last executing test programs: 3m55.940135542s ago: executing program 0 (id=378): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3m53.827962153s ago: executing program 0 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 3m50.651395669s ago: executing program 0 (id=389): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x0, 0x3, 0x2000, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x107042, 0x24) 3m49.092024087s ago: executing program 0 (id=394): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000080)={[{@dax_never}, {@nombcache}]}, 0x3, 0x486, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x32040a7, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m48.438843873s ago: executing program 0 (id=397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000000500010007"], 0x1c}}, 0x20000090) 3m47.696783851s ago: executing program 0 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000803}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file2\x00', 0x180c850, &(0x7f0000001100)=ANY=[@ANYBLOB='rodir,nonumtail=0,nonumtail=0,shortname=lower,rodir,iocharset=maciceland,shortname=win95,check=strict,codepage=863,rodir,utf8=0,iocharset=iso8859-3,\x00l'], 0x1, 0x379, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3m43.126600741s ago: executing program 32 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000803}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file2\x00', 0x180c850, &(0x7f0000001100)=ANY=[@ANYBLOB='rodir,nonumtail=0,nonumtail=0,shortname=lower,rodir,iocharset=maciceland,shortname=win95,check=strict,codepage=863,rodir,utf8=0,iocharset=iso8859-3,\x00l'], 0x1, 0x379, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1m37.739677424s ago: executing program 3 (id=702): mkdir(&(0x7f0000000040)='dir0\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='hpfs\x00', 0x214003, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x220c002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dir0/tracing_on\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='0', 0x1) 1m36.763519308s ago: executing program 3 (id=704): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) 1m29.953939084s ago: executing program 3 (id=717): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1c5, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x0, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) setns(0xc9, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)=0xd0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x7800) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0xc1000, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000080)='./bus\x00') 1m29.570905293s ago: executing program 3 (id=720): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) 1m29.507053405s ago: executing program 4 (id=722): socket$rds(0x15, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m28.07551312s ago: executing program 4 (id=726): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r5, &(0x7f00000002c0)=""/10, 0x5b) 1m28.05001667s ago: executing program 3 (id=727): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) 1m27.020369926s ago: executing program 4 (id=731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0xb8, 0x40800}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), 0x0}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x16, &(0x7f0000000280)=0x3, 0x4) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000c080}, 0x4000814) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m26.767750542s ago: executing program 3 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x58) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x3, 0xf, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) 1m26.473794269s ago: executing program 4 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@dfltgid}, {@cache_fscache}, {@access_client}, {@version_L}], [], 0x6b}}) 1m25.270256328s ago: executing program 4 (id=738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1m24.598491405s ago: executing program 4 (id=742): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) 1m11.453166935s ago: executing program 33 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x58) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x3, 0xf, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) 1m9.20318963s ago: executing program 34 (id=742): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) 7.639534533s ago: executing program 2 (id=918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) pselect6(0x40, &(0x7f0000000100)={0x2, 0xc7, 0x4, 0x0, 0x1, 0x2000000000010}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x100800, 0x20000}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.503474181s ago: executing program 2 (id=922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000001c0)={0x4, 0x50, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000000000", @ANYRES32=r1], 0x30}}, 0x0) 6.022625404s ago: executing program 2 (id=923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) openat$uinput(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") chdir(&(0x7f00000003c0)='./bus\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6}}}}]}, 0x40}}, 0x4008000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x2, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1d, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac45, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x129a, 0x0, 0x0, 0x1}, {0x103, 0x8000400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x5, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0xfff, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 5.796956359s ago: executing program 1 (id=924): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) semop(0x0, &(0x7f00000001c0)=[{0x4, 0x7, 0x1000}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 3.794135518s ago: executing program 1 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket(0xa, 0x3, 0xff) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x102, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000240), &(0x7f0000000080)=""/37}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b2, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103042, 0x41) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x4d, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {0xfff1, 0x1, 0xb, 0x8}, 0x36, [0x1, 0x101, 0x9, 0x9, 0x7, 0x6, 0x81, 0xc, 0x4, 0x3, 0x4, 0x6, 0x6, 0x6, 0xe27, 0x8000000, 0x14e8b1b1, 0x8, 0x0, 0x400, 0x2, 0x3, 0x7ff, 0x800, 0x3, 0x2, 0x9, 0xde63, 0x100, 0xfffffffa, 0x0, 0x2, 0x2, 0x0, 0x2, 0x9, 0x210, 0xfff, 0x5, 0x8, 0xffffffff, 0xfffffffa, 0xffffff80, 0x4, 0x14f0000, 0x60, 0x7, 0x7, 0x7, 0xfff, 0x2, 0x2, 0xfffffff8, 0x80, 0x8, 0x2b19, 0x0, 0x7, 0x7, 0x7, 0xb1bc, 0xeff, 0xfffffff9, 0x6], [0xfffffff2, 0x6, 0x1, 0x3ff, 0x1, 0x2, 0x7, 0x9, 0x944, 0x1, 0x1, 0x7, 0x8df2, 0x3, 0x7, 0x3, 0x2, 0xef, 0x6, 0x6a, 0xffffffff, 0x0, 0x3, 0xee, 0x6, 0x4, 0xf74b, 0x8, 0xfffffffe, 0x1, 0x9, 0x0, 0xe61, 0x9, 0x100, 0x7, 0x2, 0x6, 0x3e7, 0xffffff80, 0x1, 0x7, 0x8, 0x7fff, 0x8, 0xfffffff9, 0x3, 0xe, 0x2, 0x9, 0x3, 0xa, 0xf, 0x2, 0x8001, 0x8, 0x6, 0x6, 0x496f, 0x8, 0x1, 0x9, 0x3, 0x4fc], [0x50f, 0x1000, 0x1000, 0x1, 0x4, 0xb66, 0xfffffffc, 0x2d2a, 0x2, 0x5, 0x8, 0x0, 0x2001, 0x4, 0x8084, 0x5, 0x7, 0xa6, 0x8, 0x2, 0x9, 0x9, 0x1, 0x1, 0x4, 0x7, 0x9, 0xffff8001, 0x1c00, 0x6, 0x3, 0xcc3, 0x2, 0xffffffff, 0x1, 0x80000000, 0xfffffff9, 0x179, 0xc855, 0xe6c, 0x1c, 0x7, 0x8000, 0x40, 0x0, 0xacd1, 0x2, 0x0, 0xffffffff, 0x2, 0x4, 0x67df1f, 0xacb, 0x9, 0x13000000, 0x632f, 0x3, 0x0, 0x1c, 0x7, 0x9a, 0x2fe9, 0x34, 0x80000008], [0x1ff, 0xfff, 0x10001, 0xf2, 0x10000, 0xfffffffa, 0x0, 0x396, 0x3, 0x2000004, 0x7f, 0x4, 0x1, 0x7, 0x145, 0x8, 0x4, 0xfffffffd, 0x7, 0x6, 0x24, 0x7, 0x0, 0x401, 0x3, 0x6, 0x9, 0x2, 0x8, 0x1, 0xfffffffa, 0xa91, 0x1, 0x1000, 0x59, 0xc63b, 0x81, 0x8, 0x7, 0x4, 0x8, 0x5, 0x8, 0x1, 0x40, 0x9, 0xc, 0x9c, 0x2, 0x1, 0x0, 0x0, 0xfffffff3, 0x5f1, 0xffffed40, 0xde16, 0xaeb, 0x9, 0x61, 0x40000020, 0x3, 0x81, 0xff, 0x2]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/i2c-dev/i2c-0/name\x00', 0x0, 0x0) 3.650453951s ago: executing program 2 (id=928): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 3.081935585s ago: executing program 2 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@dfltgid}, {@cache_fscache}, {@access_client}, {@version_L}], [], 0x6b}}) 3.029634406s ago: executing program 5 (id=931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x18}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a1", 0x17}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e", 0xe}, {&(0x7f0000000d40)="7edb39aa76e39c9f", 0x8}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.650964815s ago: executing program 1 (id=932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x10, 0xd, 0xfe, 0x0, 0x0, 0xb, 0x1a00}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004009}, 0x8840) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = gettid() r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_BMAP(r10, &(0x7f0000000180)={0x18, 0xfffffffffffffff5, 0x0, {0x6}}, 0x18) r11 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r11, &(0x7f0000001b40)={0x2020}, 0x205c) tkill(r9, 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvfrom(r7, 0x0, 0x0, 0x2080, 0x0, 0x0) 2.495460929s ago: executing program 5 (id=933): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0)=0x4, 0x4) 1.471266664s ago: executing program 5 (id=934): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) acct(&(0x7f0000000100)='./debug/tracing/trace_pipe\x00') 1.422538826s ago: executing program 1 (id=935): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) semop(0x0, &(0x7f00000001c0)=[{0x4, 0x7, 0x1000}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 1.394959736s ago: executing program 2 (id=936): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000183282, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_read(r2, 0x1, 0x1f, &(0x7f0000001000)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) 981.478316ms ago: executing program 5 (id=937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xe8) 607.615845ms ago: executing program 5 (id=938): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 535.598357ms ago: executing program 1 (id=939): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776", 0x80, 0x840, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaac7533137cd4e1eaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f04a976bc4b4c9e3e260cbfad990444140b01e000000100000000e00000010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 191.268316ms ago: executing program 5 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket(0xa, 0x3, 0xff) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x102, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000240), &(0x7f0000000080)=""/37}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b2, &(0x7f0000000540)="$eJzs3c1vG2UaAPDHdpMmaXb7satV25W2lbpS90ON86FVk4ULJ+BQCVGJC0glJG4oceIodkoT9ZDCrQcOCAQS4sCdv4ALPVEhIc5wRxxQEZQgARKS0YztNF8OFqQxyvx+0sQz8zrzvK+t59XMOzOeADLrbPInFzEYEZ9GxNHG4uY3nG28rN2/OZVMuajXL3+TS9+XLLfe2vq/IxGxGhF9EfH04xEv5LbHrS6vzE6Wy6XF5nKxNrdQrC6vXLg2NzlTminNj4xfnJgYHx4bndiztt5+7aXblz54svf9H169d/f1jz5MqjXYLNvYjr3UaHpPHN+w7lBEPPowgnVBodme/m5XhN8k+f7+EhHn0vw/GoX02wSyoF6v13+uH25XvFoHDqx8ug+cyw9FRGM+nx8aauzD/zUG8uVKtfbfq5Wl+enGvvKx6MlfvVYuDTePFY5FTy5ZHknnHyyPblkei0j3gd8o9KfLQ1OV8vT+dnXAFkea+d/fzP/vC438BzJi50P+tgcFwAFiyA+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXXpUjLVW/e/T19fXpqtXL8wXarODs0tTQ1NVRYXhmYqlZn0np25X9teuVJZGPlfLN0o1krVWrG6vHJlrrI0X7uS3td/pdSzL60COnH8zJ3PcxGx+v/+dEr0NsvkKhxs9Xouun0PMtAdhW53QEDXGPqD7HKMD+zwE72b9LUrWNj7ugD7I9/tCgBdc/6U83+QVcb/IbuM/0N22ccHjP9D9hj/h+wabPP8rz9teHbXcET8OSI+K/Qcbj3rCzgI8l/lIvLJ/v/5o/8c3Fram/sxPUXQGxEvv3P5rRuTtdriSLL+2/X1tbeb60e7UX+gU608beUxAJBda/dvTrWm/Yz79WONixC2xz/UHJvsS89RDqzlNl2rkNujaxdWb0XEyZ3i55rPO2+c+RhYK2yLf6L5mmtsIq3vofS56fsT/9SG+P/YEP/07/5UIBvuJP3P8E75l09zOtbzb3P/M7hH10607//y6/1foU3/d6bDGC+++8qXbePfiji9Y/xWvL401tb4Sd3OdxY+d++5Z/7WrrD+XmM7O8Vf30BEFGtzC8Xq8sqF9HfkZkrzI+MXJybGh8dGJ4rpGHWxNVK93SMnP7m7W/sHHsTvj4iO2p+s+3dn7Y+f/v7xs2d3if+vczt//yd2iZ9U9D8dxv9u9Ivn25Ul8afbfP75XeIn68Y6jF998wnPEgeAP5Dq8srsZLlcWjRjxoyZ9Zlu90zAw/Yg6btdEwAAAAAAAAAAAKBT+3E5cbfbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEPwSAAD//2vj04Y=") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103042, 0x41) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x4d, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {0xfff1, 0x1, 0xb, 0x8}, 0x36, [0x1, 0x101, 0x9, 0x9, 0x7, 0x6, 0x81, 0xc, 0x4, 0x3, 0x4, 0x6, 0x6, 0x6, 0xe27, 0x8000000, 0x14e8b1b1, 0x8, 0x0, 0x400, 0x2, 0x3, 0x7ff, 0x800, 0x3, 0x2, 0x9, 0xde63, 0x100, 0xfffffffa, 0x0, 0x2, 0x2, 0x0, 0x2, 0x9, 0x210, 0xfff, 0x5, 0x8, 0xffffffff, 0xfffffffa, 0xffffff80, 0x4, 0x14f0000, 0x60, 0x7, 0x7, 0x7, 0xfff, 0x2, 0x2, 0xfffffff8, 0x80, 0x8, 0x2b19, 0x0, 0x7, 0x7, 0x7, 0xb1bc, 0xeff, 0xfffffff9, 0x6], [0xfffffff2, 0x6, 0x1, 0x3ff, 0x1, 0x2, 0x7, 0x9, 0x944, 0x1, 0x1, 0x7, 0x8df2, 0x3, 0x7, 0x3, 0x2, 0xef, 0x6, 0x6a, 0xffffffff, 0x0, 0x3, 0xee, 0x6, 0x4, 0xf74b, 0x8, 0xfffffffe, 0x1, 0x9, 0x0, 0xe61, 0x9, 0x100, 0x7, 0x2, 0x6, 0x3e7, 0xffffff80, 0x1, 0x7, 0x8, 0x7fff, 0x8, 0xfffffff9, 0x3, 0xe, 0x2, 0x9, 0x3, 0xa, 0xf, 0x2, 0x8001, 0x8, 0x6, 0x6, 0x496f, 0x8, 0x1, 0x9, 0x3, 0x4fc], [0x50f, 0x1000, 0x1000, 0x1, 0x4, 0xb66, 0xfffffffc, 0x2d2a, 0x2, 0x5, 0x8, 0x0, 0x2001, 0x4, 0x8084, 0x5, 0x7, 0xa6, 0x8, 0x2, 0x9, 0x9, 0x1, 0x1, 0x4, 0x7, 0x9, 0xffff8001, 0x1c00, 0x6, 0x3, 0xcc3, 0x2, 0xffffffff, 0x1, 0x80000000, 0xfffffff9, 0x179, 0xc855, 0xe6c, 0x1c, 0x7, 0x8000, 0x40, 0x0, 0xacd1, 0x2, 0x0, 0xffffffff, 0x2, 0x4, 0x67df1f, 0xacb, 0x9, 0x13000000, 0x632f, 0x3, 0x0, 0x1c, 0x7, 0x9a, 0x2fe9, 0x34, 0x80000008], [0x1ff, 0xfff, 0x10001, 0xf2, 0x10000, 0xfffffffa, 0x0, 0x396, 0x3, 0x2000004, 0x7f, 0x4, 0x1, 0x7, 0x145, 0x8, 0x4, 0xfffffffd, 0x7, 0x6, 0x24, 0x7, 0x0, 0x401, 0x3, 0x6, 0x9, 0x2, 0x8, 0x1, 0xfffffffa, 0xa91, 0x1, 0x1000, 0x59, 0xc63b, 0x81, 0x8, 0x7, 0x4, 0x8, 0x5, 0x8, 0x1, 0x40, 0x9, 0xc, 0x9c, 0x2, 0x1, 0x0, 0x0, 0xfffffff3, 0x5f1, 0xffffed40, 0xde16, 0xaeb, 0x9, 0x61, 0x40000020, 0x3, 0x81, 0xff, 0x2]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/i2c-dev/i2c-0/name\x00', 0x0, 0x0) 0s ago: executing program 1 (id=941): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x22, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x20, &(0x7f0000000080)="646f4aa6cb0956a61578477484dfebf7f3e3ae5d3e00cd638979165fd4d9e454") kernel console output (not intermixed with test programs): ): Directory bread(block 68) failed [ 191.572167][ T4967] FAT-fs (loop3): Directory bread(block 69) failed [ 191.581075][ T4967] FAT-fs (loop3): Directory bread(block 70) failed [ 191.588801][ T4967] FAT-fs (loop3): Directory bread(block 71) failed [ 191.597031][ T4967] FAT-fs (loop3): Directory bread(block 72) failed [ 191.607221][ T4967] FAT-fs (loop3): Directory bread(block 73) failed [ 192.942014][ T4971] loop4: detected capacity change from 0 to 512 [ 192.980075][ T4971] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.015562][ T4973] loop3: detected capacity change from 0 to 256 [ 194.292506][ T4987] loop2: detected capacity change from 0 to 512 [ 194.913608][ T4978] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 197.268060][ T5005] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.315211][ T5005] hpfs: hpfs_map_sector(): read error [ 198.133619][ T5013] loop0: detected capacity change from 0 to 512 [ 198.164900][ T5013] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.272767][ T22] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 