last executing test programs: 8m48.87671829s ago: executing program 32 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) userfaultfd(0x80001) syz_io_uring_setup(0x40eb, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffb, 0x6, 0x0, 0x1, 'syz1\x00'}, 0x6, 0x100, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 6m52.899473237s ago: executing program 5 (id=273): openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = gettid() rt_sigqueueinfo(r4, 0x2a, &(0x7f0000000400)={0x3d, 0xb804, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) 6m51.491479863s ago: executing program 5 (id=274): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8010001, 0x3a10, 0x200004, 0x2003}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6m40.942463736s ago: executing program 5 (id=286): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') linkat(r0, &(0x7f0000000080)='./mnt\x00', r0, &(0x7f0000000040)='./mnt/file0\x00', 0x0) 6m40.401251644s ago: executing program 5 (id=287): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc4240, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 6m39.211728614s ago: executing program 5 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$msr(r4, &(0x7f0000000200)=""/231, 0xe7) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)}]) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x22, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r7}) 6m37.263990859s ago: executing program 5 (id=291): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8010001, 0x3a10, 0x200004, 0x2003}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6m22.090064076s ago: executing program 33 (id=291): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8010001, 0x3a10, 0x200004, 0x2003}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3m35.073366429s ago: executing program 3 (id=548): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r1, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe(&(0x7f0000000000)) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}]) creat(&(0x7f0000000080)='./file0\x00', 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 3m32.507410455s ago: executing program 3 (id=554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xded}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={0x0, 0x17f}, &(0x7f0000001180)=ANY=[], &(0x7f0000000a00)="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", 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 3m29.021919041s ago: executing program 3 (id=556): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x402000784853bb, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{0x0}, {0x0}, {&(0x7f0000004600)=""/4089, 0xff9}], 0x3}, 0x40000002}], 0x1, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x1ff, 0x12) openat$cgroup_type(r5, &(0x7f0000000080), 0x2, 0x0) 3m21.223574973s ago: executing program 3 (id=570): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000fd713fa9f93678bd000000000000000000000000fdff00000000000000000000000000000014ad98e3c87a4c92afe41fb91ec9a820bd6f7af9bd0cca1ff162c3d5669bcf51326e9e1e535da3766e07d2cdf30bdd61cdcaff1184fd43cfd52c1e3cbee0189d022e23955395cfbfc3c794b02385693fc0ccb2"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3m20.590043294s ago: executing program 3 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x386c, &(0x7f0000000080)={0x0, 0xfde3, 0x100, 0x3, 0x239}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00201, 0x300000d, 0x10, r1, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0xfc92) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000080), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) timer_settime(0x0, 0x0, 0x0, 0x0) 3m18.686210147s ago: executing program 3 (id=576): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x13ca78670876f9b3, 0x0, 0x25dfdc01, {{@in=@broadcast, @in=@local, 0x4e22, 0x0, 0x4e25, 0x800, 0x2, 0x20, 0x20, 0xc6}, {0x20000, 0x7, 0x0, 0x0, 0x7, 0x2}, {0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) 3m3.508830725s ago: executing program 34 (id=576): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x13ca78670876f9b3, 0x0, 0x25dfdc01, {{@in=@broadcast, @in=@local, 0x4e22, 0x0, 0x4e25, 0x800, 0x2, 0x20, 0x20, 0xc6}, {0x20000, 0x7, 0x0, 0x0, 0x7, 0x2}, {0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) 2m33.590803845s ago: executing program 4 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$msr(r3, &(0x7f0000000200)=""/231, 0xe7) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)}]) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x22, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r6}) 2m31.835197674s ago: executing program 4 (id=658): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=')\x00', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)="f5", 0x1}], 0x1}}], 0x2, 0x0) 2m28.626064661s ago: executing program 4 (id=666): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x8858, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x260, &(0x7f0000000fc0)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$nfs4(0x0, 0x0, 0x0, 0x208000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) mount(0x0, 0x0, 0x0, 0x100020, 0x0) 2m27.019627505s ago: executing program 4 (id=670): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$eJzs3M1vG0UbAPBnN7HbvO3bhFK+Wj4CBVEhSPoF9MABEEgcioQEBzhaSahK3YKaINEqEimHckIIiTviyL/ACS4IcQGJK9yrShXqhZaT0dq7iZ1s7Ka1Y8C/n+T2md21Zx7PjjO7EyeAkTWd/ZNE7I6I3yJislXsPGC69d+N68tzN68vzyXRaLz5R9I87s/ry3PFocXzdrUXIokDJfUuXrh4plavL5zPy7NLZz+YXbxw8ZnTZ6v5phPHjx15/rmjz/Ylz12R5tFr73zx+snPOvJfl0efTHfb+USj0efqhuv/bfH4ENvB1ozl/VVpjv/JGGvrvcl49ZPVwsdDaiAwMI1Go7Fr890rDeA/LInOsiEPo6L4QV9c/5ZdB784sNnH8F17qXUBlOV9I3+09oyv3jGorLu+7afpiHh75a+vskcM5j4EAECH77L5z9PZbGd5Lpt7rM0/0ri37bg9+drQVETcFRF7I+LuOBf7IuKeiOax90XE/Vuou9q5SNKcZm6c/6RX7yjBHrL53wv52lbn/K+Y/cXUWLN0oVWISvLu6frC4fw9ORSVHVn5SJc6vn/l188329c+/8seWf3FXDBvx9XxHZ3Pma8t1W4/407XLkXsHy/LP1ldCUgi4oGI2F/2AmnvOk4/9c2Dm+2bnumVfxd9WGhqfB3xZKv/V2Jd/oWkc32ydmrh1MK5oyeK9cnZnVFfODxbnBUb/fTL5TfKtqe31P+DlfX//0rP/9X8p5L29drFrddx+fdPN72mma7kwRbO/5XaUq2avNWMi8Xij2pLS+ePRFSTk61Gt28/uvbcolwcn+V/6GD5+N8ba+/EgYjITuKHIuLhiHgk77tHI+KxiDjYJf8fX378vfXbJor8u/d/tcvL9kWW//yW+n8tqEbnlrTkmCwYO/PDtx2VTq2Fef43u3/+HW9Gh/Itt/L5t7EV5cGdvn8AAADwb5BGxO5I0pnVOE1nZlq/w7+vtfSd+fDcfOs7AlNRSYs7XZNt90OL3xFolS9FRKOtXF84FmnzvvGXYxPN8szc+/X5oWUNRP5dnbLxn7kyNuzWAQPnC1swuox/GF1dx39l+9oBbL8N47/rmN8x0LYA26vk5//EMNoBbL+y+b+/9wOjYd34t+wHI8T9fxhdxj+MLuMfRtLiRPT+knzXoHil23x6r2Ay4k5beGZn2a6fS/+mQf+CqAzqlf8ZQaQDr6I62FNrYEGStXlP9D74ytCbunkwvM8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfvo7AAD//1yDywo=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) getegid() mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 2m26.683616976s ago: executing program 4 (id=672): r0 = socket(0x2, 0x80805, 0x0) sendto$inet(r0, &(0x7f00000003c0)="d41597e5a5", 0x5, 0x0, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) 2m25.714557288s ago: executing program 4 (id=680): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x5, 0x12, "00020000da6ee03eb8cd35491f52ccd4"}, {0x5, 0x9, "02270e000042eb"}, {0x3, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x10, "73bc23f9ffffffa30900a301c846"}, {0x1, 0xa, "c8f46976e7ff7864"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 2m22.887598373s ago: executing program 35 (id=680): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010102, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x5, 0x12, "00020000da6ee03eb8cd35491f52ccd4"}, {0x5, 0x9, "02270e000042eb"}, {0x3, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x10, "73bc23f9ffffffa30900a301c846"}, {0x1, 0xa, "c8f46976e7ff7864"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 1m5.582242008s ago: executing program 6 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_io_uring_setup(0x386c, &(0x7f0000000080)={0x0, 0xfde3, 0x100, 0x3, 0x239}, 0x0, &(0x7f0000000000), &(0x7f0000000180)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) write$FUSE_ATTR(r2, 0x0, 0xfc92) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a000000010000000000000104000000200000010500000001000004040000001300000001000000000000001700000002"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f0000000080), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d7e4eedb488c71471fd97624000000190001090000f7b3fd0100d0eb25fabff0fe9f92b6a05208dca3d0d62548282ff9a975"], 0x24}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) open$dir(&(0x7f0000000100)='./file0\x00', 0x80, 0x16b) 1m1.546339502s ago: executing program 6 (id=912): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b86, 0x0, {0x9, 0x21, 0x1, 0xc0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) 53.981110845s ago: executing program 6 (id=935): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1200480, &(0x7f0000000c80)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d230bcdf0198eb5db4c8f478a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc7f2ffffffffffffffac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00890053f0c1f445f647b4bc8a25c4034a8daaa628ca43c050cd50e106364b1107e4611e13da2b569f95c23298cf63accdad4ee080cdf70830ae4b9acb5c271e3a74ac50472f262dcaa8bbc0ffb1e42dce64ea2a35098349335d9a924a8516c21f9dcc31dc1a50e189835ef0e7cd52c638fd1d903dd71117470b3094219aba13e01272a2ad0086d3e598a0b253dfab39acaa8705cbc569bc212b119045c1955370dbc1d7"], 0x9, 0xc1e, &(0x7f0000001240)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5b6, &(0x7f0000001340)="$eJzs3U9oHPUeAPDv7GaTJg1NC+/Be48eynsP+qB0k/TPs3pqr2Kh0IPgpYbNNoRssiG70SYETO9F7EFUeqk3PXhUPHgQL4IXr14Uz4LYoND0oCv7L2022ZjUbjZmPx+Yzfxmfjvf329mv7Mzw0w2gJ51qvqSivhnRFxLIkaemNcXjZmn6vXW11Zyj9ZWcklUKtd/SiKJiIdrK7lm/aTx92hErEbEPyLii0zEmdTWuKWl5ZmJQiG/0CiPlmfnR0tLy2enZyem8lP5ufPPPX/x0oWL4+fG2zc+s7e+3vnu7pt3vn7x/t0PPzq5mnt7IonLMdyY92Q/nqX6OsnE5ZbpFzoRrIuSbjeAp5Ju5Hk1lf4eI5FuZP12KiP72jSgwyoDEZW9SFb3VB04yJK95T9waDSPA6rnv81h0wFCurPHHz9eqZ+AVOOuN4b6nL76tYk4Ujs3Gfo52XRmUj3fPN7ZptEDVm9HxFhf39bPf9L4/D29sWfRQDrq8yv1DbV1+6c29j+xzf5nuHnt9E9q7v/Wt+z/HsdPt9n/XdtljF9f+f69tvFvR/xr2/jJRvykJf6J4dpV4Xh1l/HvvfzppXbzKu9HnI7t4zclO18fHr05XciP1V+3jfHZ6ZMv7NT/oTbx69dsj9S+ZrZb//PtFtpyvfuTLz/+9+oO8f/3n523f+v6rxqMiLfaxW9x4uEHLz1ZHt8UP3lQPQrYy/aPRv/v7zL+/y+f+rbNrMFdLgIAAAAAAAAAANhGqnYvW5LKboynUtls/Rnev8VQqlAslc/cLC7OTdbveTsemVTzTquRiIHjkUmq5fHG/bjN8rmW8vnmfcTpwVo5mysWJrvcdwAAAAAAAAAAAAAAAAAAADgojrY8//9Luvb8f+vPVQOHVfuf/AYOO/kPvWtz/icRA11rCrDPfP9Dz6rIf+hd8h96l/yH3iX/oXfJf+hRQ/Ifepn8BwAAAAAAAAAAAAAAAAAAAAAAAACAjrjWHxFXr1Yera3kquXJvqXFmeJrZyfzpZns7GIumysuzGenisWpQj6bK87+0fIKxeL8WMwt3hot50vl0dLS8o3Z4uJc+cb07MRU/kY+sy+9AgAAAAAAAAAAAAAAAAAAgL+W4dqQpLIRkaqNp1LZjYf0M8nN6UJ+LCKORcQ36cxAtTze3SYDAAAAAAAAAAAAAAAAAADAoVNaWp6ZKBTyCz0y0rdlylftK0fE6rNtRnWJe35X898xHJR1eFBG+iNiN5WP7VwnHQejO/sykm58lt6IiJ0rd3GnBAAAAAAAAAAAAAAAAAAAPerxQ7+7fcdvG2ODnWoUAAAAAAAAAAAAAAAAAAAA9JzUD0lEVIfTI/8dbp3bn6zXfjK8PyJev3f9nVsT5fLCeHX6g43p5Xcb0891o/3AbjXztJnHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGOlpeWZiUIhv9DBkW73EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBp/B4AAP//aF3Pmw==") connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) shutdown(0xffffffffffffffff, 0x1) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000100)={0x1, "5c86ec5be8229b8161a8cf546e747ea1be5e316459495d621990b65cf7429eaca4d345ebc7becf19266b1b5572351095a0a6b013a01f6f968bc24573daba97be", {0x8, 0x40000000000e}}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000100)=0x3) 48.615663145s ago: executing program 6 (id=948): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4) 47.967868346s ago: executing program 6 (id=949): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, r2, 0x200000) symlink(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 45.566015667s ago: executing program 6 (id=956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_io_uring_setup(0x386c, &(0x7f0000000080)={0x0, 0xfde3, 0x100, 0x3, 0x239}, 0x0, &(0x7f0000000000), &(0x7f0000000180)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) write$FUSE_ATTR(r2, 0x0, 0xfc92) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f0000000080), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d7e4eedb488c71471fd97624000000190001090000f7b3fd0100d0eb25fabff0fe9f92b6a05208dca3d0d62548282ff9a975"], 0x24}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) open$dir(&(0x7f0000000100)='./file0\x00', 0x80, 0x16b) 41.461778174s ago: executing program 2 (id=970): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b86, 0x0, {0x9, 0x21, 0x1, 0xc0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) 38.124041376s ago: executing program 2 (id=981): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0x3}}, 0x2e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r5, 0x40047438, &(0x7f0000000040)) 37.766119637s ago: executing program 2 (id=983): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) 37.565429845s ago: executing program 2 (id=986): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001880)='./bus\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000001180)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 34.879659634s ago: executing program 2 (id=991): socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 34.070641361s ago: executing program 2 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 33.622563596s ago: executing program 36 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 30.331472616s ago: executing program 37 (id=956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_io_uring_setup(0x386c, &(0x7f0000000080)={0x0, 0xfde3, 0x100, 0x3, 0x239}, 0x0, &(0x7f0000000000), &(0x7f0000000180)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) write$FUSE_ATTR(r2, 0x0, 0xfc92) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f0000000080), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d7e4eedb488c71471fd97624000000190001090000f7b3fd0100d0eb25fabff0fe9f92b6a05208dca3d0d62548282ff9a975"], 0x24}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) open$dir(&(0x7f0000000100)='./file0\x00', 0x80, 0x16b) 15.488764443s ago: executing program 8 (id=1033): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000", 0x3}], 0x1}}], 0x1, 0x4000041) 13.074104723s ago: executing program 8 (id=1036): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x48c01, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x6, 0x7fff]) 10.131477421s ago: executing program 8 (id=1040): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x3}, 0xe) 9.613381499s ago: executing program 7 (id=1042): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}}], 0x1, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 9.080590437s ago: executing program 8 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x392ffda13ecd2e50}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 9.071290837s ago: executing program 0 (id=1045): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x11}, @generic={0x50}, @initr0, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 8.110573289s ago: executing program 0 (id=1046): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0xfffffffffffffffc, {0x2, 0x1, 0x4}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000", 0x3}], 0x1}}], 0x1, 0x4000041) 7.603199396s ago: executing program 7 (id=1047): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 6.692868177s ago: executing program 0 (id=1048): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09c5f6df33c3f0e17300000000000055090100000000009500000000000000bf91000000000000b70200000200000085"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x100a, &(0x7f0000001e00)=""/4106, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 5.814902006s ago: executing program 0 (id=1049): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80900) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 5.324831772s ago: executing program 1 (id=1002): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000300)}, 0x20) 4.874007387s ago: executing program 7 (id=1050): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 4.861478687s ago: executing program 9 (id=996): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) 4.405555713s ago: executing program 8 (id=1051): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) 4.401289373s ago: executing program 1 (id=1002): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000300)}, 0x20) 3.926739029s ago: