: detected capacity change from 0 to 64 [ 1441.183241][T16042] Trying to free block not in datazone [ 1449.348842][T16087] blktrace: Concurrent blktraces are not allowed on loop8 [ 1449.528361][T16087] loop6: detected capacity change from 0 to 32768 [ 1449.556809][T16087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2563 (16087) [ 1449.587555][T16087] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1449.597967][T16087] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1449.609128][T16087] BTRFS info (device loop6): turning on sync discard [ 1449.616610][T16087] BTRFS info (device loop6): setting nodatacow, compression disabled [ 1449.624746][T16087] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1449.635738][T16087] BTRFS info (device loop6): trying to use backup root at mount time [ 1449.644124][T16087] BTRFS info (device loop6): disabling tree log [ 1449.650725][T16087] BTRFS info (device loop6): enabling auto defrag [ 1449.657347][T16087] BTRFS info (device loop6): max_inline at 0 [ 1449.663539][T16087] BTRFS info (device loop6): using free space tree [ 1449.760661][ T12] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1449.795721][T16087] BTRFS error (device loop6): failed to load root extent [ 1449.803181][T16087] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1449.818981][ T1099] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1449.901761][T16087] BTRFS warning (device loop6): couldn't read tree root [ 1449.909512][T16087] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1449.920051][ T1099] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1449.931322][T16087] BTRFS warning (device loop6): couldn't read tree root [ 1449.938453][T16087] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1450.052149][T16087] BTRFS info (device loop6): enabling ssd optimizations [ 1450.060471][T16087] BTRFS info (device loop6): rebuilding free space tree [ 1450.096827][T16087] BTRFS info (device loop6): checking UUID tree [ 1450.401710][ T787] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1450.457133][T10565] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1450.651394][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 1450.660911][ T787] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1450.682695][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.700831][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1450.722323][ T787] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1450.742218][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.762884][ T787] usb 2-1: Product: syz [ 1450.771495][ T787] usb 2-1: Manufacturer: syz [ 1450.779847][ T787] usb 2-1: SerialNumber: syz [ 1450.836877][ T787] usb 2-1: config 0 descriptor?? [ 1450.998863][ T787] usb 2-1: USB disconnect, device number 15 [ 1451.639793][T16123] loop1: detected capacity change from 0 to 1764 [ 1455.379905][T16137] loop6: detected capacity change from 0 to 64 [ 1456.743079][T16136] Trying to free block not in datazone [ 1457.102827][T16145] syzkaller0: entered promiscuous mode [ 1457.108645][T16145] syzkaller0: entered allmulticast mode [ 1458.700793][T16150] loop5: detected capacity change from 0 to 64 [ 1458.741507][ T5859] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1458.856085][T16149] Trying to free block not in datazone [ 1459.032013][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 1459.164944][ T5859] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1459.189827][ T5859] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.373969][ T5859] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1459.402012][ T5859] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1459.413159][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.424246][ T5859] usb 5-1: Product: syz [ 1459.428845][ T5859] usb 5-1: Manufacturer: syz [ 1459.436119][ T5859] usb 5-1: SerialNumber: syz [ 1460.051343][T16157] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1460.282632][ T5859] usb 5-1: config 0 descriptor?? [ 1460.460284][ T5859] usb 5-1: can't set config #0, error -71 [ 1460.483453][ T5859] usb 5-1: USB disconnect, device number 11 [ 1460.595408][T16164] syzkaller0: entered promiscuous mode [ 1460.608222][T16164] syzkaller0: entered allmulticast mode [ 1461.512586][T15366] Bluetooth: hci3: command 0x0406 tx timeout [ 1464.004406][ T8626] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1464.211691][ T8626] usb 5-1: Using ep0 maxpacket: 16 [ 1464.230994][ T8626] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1464.240464][T16185] loop6: detected capacity change from 0 to 1764 [ 1464.251391][ T8626] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.277977][ T8626] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1464.308769][ T8626] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1464.321560][T11799] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1464.329659][ T8626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.362556][ T8626] usb 5-1: Product: syz [ 1464.371763][ T8626] usb 5-1: Manufacturer: syz [ 1464.382920][ T8626] usb 5-1: SerialNumber: syz [ 1464.398543][ T8626] usb 5-1: config 0 descriptor?? [ 1464.656749][ T5822] usb 5-1: USB disconnect, device number 12 [ 1467.722937][T16192] loop5: detected capacity change from 0 to 64 [ 1467.920333][T16191] Trying to free block not in datazone [ 1468.056178][T16196] loop1: detected capacity change from 0 to 128 [ 1468.146832][T16196] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1468.243836][T16196] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1468.471067][ T28] audit: type=1800 audit(1771165571.909:36): pid=16199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2596" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1469.412957][T16204] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1470.292059][T16214] loop6: detected capacity change from 0 to 1764 [ 1473.880041][T16239] loop4: detected capacity change from 0 to 64 [ 1474.468907][T16239] Trying to free block not in datazone [ 1475.225440][T14995] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1475.954242][T16254] loop4: detected capacity change from 0 to 128 [ 1477.642229][T16254] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1477.725874][T16254] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1477.981884][ T28] audit: type=1800 audit(1771165581.419:37): pid=16267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2600" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1478.765238][T15361] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1483.132398][T16297] loop4: detected capacity change from 0 to 128 [ 1484.702826][T16297] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1484.751464][T16297] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1485.030847][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.040331][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.216791][ T28] audit: type=1800 audit(1771165588.659:38): pid=16312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2608" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1486.620683][T16326] loop6: detected capacity change from 0 to 1764 [ 1487.453546][T11799] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1488.278018][T15361] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1491.291078][T16351] loop5: detected capacity change from 0 to 1764 [ 1497.089153][T16375] loop5: detected capacity change from 0 to 128 [ 1497.295502][T16375] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1497.485318][T16375] ext4 filesystem being mounted at /497/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1499.337473][ T28] audit: type=1800 audit(1771165602.779:39): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2622" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1500.894361][T16392] loop1: detected capacity change from 0 to 1764 [ 1501.716386][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1502.484193][T16401] loop5: detected capacity change from 0 to 128 [ 1502.566436][T16401] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1502.605140][T16401] ext4 filesystem being mounted at /498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1503.539766][T16410] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1504.047718][ T28] audit: type=1800 audit(1771165607.489:40): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2626" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1504.431366][ T8872] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1507.034357][T16429] syzkaller0: entered promiscuous mode [ 1507.040253][T16429] syzkaller0: entered allmulticast mode [ 1511.001703][T16447] loop1: detected capacity change