198.749604][ T22] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 199.014313][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.140078][ T5022] loop3: detected capacity change from 0 to 256 [ 199.365478][ T22] usb 5-1: Product: syz [ 199.370210][ T22] usb 5-1: Manufacturer: syz [ 199.375120][ T22] usb 5-1: SerialNumber: syz [ 199.394616][ T22] usb 5-1: config 0 descriptor?? [ 199.447287][ T5023] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 199.656047][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.717884][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.110013][ T22] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.411086][ T22] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 202.578435][ T22] usb 5-1: USB disconnect, device number 2 [ 202.707688][ T5041] loop0: detected capacity change from 0 to 4096 [ 203.096807][ T5048] loop3: detected capacity change from 0 to 256 [ 203.462596][ T5048] FAT-fs (loop3): Directory bread(block 64) failed [ 203.469508][ T5048] FAT-fs (loop3): Directory bread(block 65) failed [ 203.476894][ T5048] FAT-fs (loop3): Directory bread(block 66) failed [ 203.483812][ T5048] FAT-fs (loop3): Directory bread(block 67) failed [ 203.490942][ T5048] FAT-fs (loop3): Directory bread(block 68) failed [ 203.497862][ T5048] FAT-fs (loop3): Directory bread(block 69) failed [ 203.505192][ T5048] FAT-fs (loop3): Directory bread(block 70) failed [ 203.511983][ T5048] FAT-fs (loop3): Directory bread(block 71) failed [ 203.519564][ T5048] FAT-fs (loop3): Directory bread(block 72) failed [ 203.526482][ T5048] FAT-fs (loop3): Directory bread(block 73) failed [ 204.149785][ T5055] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.171847][ T5056] loop1: detected capacity change from 0 to 512 [ 204.217512][ T5055] hpfs: hpfs_map_sector(): read error [ 207.099295][ T5072] loop3: detected capacity change from 0 to 256 [ 207.224065][ T5074] loop4: detected capacity change from 0 to 512 [ 207.350282][ T5074] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.162938][ T5077] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 211.605897][ T5105] loop4: detected capacity change from 0 to 512 [ 211.973934][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 211.974385][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 211.988259][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 211.996158][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 212.005125][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 212.841533][ T5113] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 212.958342][ T5113] hpfs: hpfs_map_sector(): read error [ 214.746936][ T5124] loop3: detected capacity change from 0 to 512 [ 214.962006][ T5124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.971802][ T5124] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.091757][ T26] audit: type=1800 audit(1787187572.648:3): pid=5124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.176" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 215.517356][ T5129] loop1: detected capacity change from 0 to 512 [ 215.526915][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 215.574070][ T5129] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.591562][ T5122] loop0: detected capacity change from 0 to 8192 [ 215.688863][ T5122] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 215.729569][ T5122] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 215.772197][ T5122] REISERFS (device loop0): using ordered data mode [ 215.825270][ T5122] reiserfs: using flush barriers [ 215.888438][ T5122] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.967770][ T5122] REISERFS (device loop0): checking transaction log (loop0) [ 216.397358][ T5129] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 216.583715][ T5122] REISERFS (device loop0): Using tea hash to sort names [ 216.625503][ T5122] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 216.957586][ T5139] loop2: detected capacity change from 0 to 512 [ 217.007036][ T5122] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 217.018102][ T5139] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.471673][ T5122] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 218.761520][ T5156] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.782918][ T5156] hpfs: hpfs_map_sector(): read error [ 219.343725][ T5162] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 222.637459][ T5191] loop0: detected capacity change from 0 to 256 [ 223.456627][ T5195] loop1: detected capacity change from 0 to 256 [ 223.869876][ T5195] FAT-fs (loop1): Directory bread(block 64) failed [ 223.877341][ T5195] FAT-fs (loop1): Directory bread(block 65) failed [ 223.886953][ T5195] FAT-fs (loop1): Directory bread(block 66) failed [ 223.896037][ T5195] FAT-fs (loop1): Directory bread(block 67) failed [ 223.904717][ T5195] FAT-fs (loop1): Directory bread(block 68) failed [ 223.912098][ T5195] FAT-fs (loop1): Directory bread(block 69) failed [ 223.924831][ T5195] FAT-fs (loop1): Directory bread(block 70) failed [ 223.933084][ T5195] FAT-fs (loop1): Directory bread(block 71) failed [ 223.945201][ T5195] FAT-fs (loop1): Directory bread(block 72) failed [ 223.953109][ T5195] FAT-fs (loop1): Directory bread(block 73) failed [ 224.837477][ T5207] loop0: detected capacity change from 0 to 4096 [ 224.942623][ T5209] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.620214][ T5199] Dev nullb1: unable to read RDB block 8 [ 225.690758][ T5199] nullb1: unable to read partition table [ 225.739914][ T5199] null_blk: disk nullb1 created [ 225.892267][ T5222] tipc: Failed to obtain node identity [ 225.905149][ T5222] tipc: Enabling of bearer rejected, failed to enable media [ 226.054419][ T5220] loop2: detected capacity change from 0 to 8192 [ 226.316738][ T5220] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.406452][ T5220] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 227.386726][ T5220] REISERFS (device loop2): using ordered data mode [ 227.436445][ T5220] reiserfs: using flush barriers [ 227.447864][ T5227] loop0: detected capacity change from 0 to 256 [ 231.844637][ T5220] REISERFS warning (device loop2): clm-2000 reiserfs_allocate_list_bitmaps: unable to allocate bitmaps for journal lists [ 231.874218][ T5220] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 233.735336][ T5248] loop3: detected capacity change from 0 to 4096 [ 233.887342][ T5252] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.078023][ T5261] loop0: detected capacity change from 0 to 4096 [ 235.266828][ T5268] IPVS: rr: FWM 3 0x00000003 - no destination available [ 236.179598][ T5270] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.253649][ T5261] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 237.781391][ T5281] loop1: detected capacity change from 0 to 1024 [ 237.831034][ T5281] EXT4-fs: quotafile must be on filesystem root [ 238.030757][ T5285] loop2: detected capacity change from 0 to 256 [ 239.177330][ T5291] loop0: detected capacity change from 0 to 256 [ 239.213802][ T5291] exfat: Unknown parameter 'zero_size_dir' [ 239.494802][ T5293] loop1: detected capacity change from 0 to 512 [ 239.618426][ T5293] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 239.648635][ T5293] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.727647][ T5293] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.227: corrupted inode contents [ 239.760708][ T5303] EXT4-fs (loop1): shut down requested (2) [ 239.792139][ T5293] EXT4-fs (loop1): Remounting filesystem read-only [ 239.940821][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 239.964040][ T4401] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 241.005399][ T5309] loop0: detected capacity change from 0 to 512 [ 241.034108][ T5309] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.433947][ T5321] 9pnet_fd: Insufficient options for proto=fd [ 241.572738][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 246.562983][ T4325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 246.772684][ T4325] usb 1-1: Using ep0 maxpacket: 32 [ 246.783023][ T4325] usb 1-1: unable to get BOS descriptor or descriptor too short [ 246.830063][ T4325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.910816][ T4325] usb 1-1: config 0 has no interfaces? [ 246.962737][ T4325] usb 1-1: string descriptor 0 read error: -22 [ 246.980333][ T4325] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 247.011153][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.053972][ T4325] usb 1-1: config 0 descriptor?? [ 247.393585][ T4325] usb 1-1: USB disconnect, device number 2 [ 248.104617][ T5359] loop3: detected capacity change from 0 to 256 [ 252.595418][ T5371] loop3: detected capacity change from 0 to 4096 [ 253.292979][ T5371] ntfs3: Cannot use different iocharset when remounting! [ 253.405695][ T5387] loop2: detected capacity change from 0 to 4096 [ 253.461016][ T5387] EXT4-fs: inline encryption not supported [ 253.539896][ T5387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 253.589532][ T5387] EXT4-fs (loop2): Test dummy encryption mode enabled [ 253.632472][ T5387] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 253.674580][ T5387] System zones: 0-5 [ 253.694032][ T5387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 253.979765][ T5400] loop3: detected capacity change from 0 to 512 [ 254.110822][ T5400] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.256: inode #1: comm syz.3.256: iget: illegal inode # [ 254.143145][ T5405] netlink: 68 bytes leftover after parsing attributes in process `syz.0.257'. [ 254.169528][ T5400] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.256: error while reading EA inode 1 err=-117 [ 254.185179][ T5400] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.256: inode #1: comm syz.3.256: iget: illegal inode # [ 254.320517][ T5400] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.256: error while reading EA inode 1 err=-117 [ 254.634347][ T5400] EXT4-fs (loop3): 1 orphan inode deleted [ 254.759497][ T5400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 255.276318][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 256.108524][ T5418] loop3: detected capacity change from 0 to 256 [ 256.224806][ T5387] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 256.515649][ T5396] overlayfs: failed to resolve './bus': -2 [ 256.972104][ T5402] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 258.179179][ T5439] gadgetfs: bound to dummy_udc driver [ 258.543266][ T4323] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 258.574650][ C1] gadgetfs: connected [ 258.585664][ T4323] gadgetfs: disconnected [ 258.813380][ C1] gadgetfs: connected [ 258.823305][ T4323] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 259.183642][ T5439] gadgetfs: suspended from state 3 [ 259.190136][ T4323] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 259.221489][ T5439] gadgetfs: disconnected [ 259.232674][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.352426][ T4323] usb 1-1: can't set config #1, error -71 [ 259.541120][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 259.622899][ T4323] usb 1-1: USB disconnect, device number 3 [ 259.816228][ T5453] loop4: detected capacity change from 0 to 256 [ 259.917241][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.928427][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 259.940995][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 259.951706][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 259.964087][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 259.976047][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 259.986092][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 260.184804][ T5440] syz.0.261 (5440) used greatest stack depth: 20528 bytes left [ 261.163165][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.169595][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.344174][ T5463] netlink: 68 bytes leftover after parsing attributes in process `syz.4.269'. [ 263.171567][ T5470] loop1: detected capacity change from 0 to 256 [ 264.960921][ T5481] loop3: detected capacity change from 0 to 512 [ 265.807736][ T4323] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 266.054937][ T4323] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.087036][ T4323] usb 1-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 266.108076][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.122749][ T4323] usb 1-1: Product: syz [ 266.127313][ T4323] usb 1-1: Manufacturer: syz [ 266.132369][ T4323] usb 1-1: SerialNumber: syz [ 266.396150][ T4323] option 1-1:4.0: GSM modem (1-port) converter detected [ 267.596238][ T4323] usb 1-1: USB disconnect, device number 4 [ 268.757216][ T4323] option 1-1:4.0: device disconnected [ 268.822805][ T5501] loop1: detected capacity change from 0 to 512 [ 268.864723][ T5501] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.637341][ T5511] loop2: detected capacity change from 0 to 256 [ 270.119203][ T5514] device syzkaller0 entered promiscuous mode [ 270.658270][ T5524] loop0: detected capacity change from 0 to 128 [ 270.745778][ T26] audit: type=1800 audit(1787187628.318:4): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.286" name="file1" dev="loop0" ino=1048683 res=0 errno=0 [ 271.861697][ T5537] loop3: detected capacity change from 0 to 256 [ 272.174474][ T5537] FAT-fs (loop3): Directory bread(block 64) failed [ 272.183272][ T5537] FAT-fs (loop3): Directory bread(block 65) failed [ 272.190526][ T5537] FAT-fs (loop3): Directory bread(block 66) failed [ 272.197933][ T5537] FAT-fs (loop3): Directory bread(block 67) failed [ 272.205322][ T5537] FAT-fs (loop3): Directory bread(block 68) failed [ 272.212176][ T5537] FAT-fs (loop3): Directory bread(block 69) failed [ 272.219748][ T5537] FAT-fs (loop3): Directory bread(block 70) failed [ 272.226727][ T5537] FAT-fs (loop3): Directory bread(block 71) failed [ 272.233972][ T5537] FAT-fs (loop3): Directory bread(block 72) failed [ 272.240754][ T5537] FAT-fs (loop3): Directory bread(block 73) failed [ 273.671133][ T5552] loop0: detected capacity change from 0 to 128 [ 274.213712][ T5550] ubi0: attaching mtd0 [ 274.220621][ T5550] ubi0: scanning is finished [ 274.236274][ T5552] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.299532][ T5552] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.322759][ T5550] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 274.374652][ T5552] netlink: 'syz.0.292': attribute type 4 has an invalid length. [ 274.516313][ T5550] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 274.832929][ T3598] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 275.082832][ T3598] usb 5-1: Using ep0 maxpacket: 32 [ 275.106851][ T3598] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.250201][ T3598] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 275.353830][ T3598] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 275.387761][ T3598] usb 5-1: config 14 has no interface number 0 [ 275.411673][ T3598] usb 5-1: config 14 has no interface number 1 [ 275.425840][ T5566] loop0: detected capacity change from 0 to 256 [ 275.458060][ T3598] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 275.501966][ T3598] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 275.530965][ T3598] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 275.560489][ T3598] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.742757][ T3598] usb 5-1: config 14 interface 57 has no altsetting 0 [ 275.762689][ T3598] usb 5-1: config 