executing program 9 (id=996): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) 3.484000814s ago: executing program 7 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c"], 0xe0}}, 0x0) 3.471228114s ago: executing program 1 (id=1002): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000300)}, 0x20) 3.02246844s ago: executing program 8 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x800) 3.02216446s ago: executing program 9 (id=996): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) 2.535302405s ago: executing program 7 (id=1054): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4) 2.524995446s ago: executing program 1 (id=1002): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000300)}, 0x20) 2.09618604s ago: executing program 0 (id=1055): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500feffff00feffffff07000000", @ANYRES32=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x4040010) 2.081009901s ago: executing program 9 (id=996): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) 1.615095266s ago: executing program 7 (id=1056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x392ffda13ecd2e50}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 1.614449976s ago: executing program 1 (id=1002): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000300)}, 0x20) 1.127181462s ago: executing program 9 (id=996): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) 588.038761ms ago: executing program 0 (id=1057): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x1010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x100182, 0x488) write$rfkill(r0, &(0x7f0000000080)={0x9, 0x6, 0xff, 0x1}, 0xffffff66) 587.712971ms ago: executing program 1 (id=1002): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000300)}, 0x20) 0s ago: executing program 9 (id=996): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendto$inet(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): neric 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 481.174392][ T26] hid-generic 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 481.193367][ T26] hid-generic 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 481.202730][ T6857] fido_id[6857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 481.240726][ T26] hid-generic 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 481.262308][ T26] hid-generic 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 481.280339][ T26] hid-generic 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 481.311934][ T26] hid-generic 0003:1044:7A4D.0006: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0 [ 481.498377][ T26] usb 3-1: USB disconnect, device number 8 [ 482.611285][ T6864] fido_id[6864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 483.067157][ T131] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 483.279588][ T131] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 483.299015][ T131] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.329402][ T131] usb 7-1: Product: syz [ 483.333651][ T131] usb 7-1: Manufacturer: syz [ 483.334429][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 483.359881][ T131] usb 7-1: SerialNumber: syz [ 483.386137][ T131] usb 7-1: config 0 descriptor?? [ 483.463445][ T6883] loop2: detected capacity change from 0 to 1024 [ 483.544088][ T6883] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.560558][ T26] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 483.595672][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 483.603843][ T6883] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.626260][ T26] usb 4-1: Product: syz [ 483.629323][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.634559][ T26] usb 4-1: Manufacturer: syz [ 483.650244][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.661669][ T6884] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.681032][ T131] dvb_usb_dtv5100: probe of 7-1:0.0 failed with error -71 [ 483.719334][ T131] usb 7-1: USB disconnect, device number 7 [ 483.736893][ T6884] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.758465][ T6883] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.789259][ T6883] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.821508][ T6883] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.831685][ T6883] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.858889][ T6883] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.894258][ T6883] hfsplus: request for non-existent node 33423360 in B*Tree [ 484.304255][ T131] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 484.334970][ T26] scsi host1: uas [ 484.411633][ C0] usb 4-1: stat urb: no pending cmd for uas-tag 78 [ 485.501889][ T131] usb 7-1: Using ep0 maxpacket: 16 [ 485.512286][ T26] usb 4-1: USB disconnect, device number 3 [ 485.515929][ C0] usb 4-1: cmd cmplt err -71 [ 485.524568][ T26] scsi 1:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 485.532978][ T26] scsi 1:0:0:0: tag#16 CDB: Inquiry 12 00 00 00 24 00 [ 485.573166][ T131] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 485.612888][ T131] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.637277][ T131] usb 7-1: Product: syz [ 485.641535][ T131] usb 7-1: Manufacturer: syz [ 485.654040][ T131] usb 7-1: SerialNumber: syz [ 485.672129][ T131] usb 7-1: config 0 descriptor?? [ 485.878587][ T131] dvb_usb_dtv5100: probe of 7-1:0.0 failed with error -71 [ 486.721287][ T131] usb 7-1: USB disconnect, device number 8 [ 489.308465][ T6914] loop6: detected capacity change from 0 to 128 [ 489.386216][ T6914] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 489.395995][ T6914] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 489.617623][ T5737] EXT4-fs (loop6): unmounting filesystem. [ 489.692572][ T6920] loop2: detected capacity change from 0 to 1024 [ 490.821634][ T6920] hfsplus: request for non-existent node 33423360 in B*Tree [ 490.856672][ T6920] hfsplus: request for non-existent node 33423360 in B*Tree [ 490.942188][ T6926] hfsplus: request for non-existent node 33423360 in B*Tree [ 490.958660][ T6926] hfsplus: request for non-existent node 33423360 in B*Tree [ 491.054434][ T6920] hfsplus: request for non-existent node 33423360 in B*Tree [ 491.061814][ T6920] hfsplus: request for non-existent node 33423360 in B*Tree [ 491.186971][ T6920] hfsplus: request for non-existent node 33423360 in B*Tree [ 493.034618][ T6920] hfsplus: request for non-existent node 33423360 in B*Tree [ 493.054779][ T6926] hfsplus: request for non-existent node 33423360 in B*Tree [ 493.062162][ T6926] hfsplus: request for non-existent node 33423360 in B*Tree [ 493.868944][ T6934] kvm [6932]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 493.939096][ T6934] kvm [6932]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 494.010564][ T6934] kvm [6932]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 494.057685][ T6934] kvm [6932]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 494.121350][ T6934] kvm [6932]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 494.215860][ T6934] kvm [6932]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 494.250835][ T6934] kvm [6932]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 494.269149][ T6934] kvm [6932]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 498.438075][ T6966] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 500.378546][ T6979] loop2: detected capacity change from 0 to 1024 [ 500.568125][ T6979] hfsplus: request for non-existent node 33423360 in B*Tree [ 500.588460][ T6979] hfsplus: request for non-existent node 33423360 in B*Tree [ 500.630124][ T6979] hfsplus: request for non-existent node 33423360 in B*Tree [ 500.649222][ T6979] hfsplus: request for non-existent node 33423360 in B*Tree [ 500.703815][ T6979] hfsplus: request for non-existent node 33423360 in B*Tree [ 500.746860][ T6979] hfsplus: request for non-existent node 33423360 in B*Tree [ 500.826848][ T6979] hfsplus: request for non-existent node 33423360 in B*Tree [ 500.859816][ T6979] hfsplus: request for non-existent node 33423360 in B*Tree [ 500.921488][ T6979] hfsplus: request for non-existent node 33423360 in B*Tree [ 500.960786][ T6979] hfsplus: request for non-existent node 33423360 in B*Tree [ 501.407382][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.413764][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.537976][ T6990] loop6: detected capacity change from 0 to 1024 [ 501.574394][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 501.629845][ T6990] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 501.705815][ T6990] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 2: comm syz.6.573: lblock 2 mapped to illegal pblock 2 (length 1) [ 501.784318][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 501.790957][ T26] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 501.898320][ T6990] EXT4-fs (loop6): Remounting filesystem read-only [ 501.917814][ T6990] __quota_error: 44 callbacks suppressed [ 501.917834][ T6990] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 501.966464][ T26] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.023640][ T6990] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 48: comm syz.6.573: lblock 0 mapped to illegal pblock 48 (length 1) [ 502.044323][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 502.051018][ T26] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 502.114553][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.055756][ T26] usb 5-1: config 0 descriptor?? [ 503.088907][ T6990] EXT4-fs (loop6): Remounting filesystem read-only [ 503.114272][ T6990] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 503.261229][ T6990] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.573: Failed to acquire dquot type 0 [ 503.495408][ T26] input: HID 04e7:0030 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04E7:0030.0007/input/input13 [ 503.521488][ T6990] EXT4-fs (loop6): Remounting filesystem read-only [ 503.548277][ T6990] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 503.589484][ T6990] EXT4-fs (loop6): Remounting filesystem read-only [ 503.619436][ T6990] EXT4-fs error (device loop6): ext4_evict_inode:281: inode #11: comm syz.6.573: mark_inode_dirty error [ 503.647864][ T26] elo 0003:04E7:0030.0007: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 505.257834][ T14] usb 5-1: USB disconnect, device number 4 [ 505.284357][ T6990] EXT4-fs (loop6): Remounting filesystem read-only [ 505.348679][ T6990] EXT4-fs warning (device loop6): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 505.449764][ T6990] EXT4-fs (loop6): 1 orphan inode deleted [ 506.486711][ T6990] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 506.525425][ T4466] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 506.671259][ T4466] EXT4-fs (loop6): Remounting filesystem read-only [ 506.688895][ T7002] fido_id[7002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 506.734433][ T4466] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 506.743209][ T4466] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 0 [ 506.819834][ T4466] EXT4-fs (loop6): Remounting filesystem read-only [ 506.925606][ T5737] EXT4-fs (loop6): unmounting filesystem. [ 506.931734][ T5737] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 507.077520][ T5737] EXT4-fs (loop6): Remounting filesystem read-only [ 507.106581][ T5737] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 507.170811][ T5737] EXT4-fs (loop6): Remounting filesystem read-only [ 507.217742][ T5737] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 507.339882][ T5737] EXT4-fs (loop6): Remounting filesystem read-only [ 508.859017][ T7020] loop0: detected capacity change from 0 to 2048 [ 508.910877][ T7020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 508.924406][ T7020] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.353035][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 519.702420][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 519.712905][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 519.726964][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 519.735295][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 519.742860][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 519.750566][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.269019][ T7083] loop4: detected capacity change from 0 to 512 [ 520.327456][ T7083] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 521.854317][ T4284] Bluetooth: hci5: command 0x0409 tx timeout syzkaller syzkaller login: [ 523.702076][ T7071] chnl_net:caif_netlink_parms(): no params data found [ 523.884305][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 524.098806][ T4466] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.373423][ T4466] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.716886][ T4466] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.939828][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.962647][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.000069][ T7071] device bridge_slave_0 entered promiscuous mode [ 525.097284][ T4466] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.159860][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.173935][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.227365][ T7071] device bridge_slave_1 entered promiscuous mode [ 525.429481][ T7071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.495266][ T7071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.648015][ T7071] team0: Port device team_slave_0 added [ 525.715882][ T7071] team0: Port device team_slave_1 added [ 525.954287][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 526.794484][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.802209][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.155752][ T7071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.034249][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 528.949490][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.987950][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.114219][ T7071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.400394][ T7071] device hsr_slave_0 entered promiscuous mode [ 529.455597][ T7071] device hsr_slave_1 entered promiscuous mode [ 529.753674][ T7071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.940255][ T7071] Cannot create hsr debugfs directory [ 532.909478][ T7071] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 532.959121][ T7071] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 533.020770][ T7071] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 533.103497][ T7071] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 533.462637][ T7071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.531716][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 533.556109][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 533.606027][ T7071] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.652626][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 533.666816][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.712504][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.719745][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.813688][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 533.852122][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 533.955964][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.060080][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.067335][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.133197][ T7187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.626'. [ 534.143300][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.234751][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.271296][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.304641][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.370624][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.390042][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 534.533989][ T4326] logitech-hidpp-device 0005:046D:B012.0008: unknown main item tag 0x1 [ 534.555916][ T4326] logitech-hidpp-device 0005:046D:B012.0008: Device not connected [ 534.647998][ T7071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.710237][ T7071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.752604][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 534.780763][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.802651][ T7191] netlink: 277 bytes leftover after parsing attributes in process `syz.4.630'. [ 534.816190][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.831582][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 534.845562][ T5756] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 534.874914][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 535.064854][ T4466] device hsr_slave_0 left promiscuous mode [ 535.084585][ T4466] device hsr_slave_1 left promiscuous mode [ 535.164373][ T5756] usb 3-1: Using ep0 maxpacket: 32 [ 535.178281][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.214425][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.238573][ T5756] usb 3-1: device descriptor read/all, error -71 [ 535.271051][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.331617][ T7199] Zero length message leads to an empty skb [ 535.351436][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.379247][ T4466] device bridge_slave_1 left promiscuous mode [ 535.420940][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.494441][ T2172] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 535.502095][ T4466] device bridge_slave_0 left promiscuous mode [ 535.514484][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.537420][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 536.989055][ T4466] device veth1_macvtap left promiscuous mode [ 537.001140][ T4466] device veth0_macvtap left promiscuous mode [ 537.009395][ T4466] device veth1_vlan left promiscuous mode [ 537.021497][ T4466] device veth0_vlan left promiscuous mode [ 537.050655][ T2172] usb 7-1: Using ep0 maxpacket: 8 [ 537.075930][ T2172] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 537.104001][ T2172] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.129807][ T7209] loop4: detected capacity change from 0 to 256 [ 537.137541][ T2172] usb 7-1: config 0 interface 0 has no altsetting 0 [ 537.164655][ T2172] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 537.184705][ T2172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.202873][ T2172] usb 7-1: config 0 descriptor?? [ 537.622245][ T2172] usbhid 7-1:0.0: can't add hid device: -71 [ 537.633905][ T2172] usbhid: probe of 7-1:0.0 failed with error -71 [ 537.656164][ T2172] usb 7-1: USB disconnect, device number 9 [ 538.298283][ T7216] loop0: detected capacity change from 0 to 164 [ 538.397499][ T7216] rock: directory entry would overflow storage [ 538.414632][ T7214] loop6: detected capacity change from 0 to 8192 [ 538.431298][ T7216] rock: sig=0x4f50, size=4, remaining=3 [ 538.449909][ T7216] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 538.894101][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 539.379384][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 539.735188][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.912847][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.141481][ T4466] bond0 (unregistering): Released all slaves [ 541.249852][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 541.384526][ T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 542.554325][ T7] usb 7-1: Using ep0 maxpacket: 32 [ 542.571065][ T7] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 542.684332][ T7] usb 7-1: config 0 interface 0 has no altsetting 0 [ 542.754277][ T7] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 543.115427][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.237109][ T7] usb 7-1: config 0 descriptor?? [ 544.891715][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.903861][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.926539][ T7] usbhid 7-1:0.0: can't add hid device: -71 [ 544.932631][ T7] usbhid: probe of 7-1:0.0 failed with error -71 [ 544.970653][ T7071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.044596][ T7] usb 7-1: USB disconnect, device number 10 [ 546.250058][ T7272] loop4: detected capacity change from 0 to 256 [ 547.219855][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 547.240257][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.287990][ T7277] loop2: detected capacity change from 0 to 2048 [ 547.371745][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.397237][ T7277] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 547.440966][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.520018][ T7071] device veth0_vlan entered promiscuous mode [ 547.537324][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.601723][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.668379][ T7071] device veth1_vlan entered promiscuous mode [ 548.339718][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 548.457315][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 548.505287][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 548.536122][ T7288] sd 0:0:1:0: device reset [ 548.999605][ T7071] device veth0_macvtap entered promiscuous mode [ 549.069928][ T7071] device veth1_macvtap entered promiscuous mode [ 550.322642][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.364202][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.425612][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.782100][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.822067][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.844235][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.861144][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.875676][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.887301][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.895779][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 551.905294][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 551.950232][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.987499][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 552.127679][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.195117][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.224439][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.274339][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.294255][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.334419][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.365026][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.399947][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.450785][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.465879][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.480574][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.530462][ T7071] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.588933][ T7071] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.614212][ T7071] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.623594][ T7071] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.795097][ T7309] loop0: detected capacity change from 0 to 8192 [ 552.846855][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.885247][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.934528][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 553.024575][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.032976][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.085482][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 553.095957][ T7314] loop6: detected capacity change from 0 to 512 [ 553.174898][ T7314] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 553.278812][ T7314] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 553.294499][ T7314] ext4 filesystem being remounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 553.610354][ T7327] loop4: detected capacity change from 0 to 512 [ 553.687848][ T5737] EXT4-fs (loop6): unmounting filesystem. [ 555.196071][ T7338] loop4: detected capacity change from 0 to 512 [ 555.206128][ T7338] EXT4-fs: inline encryption not supported [ 555.236575][ T7338] EXT4-fs (loop4): Test dummy encryption mode enabled [ 555.243450][ T7338] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 555.333538][ T7338] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.670: bad orphan inode 131083 [ 555.348218][ T7338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 555.715417][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 555.968580][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.674'. [ 556.198256][ T7357] bridge0: port 3(syz_tun) entered blocking state [ 556.216434][ T7357] bridge0: port 3(syz_tun) entered disabled state [ 556.267574][ T7357] device syz_tun entered promiscuous mode [ 556.325747][ T7357] bridge0: port 3(syz_tun) entered blocking state [ 556.332778][ T7357] bridge0: port 3(syz_tun) entered forwarding state [ 557.584421][ T7359] bridge0: port 3(syz_tun) entered disabled state [ 557.591579][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.599001][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.281781][ T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.483177][ T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.724507][ T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.863163][ T7390] loop7: detected capacity change from 0 to 512 [ 559.907010][ T7390] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 559.928956][ T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.957304][ T7392] #! [ 560.891549][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 560.902239][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 560.910526][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 560.921045][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 560.929927][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 560.937887][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 561.223737][ T7404] loop7: detected capacity change from 0 to 8192 [ 561.352037][ T7404] loop7: p1 p2 p3 p4 [ 561.386758][ T7404] loop7: p1 start 65792 is beyond EOD, truncated [ 561.414486][ T7404] loop7: p2 size 590592 extends beyond EOD, truncated [ 561.481570][ T7404] loop7: p3 start 524042 is beyond EOD, truncated [ 561.544445][ T7404] loop7: p4 start 131072 is beyond EOD, truncated [ 562.969214][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.975620][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.994404][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 564.351972][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 564.870975][ T7400] chnl_net:caif_netlink_parms(): no params data found [ 565.074509][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 565.345476][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.361601][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.402897][ T7400] device bridge_slave_0 entered promiscuous mode [ 565.480907][ T7445] loop2: detected capacity change from 0 to 512 [ 565.515749][ T7447] FAULT_INJECTION: forcing a failure. [ 565.515749][ T7447] name failslab, interval 1, probability 0, space 0, times 0 [ 565.535689][ T7445] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 565.585641][ T7447] CPU: 0 PID: 7447 Comm: syz.6.697 Not tainted syzkaller #0 [ 565.593025][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.603132][ T7447] Call Trace: [ 565.606450][ T7447] [ 565.609424][ T7447] dump_stack_lvl+0x188/0x24e [ 565.614177][ T7447] ? show_regs_print_info+0x12/0x12 [ 565.619454][ T7447] ? load_image+0x410/0x410 [ 565.624021][ T7447] ? __might_sleep+0xd0/0xd0 [ 565.628663][ T7447] ? __lock_acquire+0x7c40/0x7c40 [ 565.633752][ T7447] should_fail_ex+0x390/0x4c0 [ 565.638490][ T7447] should_failslab+0x5/0x20 [ 565.643030][ T7447] slab_pre_alloc_hook+0x59/0x300 [ 565.648113][ T7447] ? nf_tables_commit+0x6ec/0x74c0 [ 565.653275][ T7447] __kmem_cache_alloc_node+0x4f/0x270 [ 565.658737][ T7447] ? nf_tables_commit+0x6ec/0x74c0 [ 565.663913][ T7447] kmalloc_trace+0x26/0xe0 [ 565.668397][ T7447] nf_tables_commit+0x6ec/0x74c0 [ 565.673419][ T7447] ? nf_tables_rule_release+0x360/0x360 [ 565.679053][ T7447] ? __lock_acquire+0x7c40/0x7c40 [ 565.684221][ T7447] ? nf_tables_newtable+0xce0/0x1680 [ 565.689585][ T7447] ? __nla_parse+0x3c/0x50 [ 565.694050][ T7447] nfnetlink_rcv+0x1aae/0x2470 [ 565.698881][ T7447] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 565.704468][ T7447] ? ref_tracker_free+0x682/0x830 [ 565.709544][ T7447] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.714782][ T7447] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 565.720298][ T7447] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.725533][ T7447] netlink_unicast+0x7ad/0x920 [ 565.730376][ T7447] netlink_sendmsg+0x8ad/0xbd0 [ 565.735188][ T7447] ? netlink_getsockopt+0x550/0x550 [ 565.740411][ T7447] ? apparmor_socket_sendmsg+0x8a/0x330 [ 565.746429][ T7447] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 565.751768][ T7447] ? security_socket_sendmsg+0x7c/0xa0 [ 565.757259][ T7447] ? netlink_getsockopt+0x550/0x550 [ 565.762487][ T7447] ____sys_sendmsg+0x5ed/0x9a0 [ 565.767391][ T7447] ? __sys_sendmsg_sock+0x30/0x30 [ 565.772447][ T7447] ? __import_iovec+0x306/0x510 [ 565.777338][ T7447] ? import_iovec+0x6f/0xa0 [ 565.781876][ T7447] ___sys_sendmsg+0x2a2/0x360 [ 565.786600][ T7447] ? __sys_sendmsg+0x2a0/0x2a0 [ 565.791444][ T7447] __se_sys_sendmsg+0x1c3/0x2b0 [ 565.796330][ T7447] ? __x64_sys_sendmsg+0x80/0x80 [ 565.801314][ T7447] ? lockdep_hardirqs_on+0x94/0x140 [ 565.806544][ T7447] do_syscall_64+0x4c/0xa0 [ 565.810992][ T7447] ? clear_bhb_loop+0x60/0xb0 [ 565.815736][ T7447] ? clear_bhb_loop+0x60/0xb0 [ 565.820452][ T7447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.826378][ T7447] RIP: 0033:0x7f516839e159 [ 565.830816][ T7447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.850450][ T7447] RSP: 002b:00007f5169304028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.858893][ T7447] RAX: ffffffffffffffda RBX: 00007f5168625fa0 RCX: 00007f516839e159 [ 565.866973][ T7447] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000004 [ 565.874987][ T7447] RBP: 00007f516843503b R08: 0000000000000000 R09: 0000000000000000 [ 565.882995][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.891004][ T7447] R13: 00007f5168626038 R14: 00007f5168625fa0 R15: 00007ffe5c5d3518 [ 565.899019][ T7447] [ 566.029737][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.043383][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.082979][ T7400] device bridge_slave_1 entered promiscuous mode [ 566.470568][ T33] device hsr_slave_0 left promiscuous mode [ 566.554423][ T33] device hsr_slave_1 left promiscuous mode [ 566.645213][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.667384][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.713414][ T7462] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.761099][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.792853][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.822352][ T33] device bridge_slave_1 left promiscuous mode [ 566.844940][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.859523][ T33] device bridge_slave_0 left promiscuous mode [ 566.870552][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.901932][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 567.927707][ T33] device veth1_macvtap left promiscuous mode [ 567.933816][ T33] device veth0_macvtap left promiscuous mode [ 567.943196][ T33] device veth1_vlan left promiscuous mode [ 567.966285][ T33] device veth0_vlan left promiscuous mode [ 569.954538][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 570.000278][ T7487] loop0: detected capacity change from 0 to 512 [ 570.008240][ T7487] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 570.900975][ T33] team0 (unregistering): Port device team_slave_1 removed [ 571.020719][ T33] team0 (unregistering): Port device team_slave_0 removed [ 571.123363][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.205458][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.441624][ T2172] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 571.714784][ T2172] usb 3-1: Using ep0 maxpacket: 8 [ 571.728149][ T2172] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 572.085597][ T2172] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.104388][ T2172] usb 3-1: config 0 interface 0 has no altsetting 0 [ 572.111097][ T2172] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 