from 0 to 128 [ 1511.701499][T16454] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1511.833604][T16447] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1511.872839][T16447] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1512.515632][ T28] audit: type=1800 audit(1771165615.619:41): pid=16461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2640" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1514.128327][T14995] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1516.589404][T16474] loop1: detected capacity change from 0 to 1764 [ 1518.139702][T16486] syzkaller0: entered promiscuous mode [ 1518.149779][T16486] syzkaller0: entered allmulticast mode [ 1519.802696][T16496] loop5: detected capacity change from 0 to 1764 [ 1520.594118][T11799] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1522.120563][T16499] loop4: detected capacity change from 0 to 64 [ 1523.394465][T16499] Trying to free block not in datazone [ 1524.289603][T16505] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1530.121328][ T5822] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1533.108841][T16539] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1536.896035][T16564] loop4: detected capacity change from 0 to 1764 [ 1537.661950][T11799] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1541.306346][ T5863] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1542.883829][ T5863] usb 5-1: device not accepting address 13, error -71 [ 1545.853844][T16618] loop6: detected capacity change from 0 to 1764 [ 1546.469156][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.477633][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.085282][T16645] loop6: detected capacity change from 0 to 1764 [ 1551.300876][T16661] loop1: detected capacity change from 0 to 64 [ 1551.715952][T16657] Trying to free block not in datazone [ 1560.566939][T16727] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1561.267053][T16739] loop6: detected capacity change from 0 to 1764 [ 1567.217666][T16778] loop1: detected capacity change from 0 to 1764 [ 1567.932690][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2711'. [ 1567.951482][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2711'. [ 1567.971375][T11799] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1568.024226][T16780] ip6gretap0: entered promiscuous mode [ 1568.044136][T16780] ip6gretap0: left promiscuous mode [ 1569.260640][T16791] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1573.477468][T16810] loop5: detected capacity change from 0 to 32768 [ 1573.922327][T16810] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2723 (16810) [ 1573.971973][T16810] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1573.982941][T16810] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1573.991953][T16810] BTRFS info (device loop5): turning on sync discard [ 1573.998667][T16810] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1574.006964][T16810] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1574.018589][T16810] BTRFS info (device loop5): trying to use backup root at mount time [ 1574.026873][T16810] BTRFS info (device loop5): disabling tree log [ 1574.033183][T16810] BTRFS info (device loop5): enabling auto defrag [ 1574.039700][T16810] BTRFS info (device loop5): max_inline at 0 [ 1574.045828][T16810] BTRFS info (device loop5): using free space tree [ 1574.075585][ T40] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1574.090111][T16810] BTRFS error (device loop5): failed to load root extent [ 1574.097417][T16810] BTRFS warning (device loop5): try to load backup roots slot 1 [ 1574.106073][ T2933] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1574.156874][T16810] BTRFS warning (device loop5): couldn't read tree root [ 1574.164503][T16810] BTRFS warning (device loop5): try to load backup roots slot 2 [ 1574.180433][ T11] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1574.212594][T16810] BTRFS warning (device loop5): couldn't read tree root [ 1574.219930][T16810] BTRFS warning (device loop5): try to load backup roots slot 3 [ 1574.239247][T16810] BTRFS info (device loop5): enabling ssd optimizations [ 1574.247103][T16810] BTRFS info (device loop5): rebuilding free space tree [ 1574.264859][T16810] BTRFS info (device loop5): checking UUID tree [ 1574.423498][ T8872] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1575.154747][T16832] loop1: detected capacity change from 0 to 1764 [ 1575.861292][T15198] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1577.694178][T16848] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1586.304215][T16900] loop5: detected capacity change from 0 to 4096 [ 1586.371793][T16900] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1587.192663][T16904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2743'. [ 1587.231844][T16904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2743'. [ 1587.397109][T16904] ip6gretap0: entered promiscuous mode [ 1587.454956][T16904] ip6gretap0: left promiscuous mode [ 1589.852819][T16923] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1591.404879][T12999] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1593.275672][T12999] usb 5-1: Using ep0 maxpacket: 16 [ 1593.285079][T12999] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1593.331579][T12999] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.388867][T12999] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1593.440486][T12999] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1593.489414][T12999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.531955][T12999] usb 5-1: Product: syz [ 1593.556829][T12999] usb 5-1: Manufacturer: syz [ 1593.576732][T12999] usb 5-1: SerialNumber: syz [ 1593.609479][T12999] usb 5-1: config 0 descriptor?? [ 1594.644296][T12999] usb 5-1: USB disconnect, device number 15 [ 1596.426996][T16963] loop5: detected capacity change from 0 to 1764 [ 1597.256573][T16959] loop6: detected capacity change from 0 to 4096 [ 1597.284329][T16959] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 1597.294479][T11799] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1606.366304][T17002] loop1: detected capacity change from 0 to 128 [ 1606.445108][T17002] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1606.552858][T17002] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1606.855074][ T28] audit: type=1800 audit(1771165710.299:42): pid=17006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2766" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1607.642353][T14995] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1608.031857][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.042859][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.676295][T17024] blktrace: Concurrent blktraces are not allowed on loop8 [ 1610.519855][T17024] loop6: detected capacity change from 0 to 32768 [ 1610.923171][T17024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2770 (17024) [ 1610.947134][T17024] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1610.957504][T17024] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1610.966353][T17024] BTRFS info (device loop6): turning on sync discard [ 1610.973257][T17024] BTRFS info (device loop6): setting nodatacow, compression disabled [ 1610.981446][T17024] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1610.993455][T17024] BTRFS info (device loop6): trying to use backup root at mount time [ 1611.001695][T17024] BTRFS info (device loop6): disabling tree log [ 1611.008059][T17024] BTRFS info (device loop6): enabling auto defrag [ 1611.014611][T17024] BTRFS info (device loop6): max_inline at 0 [ 1611.021142][T17024] BTRFS info (device loop6): using free space tree [ 1611.174933][ T1078] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1611.294200][T17024] BTRFS error (device loop6): failed to load root extent [ 1611.301558][T17024] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1611.310201][ T49] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1611.587619][T17024] BTRFS warning (device loop6): couldn't read tree root [ 1611.594838][T17024] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1611.605955][ T1078] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1611.633949][T17024] BTRFS warning (device loop6): couldn't read tree root [ 1611.641279][T17024] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1611.711392][T17024] BTRFS info (device loop6): enabling ssd optimizations [ 1611.718967][T17024] BTRFS info (device loop6): rebuilding free space tree [ 1611.761922][T17024] BTRFS info (device loop6): checking UUID tree [ 1612.053964][T10565] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1613.496827][T17065] loop4: detected capacity change from 0 to 1764 [ 1614.233868][T15198] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1614.963531][T17067] loop4: detected capacity change from 0 to 128 [ 1615.140099][T17067] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1615.325484][T17067] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1615.911361][ T28] audit: type=1800 audit(1771165719.289:43): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2776" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1617.203007][T15361] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1618.290507][T17084] blktrace: Concurrent blktraces are not allowed on loop8 [ 1619.032028][T17084] loop4: detected capacity change from 0 to 32768 [ 1619.343861][T17084] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2779 (17084) [ 1619.477428][T17084] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1619.489592][T17084] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1619.499138][T17084] BTRFS info (device loop4): turning on sync discard [ 1619.506241][T17084] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1619.515268][T17084] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1619.526090][T17084] BTRFS info (device loop4): trying to use backup root at mount time [ 1619.534469][T17084] BTRFS info (device loop4): disabling tree log [ 1619.541014][T17084] BTRFS info (device loop4): enabling auto defrag [ 1619.547926][T17084] BTRFS info (device loop4): max_inline at 0 [ 1619.553990][T17084] BTRFS info (device loop4): using free space tree [ 1620.464868][T15303] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1620.507956][T17084] BTRFS error (device loop4): failed to load root extent [ 1620.515548][T17084] BTRFS warning (device loop4): try to load backup roots slot 1 [ 1620.523952][ T49] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1620.581293][T17084] BTRFS warning (device loop4): couldn't read tree root [ 1620.588387][T17084] BTRFS warning (device loop4): try to load backup roots slot 2 [ 1620.597212][ T49] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1620.631323][T17084] BTRFS warning (device loop4): couldn't read tree root [ 1620.638479][T17084] BTRFS warning (device loop4): try to load backup roots slot 3 [ 1620.754928][T17084] BTRFS error (device loop4): open_ctree failed: -4 [ 1621.367513][T17114] loop6: detected capacity change from 0 to 4096 [ 1622.203472][T17120] loop1: detected capacity change from 0 to 1764 [ 1623.092180][T11693] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1623.324997][T11799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (11799) [ 1626.491414][ T8626] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1626.722071][ T8626] usb 2-1: Using ep0 maxpacket: 16 [ 1626.741510][ T8626] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1626.764124][ T8626] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.791459][ T8626] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1626.814858][ T8626] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1626.829792][ T8626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.860292][ T8626] usb 2-1: Product: syz [ 1626.874786][ T8626] usb 2-1: Manufacturer: syz [ 1626.887243][ T8626] usb 2-1: SerialNumber: syz [ 1626.910097][ T8626] usb 2-1: config 0 descriptor?? [ 1627.158814][T14231] usb 2-1: USB disconnect, device number 16 [ 1631.689382][T17153] blktrace: Concurrent blktraces are not allowed on loop8 [ 1632.431932][T17153] loop4: detected capacity change from 0 to 32768 [ 1632.787802][T17153] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1632.799349][T17153] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1632.808780][T17153] BTRFS info (device loop4): turning on sync discard [ 1632.815852][T17153] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1632.824292][T17153] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1632.835259][T17153] BTRFS info (device loop4): trying to use backup root at mount time [ 1632.844327][T17153] BTRFS info (device loop4): disabling tree log [ 1632.850845][T17153] BTRFS info (device loop4): enabling auto defrag [ 1632.857485][T17153] BTRFS info (device loop4): max_inline at 0 [ 1632.863941][T17153] BTRFS info (device loop4): using free space tree [ 1633.130254][ T59] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1633.253975][T17153] BTRFS error (device loop4): failed to load root extent [ 1633.261342][T17153] BTRFS warning (device loop4): try to load backup roots slot 1 [ 1633.269780][ T2933] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1633.291644][T17153] BTRFS warning (device loop4): couldn't read tree root [ 1633.299028][T17153] BTRFS warning (device loop4): try to load backup roots slot 2 [ 1633.310216][ T59] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1633.348104][T17153] BTRFS warning (device loop4): couldn't read tree root [ 1633.355569][T17153] BTRFS warning (device loop4): try to load backup roots slot 3 [ 1633.386279][T17153] BTRFS info (device loop4): enabling ssd optimizations [ 1633.396262][T17153] BTRFS info (device loop4): rebuilding free space tree [ 1633.416219][T17153] BTRFS info (device loop4): checking UUID tree [ 1633.671680][T15361] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1636.868876][T17179] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1637.790156][T17185] loop4: detected capacity change from 0 to 1764 [ 1638.564997][T11799] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1639.198994][ T1078] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.289659][ T8249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1639.310460][T17197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1639.319667][T17197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1639.336598][T17197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1639.346529][T17197] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1639.355429][T17197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1639.444592][ T1078] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.568069][ T1078] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.691499][ T1078] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.043411][T17215] loop1: detected capacity change from 0 to 128 [ 1641.063445][T17195] chnl_net:caif_netlink_parms(): no params data found [ 1641.142935][T17215] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1641.253507][T17215] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1641.438525][T15366] Bluetooth: hci2: command tx timeout [ 1641.574017][ T28] audit: type=1800 audit(1771165745.009:44): pid=17230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2802" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1642.129028][T17195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.171536][T17195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.178864][T17195] bridge_slave_0: entered allmulticast mode [ 1642.232405][T17195] bridge_slave_0: entered promiscuous mode [ 1642.305138][T17195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.339150][T17195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.376214][T17195] bridge_slave_1: entered allmulticast mode [ 1642.407870][T17195] bridge_slave_1: entered promiscuous mode [ 1642.418011][T14995] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1643.216120][T17246] loop4: detected capacity change from 0 to 1764 [ 1643.262538][T15198] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1643.506344][T15366] Bluetooth: hci2: command tx timeout [ 1644.439270][T17255] blktrace: Concurrent blktraces are not allowed on loop8 [ 1644.906947][T17255] loop1: detected capacity change from 0 to 32768 [ 1644.993379][T17255] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2804 (17255) [ 1645.023649][T17255] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1645.034170][T17255] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1645.043216][T17255] BTRFS info (device loop1): turning on sync discard [ 1645.049992][T17255] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1645.058164][T17255] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1645.069145][T17255] BTRFS info (device loop1): trying to use backup root at mount time [ 1645.077386][T17255] BTRFS info (device loop1): disabling tree log [ 1645.084377][T17255] BTRFS info (device loop1): enabling auto defrag [ 1645.090830][T17255] BTRFS info (device loop1): max_inline at 0 [ 1645.096891][T17255] BTRFS info (device loop1): using free space tree [ 1645.189518][T17195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.254992][T17195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.274449][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1645.391857][T17255] BTRFS