14 interface 228 has no altsetting 0 [ 275.808617][ T3598] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 275.852615][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.909815][ T3598] usb 5-1: Product: syz [ 275.930311][ T3598] usb 5-1: Manufacturer: syz [ 275.950612][ T3598] usb 5-1: SerialNumber: syz [ 276.522001][ T3598] legousbtower 5-1:14.57: interrupt endpoints not found [ 276.711484][ T3598] legousbtower 5-1:14.228: interrupt endpoints not found [ 276.800212][ T5577] loop0: detected capacity change from 0 to 512 [ 276.904423][ T5577] EXT4-fs (loop0): 1 orphan inode deleted [ 276.910763][ T5577] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 276.935630][ T5577] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.974406][ T4327] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 276.993691][ T5031] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 277.013008][ T5031] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 1 [ 277.071885][ T5584] loop3: detected capacity change from 0 to 256 [ 277.168826][ T5584] FAT-fs (loop3): Directory bread(block 64) failed [ 277.175839][ T5584] FAT-fs (loop3): Directory bread(block 65) failed [ 277.183255][ T5584] FAT-fs (loop3): Directory bread(block 66) failed [ 277.189985][ T5584] FAT-fs (loop3): Directory bread(block 67) failed [ 277.197470][ T5584] FAT-fs (loop3): Directory bread(block 68) failed [ 277.204479][ T5584] FAT-fs (loop3): Directory bread(block 69) failed [ 277.212246][ T5584] FAT-fs (loop3): Directory bread(block 70) failed [ 277.219493][ T5584] FAT-fs (loop3): Directory bread(block 71) failed [ 277.226755][ T5584] FAT-fs (loop3): Directory bread(block 72) failed [ 277.234018][ T5584] FAT-fs (loop3): Directory bread(block 73) failed [ 278.015303][ T4327] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.045243][ T4327] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 278.072689][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.141527][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 278.388671][ T5588] netlink: 48 bytes leftover after parsing attributes in process `syz.3.305'. [ 278.528814][ T4327] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 278.567001][ T4327] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 278.587332][ T4327] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0001/input/input14 [ 279.238907][ C0] wacom 0003:056A:033B.0001: Event data for report 2 was too short (9 vs 1) [ 279.446691][ T3598] usb 5-1: USB disconnect, device number 3 [ 279.533005][ T4359] usb 3-1: USB disconnect, device number 2 [ 280.144044][ T5611] loop4: detected capacity change from 0 to 256 [ 283.025154][ T5637] netlink: 48 bytes leftover after parsing attributes in process `syz.2.321'. [ 284.296419][ T5649] loop0: detected capacity change from 0 to 256 [ 286.309136][ T5661] loop0: detected capacity change from 0 to 512 [ 286.363753][ T5661] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 286.725593][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 287.836652][ T5686] loop0: detected capacity change from 0 to 256 [ 287.919940][ T5686] FAT-fs (loop0): Directory bread(block 64) failed [ 287.926987][ T5686] FAT-fs (loop0): Directory bread(block 65) failed [ 287.934177][ T5686] FAT-fs (loop0): Directory bread(block 66) failed [ 287.940996][ T5686] FAT-fs (loop0): Directory bread(block 67) failed [ 287.948299][ T5686] FAT-fs (loop0): Directory bread(block 68) failed [ 287.955179][ T5686] FAT-fs (loop0): Directory bread(block 69) failed [ 287.962247][ T5686] FAT-fs (loop0): Directory bread(block 70) failed [ 287.969669][ T5686] FAT-fs (loop0): Directory bread(block 71) failed [ 287.977183][ T5686] FAT-fs (loop0): Directory bread(block 72) failed [ 287.984031][ T5686] FAT-fs (loop0): Directory bread(block 73) failed [ 288.792022][ T5692] loop3: detected capacity change from 0 to 256 [ 289.918768][ T5704] loop4: detected capacity change from 0 to 256 [ 289.954442][ T5698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.340'. [ 291.547073][ T5722] loop2: detected capacity change from 0 to 256 [ 291.621561][ T5722] FAT-fs (loop2): Directory bread(block 64) failed [ 291.628672][ T5722] FAT-fs (loop2): Directory bread(block 65) failed [ 291.635830][ T5722] FAT-fs (loop2): Directory bread(block 66) failed [ 291.642577][ T5722] FAT-fs (loop2): Directory bread(block 67) failed [ 291.650295][ T5722] FAT-fs (loop2): Directory bread(block 68) failed [ 291.657111][ T5722] FAT-fs (loop2): Directory bread(block 69) failed [ 291.664222][ T5722] FAT-fs (loop2): Directory bread(block 70) failed [ 291.671118][ T5722] FAT-fs (loop2): Directory bread(block 71) failed [ 291.678211][ T5722] FAT-fs (loop2): Directory bread(block 72) failed [ 291.684981][ T5722] FAT-fs (loop2): Directory bread(block 73) failed [ 292.445873][ T5725] loop4: detected capacity change from 0 to 256 [ 293.358342][ T5737] loop3: detected capacity change from 0 to 512 [ 293.445827][ T5737] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 293.485965][ T5744] loop0: detected capacity change from 0 to 512 [ 293.498142][ T5737] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.585865][ T5744] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 293.623881][ T5748] loop2: detected capacity change from 0 to 256 [ 293.634512][ T5744] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 293.651493][ T5750] netlink: 68 bytes leftover after parsing attributes in process `syz.1.356'. [ 293.689051][ T5744] EXT4-fs (loop0): 1 truncate cleaned up [ 295.807368][ T5744] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 295.826218][ T5744] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 295.861981][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 296.165007][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 296.293628][ T5759] netlink: 64 bytes leftover after parsing attributes in process `syz.1.360'. [ 296.304994][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 296.654944][ T5771] loop2: detected capacity change from 0 to 256 [ 297.010431][ T5771] FAT-fs (loop2): Directory bread(block 64) failed [ 297.017447][ T5771] FAT-fs (loop2): Directory bread(block 65) failed [ 297.024614][ T5771] FAT-fs (loop2): Directory bread(block 66) failed [ 297.031575][ T5771] FAT-fs (loop2): Directory bread(block 67) failed [ 297.038757][ T5771] FAT-fs (loop2): Directory bread(block 68) failed [ 297.045616][ T5771] FAT-fs (loop2): Directory bread(block 69) failed [ 297.052853][ T5771] FAT-fs (loop2): Directory bread(block 70) failed [ 297.059629][ T5771] FAT-fs (loop2): Directory bread(block 71) failed [ 297.066811][ T5771] FAT-fs (loop2): Directory bread(block 72) failed [ 297.073825][ T5771] FAT-fs (loop2): Directory bread(block 73) failed [ 298.455458][ T5781] loop2: detected capacity change from 0 to 256 [ 299.046141][ T5788] loop4: detected capacity change from 0 to 1024 [ 299.253504][ T5790] netlink: 68 bytes leftover after parsing attributes in process `syz.2.370'. [ 299.311291][ T5792] loop1: detected capacity change from 0 to 256 [ 299.413036][ T4397] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 300.879163][ T4397] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 300.944722][ T4397] usb 4-1: config 0 has no interface number 0 [ 300.951033][ T4397] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 301.055396][ T4397] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.116428][ T4397] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 301.152751][ T4397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.209149][ T4397] usb 4-1: Product: syz [ 301.223903][ T4397] usb 4-1: Manufacturer: syz [ 301.255271][ T4397] usb 4-1: SerialNumber: syz [ 301.289651][ T4397] usb 4-1: config 0 descriptor?? [ 301.328816][ T5784] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.438177][ T4397] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 301.816173][ T4397] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 302.141745][ T4397] usb 4-1: USB disconnect, device number 2 [ 302.313320][ T4397] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 302.393597][ T4397] cyberjack 4-1:0.69: device disconnected [ 302.654065][ T5813] loop1: detected capacity change from 0 to 256 [ 302.738780][ T5813] FAT-fs (loop1): Directory bread(block 64) failed [ 302.745927][ T5813] FAT-fs (loop1): Directory bread(block 65) failed [ 302.753768][ T5813] FAT-fs (loop1): Directory bread(block 66) failed [ 302.760688][ T5813] FAT-fs (loop1): Directory bread(block 67) failed [ 302.768098][ T5813] FAT-fs (loop1): Directory bread(block 68) failed [ 302.774990][ T5813] FAT-fs (loop1): Directory bread(block 69) failed [ 302.782357][ T5813] FAT-fs (loop1): Directory bread(block 70) failed [ 302.789244][ T5813] FAT-fs (loop1): Directory bread(block 71) failed [ 302.797460][ T5813] FAT-fs (loop1): Directory bread(block 72) failed [ 302.804872][ T5813] FAT-fs (loop1): Directory bread(block 73) failed [ 305.132621][ T5827] loop2: detected capacity change from 0 to 256 [ 305.370213][ T5833] netlink: 68 bytes leftover after parsing attributes in process `syz.1.383'. [ 305.405958][ T5834] loop3: detected capacity change from 0 to 256 [ 305.430781][ T5807] null_blk: disk nullb1 created [ 305.468866][ T5830] device wlan0 entered promiscuous mode [ 307.896219][ T5849] loop0: detected capacity change from 0 to 128 [ 308.106329][ T26] audit: type=1800 audit(1787187665.668:5): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.389" name="file1" dev="loop0" ino=1048724 res=0 errno=0 [ 309.596957][ T5862] loop0: detected capacity change from 0 to 512 [ 309.654665][ T5862] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 309.691903][ T5864] loop3: detected capacity change from 0 to 256 [ 309.740938][ T5868] loop1: detected capacity change from 0 to 256 [ 309.760884][ T5862] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.394: bad orphan inode 131072 [ 309.774896][ T5862] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 309.814610][ T5862] overlayfs: upper fs needs to support d_type. [ 309.952379][ T4270] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /80/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 310.495573][ T5874] netlink: 68 bytes leftover after parsing attributes in process `syz.4.398'. [ 310.652468][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 315.210991][ T5197] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.467794][ T5896] loop4: detected capacity change from 0 to 256 [ 315.475559][ T5197] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.290369][ T5197] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.524300][ T5197] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.633167][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.648279][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.666416][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.677354][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.685725][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 316.694116][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.772845][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 318.795891][ T5914] chnl_net:caif_netlink_parms(): no params data found [ 319.189465][ T5944] overlayfs: overlapping lowerdir path [ 320.053951][ T5958] loop1: detected capacity change from 0 to 512 [ 320.193352][ T5958] EXT4-fs (loop1): Test dummy encryption mode enabled [ 320.200236][ T5958] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 320.247480][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.267868][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.416987][ T5914] device bridge_slave_0 entered promiscuous mode [ 320.455799][ T5958] EXT4-fs (loop1): 1 truncate cleaned up [ 320.461501][ T5958] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 320.766096][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.852622][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 320.921455][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.566596][ T5914] device bridge_slave_1 entered promiscuous mode [ 321.591083][ T5976] loop3: detected capacity change from 0 to 256 [ 322.122316][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.372137][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 322.545790][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.552927][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.564867][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.709559][ T5914] team0: Port device team_slave_0 added [ 322.754219][ T5914] team0: Port device team_slave_1 added [ 322.932695][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 324.031210][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.482732][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.651408][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.054246][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 326.150111][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.160058][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.248171][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.285733][ T5197] device hsr_slave_0 left promiscuous mode [ 326.305361][ T5197] device hsr_slave_1 left promiscuous mode [ 326.374887][ T5197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.460683][ T5197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.486040][ T6028] loop2: detected capacity change from 0 to 256 [ 326.533814][ T5197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.549207][ T5197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.750458][ T5197] device bridge_slave_1 left promiscuous mode [ 326.846686][ T5197] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.956888][ T5197] device bridge_slave_0 left promiscuous mode [ 327.000123][ T5197] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.145946][ T5197] device veth1_macvtap left promiscuous mode [ 327.153229][ T5197] device veth0_macvtap left promiscuous mode [ 327.159841][ T5197] device veth1_vlan left promiscuous mode [ 327.170160][ T5197] device veth0_vlan left promiscuous mode [ 328.208027][ T6045] loop3: detected capacity change from 0 to 512 [ 328.280760][ T6045] EXT4-fs (loop3): Test dummy encryption mode enabled [ 328.310075][ T6045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 328.470862][ T6045] EXT4-fs (loop3): 1 truncate cleaned up [ 328.478925][ T6045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 334.572994][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 335.014619][ T6095] loop3: detected capacity change from 0 to 32768 [ 335.029235][ T6095] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.450 (6095) [ 335.081936][ T6095] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 335.094171][ T6095] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 335.103397][ T6095] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 335.113345][ T6095] BTRFS info (device loop3): use zstd compression, level 3 [ 335.120650][ T6095] BTRFS info (device loop3): force clearing of disk cache [ 335.127905][ T6095] BTRFS info (device loop3): enabling disk space caching [ 335.135074][ T6095] BTRFS info (device loop3): disk space caching is enabled [ 335.322637][ T6095] BTRFS info (device loop3): enabling ssd optimizations [ 335.366265][ T6095] BTRFS info (device loop3): rebuilding free space tree [ 335.418731][ T6095] BTRFS info (device loop3): disabling free space tree [ 335.425926][ T6095] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 335.436160][ T6095] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 335.954361][ T6120] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 