572.124418][ T2172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.143979][ T2172] usb 3-1: config 0 descriptor?? [ 572.564540][ T2172] usbhid 3-1:0.0: can't add hid device: -71 [ 572.572791][ T2172] usbhid: probe of 3-1:0.0 failed with error -71 [ 572.628713][ T2172] usb 3-1: USB disconnect, device number 11 [ 572.887267][ T33] bond0 (unregistering): Released all slaves [ 573.054667][ T7489] bridge0: port 3(syz_tun) entered blocking state [ 573.082738][ T7489] bridge0: port 3(syz_tun) entered disabled state [ 573.124580][ T7489] device syz_tun entered promiscuous mode [ 573.149046][ T7489] bridge0: port 3(syz_tun) entered blocking state [ 573.155687][ T7489] bridge0: port 3(syz_tun) entered forwarding state [ 573.988669][ T7490] bridge0: port 3(syz_tun) entered disabled state [ 573.995405][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.005408][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.175091][ T7400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.230621][ T7400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.353021][ T7400] team0: Port device team_slave_0 added [ 574.388613][ T7400] team0: Port device team_slave_1 added [ 574.389079][ T7525] loop2: detected capacity change from 0 to 512 [ 574.456350][ T7525] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 574.507543][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.544013][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.014446][ T7400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.658101][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.684309][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.751342][ T7400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.872229][ T7400] device hsr_slave_0 entered promiscuous mode [ 577.023115][ T7400] device hsr_slave_1 entered promiscuous mode [ 577.035776][ T7400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.104103][ T7400] Cannot create hsr debugfs directory [ 577.274249][ T4367] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 577.468821][ T4367] usb 8-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 577.519039][ T4367] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 577.549411][ T4367] usb 8-1: Product: syz [ 577.553682][ T4367] usb 8-1: Manufacturer: syz [ 577.771426][ T7400] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 577.841787][ T4367] scsi host1: uas [ 577.853501][ T7400] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 577.935412][ T7400] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 577.996248][ T7400] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 578.017276][ C0] usb 8-1: stat urb: status -71 [ 578.022298][ C0] usb 8-1: cmd cmplt err -71 [ 578.060471][ T7239] usb 8-1: USB disconnect, device number 2 [ 578.097971][ T7239] scsi 1:0:0:0: tag#12 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 578.105897][ T7239] scsi 1:0:0:0: tag#12 CDB: Inquiry 12 00 00 00 24 00 [ 578.545518][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.611011][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.750654][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.765200][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.865068][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 578.945442][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.968372][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.975563][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.067469][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 579.125114][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 579.174347][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.181514][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.234565][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 579.255097][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 579.295293][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 579.351138][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 579.394770][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 579.457205][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 579.485756][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 579.526133][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 579.580388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 579.615024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 579.651049][ T7400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.739577][ T7400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 579.755594][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 579.776509][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 580.248838][ T7583] loop6: detected capacity change from 0 to 512 [ 580.342007][ T7583] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 581.478736][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 581.511592][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 581.554668][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.854232][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 582.056453][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 582.080304][ T7608] netlink: 'syz.6.744': attribute type 10 has an invalid length. [ 582.095086][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.144193][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 582.147172][ T7608] device bridge_slave_1 left promiscuous mode [ 582.214961][ T26] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 582.218777][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.241015][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.269870][ T26] usb 1-1: Product: syz [ 582.288067][ T26] usb 1-1: Manufacturer: syz [ 582.325584][ T26] usb 1-1: SerialNumber: syz [ 582.663094][ T26] usb 1-1: USB disconnect, device number 6 [ 583.549871][ T7633] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 583.758325][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.7.753'. [ 583.857876][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 583.875109][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 583.900441][ T7642] loop0: detected capacity change from 0 to 2048 [ 583.936952][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 583.988334][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 583.992065][ T7642] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 584.026883][ T7400] device veth0_vlan entered promiscuous mode [ 584.044489][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 584.065943][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 584.132696][ T7400] device veth1_vlan entered promiscuous mode [ 584.247648][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 584.273943][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 584.291909][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 584.312743][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 584.354980][ T7400] device veth0_macvtap entered promiscuous mode [ 584.456270][ T7400] device veth1_macvtap entered promiscuous mode [ 584.537233][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.603785][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.667766][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.712182][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.755881][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.807221][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.857943][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.880677][ T7657] sd 0:0:1:0: device reset [ 585.074570][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.123052][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.200187][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 585.221841][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 585.264732][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 585.283489][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 585.316303][ T7667] sock: sock_timestamping_bind_phc: sock not bind to device [ 585.337034][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.364992][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.417736][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.482179][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.519896][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.558455][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.578695][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.609713][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.625866][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.668528][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 585.702031][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 585.765195][ T7400] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.783129][ T7682] raw_sendmsg: syz.0.764 forgot to set AF_INET. Fix it! [ 585.807664][ T7400] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.868286][ T7400] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.892303][ T7400] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.956413][ T7678] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 586.290896][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 586.303333][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.328102][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.787642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 587.855594][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.880892][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.901922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 588.114386][ T4353] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 588.331431][ T4353] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.351055][ T4353] usb 1-1: config 0 interface 0 has no altsetting 0 [ 588.379648][ T4353] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 588.420538][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.445227][ T7239] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 588.470462][ T4353] usb 1-1: config 0 descriptor?? [ 588.644240][ T7239] usb 9-1: Using ep0 maxpacket: 32 [ 588.657041][ T7239] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 588.697066][ T7239] usb 9-1: config 0 interface 0 has no altsetting 0 [ 588.732256][ T7239] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 588.769347][ T7239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.816857][ T7239] usb 9-1: config 0 descriptor?? [ 588.930828][ T4353] usbhid 1-1:0.0: can't add hid device: -71 [ 588.950281][ T4353] usbhid: probe of 1-1:0.0 failed with error -71 [ 588.987055][ T4353] usb 1-1: USB disconnect, device number 7 [ 589.203320][ T7726] loop7: detected capacity change from 0 to 128 [ 589.251655][ T7726] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 589.261457][ T7726] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.291162][ T7726] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.776: No space for directory leaf checksum. Please run e2fsck -D. [ 589.323497][ T7726] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.776: checksumming directory block 0 [ 589.362993][ T7726] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.776: No space for directory leaf checksum. Please run e2fsck -D. [ 589.380088][ T7726] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.776: checksumming directory block 0 [ 589.405279][ T7726] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.776: No space for directory leaf checksum. Please run e2fsck -D. [ 589.490015][ T7726] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.776: checksumming directory block 0 [ 589.562298][ T7731] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.776: No space for directory leaf checksum. Please run e2fsck -D. [ 589.635080][ T7731] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.776: checksumming directory block 0 [ 589.664193][ T7738] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.776: No space for directory leaf checksum. Please run e2fsck -D. [ 589.709603][ T7738] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.776: checksumming directory block 0 [ 589.749529][ T7726] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.776: No space for directory leaf checksum. Please run e2fsck -D. [ 589.825114][ T7726] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.776: checksumming directory block 0 [ 589.983755][ T7737] loop2: detected capacity change from 0 to 8192 [ 590.065757][ T7071] EXT4-fs (loop7): unmounting filesystem. [ 590.298940][ T7752] netlink: 20 bytes leftover after parsing attributes in process `syz.7.781'. [ 592.065532][ T7239] usbhid 9-1:0.0: can't add hid device: -71 [ 592.106948][ T7239] usbhid: probe of 9-1:0.0 failed with error -71 [ 592.138640][ T7239] usb 9-1: USB disconnect, device number 2 [ 592.620157][ T7769] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 592.702565][ T7776] loop6: detected capacity change from 0 to 128 [ 592.922918][ T7776] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 592.934778][ T7776] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.993534][ T7776] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.791: No space for directory leaf checksum. Please run e2fsck -D. [ 593.046747][ T7776] EXT4-fs error (device loop6): __ext4_find_entry:1696: inode #2: comm syz.6.791: checksumming directory block 0 [ 593.098743][ T7786] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.791: No space for directory leaf checksum. Please run e2fsck -D. [ 593.140505][ T7786] EXT4-fs error (device loop6): __ext4_find_entry:1696: inode #2: comm syz.6.791: checksumming directory block 0 [ 593.182985][ T7776] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.791: No space for directory leaf checksum. Please run e2fsck -D. [ 593.264274][ T7776] EXT4-fs error (device loop6): __ext4_find_entry:1696: inode #2: comm syz.6.791: checksumming directory block 0 [ 593.301735][ T7784] loop0: detected capacity change from 0 to 8192 [ 593.348127][ T7786] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.791: No space for directory leaf checksum. Please run e2fsck -D. [ 593.473852][ T7786] EXT4-fs error (device loop6): __ext4_find_entry:1696: inode #2: comm syz.6.791: checksumming directory block 0 [ 593.525057][ T7776] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.791: No space for directory leaf checksum. Please run e2fsck -D. [ 593.605584][ T7776] EXT4-fs error (device loop6): __ext4_find_entry:1696: inode #2: comm syz.6.791: checksumming directory block 0 [ 593.653718][ T7786] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.791: No space for directory leaf checksum. Please run e2fsck -D. [ 593.713062][ T7786] EXT4-fs error (device loop6): __ext4_find_entry:1696: inode #2: comm syz.6.791: checksumming directory block 0 [ 594.182699][ T5737] EXT4-fs (loop6): unmounting filesystem. [ 594.324344][ T2172] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 595.824364][ T2172] usb 9-1: Using ep0 maxpacket: 8 [ 595.925140][ T2172] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 596.060726][ T2172] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.128108][ T2172] usb 9-1: config 0 interface 0 has no altsetting 0 [ 596.154481][ T2172] usb 9-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 596.184043][ T2172] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.223788][ T2172] usb 9-1: config 0 descriptor?? [ 597.560808][ T2172] usbhid 9-1:0.0: can't add hid device: -71 [ 597.577188][ T2172] usbhid: probe of 9-1:0.0 failed with error -71 [ 597.639577][ T2172] usb 9-1: USB disconnect, device number 3 [ 598.047204][ T7836] loop8: detected capacity change from 0 to 2048 [ 598.106224][ T7836] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 599.194568][ T7836] sd 0:0:1:0: device reset [ 601.049630][ T4353] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 601.254197][ T4353] usb 7-1: Using ep0 maxpacket: 32 [ 601.261388][ T4353] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 601.313175][ T4353] usb 7-1: config 0 has no interface number 0 [ 601.340472][ T4353] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 601.383190][ T4353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.433131][ T4353] usb 7-1: Product: syz [ 601.453401][ T4353] usb 7-1: Manufacturer: syz [ 601.483872][ T4353] usb 7-1: SerialNumber: syz [ 601.515812][ T4353] usb 7-1: config 0 descriptor?? [ 601.534224][ T4353] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 602.582684][ T4353] usb 7-1: qt2_attach - failed to power on unit: -71 [ 602.710641][ T4353] quatech2: probe of 7-1:0.51 failed with error -71 [ 602.805023][ T4353] usb 7-1: USB disconnect, device number 11 [ 603.623884][ T7894] loop0: detected capacity change from 0 to 2048 [ 603.675397][ T7894] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 604.028546][ T7902] sd 0:0:1:0: device reset [ 606.163497][ T7913] loop0: detected capacity change from 0 to 256 [ 607.094243][ T5756] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 607.306893][ T5756] usb 9-1: Using ep0 maxpacket: 8 [ 607.318836][ T5756] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 607.391108][ T5756] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.451491][ T5756] usb 9-1: config 0 interface 0 has no altsetting 0 [ 607.492118][ T5756] usb 9-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 607.532281][ T5756] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.451084][ T5756] usb 9-1: config 0 descriptor?? [ 608.965175][ T5756] usbhid 9-1:0.0: can't add hid device: -71 [ 608.987959][ T5756] usbhid: probe of 9-1:0.0 failed with error -71 [ 609.037672][ T5756] usb 9-1: USB disconnect, device number 4 [ 612.106554][ T7972] loop0: detected capacity change from 0 to 512 [ 612.346616][ T7972] EXT4-fs (loop0): 1 truncate cleaned up [ 612.352354][ T7972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 612.504731][ T7972] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.839: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 614.090976][ T7977] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 614.569176][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 614.658362][ T8003] loop6: detected capacity change from 0 to 512 [ 614.768509][ T8003] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 614.810149][ T8003] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.210956][ T5737] EXT4-fs (loop6): unmounting filesystem. [ 617.345199][ T2172] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 617.584447][ T2172] usb 7-1: device descriptor read/64, error -71 [ 617.864266][ T2172] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 618.954197][ T2172] usb 7-1: device descriptor read/64, error -71 [ 619.084844][ T2172] usb usb7-port1: attempt power cycle [ 619.814391][ T2172] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 619.828295][ T5756] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 619.864901][ T2172] usb 7-1: device descriptor read/8, error -71 [ 620.026245][ T5756] usb 1-1: unable to get BOS descriptor or descriptor too short [ 620.062744][ T5756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.093643][ T5756] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 620.124242][ T5756] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.144261][ T2172] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 620.194857][ T2172] usb 7-1: device descriptor read/8, error -71 [ 620.209767][ T5756] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 620.259825][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.294222][ T5756] usb 1-1: Product: syz [ 620.298473][ T5756] usb 1-1: Manufacturer: syz [ 620.314356][ T2172] usb usb7-port1: unable to enumerate USB device [ 620.343895][ T5756] usb 1-1: SerialNumber: syz [ 620.732317][ T5756] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 620.784401][ T5756] usb 1-1: USB disconnect, device number 8 [ 621.025061][ T4447] udevd[4447]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.843941][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.850318][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.996791][ T8093] loop2: detected capacity change from 0 to 512 [ 625.046608][ T8093] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 628.120814][ T8129] loop0: detected capacity change from 0 to 2048 [ 628.220212][ T8129] loop0: p1 < > p4 [ 628.234678][ T8129] loop0: p4 size 8388608 extends beyond EOD, truncated [ 628.330381][ T8129] EXT4-fs (loop0p1): unable to read superblock [ 628.634233][ T4321] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 628.683824][ T8141] loop0: detected capacity change from 0 to 512 [ 628.709264][ T6690] udevd[6690]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 628.720457][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 628.735827][ T8141] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 628.834397][ T4321] usb 7-1: Using ep0 maxpacket: 32 [ 628.844314][ T5756] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 628.856373][ T4321] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 628.898202][ T6690] udevd[6690]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 628.906246][ T4321] usb 7-1: config 0 has no interface number 0 [ 628.933579][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 629.016636][ T5756] usb 8-1: device descriptor read/64, error -71 [ 629.068897][ T4321] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 629.096125][ T4321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.149781][ T4321] usb 7-1: Product: syz [ 629.170417][ T4321] usb 7-1: Manufacturer: syz [ 629.190860][ T4321] usb 7-1: SerialNumber: syz [ 629.284242][ T5756] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 629.306557][ T4321] usb 7-1: config 0 descriptor?? [ 629.352420][ T4321] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 629.444353][ T5756] usb 8-1: device descriptor read/64, error -71 [ 629.536891][ T4321] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 629.574566][ T5756] usb usb8-port1: attempt power cycle [ 629.580864][ T4321] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 629.964940][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 629.973577][ T4321] usb 7-1: USB disconnect, device number 16 [ 629.984262][ T5756] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 630.035997][ T4321] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 630.054932][ T5756] usb 8-1: device descriptor read/8, error -71 [ 630.134816][ T4321] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 631.490077][ T8160] autofs4:pid:8160:autofs_fill_super: called with bogus options [ 631.520348][ T4321] quatech2 7-1:0.51: device disconnected [ 631.605034][ T5756] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 631.739534][ T8160] loop0: detected capacity change from 0 to 512 [ 631.774308][ T5756] usb 8-1: device descriptor read/8, error -71 [ 631.867177][ T8160] EXT4-fs (loop0): orphan cleanup on readonly fs [ 631.894877][ T5756] usb usb8-port1: unable to enumerate USB device [ 631.962236][ T8160] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 633.403924][ T8160] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 633.446946][ T8160] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.891: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 633.557862][ T8182] loop8: detected capacity change from 0 to 2048 [ 633.564686][ T8160] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.891: couldn't read orphan inode 13 (err -117) [ 633.584602][ T8182] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 633.647337][ T8160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 634.246592][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 634.445522][ T8182] sd 0:0:1:0: device reset [ 634.529661][ T8192] device gre1 entered promiscuous mode [ 636.891342][ T8215] loop8: detected capacity change from 0 to 4096 [ 637.094493][ T8215] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 637.311041][ T7400] EXT4-fs (loop8): unmounting filesystem. [ 638.965562][ T8238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.910'. [ 639.073416][ T8238] loop2: detected capacity change from 0 to 1024 [ 640.661959][ T8238] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 641.285849][ T8258] netlink: 'syz.7.915': attribute type 43 has an invalid length. [ 641.289813][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 641.326186][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.915'. [ 641.984056][ T8276] loop8: detected capacity change from 0 to 2048 [ 642.052790][ T8276] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 644.489583][ T8286] FAULT_INJECTION: forcing a failure. [ 644.489583][ T8286] name failslab, interval 1, probability 0, space 0, times 0 [ 644.544237][ T8286] CPU: 0 PID: 8286 Comm: syz.0.921 Not tainted syzkaller #0 [ 644.551611][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 644.561717][ T8286] Call Trace: [ 644.565050][ T8286] [ 644.568019][ T8286] dump_stack_lvl+0x188/0x24e [ 644.572766][ T8286] ? show_regs_print_info+0x12/0x12 [ 644.578021][ T8286] ? load_image+0x410/0x410 [ 644.582595][ T8286] ? __lock_acquire+0x7c40/0x7c40 [ 644.587698][ T8286] should_fail_ex+0x390/0x4c0 [ 644.592448][ T8286] should_failslab+0x5/0x20 [ 644.597013][ T8286] slab_pre_alloc_hook+0x59/0x300 [ 644.602108][ T8286] kmem_cache_alloc_lru+0x49/0x2e0 [ 644.607276][ T8286] ? sock_alloc_inode+0x24/0xc0 [ 644.612188][ T8286] sock_alloc_inode+0x24/0xc0 [ 644.616909][ T8286] ? sockfs_init_fs_context+0xa0/0xa0 [ 644.622344][ T8286] new_inode_pseudo+0x5f/0x1c0 [ 644.627189][ T8286] __sock_create+0x129/0x940 [ 644.631836][ T8286] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 644.637881][ T8286] __sys_socket+0xc4/0x190 [ 644.642369][ T8286] __x64_sys_socket+0x76/0x80 [ 644.647107][ T8286] do_syscall_64+0x4c/0xa0 [ 644.651589][ T8286] ? clear_bhb_loop+0x60/0xb0 [ 644.656326][ T8286] ? clear_bhb_loop+0x60/0xb0 [ 644.661063][ T8286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 644.667048][ T8286] RIP: 0033:0x7f494e39e159 [ 644.671512][ T8286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.691175][ T8286] RSP: 002b:00007f494f1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 644.699649][ T8286] RAX: ffffffffffffffda RBX: 00007f494e625fa0 RCX: 00007f494e39e159 [ 644.707679][ T8286] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 644.715696][ T8286] RBP: 00007f494e43503b R08: 0000000000000000 R09: 0000000000000000 [ 644.723708][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.731734][ T8286] R13: 00007f494e626038 R14: 00007f494e625fa0 R15: 00007ffd3e0aa5a8 [ 644.739772][ T8286] [ 644.774586][ T8286] socket: no more sockets [ 645.084368][ T4321] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 645.230784][ T8306] loop0: detected capacity change from 0 to 512 [ 645.273854][ T8306] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 645.294381][ T4321] usb 7-1: Using ep0 maxpacket: 8 [ 645.302126][ T4321] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 645.345635][ T8306] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 645.361329][ T4321] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.416599][ T8306] System zones: 1-12 [ 645.455301][ T8306] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.926: bad orphan inode 131072 [ 645.502215][ T4321] usb 7-1: config 0 interface 0 has no altsetting 0 [ 645.540634][ T4321] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 645.584591][ T4321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.659516][ T4321] usb 7-1: config 0 descriptor?? [ 645.796452][ T8306] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 646.050045][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 646.093297][ T4321] usbhid 7-1:0.0: can't add hid device: -71 [ 646.115854][ T4321] usbhid: probe of 7-1:0.0 failed with error -71 [ 646.169397][ T4321] usb 7-1: USB disconnect, device number 17 [ 647.880697][ T4290] Bluetooth: hci5: command 0x0406 tx timeout [ 647.978249][ T8336] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 648.039733][ T8336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 648.177727][ T8342] bond1: (slave veth0_to_bond): making interface the new active one [ 648.251701][ T8342] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 648.303790][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 648.327915][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 648.353961][ T8348] FAULT_INJECTION: forcing a failure. [ 648.353961][ T8348] name failslab, interval 1, probability 0, space 0, times 0 [ 648.387074][ T8347] loop6: detected capacity change from 0 to 2048 [ 648.400022][ T8348] CPU: 1 PID: 8348 Comm: syz.8.936 Not tainted syzkaller #0 [ 648.405770][ T8336] device bond1 entered promiscuous mode [ 648.408239][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.408257][ T8348] Call Trace: [ 648.408267][ T8348] [ 648.408276][ T8348] dump_stack_lvl+0x188/0x24e [ 648.435191][ T8348] ? show_regs_print_info+0x12/0x12 [ 648.436854][ T8336] device veth0_to_bond entered promiscuous mode [ 648.440438][ T8348] ? load_image+0x410/0x410 [ 648.440478][ T8348] ? __lock_acquire+0x7c40/0x7c40 [ 648.456508][ T8348] should_fail_ex+0x390/0x4c0 [ 648.461248][ T8348] should_failslab+0x5/0x20 [ 648.465779][ T8348] slab_pre_alloc_hook+0x59/0x300 [ 648.470888][ T8348] kmem_cache_alloc_lru+0x49/0x2e0 [ 648.476065][ T8348] ? sock_alloc_inode+0x24/0xc0 [ 648.481060][ T8348] sock_alloc_inode+0x24/0xc0 [ 648.485816][ T8348] ? sockfs_init_fs_context+0xa0/0xa0 [ 648.491224][ T8348] new_inode_pseudo+0x5f/0x1c0 [ 648.496040][ T8348] __sock_create+0x129/0x940 [ 648.500685][ T8348] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 648.506724][ T8348] __sys_socket+0xc4/0x190 [ 648.511189][ T8348] __x64_sys_socket+0x76/0x80 [ 648.515910][ T8348] do_syscall_64+0x4c/0xa0 [ 648.520405][ T8348] ? clear_bhb_loop+0x60/0xb0 [ 648.525133][ T8348] ? clear_bhb_loop+0x60/0xb0 [ 648.529897][ T8348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.535855][ T8348] RIP: 0033:0x7f198699e159 [ 648.540330][ T8348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.560071][ T8348] RSP: 002b:00007f1984bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 648.568536][ T8348] RAX: ffffffffffffffda RBX: 00007f1986c25fa0 RCX: 00007f198699e159 [ 648.576573][ T8348] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 648.584575][ T8348] RBP: 00007f1986a3503b R08: 0000000000000000 R09: 0000000000000000 [ 648.592947][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.601065][ T8348] R13: 00007f1986c26038 R14: 00007f1986c25fa0 R15: 00007fff79363088 [ 648.609097][ T8348] [ 648.642312][ T8347] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 648.845869][ T8348] socket: no more sockets [ 648.915742][ T8356] sd 0:0:1:0: device reset [ 653.072189][ T8390] 9pnet_fd: p9_fd_create_tcp (8390): problem connecting socket to 127.0.0.1 [ 653.608663][ T8398] FAULT_INJECTION: forcing a failure. [ 653.608663][ T8398] name failslab, interval 1, probability 0, space 0, times 0 [ 653.693006][ T8398] CPU: 0 PID: 8398 Comm: syz.6.948 Not tainted syzkaller #0 [ 653.700391][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.710530][ T8398] Call Trace: [ 653.713849][ T8398] [ 653.716832][ T8398] dump_stack_lvl+0x188/0x24e [ 653.721579][ T8398] ? show_regs_print_info+0x12/0x12 [ 653.726983][ T8398] ? load_image+0x410/0x410 [ 653.731537][ T8398] ? __lock_acquire+0x7c40/0x7c40 [ 653.736746][ T8398] should_fail_ex+0x390/0x4c0 [ 653.741485][ T8398] should_failslab+0x5/0x20 [ 653.746039][ T8398] slab_pre_alloc_hook+0x59/0x300 [ 653.751125][ T8398] kmem_cache_alloc_lru+0x49/0x2e0 [ 653.756284][ T8398] ? sock_alloc_inode+0x24/0xc0 [ 653.761187][ T8398] sock_alloc_inode+0x24/0xc0 [ 653.765928][ T8398] ? sockfs_init_fs_context+0xa0/0xa0 [ 653.771362][ T8398] new_inode_pseudo+0x5f/0x1c0 [ 653.776195][ T8398] __sock_create+0x129/0x940 [ 653.780866][ T8398] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 653.786926][ T8398] __sys_socket+0xc4/0x190 [ 653.791412][ T8398] __x64_sys_socket+0x76/0x80 [ 653.796160][ T8398] do_syscall_64+0x4c/0xa0 [ 653.800644][ T8398] ? clear_bhb_loop+0x60/0xb0 [ 653.805388][ T8398] ? clear_bhb_loop+0x60/0xb0 [ 653.810139][ T8398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.816093][ T8398] RIP: 0033:0x7f516839e159 [ 653.820558][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.840355][ T8398] RSP: 002b:00007f5169304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 653.848833][ T8398] RAX: ffffffffffffffda RBX: 00007f5168625fa0 RCX: 00007f516839e159 [ 653.856854][ T8398] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 