error (device loop1): failed to load root extent [ 1645.399402][T17255] BTRFS warning (device loop1): try to load backup roots slot 1 [ 1645.418832][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1645.488798][T17255] BTRFS warning (device loop1): couldn't read tree root [ 1645.496870][T17255] BTRFS warning (device loop1): try to load backup roots slot 2 [ 1645.506619][ T49] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1645.561391][T17255] BTRFS warning (device loop1): couldn't read tree root [ 1645.568847][T17255] BTRFS warning (device loop1): try to load backup roots slot 3 [ 1645.585931][T15366] Bluetooth: hci2: command tx timeout [ 1645.614066][T17255] BTRFS info (device loop1): enabling ssd optimizations [ 1645.622022][T17255] BTRFS info (device loop1): rebuilding free space tree [ 1645.640820][T17255] BTRFS info (device loop1): checking UUID tree [ 1645.847611][T14995] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1646.275430][T17280] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1646.363028][T17195] team0: Port device team_slave_0 added [ 1646.659031][T17195] team0: Port device team_slave_1 added [ 1646.998366][T17195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.049386][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.099797][T17195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.306152][T17195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.371304][T17195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.511210][T17195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.646926][ T1078] hsr_slave_0: left promiscuous mode [ 1647.661754][T15366] Bluetooth: hci2: command tx timeout [ 1647.711330][ T1078] hsr_slave_1: left promiscuous mode [ 1647.757127][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1647.783627][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.805710][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1647.815139][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.008894][ T1078] bridge_slave_1: left allmulticast mode [ 1648.056211][ T1078] bridge_slave_1: left promiscuous mode [ 1648.455471][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.584448][ T1078] bridge_slave_0: left allmulticast mode [ 1648.659472][ T1078] bridge_slave_0: left promiscuous mode [ 1648.681467][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.840447][ T1078] bridge0: left promiscuous mode [ 1649.637959][T17318] loop1: detected capacity change from 0 to 1764 [ 1649.727593][ T1078] veth1_macvtap: left promiscuous mode [ 1649.841641][T11799] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1649.876965][ T1078] veth0_macvtap: left promiscuous mode [ 1649.954315][ T1078] veth1_vlan: left promiscuous mode [ 1649.992041][ T1078] veth0_vlan: left promiscuous mode [ 1650.979660][T17324] loop1: detected capacity change from 0 to 4096 [ 1651.495356][T17328] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1653.214026][ T1078] team0 (unregistering): Port device team_slave_1 removed [ 1653.323909][ T1078] team0 (unregistering): Port device team_slave_0 removed [ 1653.478487][ T1078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.611986][ T1078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1654.279046][ T1078] bond0 (unregistering): Released all slaves [ 1654.601877][T17195] hsr_slave_0: entered promiscuous mode [ 1654.811894][T17195] hsr_slave_1: entered promiscuous mode [ 1654.833215][T17195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1654.868816][T17195] Cannot create hsr debugfs directory [ 1659.496101][T17371] loop4: detected capacity change from 0 to 1764 [ 1660.776241][T17195] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1661.070717][T17195] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1661.214495][T17195] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1661.246089][T17195] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1661.666071][T17195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1661.751090][T17195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1661.802455][T14783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.809805][T14783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1661.892890][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.900188][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1663.021808][T17195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1663.085328][T17419] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1665.699923][T17442] loop1: detected capacity change from 0 to 1764 [ 1668.093928][T17195] veth0_vlan: entered promiscuous mode [ 1668.254720][T17468] loop6: detected capacity change from 0 to 1764 [ 1668.655944][T17195] veth1_vlan: entered promiscuous mode [ 1668.931459][T11799] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1669.095108][T17195] veth0_macvtap: entered promiscuous mode [ 1669.106761][T17195] veth1_macvtap: entered promiscuous mode [ 1669.128364][T17195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1669.241286][T17195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1669.296737][T17195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1669.347208][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.354844][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.375504][T17195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1669.436170][T17195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1669.450861][T17195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1669.491061][T17195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1669.742693][T17195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1669.804556][T17195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1669.831601][T17195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1669.851398][T17195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1669.891260][T17195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1670.031362][T17195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1670.083891][T17195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1670.805723][T17195] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.836322][T17195] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.851209][T17195] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.860155][T17195] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.951810][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1671.971917][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.426087][T14493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.492578][T14493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.152424][T17516] loop7: detected capacity change from 0 to 1764 [ 1677.920101][T11799] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1679.119955][T17538] autofs4:pid:17538:autofs_fill_super: called with bogus options [ 1680.334696][T17538] loop6: detected capacity change from 0 to 32768 [ 1682.944063][T12999] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1684.687099][T12999] usb 7-1: Using ep0 maxpacket: 16 [ 1684.712444][T12999] usb 7-1: device descriptor read/all, error -71 [ 1687.639733][T17581] loop7: detected capacity change from 0 to 128 [ 1687.726190][T17581] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1687.804488][T17581] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1687.950386][ T28] audit: type=1800 audit(1771165791.389:45): pid=17585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2859" name="file1" dev="loop7" ino=12 res=0 errno=0 [ 1689.528502][T17195] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1697.354048][T17643] blktrace: Concurrent blktraces are not allowed on loop8 [ 1697.901866][T17643] loop7: detected capacity change from 0 to 32768 [ 1698.468440][T17643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2869 (17643) [ 1698.631733][T17643] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1698.643474][T17643] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1698.652674][T17643] BTRFS info (device loop7): turning on sync discard [ 1698.659553][T17643] BTRFS info (device loop7): setting nodatacow, compression disabled [ 1698.667820][T17643] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1698.678789][T17643] BTRFS info (device loop7): trying to use backup root at mount time [ 1698.687260][T17643] BTRFS info (device loop7): disabling tree log [ 1698.693780][T17643] BTRFS info (device loop7): enabling auto defrag [ 1698.700277][T17643] BTRFS info (device loop7): max_inline at 0 [ 1698.706734][T17643] BTRFS info (device loop7): using free space tree [ 1698.917717][ T1078] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1698.941417][T17643] BTRFS error (device loop7): failed to load root extent [ 1698.949388][T17643] BTRFS warning (device loop7): try to load backup roots slot 1 [ 1698.958220][ T2933] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1699.049898][T17643] BTRFS warning (device loop7): couldn't read tree root [ 1699.057498][T17643] BTRFS warning (device loop7): try to load backup roots slot 2 [ 1699.066716][ T1099] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1699.131962][T17643] BTRFS warning (device loop7): couldn't read tree root [ 1699.139437][T17643] BTRFS warning (device loop7): try to load backup roots slot 3 [ 1699.249358][T17643] BTRFS info (device loop7): enabling ssd optimizations [ 1699.275845][T17643] BTRFS info (device loop7): rebuilding free space tree [ 1699.329393][T17643] BTRFS info (device loop7): checking UUID tree [ 1699.583555][T17195] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1701.924227][T17197] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1701.933384][ T8626] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1701.947334][T17197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1702.093994][T17197] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1702.121425][T17197] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1702.131341][ T8626] usb 5-1: Using ep0 maxpacket: 16 [ 1702.139449][T17197] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1702.147308][T17197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1702.164608][ T8626] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1702.178424][ T8626] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.232555][ T8626] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1702.306511][ T8626] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1702.341268][ T8626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.381307][ T8626] usb 5-1: Product: syz [ 1702.385907][ T8626] usb 5-1: Manufacturer: syz [ 1702.416277][ T8626] usb 5-1: SerialNumber: syz [ 1702.453926][ T8626] usb 5-1: config 0 descriptor?? [ 1702.712114][ T8626] usb 5-1: USB disconnect, device number 16 [ 1703.631670][T17323] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.855301][T17323] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.209496][T17323] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.221406][T15366] Bluetooth: hci4: command tx timeout [ 1704.441746][T17323] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.536120][T17675] chnl_net:caif_netlink_parms(): no params data found [ 1705.053190][T17675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.060993][T17675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.121652][T17675] bridge_slave_0: entered allmulticast mode [ 1705.129367][T17675] bridge_slave_0: entered promiscuous mode [ 1705.150702][T17675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.158564][T17675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.166092][T17675] bridge_slave_1: entered allmulticast mode [ 1705.176370][T17675] bridge_slave_1: entered promiscuous mode [ 1706.611429][T15366] Bluetooth: hci4: command tx timeout [ 1708.326230][T17675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1708.354904][T17675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1708.615407][T17675] team0: Port device team_slave_0 added [ 1708.622064][T15366] Bluetooth: hci4: command tx timeout [ 1708.826859][T17722] autofs4:pid:17722:autofs_fill_super: called with bogus options [ 1710.285898][T17721] loop7: detected capacity change from 0 to 32768 [ 1710.861266][T15366] Bluetooth: hci4: command tx timeout [ 1711.035119][T17675] team0: Port device team_slave_1 added [ 1712.581975][T17675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1712.589176][T17675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.725262][T17675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.973494][T17675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.992193][T17675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1714.120306][T17675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.216425][T17675] hsr_slave_0: entered promiscuous mode [ 1715.368332][T17675] hsr_slave_1: entered promiscuous mode [ 1716.335946][T17675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1716.344902][T17675] Cannot create hsr debugfs directory [ 1721.931304][T17323] hsr_slave_0: left promiscuous mode [ 1721.990010][T17323] hsr_slave_1: left promiscuous mode [ 1722.006989][T17323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1722.031244][T17323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1722.092390][T17323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1722.100160][T17323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1722.166514][T17323] bridge_slave_1: left allmulticast mode [ 1722.191221][T17323] bridge_slave_1: left promiscuous mode [ 1722.197194][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.252089][T17323] bridge_slave_0: left allmulticast mode [ 1722.258081][T17323] bridge_slave_0: left promiscuous mode [ 1722.334503][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.370187][T17323] veth1_macvtap: left promiscuous mode [ 1722.375919][T17323] veth0_macvtap: left promiscuous mode [ 1722.382771][T17323] veth1_vlan: left promiscuous mode [ 1722.388399][T17323] veth0_vlan: left promiscuous mode [ 1723.268977][T17802] loop6: detected capacity change from 0 to 128 [ 1723.360010][T17802] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1723.424607][T17802] ext4 filesystem being mounted at /417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1723.593186][ T28] audit: type=1800 audit(1771165827.029:46): pid=17809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2890" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 1725.079874][T10565] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1726.569729][T17323] team0 (unregistering): Port device team_slave_1 removed [ 1726.683725][T17323] team0 (unregistering): Port device team_slave_0 removed [ 1726.853920][T17323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1727.023071][T17323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1727.837205][T17323] bond0 (unregistering): Released all slaves [ 1728.264577][T17675] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1728.302847][T17675] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1729.820932][T17675] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1729.882886][T17675] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1730.219325][T17675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1730.263497][T17675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.289135][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.296484][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1730.344923][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.352202][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1730.788950][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.796476][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.814822][T17675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1732.226123][T17675] veth0_vlan: entered promiscuous mode [ 1732.247977][T17675] veth1_vlan: entered promiscuous mode [ 1732.287453][T17675] veth0_macvtap: entered promiscuous mode [ 1732.302182][T17675] veth1_macvtap: entered promiscuous mode [ 1732.337627][T17675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.348896][T17675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.365764][T17675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.378637][T17675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.393943][T17675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.407385][T17675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.425754][T17675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1732.447872][T17675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.459935][T17675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.470390][T17675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.485192][T17675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.496303][T17675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.510029][T17675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.522395][T17675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1732.545669][T17675] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.561963][T17675] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.572977][T17675] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.582616][T17675] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.701772][T14783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.709808][T14783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.768873][T17769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.777629][T17769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1733.027625][T17895] loop8: detected capacity change from 0 to 64 [ 1733.355896][T17893] loop4: detected capacity change from 0 to 32768 [ 1733.371799][T17893] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.2905 (17893) [ 1733.404121][T17893] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1733.415383][T17893] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1733.424517][T17893] BTRFS info (device loop4): enabling disk space caching [ 1733.431758][T17893] BTRFS info (device loop4): force clearing of disk cache [ 1733.439241][T17893] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1733.449763][T17893] BTRFS info (device loop4): use zstd compression, level 3 [ 1733.457666][T17893] BTRFS info (device loop4): disk space caching is enabled [ 1734.953917][T17893] BTRFS info (device loop4): enabling ssd optimizations [ 1734.960931][T17893] BTRFS info (device loop4): auto enabling async discard [ 1734.998484][T17893] BTRFS info (device loop4): rebuilding free space tree [ 1735.039233][T17893] BTRFS info (device loop4): disabling free space tree [ 1735.046998][T17893] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1735.057512][T17893] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1738.198689][T15361] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1741.648386][T17936] loop4: detected capacity change from 0 to 262144 [ 1741.666835][T17936] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.2897 (17936) [ 1741.704620][T17936] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 1741.720481][T17936] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1741.732713][T17936] BTRFS info (device loop4): using free space tree [ 1741.743248][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1741.744175][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1741.760311][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1741.776214][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1741.792049][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1741.804563][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1741.818010][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1741.835763][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1741.851052][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1741.865812][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1741.884354][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1741.905869][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1741.921964][T17936] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1741.966361][T17936] BTRFS error (device loop4): open_ctree failed: -12 [ 1742.789839][T17966] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1742.891700][T17982] autofs4:pid:17982:autofs_fill_super: called with bogus options [ 1743.638368][T11799] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by udevd (11799) [ 1746.569453][T17996] loop7: detected capacity change from 0 to 4096 [ 1746.654468][T18001] loop8: detected capacity change from 0 to 32768 [ 1746.719384][T18001] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.2910 (18001) [ 1746.751944][T18001] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1746.763140][T18001] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1746.773086][T18001] BTRFS info (device loop8): enabling disk space caching [ 1746.780390][T18001] BTRFS info (device loop8): force clearing of disk cache [ 1746.789274][T18001] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1746.799115][T18001] BTRFS info (device loop8): use zstd compression, level 3 [ 1746.806779][T18001] BTRFS info (device loop8): disk space caching is enabled [ 1746.893041][T17996] ntfs3: loop7: Different NTFS sector size (2048) and media sector size (512). [ 1747.162296][T18001] BTRFS info (device loop8): enabling ssd optimizations [ 1747.169551][T18001] BTRFS info (device loop8): auto enabling async discard [ 1747.202449][T18001] BTRFS info (device loop8): rebuilding free space tree [ 1747.223581][T18001] BTRFS info (device loop8): disabling free space tree [ 1747.230681][T18001] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1747.240976][T18001] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1748.913823][T17675] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1750.598877][T18043] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1751.759625][T15198] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop8 scanned by udevd (15198) [ 1758.456309][T18084] loop8: detected capacity change from 0 to 4096 [ 1758.626141][T18084] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512). [ 1762.721802][T18121] loop6: detected capacity change from 0 to 32768 [ 1762.761571][T18121] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 1763.653839][T18128] loop7: detected capacity change from 0 to 1764 [ 1763.803173][T18130] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1765.561995][ T8249] Bluetooth: hci2: command 0x0406 tx timeout [ 1766.947959][T18147] autofs4:pid:18147:autofs_fill_super: called with bogus options [ 1768.830179][T18156] loop6: detected capacity change from 0 to 4096 [ 1768.849886][T18156] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 1770.385774][T18167] process 'syz.6.2936' launched './file1' with NULL argv: empty string added [ 1775.214224][T18200] loop7: detected capacity change from 0 to 32768 [ 1775.297624][T18200] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 12 [ 1775.492445][T11799] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1786.408343][T18261] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1786.996605][T18270] loop6: detected capacity change from 0 to 64 [ 1789.291502][T18270] Trying to free block not in datazone [ 1789.594515][T17775] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1790.205548][T17775] usb 5-1: Using ep0 maxpacket: 16 [ 1790.332991][T17775] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1790.418225][T17775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.597832][T17775] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1790.831164][T17775] usb 5-1: string descriptor 0 read error: -71 [ 1790.838302][T17775] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1790.854038][T17775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.007436][T17775] usb 5-1: config 0 descriptor?? [ 1791.021978][T17775] usb 5-1: can't set config #0, error -71 [ 1791.041612][T17775] usb 5-1: USB disconnect, device number 17 [ 1792.233861][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.243631][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.642229][T18322] loop7: detected capacity change from 0 to 1764 [ 1800.624248][T18350] loop7: detected capacity change from 0 to 64 [ 1800.991268][T18349] Trying to free block not in datazone [ 1804.461410][T12999] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1804.671758][T12999] usb 7-1: Using ep0 maxpacket: 16 [ 1804.703504][T12999] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1804.761368][T12999] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.811706][T12999] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1804.849675][T12999] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1804.890151][T12999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.909574][T12999] usb 7-1: Product: syz [ 1804.914964][T12999] usb 7-1: Manufacturer: syz [ 1804.930935][T12999] usb 7-1: SerialNumber: syz [ 1804.945868][T12999] usb 7-1: config 0 descriptor?? [ 1805.332077][T18383] loop7: detected capacity change from 0 to 1764 [ 1806.101945][ T5863] usb 7-1: USB disconnect, device number 23 [ 1806.232521][T11799] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1807.495601][T18395] blktrace: Concurrent blktraces are not allowed on loop8 [ 1808.268417][T18395] loop4: detected capacity change from 0 to 32768 [ 1808.562955][T18395] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2976 (18395) [ 1808.695865][T18395] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1808.706847][T18395] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1808.717042][T18395] BTRFS info (device loop4): turning on sync discard [ 1808.724069][T18395] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1808.732509][T18395] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1808.743531][T18395] BTRFS info (device loop4): trying to use backup root at mount time [ 1808.751980][T18395] BTRFS info (device loop4): disabling tree log [ 