335.965348][ T6120] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 336.554911][ T4271] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 336.902637][ T4629] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop3 scanned by udevd (4629) [ 337.629617][ T5197] team0 (unregistering): Port device team_slave_1 removed [ 338.605710][ T5197] team0 (unregistering): Port device team_slave_0 removed [ 339.638116][ T5197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.248195][ T5197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.378675][ T6156] loop4: detected capacity change from 0 to 512 [ 340.466031][ T6156] EXT4-fs (loop4): Test dummy encryption mode enabled [ 340.486660][ T6156] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 340.583597][ T6156] EXT4-fs (loop4): 1 truncate cleaned up [ 340.589375][ T6156] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 342.071600][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 342.938473][ T5197] bond0 (unregistering): Released all slaves [ 344.033715][ T6093] netlink: 48 bytes leftover after parsing attributes in process `syz.2.451'. [ 344.125914][ T5914] device hsr_slave_0 entered promiscuous mode [ 344.166026][ T5914] device hsr_slave_1 entered promiscuous mode [ 344.188966][ T5914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.209838][ T5914] Cannot create hsr debugfs directory [ 344.522227][ T6177] loop1: detected capacity change from 0 to 32768 [ 344.563052][ T6177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.462 (6177) [ 344.705945][ T6177] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.768211][ T6177] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 344.818108][ T6177] BTRFS info (device loop1): using free space tree [ 345.617116][ T5914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 345.695643][ T5914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 345.742429][ T5914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 345.804658][ T5914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 346.327411][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.352145][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 346.361760][ T6177] BTRFS error (device loop1): open_ctree failed: -12 [ 346.370378][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.402326][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.475143][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 346.507890][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.834562][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.841759][ T5197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.910100][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.930845][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.978829][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.988081][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.996683][ T5197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.083233][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.137580][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.147248][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.186871][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.223093][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.263528][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.296179][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.321981][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.383995][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.455475][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.696935][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.401574][ T6236] netlink: 48 bytes leftover after parsing attributes in process `syz.4.474'. [ 349.059220][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.070551][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.148956][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.397721][ T6258] netlink: 'syz.2.477': attribute type 4 has an invalid length. [ 351.005118][ T6266] loop3: detected capacity change from 0 to 256 [ 353.002848][ T6275] sctp: failed to load transform for md5: -4 [ 353.264604][ T6305] FAULT_INJECTION: forcing a failure. [ 353.264604][ T6305] name fail_futex, interval 1, probability 0, space 0, times 1 [ 353.344615][ T6305] CPU: 1 PID: 6305 Comm: syz.3.487 Not tainted syzkaller #0 [ 353.352002][ T6305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.362122][ T6305] Call Trace: [ 353.365447][ T6305] [ 353.368421][ T6305] dump_stack_lvl+0x188/0x24e [ 353.373164][ T6305] ? show_regs_print_info+0x12/0x12 [ 353.378427][ T6305] ? load_image+0x410/0x410 [ 353.383006][ T6305] ? sched_slice+0x430/0x430 [ 353.387650][ T6305] should_fail_ex+0x390/0x4c0 [ 353.392476][ T6305] get_futex_key+0x1b1/0x1000 [ 353.397225][ T6305] ? futex_setup_timer+0xc0/0xc0 [ 353.402223][ T6305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 353.408262][ T6305] ? __lock_acquire+0x7c40/0x7c40 [ 353.413346][ T6305] ? lock_chain_count+0x20/0x20 [ 353.418262][ T6305] futex_wait_setup+0xb8/0x270 [ 353.423081][ T6305] ? futex_wait_multiple+0x920/0x920 [ 353.428409][ T6305] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 353.434386][ T6305] ? _raw_spin_unlock+0x40/0x40 [ 353.439295][ T6305] futex_wait+0x1b8/0x5c0 [ 353.443682][ T6305] ? futex_wait_setup+0x270/0x270 [ 353.448869][ T6305] ? file_end_write+0x156/0x250 [ 353.453783][ T6305] ? vfs_write+0x777/0x9a0 [ 353.458256][ T6305] do_futex+0x310/0x320 [ 353.462451][ T6305] ? __ia32_sys_get_robust_list+0x100/0x100 [ 353.468385][ T6305] __se_sys_futex+0x381/0x410 [ 353.473090][ T6305] ? __x64_sys_futex+0xf0/0xf0 [ 353.478170][ T6305] ? __x64_sys_futex+0x1d/0xf0 [ 353.482961][ T6305] do_syscall_64+0x4c/0xa0 [ 353.487407][ T6305] ? clear_bhb_loop+0x60/0xb0 [ 353.492115][ T6305] ? clear_bhb_loop+0x60/0xb0 [ 353.496827][ T6305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.502769][ T6305] RIP: 0033:0x7f2591d9e0d9 [ 353.507261][ T6305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.526968][ T6305] RSP: 002b:00007f2592c6a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 353.536030][ T6305] RAX: ffffffffffffffda RBX: 00007f2592025fa8 RCX: 00007f2591d9e0d9 [ 353.544045][ T6305] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2592025fa8 [ 353.552048][ T6305] RBP: 00007f2592025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 353.560048][ T6305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.568048][ T6305] R13: 00007f2592026038 R14: 00007ffd16f45820 R15: 00007ffd16f45908 [ 353.576054][ T6305] [ 353.981944][ T6319] netlink: 'syz.4.489': attribute type 4 has an invalid length. [ 354.072539][ T6320] blktrace: Concurrent blktraces are not allowed on sg0 [ 355.095820][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.203960][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.466694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.503533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.565464][ T5914] device veth0_vlan entered promiscuous mode [ 355.587311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.623486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.650816][ T5914] device veth1_vlan entered promiscuous mode [ 355.759168][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.773937][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 355.788879][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.797970][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.824071][ T5914] device veth0_macvtap entered promiscuous mode [ 355.842317][ T5914] device veth1_macvtap entered promiscuous mode [ 355.871990][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.888661][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.962586][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.976100][ T6332] loop4: detected capacity change from 0 to 256 [ 356.046101][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.131056][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.329360][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.395605][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.408180][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.419469][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 356.428165][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.438071][ T5197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.447983][ T6331] netlink: 48 bytes leftover after parsing attributes in process `syz.2.493'. [ 356.470603][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.549991][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.622589][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.671343][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.702563][ T5914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.733692][ T5914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.754061][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.773207][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.819992][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.874071][ T5914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.894998][ T5914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.912621][ T5914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.931620][ T5914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.167133][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.215619][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.247945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 357.538879][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.581620][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.732013][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 358.180088][ T6356] loop2: detected capacity change from 0 to 2048 [ 358.593107][ T6356] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 358.648662][ T6360] o2cb: This node has not been configured. [ 358.712719][ T6356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.732404][ T6360] o2cb: Cluster check failed. Fix errors before retrying. [ 358.775270][ T6360] (syz.5.406,6360,0):user_dlm_register:674 ERROR: status = -22 [ 358.839918][ T6360] (syz.5.406,6360,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 358.869499][ T26] audit: type=1800 audit(1787187716.438:6): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.500" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 359.126136][ T6370] loop4: detected capacity change from 0 to 512 [ 359.488565][ T6370] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 359.498109][ T6370] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.738738][ T6370] syz.4.501 (6370) used greatest stack depth: 20480 bytes left [ 359.812625][ T26] audit: type=1800 audit(1787187717.128:7): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.501" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 359.991558][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 360.805374][ T6387] loop4: detected capacity change from 0 to 256 [ 360.829472][ T6390] loop1: detected capacity change from 0 to 512 [ 360.938958][ T6390] EXT4-fs (loop1): Test dummy encryption mode enabled [ 360.999256][ T6390] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 361.459261][ T6390] EXT4-fs (loop1): 1 truncate cleaned up [ 361.523821][ T6390] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 362.917286][ T6396] netlink: 48 bytes leftover after parsing attributes in process `syz.3.506'. [ 363.187034][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 364.545336][ T6425] loop1: detected capacity change from 0 to 512 [ 364.831011][ T6425] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 364.840567][ T6425] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.982596][ T26] audit: type=1800 audit(1787187722.478:8): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.514" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 365.360410][ T26] audit: type=1326 audit(1787187722.648:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2591d9e0d9 code=0x7ffc0000 [ 365.391539][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 365.538416][ T26] audit: type=1326 audit(1787187722.748:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2591d9e0d9 code=0x7ffc0000 [ 365.654469][ T26] audit: type=1326 audit(1787187722.768:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2591d9e0d9 code=0x7ffc0000 [ 366.355239][ T26] audit: type=1326 audit(1787187722.778:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2591d9e0d9 code=0x7ffc0000 [ 366.415288][ T6441] loop3: detected capacity change from 0 to 256 [ 366.896862][ T26] audit: type=1326 audit(1787187722.888:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2591d9e0d9 code=0x7ffc0000 [ 367.187100][ T6443] loop2: detected capacity change from 0 to 1024 [ 367.202657][ T26] audit: type=1326 audit(1787187722.888:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2591d9e0d9 code=0x7ffc0000 [ 367.229769][ T26] audit: type=1326 audit(1787187722.888:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2591d9e0d9 code=0x7ffc0000 [ 367.255220][ T26] audit: type=1326 audit(1787187722.888:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2591d9e0d9 code=0x7ffc0000 [ 367.279614][ T26] audit: type=1326 audit(1787187722.888:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.3.