653.864885][ T8398] RBP: 00007f516843503b R08: 0000000000000000 R09: 0000000000000000 [ 653.872910][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.880931][ T8398] R13: 00007f5168626038 R14: 00007f5168625fa0 R15: 00007ffe5c5d3518 [ 653.888986][ T8398] [ 654.017515][ T8398] socket: no more sockets [ 654.544356][ T8408] FAULT_INJECTION: forcing a failure. [ 654.544356][ T8408] name failslab, interval 1, probability 0, space 0, times 0 [ 654.557238][ T8408] CPU: 1 PID: 8408 Comm: syz.6.949 Not tainted syzkaller #0 [ 654.564572][ T8408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.574675][ T8408] Call Trace: [ 654.577998][ T8408] [ 654.580969][ T8408] dump_stack_lvl+0x188/0x24e [ 654.585718][ T8408] ? show_regs_print_info+0x12/0x12 [ 654.590979][ T8408] ? load_image+0x410/0x410 [ 654.595537][ T8408] ? __might_sleep+0xd0/0xd0 [ 654.600195][ T8408] ? __lock_acquire+0x7c40/0x7c40 [ 654.605305][ T8408] should_fail_ex+0x390/0x4c0 [ 654.610086][ T8408] should_failslab+0x5/0x20 [ 654.614647][ T8408] slab_pre_alloc_hook+0x59/0x300 [ 654.619733][ T8408] ? memcg_list_lru_alloc+0x331/0xb00 [ 654.625170][ T8408] __kmem_cache_alloc_node+0x4f/0x270 [ 654.630609][ T8408] ? memcg_list_lru_alloc+0x331/0xb00 [ 654.636028][ T8408] __kmalloc+0xa3/0x240 [ 654.640268][ T8408] memcg_list_lru_alloc+0x331/0xb00 [ 654.645532][ T8408] ? slab_pre_alloc_hook+0xb1/0x300 [ 654.650807][ T8408] ? memcg_reparent_list_lrus+0x850/0x850 [ 654.656601][ T8408] ? get_obj_cgroup_from_current+0xd0/0x280 [ 654.662564][ T8408] slab_pre_alloc_hook+0x2ad/0x300 [ 654.667736][ T8408] ? slab_pre_alloc_hook+0xb1/0x300 [ 654.672996][ T8408] kmem_cache_alloc_lru+0x49/0x2e0 [ 654.678189][ T8408] ? __d_alloc+0x2e/0x6e0 [ 654.682581][ T8408] __d_alloc+0x2e/0x6e0 [ 654.686798][ T8408] d_alloc+0x46/0x250 [ 654.690862][ T8408] lookup_one_qstr_excl+0xc6/0x240 [ 654.696043][ T8408] do_unlinkat+0x199/0x580 [ 654.700528][ T8408] ? fsnotify_link_count+0xf0/0xf0 [ 654.705713][ T8408] ? getname_flags+0x206/0x500 [ 654.710535][ T8408] __x64_sys_unlink+0x45/0x50 [ 654.715312][ T8408] do_syscall_64+0x4c/0xa0 [ 654.719794][ T8408] ? clear_bhb_loop+0x60/0xb0 [ 654.724539][ T8408] ? clear_bhb_loop+0x60/0xb0 [ 654.729311][ T8408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.735268][ T8408] RIP: 0033:0x7f516839e159 [ 654.739735][ T8408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.759487][ T8408] RSP: 002b:00007f51692e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 654.767961][ T8408] RAX: ffffffffffffffda RBX: 00007f5168626090 RCX: 00007f516839e159 [ 654.775968][ T8408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 654.783969][ T8408] RBP: 00007f516843503b R08: 0000000000000000 R09: 0000000000000000 [ 654.791967][ T8408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.799958][ T8408] R13: 00007f5168626128 R14: 00007f5168626090 R15: 00007ffe5c5d3518 [ 654.807966][ T8408] [ 655.684275][ T2172] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 656.534224][ T2172] usb 1-1: Using ep0 maxpacket: 8 [ 656.547612][ T2172] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 656.650313][ T2172] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.731137][ T2172] usb 1-1: config 0 interface 0 has no altsetting 0 [ 656.783226][ T2172] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 656.838316][ T2172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.886219][ T2172] usb 1-1: config 0 descriptor?? [ 657.127765][ T8440] loop8: detected capacity change from 0 to 2048 [ 657.165576][ T8440] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 657.303356][ T2172] usbhid 1-1:0.0: can't add hid device: -71 [ 657.324249][ T2172] usbhid: probe of 1-1:0.0 failed with error -71 [ 657.355277][ T2172] usb 1-1: USB disconnect, device number 9 [ 658.012641][ T8440] sd 0:0:1:0: device reset [ 660.866611][ T8496] loop7: detected capacity change from 0 to 64 [ 660.948902][ T4447] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 660.963178][ T8496] loop7: detected capacity change from 0 to 128 [ 660.991844][ T4447] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.030017][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 661.034294][ T4447] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.096562][ T8496] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 661.109309][ T8505] bridge0: port 3(syz_tun) entered blocking state [ 661.116148][ T8496] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.136075][ T8505] bridge0: port 3(syz_tun) entered disabled state [ 661.144057][ T8505] device syz_tun entered promiscuous mode [ 661.145306][ T8496] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.971: No space for directory leaf checksum. Please run e2fsck -D. [ 661.151039][ T8505] bridge0: port 3(syz_tun) entered blocking state [ 661.171848][ T8505] bridge0: port 3(syz_tun) entered forwarding state [ 661.186803][ T8496] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.971: checksumming directory block 0 [ 661.209898][ T8496] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.971: No space for directory leaf checksum. Please run e2fsck -D. [ 661.231753][ T8505] bridge0: port 3(syz_tun) entered disabled state [ 661.238451][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.244594][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 661.246554][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.255812][ T7] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 661.277926][ T4367] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 661.289048][ T8496] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.971: checksumming directory block 0 [ 661.301754][ T7] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 661.318543][ T8496] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.971: No space for directory leaf checksum. Please run e2fsck -D. [ 661.339562][ T8496] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.971: checksumming directory block 0 [ 661.353160][ T8496] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.971: No space for directory leaf checksum. Please run e2fsck -D. [ 661.354278][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 661.390075][ T8496] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.971: checksumming directory block 0 [ 661.394275][ T7] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 661.430850][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.448814][ T8507] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.971: No space for directory leaf checksum. Please run e2fsck -D. [ 661.480642][ T7] usb 3-1: config 0 descriptor?? [ 661.510804][ T4367] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 661.523585][ T4367] usb 1-1: can't read configurations, error -61 [ 661.534325][ T8507] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.971: checksumming directory block 0 [ 661.699459][ T7071] EXT4-fs (loop7): unmounting filesystem. [ 661.715492][ T4367] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 661.897271][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 661.905635][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 661.910543][ T4367] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 661.933201][ T4367] usb 1-1: can't read configurations, error -61 [ 661.947542][ T7] usb 3-1: USB disconnect, device number 12 [ 661.953682][ T4367] usb usb1-port1: attempt power cycle [ 662.110739][ T8518] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 662.221564][ T3640] udevd[3640]: could not touch /run/udev/queue: No such file or directory [ 663.705085][ T27] audit: type=1804 audit(1789065582.557:67): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 663.744187][ T4367] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 663.788441][ T27] audit: type=1804 audit(1789065582.617:68): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 663.822237][ T4367] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 663.842484][ T4367] usb 1-1: can't read configurations, error -61 [ 663.930226][ T27] audit: type=1804 audit(1789065582.617:69): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 664.019389][ T27] audit: type=1804 audit(1789065582.617:70): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 664.041860][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.054327][ T4367] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 664.114553][ T4367] usb 1-1: device descriptor read/8, error -71 [ 664.192704][ T27] audit: type=1804 audit(1789065582.617:71): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 664.239242][ T4367] usb usb1-port1: unable to enumerate USB device [ 664.321196][ T27] audit: type=1804 audit(1789065582.617:72): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 664.383046][ T27] audit: type=1804 audit(1789065582.617:73): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 664.421888][ T8554] loop7: detected capacity change from 0 to 64 [ 664.428468][ T27] audit: type=1804 audit(1789065582.617:74): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 664.524876][ T27] audit: type=1804 audit(1789065582.617:75): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 664.657697][ T27] audit: type=1804 audit(1789065582.617:76): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 664.789936][ T8562] loop2: detected capacity change from 0 to 2048 [ 664.886630][ T8562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 664.984234][ T8562] loop2: detected capacity change from 2048 to 0 [ 664.992971][ T8562] syz.2.986: attempt to access beyond end of device [ 664.992971][ T8562] loop2: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 665.093179][ T8562] syz.2.986: attempt to access beyond end of device [ 665.093179][ T8562] loop2: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 665.144485][ T8562] syz.2.986: attempt to access beyond end of device [ 665.144485][ T8562] loop2: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 665.170083][ T8562] syz.2.986: attempt to access beyond end of device [ 665.170083][ T8562] loop2: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 665.204394][ T8562] syz.2.986: attempt to access beyond end of device [ 665.204394][ T8562] loop2: rw=12288, sector=24, nr_sectors = 4 limit=0 [ 665.282264][ T8562] EXT4-fs error (device loop2): ext4_get_inode_loc:4658: inode #18: block 6: comm syz.2.986: unable to read itable block [ 665.326388][ T8562] syz.2.986: attempt to access beyond end of device [ 665.326388][ T8562] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 665.364407][ T8562] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 665.389869][ T8562] EXT4-fs (loop2): I/O error while writing superblock [ 666.723456][ T8562] EXT4-fs (loop2): Remounting filesystem read-only [ 666.772661][ T8572] syz.2.986: attempt to access beyond end of device [ 666.772661][ T8572] loop2: rw=524288, sector=16, nr_sectors = 4 limit=0 [ 666.786592][ T8572] syz.2.986: attempt to access beyond end of device [ 666.786592][ T8572] loop2: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 666.807300][ T8572] syz.2.986: attempt to access beyond end of device [ 666.807300][ T8572] loop2: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 666.917443][ T8572] syz.2.986: attempt to access beyond end of device [ 666.917443][ T8572] loop2: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 666.964383][ T8572] EXT4-fs error (device loop2): ext4_get_inode_loc:4658: inode #18: block 6: comm syz.2.986: unable to read itable block [ 666.981829][ T8572] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 667.006005][ T8568] EXT4-fs error (device loop2): ext4_wait_block_bitmap:573: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 667.021007][ T8572] EXT4-fs (loop2): I/O error while writing superblock [ 667.034196][ T8572] EXT4-fs (loop2): Remounting filesystem read-only [ 667.044511][ T8568] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 667.069395][ T8568] EXT4-fs (loop2): I/O error while writing superblock [ 667.104194][ T8568] EXT4-fs (loop2): Remounting filesystem read-only [ 667.111973][ T8568] EXT4-fs error (device loop2): ext4_check_bdev_write_error:218: comm ext4lazyinit: Error while async write back metadata [ 667.157300][ T4282] EXT4-fs error (device loop2): ext4_get_inode_loc:4658: inode #2: block 4: comm syz-executor: unable to read itable block [ 667.183831][ T8568] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 667.206132][ T8568] EXT4-fs (loop2): I/O error while writing superblock [ 667.217214][ T4282] EXT4-fs (loop2): previous I/O error to superblock detected [ 667.235772][ T4282] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 667.252558][ T8568] EXT4-fs (loop2): Remounting filesystem read-only [ 667.271105][ T4282] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: IO failure [ 667.311511][ T4282] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 667.331880][ T4282] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 667.371830][ T4282] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 667.519763][ T6318] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4643: inode #2: block 4: comm kworker/u4:21: unable to read itable block [ 667.571825][ T6318] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 667.628435][ T4282] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 667.645165][ T8565] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 667.849105][ T4282] device syz_tun left promiscuous mode [ 667.864382][ T4282] bridge0: port 3(syz_tun) entered disabled state [ 668.061765][ T4967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.125961][ T7] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 668.287543][ T4967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.327090][ T7] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 668.354406][ T7] usb 9-1: can't read configurations, error -61 [ 668.496538][ T4967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.514549][ T7] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 668.546195][ T8590] loop7: detected capacity change from 0 to 2048 [ 668.563125][ T8592] loop0: detected capacity change from 0 to 64 [ 668.571889][ T8590] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 668.658277][ T4967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.714689][ T27] kauditd_printk_skb: 923 callbacks suppressed [ 668.714735][ T27] audit: type=1804 audit(1789065587.567:1000): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 668.815810][ T8592] loop0: detected capacity change from 0 to 1764 [ 668.853883][ T7] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 668.903251][ T7] usb 9-1: can't read configurations, error -61 [ 668.914654][ T27] audit: type=1804 audit(1789065587.627:1001): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 669.007408][ T7] usb usb9-port1: attempt power cycle [ 669.047400][ T27] audit: type=1804 audit(1789065587.647:1002): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 669.176001][ T27] audit: type=1804 audit(1789065587.647:1003): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 669.253712][ T27] audit: type=1804 audit(1789065587.647:1004): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 669.303533][ T27] audit: type=1804 audit(1789065587.647:1005): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 669.439683][ T27] audit: type=1804 audit(1789065587.647:1006): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 669.482207][ T27] audit: type=1804 audit(1789065587.647:1007): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 669.506736][ T27] audit: type=1804 audit(1789065587.647:1008): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 669.530593][ T27] audit: type=1804 audit(1789065587.647:1009): pid=5737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/110/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 669.723650][ T7] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 669.787700][ T7] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 669.806123][ T7] usb 9-1: can't read configurations, error -61 [ 669.984359][ T7] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 670.030833][ T7] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 670.046704][ T7] usb 9-1: can't read configurations, error -61 [ 670.071976][ T7] usb usb9-port1: unable to enumerate USB device [ 670.107929][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 670.119131][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 670.127520][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 670.135546][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 670.147073][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 670.157378][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 672.562562][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 672.573444][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 672.586311][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 672.616194][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 672.645094][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 672.652453][ T5737] device syz_tun left promiscuous mode [ 672.660721][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 672.710455][ T5737] bridge0: port 3(syz_tun) entered disabled state [ 673.019648][ T8641] loop7: detected capacity change from 0 to 64 [ 673.520113][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 673.532723][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 673.544014][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 673.552982][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 673.563178][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 673.570834][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 673.731989][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'. [ 673.885683][ T8659] loop7: detected capacity change from 0 to 2048 [ 673.893284][ T8659] UDF-fs: bad mount option "gid=000000000000000000000xffffffffffffffff18446744073709551615" or missing value [ 673.989407][ T8660] device bond1 entered promiscuous mode [ 674.829378][ T8670] loop0: detected capacity change from 0 to 512 [ 674.860936][ T8670] EXT4-fs: inline encryption not supported [ 674.878050][ T8670] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 674.890141][ T8659] sd 0:0:1:0: device reset [ 675.006721][ T8670] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2805: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 675.015042][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 675.047058][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 675.067441][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 675.085140][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 675.092882][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 675.101770][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 675.154239][ T8670] EXT4-fs (loop0): 1 truncate cleaned up [ 675.160028][ T8670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 675.465001][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 675.509001][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 675.520012][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 675.540342][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 675.565067][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 675.570998][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 675.583033][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 676.114851][ T4321] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 676.307737][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 676.308711][ T4321] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 676.325966][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 676.329551][ T4321] usb 1-1: can't read configurations, error -61 [ 676.339826][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 676.357205][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 676.375045][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 676.382375][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 676.469155][ T4967] device hsr_slave_0 left promiscuous mode [ 676.484408][ T4321] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 676.522996][ T4967] device hsr_slave_1 left promiscuous mode [ 676.563791][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.589395][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.669185][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.688043][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.700860][ T4321] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 676.715002][ T4967] device bridge_slave_1 left promiscuous mode [ 676.724020][ T4321] usb 1-1: can't read configurations, error -61 [ 676.725021][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.760570][ T8714] loop8: detected capacity change from 0 to 64 [ 676.764952][ T4321] usb usb1-port1: attempt power cycle [ 676.774566][ T4967] device bridge_slave_0 left promiscuous mode [ 676.791106][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.941624][ T4967] device veth1_macvtap left promiscuous mode [ 676.959085][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 676.975349][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 676.983863][ T4967] device veth0_macvtap left promiscuous mode [ 676.990622][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.000332][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.009476][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 677.016865][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 677.075285][ T4967] device veth1_vlan left promiscuous mode [ 677.125042][ T4967] device veth0_vlan left promiscuous mode [ 677.214213][ T4321] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 677.267821][ T4321] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 677.306807][ T4321] usb 1-1: can't read configurations, error -61 [ 677.464192][ T4321] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 677.506890][ T4321] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 677.534141][ T4321] usb 1-1: can't read configurations, error -61 [ 677.540734][ T4321] usb usb1-port1: unable to enumerate USB device [ 677.759017][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 677.777682][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 677.803492][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 677.825589][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 677.838233][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 677.838962][ T4967] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 677.854255][ T4967] device veth0_to_bond left promiscuous mode [ 677.860778][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 677.887437][ T4967] bond1 (unregistering): Released all slaves [ 678.378370][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 678.393935][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 678.410869][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 678.432532][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 678.440155][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 678.448563][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 679.015330][ T4967] team0 (unregistering): Port device team_slave_1 removed [ 679.075204][ T4967] team0 (unregistering): Port device team_slave_0 removed [ 679.132889][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 679.141493][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 679.150597][ T4967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.158087][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 679.169409][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 679.198767][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 679.206201][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 679.257196][ T4967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.883426][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 679.902804][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 679.922218][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 679.936228][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 679.945393][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 679.955550][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 679.957617][ T4967] bond0 (unregistering): Released all slaves [ 680.194376][ T8712] bridge0: port 3(syz_tun) entered blocking state [ 680.200975][ T8712] bridge0: port 3(syz_tun) entered disabled state [ 680.240857][ T8712] device syz_tun entered promiscuous mode [ 680.288473][ T8712] bridge0: port 3(syz_tun) entered blocking state [ 680.295084][ T8712] bridge0: port 3(syz_tun) entered forwarding state [ 680.445050][ T8715] bridge0: port 3(syz_tun) entered disabled state [ 680.451784][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.460437][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.854618][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 680.865610][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 680.874194][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 680.891159][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 680.899076][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 680.906654][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 681.379012][ T4967] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.541136][ T4967] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.698541][ T4967] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.809922][ T4967] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.085737][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 682.126433][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 682.137959][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 682.158366][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 682.167230][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 682.176107][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 682.210538][ T27] kauditd_printk_skb: 284 callbacks suppressed [ 682.210556][ T27] audit: type=1326 audit(1789065601.067:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.7.1026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb299e159 code=0x7ffc0000 [ 682.291201][ T27] audit: type=1326 audit(1789065601.067:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.7.1026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb299e159 code=0x7ffc0000 [ 683.848959][ T8774] ip_tables: iptables: counters copy to user failed while replacing table [ 683.875777][ T27] audit: type=1326 audit(1789065601.067:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.7.1026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5eb295e98e code=0x7ffc0000 [ 683.900944][ T27] audit: type=1326 audit(1789065601.067:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.7.1026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb299e159 code=0x7ffc0000 [ 683.929630][ T27] audit: type=1326 audit(1789065601.067:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.7.1026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb299e159 code=0x7ffc0000 [ 684.186572][ T27] audit: type=1326 audit(1789065601.067:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.7.1026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f5eb299e159 code=0x7ffc0000 [ 684.244237][ T27] audit: type=1326 audit(1789065601.067:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.7.1026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb299e159 code=0x7ffc0000 [ 684.344016][ T8782] device syzkaller0 entered promiscuous mode [ 684.384711][ T27] audit: type=1326 audit(1789065601.067:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.7.1026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb299e159 code=0x7ffc0000 [ 684.512959][ T27] audit: type=1326 audit(1789065601.077:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.7.1026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5eb299e159 code=0x7ffc0000 [ 684.674191][ T27] audit: type=1326 audit(1789065601.077:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.7.1026" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb299e159 code=0x7ffc0000 [ 685.045555][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 685.060604][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 685.070872][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 685.079261][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 685.087735][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 685.095322][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 685.720689][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.727306][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.738442][ T8805] loop0: detected capacity change from 0 to 512 [ 685.873084][ T8805] EXT4-fs (loop0): 1 truncate cleaned up [ 685.921906][ T8805] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 685.971411][ T8805] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.1031: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 686.130789][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 686.319360][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 686.330190][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.338547][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.347292][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.355307][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 686.364345][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 686.704974][ T4967] device hsr_slave_0 left promiscuous mode [ 686.714665][ T4967] device hsr_slave_1 left promiscuous mode [ 686.739258][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.767656][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.798276][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.841335][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.880241][ T4967] device bridge_slave_0 left promiscuous mode [ 686.902237][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.914355][ T4367] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 687.023804][ T4967] device veth1_macvtap left promiscuous mode [ 687.031110][ T4967] device veth0_macvtap left promiscuous mode [ 687.039988][ T4967] device veth1_vlan left promiscuous mode [ 687.058164][ T4967] device veth0_vlan left promiscuous mode [ 687.074419][ T4367] usb 8-1: device descriptor read/64, error -71 [ 687.355507][ T4367] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 687.514844][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 687.525778][ T4367] usb 8-1: device descriptor read/64, error -71 [ 687.532189][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 687.540762][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 687.550614][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 687.558379][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 687.566084][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 687.654459][ T4367] usb usb8-port1: attempt power cycle [ 687.794726][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 688.064237][ T4367] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 688.124833][ T4367] usb 8-1: device descriptor read/8, error -71 [ 688.408011][ T4367] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 688.468535][ T4367] usb 8-1: device descriptor read/8, error -71 [ 688.581156][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 688.592909][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 688.612339][ T4367] usb usb8-port1: unable to enumerate USB device [ 688.623966][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 688.632359][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 688.642218][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 688.657515][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 688.873363][ T4967] team0 (unregistering): Port device team_slave_1 removed [ 688.967386][ T4967] team0 (unregistering): Port device team_slave_0 removed [ 689.207506][ T4967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.348516][ T4967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.657042][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 689.679558][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 689.692082][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 689.701161][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 689.708915][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 689.734411][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.366659][ T4967] bond0 (unregistering): Released all slaves [ 690.498144][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 690.509212][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 