1808.758232][T18395] BTRFS info (device loop4): enabling auto defrag [ 1808.765232][T18395] BTRFS info (device loop4): max_inline at 0 [ 1808.771595][T18395] BTRFS info (device loop4): using free space tree [ 1809.401737][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1809.431383][T18395] BTRFS error (device loop4): failed to load root extent [ 1809.439175][T18395] BTRFS warning (device loop4): try to load backup roots slot 1 [ 1809.448376][T17323] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1809.466028][T18395] BTRFS warning (device loop4): couldn't read tree root [ 1809.473412][T18395] BTRFS warning (device loop4): try to load backup roots slot 2 [ 1809.483446][T17769] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1809.501002][T18395] BTRFS warning (device loop4): couldn't read tree root [ 1809.508224][T18395] BTRFS warning (device loop4): try to load backup roots slot 3 [ 1809.568960][T18395] BTRFS info (device loop4): enabling ssd optimizations [ 1809.579653][T18395] BTRFS info (device loop4): rebuilding free space tree [ 1809.606726][T18395] BTRFS info (device loop4): checking UUID tree [ 1809.613623][T18395] BTRFS warning (device loop4): failed to start uuid_rescan task [ 1809.621722][T18395] BTRFS warning (device loop4): failed to check the UUID tree: -4 [ 1809.706791][T18395] BTRFS error (device loop4): open_ctree failed: -4 [ 1810.719762][T18422] blktrace: Concurrent blktraces are not allowed on loop8 [ 1811.470804][T18422] loop8: detected capacity change from 0 to 32768 [ 1811.754470][T18422] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2978 (18422) [ 1811.855185][T18422] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1811.865437][T18422] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1811.874820][T18422] BTRFS info (device loop8): turning on sync discard [ 1811.881856][T18422] BTRFS info (device loop8): setting nodatacow, compression disabled [ 1811.890282][T18422] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1811.902120][T18422] BTRFS info (device loop8): trying to use backup root at mount time [ 1811.910504][T18422] BTRFS info (device loop8): disabling tree log [ 1811.917359][T18422] BTRFS info (device loop8): enabling auto defrag [ 1811.924032][T18422] BTRFS info (device loop8): max_inline at 0 [ 1811.930076][T18422] BTRFS info (device loop8): using free space tree [ 1813.333050][ T11] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1813.462056][T18422] BTRFS error (device loop8): failed to load root extent [ 1813.469249][T18422] BTRFS warning (device loop8): try to load backup roots slot 1 [ 1813.477809][ T12] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1813.501623][T18422] BTRFS warning (device loop8): couldn't read tree root [ 1813.508729][T18422] BTRFS warning (device loop8): try to load backup roots slot 2 [ 1813.517338][ T11] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1813.528709][T18422] BTRFS warning (device loop8): couldn't read tree root [ 1813.537942][T18422] BTRFS warning (device loop8): try to load backup roots slot 3 [ 1813.776440][T18422] BTRFS error (device loop8): open_ctree failed: -4 [ 1813.841222][T12999] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1814.091300][T12999] usb 8-1: Using ep0 maxpacket: 16 [ 1814.123291][T12999] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 1814.193604][T12999] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1814.231755][T12999] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1814.274577][T12999] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1814.349686][T12999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.400195][T12999] usb 8-1: Product: syz [ 1814.416207][T11799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (11799) [ 1814.441242][T12999] usb 8-1: Manufacturer: syz [ 1814.446272][T12999] usb 8-1: SerialNumber: syz [ 1814.507316][T12999] usb 8-1: config 0 descriptor?? [ 1814.652509][ T5863] usb 8-1: USB disconnect, device number 2 [ 1817.822386][T18474] loop4: detected capacity change from 0 to 1764 [ 1818.690088][T11799] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1818.731397][T18470] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2977'. [ 1818.933100][T18470] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2977'. [ 1819.187654][T18470] ip6gretap0: entered promiscuous mode [ 1819.312365][T18470] ip6gretap0: left promiscuous mode [ 1820.255828][T18488] loop7: detected capacity change from 0 to 128 [ 1820.402852][T18488] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1821.978425][T18494] loop6: detected capacity change from 0 to 32768 [ 1822.222005][T18488] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1822.265144][T18494] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1822.276132][T18494] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1822.285568][T18494] BTRFS info (device loop6): turning on sync discard [ 1822.292904][T18494] BTRFS info (device loop6): setting nodatacow, compression disabled [ 1822.301503][T18494] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1822.313539][T18494] BTRFS info (device loop6): trying to use backup root at mount time [ 1822.322678][T18494] BTRFS info (device loop6): disabling tree log [ 1822.329682][T18494] BTRFS info (device loop6): enabling auto defrag [ 1822.336845][T18494] BTRFS info (device loop6): max_inline at 0 [ 1822.343212][T18494] BTRFS info (device loop6): using free space tree [ 1823.112787][ T28] audit: type=1800 audit(1771165926.109:47): pid=18512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2985" name="file1" dev="loop7" ino=12 res=0 errno=0 [ 1823.152511][T17323] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1823.246293][T18494] BTRFS error (device loop6): failed to load root extent [ 1823.254075][T18494] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1823.283235][T17323] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1823.661036][T18519] loop4: detected capacity change from 0 to 1764 [ 1824.283484][T18494] BTRFS warning (device loop6): couldn't read tree root [ 1824.291289][T18494] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1824.316834][T17769] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1824.401284][T18494] BTRFS warning (device loop6): couldn't read tree root [ 1824.408754][T18494] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1824.541605][T18494] BTRFS error (device loop6): open_ctree failed: -4 [ 1824.791398][T17195] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1825.334249][T18530] loop8: detected capacity change from 0 to 1764 [ 1825.621449][ T8249] Bluetooth: hci4: command 0x0406 tx timeout [ 1826.161484][T15198] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1827.093004][T11799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (11799) [ 1827.370986][T18548] autofs4:pid:18548:autofs_fill_super: called with bogus options [ 1828.663441][T18548] loop7: detected capacity change from 0 to 32768 [ 1831.213312][T18546] ERROR: (device loop7): dbAllocAG: Corrupt dmapctl page [ 1831.213312][T18546] [ 1831.225212][T18546] ERROR: (device loop7): remounting filesystem as read-only [ 1831.233226][T18546] ERROR: (device loop7): dbDiscardAG: -EIO [ 1831.233226][T18546] [ 1833.061249][T12999] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1833.279000][T12999] usb 9-1: Using ep0 maxpacket: 16 [ 1833.324265][T12999] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 1833.391504][T12999] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1833.451350][T12999] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1833.662231][T18579] autofs4:pid:18579:autofs_fill_super: called with bogus options [ 1833.935268][T12999] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1834.961243][T18579] loop4: detected capacity change from 0 to 32768 [ 1835.154471][T12999] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.302629][T12999] usb 9-1: Product: syz [ 1835.373516][T12999] usb 9-1: Manufacturer: syz [ 1835.591991][T12999] usb 9-1: SerialNumber: syz [ 1836.909073][T12999] usb 9-1: config 0 descriptor?? [ 1836.935590][T12999] usb 9-1: can't set config #0, error -71 [ 1837.068299][T12999] usb 9-1: USB disconnect, device number 2 [ 1837.282496][T18584] loop7: detected capacity change from 0 to 64 [ 1839.302137][T18581] Trying to free block not in datazone [ 1842.662630][ T8249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1842.691380][ T8249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1844.211338][ T8249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1844.243199][ T8249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1844.255049][ T8249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1844.263240][ T8249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1846.156712][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.300725][T18643] loop8: detected capacity change from 0 to 64 [ 1846.425893][ T8249] Bluetooth: hci1: command tx timeout [ 1846.484727][T18640] Trying to free block not in datazone [ 1847.610008][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.318808][ T8249] Bluetooth: hci1: command tx timeout [ 1849.603513][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.025487][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.363054][T18618] chnl_net:caif_netlink_parms(): no params data found [ 1850.790090][T18618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.881334][T18618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.888928][T18618] bridge_slave_0: entered allmulticast mode [ 1850.932312][T18618] bridge_slave_0: entered promiscuous mode [ 1851.006648][T18618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.040716][T18618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.058365][T18618] bridge_slave_1: entered allmulticast mode [ 1851.077444][T18618] bridge_slave_1: entered promiscuous mode [ 1851.292761][T18618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1851.331681][T18618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1851.345014][ T8249] Bluetooth: hci1: command tx timeout [ 1851.626380][T18618] team0: Port device team_slave_0 added [ 1851.662755][T18618] team0: Port device team_slave_1 added [ 1851.772828][T18618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1851.793188][T18618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1851.911214][T18618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1851.973889][T18618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1851.980993][T18618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1852.146592][T18618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1853.432727][ T8249] Bluetooth: hci1: command tx timeout [ 1853.455011][T18618] hsr_slave_0: entered promiscuous mode [ 1853.653990][T18618] hsr_slave_1: entered promiscuous mode [ 1853.671750][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.951645][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.332649][T18705] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1854.439692][T18618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1854.471208][T18618] Cannot create hsr debugfs directory [ 1856.019104][T18712] loop4: detected capacity change from 0 to 64 [ 1856.614358][T18712] Trying to free block not in datazone [ 1856.872476][T18716] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1860.411715][ T5863] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1860.644021][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 1860.711460][ T5863] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1860.720603][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.781191][ T5863] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1860.809239][ T5863] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1860.981226][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.020500][ T5863] usb 5-1: Product: syz [ 1861.054625][ T5863] usb 5-1: Manufacturer: syz [ 1861.888523][T18618] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1861.897572][ T5863] usb 5-1: SerialNumber: syz [ 1861.945566][ T5863] usb 5-1: config 0 descriptor?? [ 1861.956797][ T5863] usb 5-1: can't set config #0, error -71 [ 1861.984169][ T5863] usb 5-1: USB disconnect, device number 18 [ 1862.206883][T18618] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1862.365769][T18618] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1864.263270][T18618] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1864.514167][T18774] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1865.007463][T18782] autofs4:pid:18782:autofs_fill_super: called with bogus options [ 1865.489331][ T59] hsr_slave_0: left promiscuous mode [ 1866.416145][T18782] loop8: detected capacity change from 0 to 32768 [ 1866.582354][ T59] hsr_slave_1: left promiscuous mode [ 1866.724151][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1866.740687][T18782] ERROR: (device loop8): dbAllocAG: Corrupt dmapctl page [ 1866.740687][T18782] [ 1866.751758][T18782] ERROR: (device loop8): remounting filesystem as read-only [ 1866.759848][T18782] ERROR: (device loop8): dbDiscardAG: -EIO [ 1866.759848][T18782] [ 1866.847172][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1867.093277][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1867.101888][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1867.109943][ T59] bridge_slave_1: left allmulticast mode [ 1867.117641][ T59] bridge_slave_1: left promiscuous mode [ 1867.124326][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.135122][ T59] bridge_slave_0: left allmulticast mode [ 1867.140913][ T59] bridge_slave_0: left promiscuous mode [ 1867.147493][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.209834][ T59] veth1_macvtap: left promiscuous mode [ 1867.229803][ T59] veth0_macvtap: left promiscuous mode [ 1867.250192][ T59] veth1_vlan: left promiscuous mode [ 1867.261724][ T59] veth0_vlan: left promiscuous mode [ 1868.742210][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1868.823837][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1868.894739][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1868.973589][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1869.735610][ T59] bond0 (unregistering): Released all slaves [ 1870.270590][T18618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1871.734273][T18618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1871.809351][T17769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.817033][T17769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1871.920120][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.927602][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1872.801241][ T5863] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1874.873995][T18618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1875.587049][T18618] veth0_vlan: entered promiscuous mode [ 1875.634077][T18618] veth1_vlan: entered promiscuous mode [ 1875.724506][T18618] veth0_macvtap: entered promiscuous mode [ 1875.769603][T18618] veth1_macvtap: entered promiscuous mode [ 1875.832883][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.849752][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.908234][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.919665][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.946539][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.973230][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.053157][T18618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1876.068388][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1876.079380][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.090139][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1876.452983][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.681606][T18867] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1876.815185][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1876.826390][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1876.838446][T18618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1876.850561][T18618] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.860157][T18618] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.869746][T18618] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.891388][T18618] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.133164][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1877.148961][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.199300][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1877.210894][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1915.111931][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.118379][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1968.381416][T15366] Bluetooth: hci1: command 0x0406 tx timeout [ 1976.546703][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.555114][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2022.622020][ T1078] kworker/dying (1078) used greatest stack depth: 20232 bytes left [ 2037.991366][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.998274][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.436197][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.443012][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.867950][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.875863][ T1288] ieee802154 phy1 wpan1: encryption failed: -22