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2591d9e0d9 code=0x7ffc0000 [ 367.313571][ T6443] EXT4-fs: Ignoring removed bh option [ 367.453944][ T6443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 367.533542][ T6453] loop3: detected capacity change from 0 to 512 [ 367.542891][ T6453] EXT4-fs (loop3): Test dummy encryption mode enabled [ 367.581209][ T6453] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 367.638264][ T6453] EXT4-fs (loop3): 1 truncate cleaned up [ 367.665232][ T6453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 367.771825][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 368.971067][ T6472] loop2: detected capacity change from 0 to 512 [ 368.979203][ T6472] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 369.016103][ T6460] netlink: 48 bytes leftover after parsing attributes in process `syz.4.522'. [ 369.040501][ T6467] gadgetfs: bound to dummy_udc driver [ 369.277176][ T6467] gadgetfs: suspended from state 2 [ 370.332556][ T4359] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 370.403333][ T6477] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 370.591336][ T26] audit: type=1800 audit(1787187727.978:18): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.524" name="file1" dev="loop2" ino=1048747 res=0 errno=0 [ 370.832408][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 370.862983][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 370.918239][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 370.934144][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 370.950347][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 370.966202][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 370.982940][ T6467] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 371.767455][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 371.968497][ T6492] syz.2.526 uses obsolete (PF_INET,SOCK_PACKET) [ 372.161887][ T6498] loop1: detected capacity change from 0 to 512 [ 372.970719][ T6498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 372.980547][ T6498] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.054332][ T26] audit: type=1800 audit(1787187730.628:19): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.527" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 374.811982][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 374.998229][ T6535] netlink: 48 bytes leftover after parsing attributes in process `syz.5.539'. [ 375.021248][ T6539] loop1: detected capacity change from 0 to 512 [ 375.088740][ T6539] EXT4-fs (loop1): Test dummy encryption mode enabled [ 375.130213][ T6539] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 375.202304][ T6539] EXT4-fs (loop1): 1 truncate cleaned up [ 375.223900][ T6539] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 378.415305][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 379.934857][ T6596] loop2: detected capacity change from 0 to 512 [ 380.264658][ T6596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 380.274926][ T6596] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.333247][ T26] audit: type=1800 audit(1787187737.898:20): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.549" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 380.660102][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 381.050516][ T6613] netlink: 48 bytes leftover after parsing attributes in process `syz.2.554'. [ 382.144531][ T6632] loop1: detected capacity change from 0 to 512 [ 382.217654][ T6632] EXT4-fs (loop1): Test dummy encryption mode enabled [ 382.282827][ T6632] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 382.449872][ T6632] EXT4-fs (loop1): 1 truncate cleaned up [ 382.482884][ T6632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 383.977523][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.984286][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.845063][ T6662] loop4: detected capacity change from 0 to 512 [ 386.437271][ T6662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 386.446457][ T6662] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.484454][ T26] audit: type=1800 audit(1787187744.058:21): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.565" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 386.701237][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 387.127234][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 387.289876][ T6674] netlink: 48 bytes leftover after parsing attributes in process `syz.2.570'. [ 388.314325][ T6672] loop4: detected capacity change from 0 to 32768 [ 388.369624][ T6672] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.569 (6672) [ 388.580791][ T6672] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 388.599266][ T6672] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 388.608368][ T6672] BTRFS info (device loop4): setting nodatasum [ 389.422765][ T6672] BTRFS info (device loop4): force zlib compression, level 3 [ 389.430399][ T6672] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 389.439823][ T6672] BTRFS info (device loop4): use lzo compression, level 0 [ 389.448041][ T6672] BTRFS info (device loop4): turning on flush-on-commit [ 389.455261][ T6672] BTRFS info (device loop4): enabling auto defrag [ 389.462184][ T6672] BTRFS info (device loop4): max_inline at 4096 [ 389.468720][ T6672] BTRFS info (device loop4): using free space tree [ 390.129898][ T6672] BTRFS error (device loop4): open_ctree failed: -12 [ 391.089450][ T4629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4629) [ 391.382702][ T4395] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 391.426715][ T6742] device syzkaller0 entered promiscuous mode [ 391.574703][ T4395] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 391.602577][ T4395] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 391.645479][ T4395] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 391.685457][ T4395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.726162][ T4395] usb 2-1: Product: syz [ 391.730417][ T4395] usb 2-1: Manufacturer: syz [ 391.757854][ T4395] usb 2-1: SerialNumber: syz [ 391.784198][ T6725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.801817][ T6725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.843773][ T4395] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 391.873709][ T4395] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 391.905701][ T4395] usbserial_generic 2-1:1.0: generic converter detected [ 391.962710][ T4395] usb 2-1: generic converter now attached to ttyUSB0 [ 392.152224][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 392.173946][ T4395] usb 2-1: USB disconnect, device number 2 [ 392.196782][ T4395] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 392.229637][ T4395] usbserial_generic 2-1:1.0: device disconnected [ 394.726143][ T6789] loop1: detected capacity change from 0 to 4096 [ 395.066909][ T6795] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.446935][ T6789] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 397.433477][ T6822] loop5: detected capacity change from 0 to 128 [ 397.506841][ T6822] EXT4-fs (loop5): Test dummy encryption mode enabled [ 397.923214][ T6822] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 398.126871][ T6822] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 399.163841][ T5914] EXT4-fs (loop5): unmounting filesystem. [ 399.631436][ T6842] gadgetfs: bound to dummy_udc driver [ 401.770166][ T6769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.586'. [ 401.797730][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 401.824931][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 401.859074][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 401.885845][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 402.004979][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 402.090026][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 404.546348][ T6881] netlink: 48 bytes leftover after parsing attributes in process `syz.1.618'. [ 404.940273][ T6893] gadgetfs: bound to dummy_udc driver [ 406.149754][ T6903] loop2: detected capacity change from 0 to 1024 [ 406.247143][ T6903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 406.276753][ T6903] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.303096][ T6876] loop4: detected capacity change from 0 to 32768 [ 406.378454][ T6876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.616 (6876) [ 406.818710][ T6876] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 406.970077][ T6916] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.624: lblock 3 mapped to illegal pblock 3 (length 2) [ 406.987007][ T6876] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 407.082676][ T6876] BTRFS info (device loop4): using free space tree [ 408.249498][ T6876] BTRFS error (device loop4): open_ctree failed: -12 [ 408.365222][ T6903] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.624: lblock 0 mapped to illegal pblock 0 (length 3) [ 408.386999][ T6903] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 408.399455][ T6903] EXT4-fs (loop2): This should not happen!! Data will be lost [ 408.399455][ T6903] [ 408.442650][ T5034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (5034) [ 408.836424][ T6940] device syzkaller0 entered promiscuous mode [ 409.072398][ T11] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:1: lblock 4 mapped to illegal pblock 4 (length 1) [ 409.135860][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 409.150786][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 409.150786][ T11] [ 409.183103][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 415.490732][ T6969] netlink: 48 bytes leftover after parsing attributes in process `syz.4.635'. [ 416.904570][ T7031] loop3: detected capacity change from 0 to 512 [ 416.932972][ T7031] EXT4-fs (loop3): Test dummy encryption mode enabled [ 416.948048][ T7031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 417.148699][ T7031] EXT4-fs (loop3): 1 truncate cleaned up [ 417.190231][ T7031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 419.524266][ T7051] loop2: detected capacity change from 0 to 512 [ 419.708631][ T7051] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 420.065790][ T7058] device syzkaller0 entered promiscuous mode [ 420.412962][ T7061] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 421.540966][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 422.265216][ T7090] loop2: detected capacity change from 0 to 512 [ 422.334375][ T4629] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 426.538285][ T7063] netlink: 48 bytes leftover after parsing attributes in process `syz.4.655'. [ 427.116993][ T7120] loop3: detected capacity change from 0 to 512 [ 427.193919][ T7120] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 428.228869][ T7129] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 428.337534][ T7133] loop5: detected capacity change from 0 to 512 [ 432.779023][ T7192] loop4: detected capacity change from 0 to 512 [ 432.865810][ T4629] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 435.235910][ T7206] device syzkaller0 entered promiscuous mode [ 437.238224][ T7245] loop3: detected capacity change from 0 to 512 [ 437.271144][ T7245] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 437.743171][ T7252] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 438.004892][ T7255] loop1: detected capacity change from 0 to 512 [ 440.788813][ T7279] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.799632][ T7279] hpfs: hpfs_map_sector(): read error [ 441.668881][ T7287] loop2: detected capacity change from 0 to 256 [ 442.457034][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 442.565085][ T7305] loop1: detected capacity change from 0 to 512 [ 442.622639][ T4323] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 442.842694][ T4323] usb 3-1: Using ep0 maxpacket: 8 [ 442.860370][ T4323] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 442.890675][ T4323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 442.930750][ T4323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.941205][ T4323] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.975430][ T4323] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.011092][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.249871][ T4323] usb 3-1: GET_CAPABILITIES returned 0 [ 443.256821][ T4323] usbtmc 3-1:16.0: can't read capabilities [ 443.584226][ T6135] usb 3-1: USB disconnect, device number 3 [ 446.010697][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.017168][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.153729][ T7320] loop2: detected capacity change from 0 to 512 [ 446.173955][ T7320] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 446.426553][ T7320] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 447.880248][ T7328] loop2: detected capacity change from 0 to 32768 [ 447.911034][ T7328] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.715 (7328) [ 447.975793][ T7328] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 447.998525][ T7328] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 448.038613][ T7328] BTRFS info (device loop2): setting nodatasum [ 448.053334][ T7328] BTRFS info (device loop2): force zlib compression, level 3 [ 448.060945][ T7328] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 448.110571][ T7328] BTRFS info (device loop2): use lzo compression, level 0 [ 448.133088][ T7328] BTRFS info (device loop2): turning on flush-on-commit [ 448.140163][ T7328] BTRFS info (device loop2): enabling auto defrag [ 448.163238][ T7328] BTRFS info (device loop2): max_inline at 4096 [ 448.169618][ T7328] BTRFS info (device loop2): using free space tree [ 448.325975][ T7328] BTRFS info (device loop2): enabling ssd optimizations [ 448.518340][ T4272] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 448.567919][ T7356] loop3: detected capacity change from 0 to 256 [ 448.666176][ T7358] loop5: detected capacity change from 0 to 512 [ 449.029901][ T4578] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 450.212812][ T4629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4629) [ 451.364178][ T7393] loop5: detected capacity change from 0 to 128 [ 451.431183][ T7393] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 451.542693][ T7393] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 452.176641][ T7414] device syzkaller0 entered promiscuous mode [ 452.220260][ T5914] EXT4-fs (loop5): unmounting filesystem. [ 453.599674][ T7439] loop5: detected capacity change from 0 to 512 [ 453.708116][ T7439] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 454.116176][ T7439] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 454.535650][ T7447] loop2: detected capacity change from 0 to 256 [ 455.401483][ T7474] loop5: detected capacity change from 0 to 512 [ 455.730627][ T7474] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 455.740158][ T7474] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.862722][ T26] audit: type=1800 audit(1787187813.378:22): pid=7474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.747" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 456.345015][ T5914] EXT4-fs (loop5): unmounting filesystem. [ 456.459000][ T7482] loop2: detected capacity change from 0 to 512 [ 456.586143][ T5034] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 456.604368][ T7484] loop5: detected capacity change from 0 to 512 [ 456.673831][ T7484] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 457.957890][ T7492] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 458.754836][ T7504] loop2: detected capacity change from 0 to 512 [ 458.790654][ T7504] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 458.948787][ T7489] loop1: detected capacity change from 0 to 32768 [ 459.058317][ T7489] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 459.089700][ T7489] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 459.119271][ T7489] BTRFS info (device loop1): using free space tree [ 459.370353][ T7489] BTRFS info (device loop1): enabling ssd optimizations [ 459.473200][ T7504] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 459.705862][ T7489] BTRFS warning (device loop1): get dev_stats failed, device not found [ 459.899273][ T4280] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 460.021201][ T4629] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4629) [ 460.618375][ T7545] loop5: detected capacity change from 0 to 512 [ 460.720222][ T5034] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 461.860522][ T7561] loop2: detected capacity change from 0 to 512 [ 461.902258][ T7561] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.616846][ T7561] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 462.850503][ T7563] loop1: detected capacity change from 0 to 32768 [ 462.881270][ T7563] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 462.919616][ T7563] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 462.967897][ T7563] BTRFS info (device loop1): using free space tree [ 463.231249][ T7563] BTRFS info (device loop1): enabling ssd optimizations [ 463.289252][ T7563] BTRFS warning (device loop1): get dev_stats failed, device not found [ 463.429732][ T4280] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 464.032557][ T6132] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 464.292547][ T6132] usb 6-1: Using ep0 maxpacket: 8 [ 464.314630][ T6132] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 464.342687][ T6132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.378119][ T6132] pvrusb2: Hardware description: Terratec Grabster AV400 [ 464.410288][ T6132] pvrusb2: ********** [ 464.414933][ T6132] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 464.439867][ T7604] loop2: detected capacity change from 0 to 512 [ 464.452601][ T6132] pvrusb2: Important