690.517912][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 690.525905][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 690.539108][ T8846] bridge0: port 3(syz_tun) entered blocking state [ 690.539123][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 690.555184][ T8846] bridge0: port 3(syz_tun) entered disabled state [ 690.562802][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.571373][ T8846] device syz_tun entered promiscuous mode [ 690.586042][ T8846] bridge0: port 3(syz_tun) entered blocking state [ 690.592621][ T8846] bridge0: port 3(syz_tun) entered forwarding state [ 690.612861][ T8847] bridge0: port 3(syz_tun) entered disabled state [ 690.619543][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.626807][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.358744][ T8879] infiniband syz1: set active [ 691.364127][ T8879] infiniband syz1: added bond0 [ 691.412368][ T8879] RDS/IB: syz1: added [ 691.417939][ T8879] smc: adding ib device syz1 with port count 1 [ 691.424751][ T8879] smc: ib device syz1 port 1 has pnetid [ 691.460235][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 691.482333][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 691.492845][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 691.504606][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 691.512147][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 691.519831][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 692.188746][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 692.200207][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 692.212197][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 692.221146][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 692.228900][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 692.238746][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 692.724940][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 692.734038][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 692.744525][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 692.752600][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 692.760528][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 692.768201][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 693.048050][ T8908] device syzkaller0 entered promiscuous mode [ 693.273593][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 693.282949][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 693.293571][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 693.302412][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 693.310264][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 693.319192][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 693.716851][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 693.728460][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 693.737688][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 693.747607][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 693.755340][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 693.762685][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 694.183781][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 694.192968][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 694.202885][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 694.214896][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 694.222643][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 694.230147][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 694.699120][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 694.710048][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 694.718631][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 694.731459][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 694.740415][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 694.747850][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 695.115987][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 695.125591][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 695.138512][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 695.146553][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 695.157071][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 695.167359][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 695.594869][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 695.605614][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 695.614946][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 695.625247][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 695.632859][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 695.640405][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 696.030090][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 696.039034][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 696.049015][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 696.058183][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 696.066032][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 696.073350][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 696.455942][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 696.466055][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 696.477744][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 696.487014][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 696.498603][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 696.506052][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 696.554322][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 696.737423][ T26] usb 1-1: device descriptor read/64, error -71 [ 696.930884][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 696.942653][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 696.951152][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 696.959157][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 696.970127][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 696.981981][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 697.005308][ T26] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 697.174381][ T26] usb 1-1: device descriptor read/64, error -71 [ 697.310651][ T26] usb usb1-port1: attempt power cycle [ 697.436514][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 697.446865][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 697.457164][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 697.467064][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 697.478969][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 697.486421][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 697.744306][ T26] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 697.774885][ T26] usb 1-1: device descriptor read/8, error -71 [ 697.896305][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 697.907115][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 697.917607][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 697.926109][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 697.935102][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 697.942440][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 698.044308][ T26] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 698.074920][ T26] usb 1-1: device descriptor read/8, error -71 [ 698.194793][ T26] usb usb1-port1: unable to enumerate USB device [ 698.331103][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 698.342312][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 698.351321][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 698.362567][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 698.371633][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 698.379440][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 698.802501][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 698.813420][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 698.822094][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 698.830095][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 698.839010][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 698.846471][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 699.270080][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 699.281200][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 699.296724][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 699.306238][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 699.313895][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 699.323817][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 699.748436][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 699.757696][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 699.770791][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 699.779697][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 699.790448][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 699.798000][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 700.192857][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 700.202610][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 700.211037][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 700.222077][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 700.230015][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 700.238636][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 700.503883][ T9003] device syzkaller0 entered promiscuous mode [ 700.708334][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 700.719397][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 700.728159][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 700.736187][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 700.743717][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 700.752483][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 701.146703][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 701.157674][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 701.168434][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 701.177886][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 701.185673][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 701.192971][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 701.540770][ T9014] loop0: detected capacity change from 0 to 512 [ 701.640086][ T9014] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 701.738167][ T9014] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm syz.0.1057: bg 0: bad block bitmap checksum [ 701.778200][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 701.790021][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 701.805536][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 701.813537][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 701.822190][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 701.829876][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 701.876147][ T4279] EXT4-fs (loop0): unmounting filesystem. SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=9 req=996 state=3 status=67 (errno 32: Broken pipe) [ 702.431190][ T7400] device syz_tun left promiscuous mode [ 702.474256][ T7400] bridge0: port 3(syz_tun) entered disabled state [ 702.729615][ T7071] device syz_tun left promiscuous mode [ 702.744304][ T7071] bridge0: port 3(syz_tun) entered disabled state [ 702.857110][ T4967] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.942434][ T4279] device syz_tun left promiscuous mode [ 702.949690][ T4279] bridge0: port 3(syz_tun) entered disabled state [ 703.009590][ T4967] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.096857][ T4967] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.204296][ T4967] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.267123][ T4967] device hsr_slave_0 left promiscuous mode [ 704.275641][ T4967] device hsr_slave_1 left promiscuous mode [ 704.285046][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.292489][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.300365][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.307868][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.315861][ T4967] device bridge_slave_1 left promiscuous mode [ 704.323099][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.331389][ T4967] device bridge_slave_0 left promiscuous mode [ 704.337753][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.364939][ T4967] device veth1_macvtap left promiscuous mode [ 704.371024][ T4967] device veth0_macvtap left promiscuous mode [ 704.377570][ T4967] device veth1_vlan left promiscuous mode [ 704.383674][ T4967] device veth0_vlan left promiscuous mode [ 704.975930][ T4967] team0 (unregistering): Port device team_slave_1 removed [ 705.028268][ T4967] team0 (unregistering): Port device team_slave_0 removed [ 705.077361][ T4967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.128631][ T4967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.515351][ T4967] bond0 (unregistering): Released all slaves [ 706.069312][ T4967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.112953][ T4967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.169259][ T4967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.224010][ T4967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.343658][ T4967] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.416434][ T4967] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.510266][ T4967] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.572704][ T4967] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.595848][ T4967] IPVS: stopping backup sync thread 8518 ... [ 708.131536][ T4967] device hsr_slave_0 left promiscuous mode [ 708.138052][ T4967] device hsr_slave_1 left promiscuous mode [ 708.144889][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.152426][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.160495][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.168168][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.179346][ T4967] device bridge_slave_1 left promiscuous mode [ 708.185744][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.199641][ T4967] device bridge_slave_0 left promiscuous mode [ 708.206214][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.219540][ T4967] device hsr_slave_0 left promiscuous mode [ 708.227519][ T4967] device hsr_slave_1 left promiscuous mode [ 708.235778][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.243221][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.252788][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.261049][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.272989][ T4967] device bridge_slave_1 left promiscuous mode [ 708.279651][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.288311][ T4967] device bridge_slave_0 left promiscuous mode [ 708.294674][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.335892][ T4967] device veth1_macvtap left promiscuous mode [ 708.341957][ T4967] device veth0_macvtap left promiscuous mode [ 708.349684][ T4967] device veth1_vlan left promiscuous mode [ 708.355733][ T4967] device veth0_vlan left promiscuous mode [ 708.364679][ T4967] device veth1_macvtap left promiscuous mode [ 708.370767][ T4967] device veth0_macvtap left promiscuous mode [ 708.377334][ T4967] device veth1_vlan left promiscuous mode [ 708.383232][ T4967] device veth0_vlan left promiscuous mode [ 708.558083][ T4967] infiniband syz1: set down [ 708.589593][ T4967] bond1 (unregistering): Released all slaves [ 709.139189][ T4967] team0 (unregistering): Port device team_slave_1 removed [ 709.236825][ T4967] team0 (unregistering): Port device team_slave_0 removed [ 709.287531][ T4967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.333040][ T4967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.643228][ T4967] bond0 (unregistering): Released all slaves [ 710.172413][ T4967] team0 (unregistering): Port device team_slave_1 removed [ 710.217237][ T4967] team0 (unregistering): Port device team_slave_0 removed [ 710.267570][ T4967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.315123][ T4967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.642816][ T4967] bond0 (unregistering): Released all slaves [ 710.669662][ T33] smc: removing ib device syz1 [ 710.737438][ T9078] bond0 speed is unknown, defaulting to 1000