functionality might not be entirely working. [ 464.460532][ T6132] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 464.472560][ T6132] pvrusb2: ********** [ 464.545870][ T4629] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 464.585339][ T2311] pvrusb2: Invalid write control endpoint [ 464.801483][ T6132] usb 6-1: USB disconnect, device number 2 [ 465.461265][ T2311] pvrusb2: Invalid write control endpoint [ 465.479082][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 465.535691][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 465.544816][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 465.556472][ T2311] pvrusb2: Device being rendered inoperable [ 465.566036][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 465.574896][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 465.612497][ T2311] pvrusb2: Attached sub-driver cx25840 [ 465.639806][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 465.694253][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 465.942327][ T7623] loop1: detected capacity change from 0 to 512 [ 465.976726][ T7623] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 466.724114][ T7623] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 467.266988][ T7635] loop5: detected capacity change from 0 to 4096 [ 467.346003][ T7637] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 467.414305][ T7635] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 467.836410][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.854669][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.864816][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.898403][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.908103][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 467.916014][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 468.009685][ T7631] loop1: detected capacity change from 0 to 32768 [ 468.036014][ T7631] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 468.352099][ T5034] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 468.368617][ T4393] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 468.592807][ T4393] usb 6-1: Using ep0 maxpacket: 8 [ 468.609119][ T4393] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 468.725415][ T4393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.058247][ T4393] pvrusb2: Hardware description: Terratec Grabster AV400 [ 469.112719][ T4393] pvrusb2: ********** [ 469.139917][ T4393] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 469.208758][ T4393] pvrusb2: Important functionality might not be entirely working. [ 469.279567][ T4393] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 469.291567][ T4393] pvrusb2: ********** [ 469.323922][ T2311] pvrusb2: Invalid write control endpoint [ 469.529467][ T4393] usb 6-1: USB disconnect, device number 3 [ 469.591888][ T7660] loop2: detected capacity change from 0 to 512 [ 469.599246][ T2311] pvrusb2: Invalid write control endpoint [ 469.615925][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 469.634355][ T7660] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 469.682580][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 469.691696][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 469.721390][ T2311] pvrusb2: Device being rendered inoperable [ 469.745362][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 469.787467][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 469.978901][ T4291] Bluetooth: hci5: command 0x0409 tx timeout [ 470.008300][ T2311] pvrusb2: Attached sub-driver cx25840 [ 470.014006][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 470.024469][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 470.048887][ T7662] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 470.312094][ T4284] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 470.336026][ T4284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 470.346069][ T4284] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 470.368180][ T4284] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 470.379176][ T4284] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 470.386882][ T4284] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 472.445501][ T7675] loop5: detected capacity change from 0 to 4096 [ 472.477113][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 472.612891][ T4284] Bluetooth: hci6: command 0x0409 tx timeout [ 472.705107][ T7683] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 472.811759][ T7675] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 473.088208][ T7665] chnl_net:caif_netlink_parms(): no params data found [ 474.009335][ T7641] chnl_net:caif_netlink_parms(): no params data found [ 474.632632][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 474.694159][ T4284] Bluetooth: hci6: command 0x041b tx timeout [ 474.978830][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.074892][ T7711] loop1: detected capacity change from 0 to 512 [ 475.093018][ T7711] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 475.172749][ T6134] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 475.383058][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.460276][ T7721] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 475.492672][ T6134] usb 3-1: Using ep0 maxpacket: 8 [ 475.499981][ T6134] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 475.535853][ T6134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.548968][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.564008][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.571539][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.580927][ T7665] device bridge_slave_0 entered promiscuous mode [ 475.592845][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.608631][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.621102][ T6134] pvrusb2: Hardware description: Terratec Grabster AV400 [ 475.649767][ T7641] device bridge_slave_0 entered promiscuous mode [ 475.656916][ T6134] pvrusb2: ********** [ 475.661035][ T6134] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 475.680437][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.690250][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.691053][ T6134] pvrusb2: Important functionality might not be entirely working. [ 475.709431][ T7665] device bridge_slave_1 entered promiscuous mode [ 475.719122][ T6134] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 475.739150][ T6134] pvrusb2: ********** [ 475.752305][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.769610][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.791052][ T7641] device bridge_slave_1 entered promiscuous mode [ 475.825531][ T2311] pvrusb2: Invalid write control endpoint [ 475.902715][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.965039][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.035985][ T6134] usb 3-1: USB disconnect, device number 4 [ 476.069892][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.116323][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.192369][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.208574][ T2311] pvrusb2: Invalid write control endpoint [ 476.224752][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 476.238816][ T7665] team0: Port device team_slave_0 added [ 476.265765][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 476.283529][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 476.304444][ T7665] team0: Port device team_slave_1 added [ 476.310891][ T2311] pvrusb2: Device being rendered inoperable [ 476.351543][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 476.390568][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 476.450091][ T2311] pvrusb2: Attached sub-driver cx25840 [ 476.465603][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 476.477660][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.486316][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 476.507933][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.626912][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.680622][ T7641] team0: Port device team_slave_0 added [ 476.692921][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 476.744394][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.751461][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.777744][ T4284] Bluetooth: hci6: command 0x040f tx timeout [ 476.850036][ T7743] loop2: detected capacity change from 0 to 256 [ 477.173038][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.218811][ T7641] team0: Port device team_slave_1 added [ 477.279907][ T7665] device hsr_slave_0 entered promiscuous mode [ 477.307222][ T7665] device hsr_slave_1 entered promiscuous mode [ 477.354737][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.373285][ T7665] Cannot create hsr debugfs directory [ 477.569380][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.581380][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.640923][ T7641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.693760][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.700798][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.782900][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.948290][ T7754] loop5: detected capacity change from 0 to 512 [ 478.038369][ T4629] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 478.229795][ T7641] device hsr_slave_0 entered promiscuous mode [ 478.277441][ T7641] device hsr_slave_1 entered promiscuous mode [ 478.288668][ T7641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.301471][ T7641] Cannot create hsr debugfs directory [ 478.862906][ T4284] Bluetooth: hci6: command 0x0419 tx timeout [ 479.172575][ T26] audit: type=1326 audit(1787187836.738:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7763 comm="syz.2.815" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1fc339e0d9 code=0x0 [ 480.063357][ T7769] loop5: detected capacity change from 0 to 512 [ 480.071922][ T7769] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 480.467479][ T7773] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 480.522829][ T4393] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 480.574149][ T7665] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 480.723000][ T4393] usb 2-1: Using ep0 maxpacket: 8 [ 480.731698][ T4393] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 480.762662][ T4393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.820134][ T4393] pvrusb2: Hardware description: Terratec Grabster AV400 [ 480.837879][ T4393] pvrusb2: ********** [ 480.842114][ T4393] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 480.863379][ T7665] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 480.863714][ T4393] pvrusb2: Important functionality might not be entirely working. [ 480.892633][ T7665] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 480.903649][ T7781] loop5: detected capacity change from 0 to 256 [ 480.935632][ T4393] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 480.959662][ T4393] pvrusb2: ********** [ 481.023443][ T2311] pvrusb2: Invalid write control endpoint [ 481.077033][ T7665] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 481.127872][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 481.203175][ T7788] loop5: detected capacity change from 0 to 512 [ 481.221064][ T7788] EXT4-fs (loop5): Test dummy encryption mode enabled [ 481.230555][ T7788] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 481.237214][ T4393] usb 2-1: USB disconnect, device number 3 [ 481.291407][ T7788] EXT4-fs (loop5): 1 truncate cleaned up [ 481.305970][ T7788] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 481.327426][ T2311] pvrusb2: Invalid write control endpoint [ 481.334048][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 481.454116][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 481.518516][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 481.599121][ T2311] pvrusb2: Device being rendered inoperable [ 481.682173][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 481.817477][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 482.081097][ T2311] pvrusb2: Attached sub-driver cx25840 [ 482.175623][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 482.437848][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 482.811545][ T7804] loop2: detected capacity change from 0 to 512 [ 483.816779][ T41] device hsr_slave_0 left promiscuous mode [ 483.826159][ T5914] EXT4-fs (loop5): unmounting filesystem. [ 484.072874][ T41] device hsr_slave_1 left promiscuous mode [ 484.097710][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.114490][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.159656][ T7812] IPVS: rr: FWM 3 0x00000003 - no destination available [ 484.270974][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.342017][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.430738][ T41] device bridge_slave_1 left promiscuous mode [ 484.491844][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.603887][ T41] device bridge_slave_0 left promiscuous mode [ 484.668243][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.899047][ T7817] loop1: detected capacity change from 0 to 512 [ 484.916249][ T7817] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 484.952870][ T7814] gadgetfs: bound to dummy_udc driver [ 485.030139][ T41] device veth1_macvtap left promiscuous mode [ 485.078639][ T41] device veth0_macvtap left promiscuous mode [ 485.252386][ T41] device veth1_vlan left promiscuous mode [ 485.378669][ T41] device veth0_vlan left promiscuous mode [ 486.168606][ T26] audit: type=1800 audit(1787187843.568:24): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.827" name="file1" dev="loop1" ino=1048783 res=0 errno=0 [ 486.197264][ T7822] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 486.412896][ T7826] loop2: detected capacity change from 0 to 256 [ 486.894802][ T4393] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 487.102177][ T4393] usb 3-1: Using ep0 maxpacket: 8 [ 487.121614][ T4393] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 487.138583][ T4393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.165476][ T4393] pvrusb2: Hardware description: Terratec Grabster AV400 [ 487.190542][ T4393] pvrusb2: ********** [ 487.202478][ T4393] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 487.214375][ T4393] pvrusb2: Important functionality might not be entirely working. [ 487.222260][ T4393] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 487.246157][ T4393] pvrusb2: ********** [ 487.383530][ T2311] pvrusb2: Invalid write control endpoint [ 487.500290][ T2311] pvrusb2: Invalid write control endpoint [ 487.506470][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 487.516423][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 487.524432][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 487.534828][ T2311] pvrusb2: Device being rendered inoperable [ 487.541900][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 487.550225][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 487.568635][ T2311] pvrusb2: Attached sub-driver cx25840 [ 487.574439][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 487.585159][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 487.599876][ T6134] usb 3-1: USB disconnect, device number 5 [ 487.653639][ T41] team0 (unregistering): Port device team_slave_1 removed [ 487.718000][ T41] team0 (unregistering): Port device team_slave_0 removed [ 487.771476][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.830422][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.352676][ T41] bond0 (unregistering): Released all slaves [ 488.388864][ T7841] usb usb7: check_ctrlrecip: process 7841 (syz.2.833) requesting ep 01 but needs 81 [ 488.399021][ T7841] usb usb7: usbfs: process 7841 (syz.2.833) did not claim interface 0 before use getty: ttyS0: read error: Resource temporarily u[ 488.511665][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 488.539753][ T7843] loop2: detected capacity change from 0 to 512 [ 488.565962][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 488.727749][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 488.747066][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 488.770481][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 489.529482][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 489.558198][ T7818] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 489.616998][ T7641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 489.677637][ T7641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 489.774799][ T7641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 489.847685][ T7641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 489.960923][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.067266][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.090653][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.240132][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.348639][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.357872][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.367651][ T5049] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.374888][ T5049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.383777][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.393029][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.467944][ T7863] IPVS: rr: FWM 3 0x00000003 - no destination available [ 490.622458][ T5049] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.629716][ T5049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.180158][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.236132][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 491.246462][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 491.277600][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.330227][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 491.369298][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.384966][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 491.420037][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 491.490709][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 491.534146][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.542794][ T6132] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 491.723853][ T7877] loop1: detected capacity change from 0 to 32768 [ 491.744345][ T7877] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 491.787786][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.830318][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.842643][ T6132] usb 6-1: Using ep0 maxpacket: 8 [ 491.858250][ T6132] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 491.870502][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 491.899330][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.908001][ T6132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.914109][ T7880] gadgetfs: bound to dummy_udc driver [ 491.925893][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.964610][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.080948][ T6132] pvrusb2: Hardware description: Terratec Grabster AV400 [ 492.265476][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.273673][ T6132] pvrusb2: ********** [ 492.277690][ T6132] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 492.354937][ T7641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.366362][ T7641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.372006][ T6132] pvrusb2: Important functionality might not be entirely working. [ 492.412862][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 492.426105][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 492.434538][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 492.443156][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 492.451522][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 492.461369][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 492.470122][ T7884] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 492.480735][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 492.537382][ T6132] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 492.604619][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 492.740970][ T6132] pvrusb2: ********** [ 492.759400][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.766676][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.803237][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 492.812481][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 492.823097][ T2311] pvrusb2: Invalid write control endpoint [ 492.909138][ T4377] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.917106][ T4377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.930222][ T2311] pvrusb2: Invalid write control endpoint [ 492.936310][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 492.946064][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 492.954636][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 492.975416][ T2311] pvrusb2: Device being rendered inoperable [ 493.009849][ T4397] usb 6-1: USB disconnect, device number 4 [ 493.057236][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 493.083488][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 493.117499][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 493.122058][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 493.148811][ T4629] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 493.171154][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 493.209067][ T2311] pvrusb2: Attached sub-driver cx25840 [ 493.215415][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 493.231450][ T7893] loop2: detected capacity change from 0 to 512 [ 493.243916][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 493.263969][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 493.294662][ T7893] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 493.295503][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 493.310030][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 493.410634][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 493.480248][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 493.501248][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 493.608230][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.826798][ T7906] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 494.476822][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 494.524059][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 494.597305][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 495.616065][ T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.139873][ T7931] IPVS: rr: FWM 3 0x00000003 - no destination available [ 496.221952][ T7930] netlink: 68 bytes leftover after parsing attributes in process `syz.2.852'. [ 496.566924][ T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.849548][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 496.910106][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.949153][ T7641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.964925][ T7939] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 496.997705][ T7939] hpfs: hpfs_map_sector(): read error [ 497.089091][ T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.800793][ T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.829834][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.899328][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.909955][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.334753][ T7954] loop5: detected capacity change from 0 to 512 [ 498.384184][ T7954] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 499.061464][ T7958] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 501.132579][ T7988] IPVS: rr: FWM 3 0x00000003 - no destination available [ 501.476192][ T7983] loop5: detected capacity change from 0 to 4096 [ 501.749565][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.785165][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.895217][ T7989] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 502.027392][ T7991] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.056607][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 502.081610][ T7991] hpfs: hpfs_map_sector(): read error [ 502.135107][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.742592][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.873720][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.963478][ T7641] device veth0_vlan entered promiscuous mode [ 502.973163][ T8003] loop1: detected capacity change from 0 to 512 [ 502.990511][ T8003] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 503.350188][ T8007] binder: BINDER_SET_CONTEXT_MGR already set [ 504.174507][ T26] audit: type=1800 audit(1787187861.748:25): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.866" name="file1" dev="loop1" ino=1048791 res=0 errno=0 [ 504.232264][ T8007] binder: 8006:8007 ioctl 4018620d 200000004a80 returned -16 [ 504.264585][ T8011] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 504.369329][ T7641] device veth1_vlan entered promiscuous mode [ 504.569654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 504.597860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 505.023274][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 505.043721][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 505.120664][ T7641] device veth0_macvtap entered promiscuous mode [ 505.182587][ T7641] device veth1_macvtap entered promiscuous mode [ 505.296964][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 505.332176][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 505.404470][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 505.473704][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 506.474397][ T8030] input: syz1 as /devices/virtual/input/input33 [ 506.851722][ T8037] IPVS: rr: FWM 3 0x00000003 - no destination available [ 506.869837][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.879765][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.372194][ T8035] loop5: detected capacity change from 0 to 4096 [ 507.460053][ T8038] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 507.656242][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.671043][ T8040] loop2: detected capacity change from 0 to 512 [ 507.682516][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.702746][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.726742][ T8040] EXT4-fs (loop2): Test dummy encryption mode enabled [ 507.749043][ T8040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 507.760750][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.814742][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.829635][ T8040] EXT4-fs (loop2): 1 truncate cleaned up [ 507.993209][ T8040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 508.416496][ T8048] loop1: detected capacity change from 0 to 512 [ 508.425302][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.539213][ T8048] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 509.570867][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.691927][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.767543][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.941734][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.121845][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.481621][ T7665] device veth0_vlan entered promiscuous mode [ 510.548444][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.600430][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.637600][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.708165][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.738808][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.800547][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.844900][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.728074][ T26] audit: type=1800 audit(1787187869.288:26): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.876" name="file1" dev="loop1" ino=1048793 res=0 errno=0 [ 511.760869][ T8059] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 511.953218][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 511.967818][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 512.181449][ T41] device hsr_slave_0 left promiscuous mode [ 512.242486][ T41] device hsr_slave_1 left promiscuous mode [ 512.343406][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.350916][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.392821][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.442870][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.457061][ T41] device bridge_slave_1 left promiscuous mode [ 512.472768][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.520525][ T41] device bridge_slave_0 left promiscuous mode [ 512.561115][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.964708][ T41] device veth1_macvtap left promiscuous mode [ 512.970869][ T41] device veth0_macvtap left promiscuous mode [ 512.978427][ T41] device veth1_vlan left promiscuous mode [ 512.984603][ T41] device veth0_vlan left promiscuous mode [ 513.441564][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 513.894398][ T8088] IPVS: rr: FWM 3 0x00000003 - no destination available [ 515.235979][ T8093] binder: BINDER_SET_CONTEXT_MGR already set [ 515.242057][ T8093] binder: 8092:8093 ioctl 4018620d 200000004a80 returned -16 [ 515.399408][ T8094] loop5: detected capacity change from 0 to 512 [ 515.664257][ T8094] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 516.123315][ T8102] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 518.333775][ T26] audit: type=1326 audit(1787187875.908:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.5.893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe94ab9e0d9 code=0x0 [ 520.914297][ T8142] loop2: detected capacity change from 0 to 64 [ 521.277266][ T8145] loop5: detected capacity change from 0 to 512 [ 521.309316][ T8145] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 521.340005][ T4272] hfs: request for non-existent node 131072 in B*Tree [ 521.802343][ T8150] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 522.926158][ T8155] loop5: detected capacity change from 0 to 512 [ 523.006845][ T41] team0 (unregistering): Port device team_slave_1 removed [ 523.043508][ T8155] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 523.110073][ T8155] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.903: Unimplemented hash flags: 0x0001 [ 523.198278][ T8155] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.903: Corrupt directory, running e2fsck is recommended [ 523.230600][ T8155] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.903: path /87/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 523.294377][ T41] team0 (unregistering): Port device team_slave_0 removed [ 523.445958][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.519869][ T5914] EXT4-fs (loop5): unmounting filesystem. [ 523.675848][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.368964][ T8181] loop5: detected capacity change from 0 to 512 [ 525.394851][ T8181] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 526.479579][ T41] bond0 (unregistering): Released all slaves [ 526.711208][ T8189] loop2: detected capacity change from 0 to 512 [ 526.766740][ T8189] EXT4-fs (loop2): Test dummy encryption mode enabled [ 526.778265][ T8189] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 526.821867][ T8189] EXT4-fs (loop2): 1 truncate cleaned up [ 526.831366][ T8189] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 526.851596][ T7665] device veth1_vlan entered promiscuous mode [ 527.106708][ T8190] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 527.538547][ T7641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.703557][ T7641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.884920][ T7641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.952504][ T7641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.212352][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.251976][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.304355][ T7665] device veth0_macvtap entered promiscuous mode [ 528.392017][ T7665] device veth1_macvtap entered promiscuous mode [ 528.461258][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 528.493552][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.544842][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.585730][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.650999][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.702028][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.760307][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.835639][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.877649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 528.893720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.946371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.981819][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.040530][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.061148][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.100319][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.120749][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.152078][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.220703][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.261414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 529.279325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.313809][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 529.325262][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 529.334885][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 529.352276][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 529.361962][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 529.369771][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 531.152708][ T41] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.310425][ T8213] chnl_net:caif_netlink_parms(): no params data found [ 531.417602][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 531.491776][ T41] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.933141][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.953107][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.964781][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.975340][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.989536][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 531.997576][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 532.007483][ T8246] loop1: detected capacity change from 0 to 4096 [ 532.155129][ T41] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.220650][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.922'. [ 532.481781][ T41] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.579058][ T8259] loop2: detected capacity change from 0 to 4096 [ 532.634537][ T8259] EXT4-fs (loop2): Test dummy encryption mode enabled [ 532.713071][ T8259] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 532.801934][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.809380][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.825315][ T8213] device bridge_slave_0 entered promiscuous mode [ 532.842070][ T8265] loop5: detected capacity change from 0 to 512 [ 532.887135][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.901037][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.927181][ T8265] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 532.949954][ T8213] device bridge_slave_1 entered promiscuous mode [ 533.213386][ T8213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.492738][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 533.982827][ T26] audit: type=1800 audit(1787187891.558:28): pid=8275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.925" name="file1" dev="loop5" ino=1048801 res=0 errno=0 [ 533.983346][ T8275] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 534.052564][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 534.289356][ T8213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.315881][ T8258] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 534.518232][ T8213] team0: Port device team_slave_0 added [ 534.588137][ T8213] team0: Port device team_slave_1 added [ 534.710555][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 534.784289][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.791321][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.912544][ T8213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.927872][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.929'. [ 534.957201][ T8298] loop1: detected capacity change from 0 to 512 [ 535.038333][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.075587][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.101887][ T8213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.110603][ T8298] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 535.121769][ T8298] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.141848][ T26] audit: type=1800 audit(1787187892.708:29): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.927" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 535.223600][ T8213] device hsr_slave_0 entered promiscuous mode [ 535.296076][ T8213] device hsr_slave_1 entered promiscuous mode [ 535.336724][ T8213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.376237][ T8213] Cannot create hsr debugfs directory [ 535.573179][ T8244] chnl_net:caif_netlink_parms(): no params data found [ 535.583049][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 535.720667][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 536.152495][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 536.262681][ T8324] IPVS: rr: FWM 3 0x00000003 - no destination available [ 537.013081][ T8244] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.020498][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.029636][ T8244] device bridge_slave_0 entered promiscuous mode [ 537.259264][ T8244] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.275875][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.300740][ T8244] device bridge_slave_1 entered promiscuous mode [ 537.422531][ T7365] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 537.479489][ T8244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.520822][ T8244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.628311][ T7365] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 537.662571][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 537.663917][ T7365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.713960][ T7365] usb 3-1: Product: syz [ 537.763353][ T7365] usb 3-1: Manufacturer: syz [ 537.768082][ T7365] usb 3-1: SerialNumber: syz [ 537.845305][ T7365] ums_eneub6250 3-1:1.0: USB Mass Storage device detected [ 537.911896][ T7365] scsi host1: usb-storage 3-1:1.0 [ 537.986408][ T8244] team0: Port device team_slave_0 added [ 538.027122][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 538.057745][ T8244] team0: Port device team_slave_1 added [ 538.191329][ T8244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.206824][ T8244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.242579][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 538.334241][ T8244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.411704][ T41] device hsr_slave_0 left promiscuous mode [ 538.418876][ T41] device hsr_slave_1 left promiscuous mode [ 538.427166][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.436975][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.446560][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.455371][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.464324][ T41] device bridge_slave_1 left promiscuous mode [ 538.470794][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.481255][ T41] device bridge_slave_0 left promiscuous mode [ 538.488181][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.519395][ T8357] loop5: detected capacity change from 0 to 512 [ 538.587735][ T8357] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 538.597287][ T8357] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.619581][ T26] audit: type=1800 audit(1787187896.188:30): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.940" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 538.650079][ T41] device veth1_macvtap left promiscuous mode [ 538.670028][ T41] device veth0_macvtap left promiscuous mode [ 538.682852][ T6132] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 538.689822][ T41] device veth1_vlan left promiscuous mode [ 538.711362][ T41] device veth0_vlan left promiscuous mode [ 538.874747][ T6132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.894061][ T6132] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 538.918131][ T6132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.944636][ T4293] ------------[ cut here ]------------ [ 538.951553][ T4293] URB ffff888143b04000 submitted while active [ 538.961910][ T6132] usb 2-1: config 0 descriptor?? [ 538.978156][ T4293] WARNING: CPU: 1 PID: 4293 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfb8/0x18d0 [ 538.988235][ T4293] Modules linked in: [ 538.992278][ T4293] CPU: 1 PID: 4293 Comm: kworker/1:3 Not tainted syzkaller #0 [ 539.000057][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.010232][ T4293] Workqueue: events_freezable usb_stor_scan_dwork [ 539.016850][ T4293] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 539.022596][ T4293] Code: 2e 8b 44 89 ea e8 29 6d fe 03 e9 bb fb ff ff e8 1e e4 56 fb c6 05 18 65 e1 07 01 48 c7 c7 a0 ec 2e 8b 48 89 de e8 68 6d 22 fb <0f> 0b e9 be f0 ff ff e8 fc e3 56 fb eb 1f e8 f5 e3 56 fb 44 8b 64 [ 539.042418][ T4293] RSP: 0018:ffffc900043179d8 EFLAGS: 00010246 [ 539.048632][ T4293] RAX: 932b0dc223f2ff00 RBX: ffff888143b04000 RCX: ffff888078601e00 [ 539.056732][ T4293] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 539.064847][ T4293] RBP: ffffc90004317b98 R08: ffffc90004317667 R09: 1ffff92000862ecc [ 539.072935][ T4293] R10: dffffc0000000000 R11: fffff52000862ecd R12: 0000000000000c00 [ 539.080967][ T4293] R13: ffff8880569fcee0 R14: ffff888143b04008 R15: dffffc0000000000 [ 539.089047][ T4293] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 539.098107][ T4293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.104799][ T4293] CR2: 00007fa7c31eb7c0 CR3: 0000000033367000 CR4: 00000000003506e0 [ 539.112881][ T4293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 539.120915][ T4293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 539.128989][ T4293] Call Trace: [ 539.132430][ T4293] [ 539.135499][ T4293] ? __init_swait_queue_head+0xa4/0x140 [ 539.141203][ T4293] usb_stor_msg_common+0x29f/0x500 [ 539.146506][ T4293] ? trace_contention_end+0x5f/0x170 [ 539.151966][ T4293] ? usb_stor_blocking_completion+0x40/0x40 [ 539.157996][ T4293] ? mutex_lock_nested+0x10/0x10 [ 539.163179][ T4293] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 539.169233][ T4293] usb_stor_Bulk_max_lun+0x2f9/0x5b0 [ 539.174687][ T4293] usb_stor_scan_dwork+0xf0/0x260 [ 539.179843][ T4293] ? process_one_work+0x7b4/0x1160 [ 539.185263][ T4293] process_one_work+0x8ab/0x1160 [ 539.190365][ T4293] ? worker_detach_from_pool+0x240/0x240 [ 539.196243][ T4293] ? _raw_spin_lock_irq+0xb7/0xf0 [ 539.201347][ T4293] ? _raw_spin_lock_irqsave+0x100/0x100 [ 539.207033][ T4293] ? wq_worker_running+0x97/0x190 [ 539.212222][ T4293] worker_thread+0xaf5/0x12a0 [ 539.217062][ T4293] kthread+0x29d/0x330 [ 539.221193][ T4293] ? worker_clr_flags+0x1a0/0x1a0 [ 539.226341][ T4293] ? kthread_blkcg+0xd0/0xd0 [ 539.230991][ T4293] ret_from_fork+0x1f/0x30 [ 539.235572][ T4293] [ 539.238650][ T4293] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 539.246005][ T4293] CPU: 1 PID: 4293 Comm: kworker/1:3 Not tainted syzkaller #0 [ 539.253512][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.263638][ T4293] Workqueue: events_freezable usb_stor_scan_dwork [ 539.270110][ T4293] Call Trace: [ 539.273434][ T4293] [ 539.276417][ T4293] dump_stack_lvl+0x188/0x24e [ 539.281216][ T4293] ? memcpy+0x3c/0x60 [ 539.285351][ T4293] ? show_regs_print_info+0x12/0x12 [ 539.290611][ T4293] ? load_image+0x410/0x410 [ 539.295214][ T4293] panic+0x2d3/0x710 [ 539.299199][ T4293] ? bpf_jit_dump+0xd0/0xd0 [ 539.303791][ T4293] ? ret_from_fork+0x1f/0x30 [ 539.308451][ T4293] __warn+0x2f8/0x4f0 [ 539.312489][ T4293] ? usb_submit_urb+0xfb8/0x18d0 [ 539.317514][ T4293] ? usb_submit_urb+0xfb8/0x18d0 [ 539.322503][ T4293] report_bug+0x2ba/0x4f0 [ 539.327020][ T4293] ? usb_submit_urb+0xfb8/0x18d0 [ 539.332023][ T4293] handle_bug+0x3a/0x70 [ 539.336256][ T4293] exc_invalid_op+0x16/0x40 [ 539.340819][ T4293] asm_exc_invalid_op+0x16/0x20 [ 539.345847][ T4293] RIP: 0010:usb_submit_urb+0xfb8/0x18d0 [ 539.351439][ T4293] Code: 2e 8b 44 89 ea e8 29 6d fe 03 e9 bb fb ff ff e8 1e e4 56 fb c6 05 18 65 e1 07 01 48 c7 c7 a0 ec 2e 8b 48 89 de e8 68 6d 22 fb <0f> 0b e9 be f0 ff ff e8 fc e3 56 fb eb 1f e8 f5 e3 56 fb 44 8b 64 [ 539.371100][ T4293] RSP: 0018:ffffc900043179d8 EFLAGS: 00010246 [ 539.377224][ T4293] RAX: 932b0dc223f2ff00 RBX: ffff888143b04000 RCX: ffff888078601e00 [ 539.385245][ T4293] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 539.393265][ T4293] RBP: ffffc90004317b98 R08: ffffc90004317667 R09: 1ffff92000862ecc [ 539.401293][ T4293] R10: dffffc0000000000 R11: fffff52000862ecd R12: 0000000000000c00 [ 539.409316][ T4293] R13: ffff8880569fcee0 R14: ffff888143b04008 R15: dffffc0000000000 [ 539.417405][ T4293] ? usb_submit_urb+0xfb8/0x18d0 [ 539.422409][ T4293] ? __init_swait_queue_head+0xa4/0x140 [ 539.428038][ T4293] usb_stor_msg_common+0x29f/0x500 [ 539.433211][ T4293] ? trace_contention_end+0x5f/0x170 [ 539.438549][ T4293] ? usb_stor_blocking_completion+0x40/0x40 [ 539.444514][ T4293] ? mutex_lock_nested+0x10/0x10 [ 539.449503][ T4293] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 539.455549][ T4293] usb_stor_Bulk_max_lun+0x2f9/0x5b0 [ 539.460938][ T4293] usb_stor_scan_dwork+0xf0/0x260 [ 539.466020][ T4293] ? process_one_work+0x7b4/0x1160 [ 539.471193][ T4293] process_one_work+0x8ab/0x1160 [ 539.476238][ T4293] ? worker_detach_from_pool+0x240/0x240 [ 539.481933][ T4293] ? _raw_spin_lock_irq+0xb7/0xf0 [ 539.487021][ T4293] ? _raw_spin_lock_irqsave+0x100/0x100 [ 539.492646][ T4293] ? wq_worker_running+0x97/0x190 [ 539.497733][ T4293] worker_thread+0xaf5/0x12a0 [ 539.502488][ T4293] kthread+0x29d/0x330 [ 539.506603][ T4293] ? worker_clr_flags+0x1a0/0x1a0 [ 539.511677][ T4293] ? kthread_blkcg+0xd0/0xd0 [ 539.516312][ T4293] ret_from_fork+0x1f/0x30 [ 539.520797][ T4293] [ 539.524462][ T4293] Kernel Offset: disabled [ 539.528899][ T4293] Rebooting in 86400 seconds..