last executing test programs: 12m28.3984205s ago: executing program 32 (id=639): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a, 0x7}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711}, 0x10, 0x80000) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r6, 0x358, 0x800000000000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r2, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0xb4ff}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x123c, &(0x7f0000000200)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x2000) 10m18.669799906s ago: executing program 33 (id=952): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 9m58.353003281s ago: executing program 34 (id=966): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x50000) r0 = inotify_init() r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000600)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) lseek(0xffffffffffffffff, 0x851, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffe59, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendto$inet6(r6, &(0x7f0000000700)="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", 0x2cc, 0x4000041, &(0x7f00000000c0)={0xa, 0x4e21, 0x5e7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 9m42.604204332s ago: executing program 35 (id=989): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 8m54.419998112s ago: executing program 36 (id=1066): creat(0x0, 0x30) fanotify_init(0xf00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x20, 0x1, 0x3, 0x496a8b064d67854c, 0x0, 0x0, {0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x101}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x8084) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x12, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x24, 0x0) 8m48.450479425s ago: executing program 6 (id=1104): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711237000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) read$usbfs(r2, &(0x7f0000000500)=""/185, 0xb9) ioctl$TCSETS(r1, 0x5402, &(0x7f0000010400)={0x7, 0x616, 0x7, 0xffffffff, 0x3, "972c700500141000000000002000052c707400"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) 8m44.778812835s ago: executing program 37 (id=1084): r0 = io_uring_setup(0x479, &(0x7f00000002c0)={0x0, 0x3, 0x40, 0x2, 0x4000020}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x46aa02dd) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r3, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000240)="41fc", 0x2}], 0x1}}, {{&(0x7f0000002880)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002bc0)=[{&(0x7f00000028c0)="d678", 0x2}], 0x1}}], 0x2, 0x40040) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x420000) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) 8m32.592346116s ago: executing program 38 (id=1104): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711237000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) read$usbfs(r2, &(0x7f0000000500)=""/185, 0xb9) ioctl$TCSETS(r1, 0x5402, &(0x7f0000010400)={0x7, 0x616, 0x7, 0xffffffff, 0x3, "972c700500141000000000002000052c707400"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) 6m42.514081874s ago: executing program 39 (id=1347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51f, &(0x7f0000000700)="$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") sched_setaffinity(0x0, 0xfffffffffffffcd9, &(0x7f00000002c0)=0x400000bcf) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa2386dd603000bb00102b00ff020000000000000000000000000101fe8000000000000000000000000000aa8900000000000000638f65e6e8c6c2492103421bd090ec0000000000089078"], 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) write$tcp_mem(r2, &(0x7f0000000340)={0x6, 0x20, 0x200, 0x20, 0x5}, 0x48) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_AIE_OFF(r4, 0x7002) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) listxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=""/8, 0x8) socket$nl_route(0x10, 0x3, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) unshare(0x40600) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNIMAP(r5, 0x4b52, 0x0) 6m41.916988686s ago: executing program 40 (id=1348): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x7, 0xb, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) syz_io_uring_complete(0x0) preadv(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}], 0x1, 0xb, 0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000040)={0x4007f1, 0x84, 0x81, 0x9, 0x5, "f06fca79266e82a74b6c5e443a04683cc267a0", 0x8}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) 6m17.666192872s ago: executing program 8 (id=1422): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, 0x0, 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 6m16.446965369s ago: executing program 8 (id=1424): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000340)={0xe, 0x3, {0x7, @struct={0x1, 0xd}, 0x0, 0x7db, 0x7, 0x4, 0x2, 0x9, 0x50, @struct={0x8761, 0x5}, 0x9, 0x49, [0x4, 0x0, 0x4, 0x2, 0x602, 0x8]}, {0x401, @struct={0x7ff, 0x7f}, 0x0, 0x5e, 0x2, 0x5, 0x8, 0x100000000, 0x6c, @struct={0x2, 0x9}, 0x7, 0x4, [0x4165, 0xd, 0x0, 0x6, 0xffffffffffffff19, 0x8]}, {0x1, @struct={0x2, 0x1}, 0x0, 0x8, 0x101, 0x0, 0x9, 0x7, 0x0, @struct={0x6, 0x9}, 0x0, 0x200, [0xe, 0x5, 0x200000000000000, 0x7, 0xffffffffffffffff, 0x55]}, {0x2, 0x0, 0x57fe}}) syz_usb_connect$uac1(0x0, 0x91, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@processing_unit={0xa, 0x24, 0x7, 0x3, 0x0, 0x0, "d88570"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6896, 0x2, 0x0, "78f4cd9535ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x5c, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 6m13.791029585s ago: executing program 8 (id=1427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) 6m12.662153889s ago: executing program 8 (id=1428): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./file0\x00') 6m11.001442344s ago: executing program 8 (id=1433): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0xa45) 6m8.296471083s ago: executing program 8 (id=1436): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000300)={[{@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@nobarrier}, {@i_version}, {@user_xattr}, {@test_dummy_encryption}, {@acl}, {@nodiscard}, {@nodioread_nolock}]}, 0x82, 0x605, &(0x7f0000000780)="$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") chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 6m5.372633017s ago: executing program 41 (id=1436): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000300)={[{@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@nobarrier}, {@i_version}, {@user_xattr}, {@test_dummy_encryption}, {@acl}, {@nodiscard}, {@nodioread_nolock}]}, 0x82, 0x605, &(0x7f0000000780)="$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") chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 5m37.530666753s ago: executing program 3 (id=1495): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000005106a057a0300000000000109022400010000000209040000050300000009210101030122050009058103ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "9e193f66"}]}}, 0x0}, 0x0) 5m34.591681909s ago: executing program 3 (id=1503): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/19, @ANYBLOB='m0'], 0x28}}, 0x0) 5m33.37864699s ago: executing program 3 (id=1508): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000280)={0xff01, 0x5, 0x8, 0xfffc, 0x1b, "0100000000000080"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 5m32.181410546s ago: executing program 3 (id=1511): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") 5m30.858289675s ago: executing program 3 (id=1514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) 5m30.015295902s ago: executing program 3 (id=1516): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2003800, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m26.579245205s ago: executing program 42 (id=1516): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2003800, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m4.022203372s ago: executing program 5 (id=1572): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={0x0, 0x0, 0xc1d}) 5m2.762128506s ago: executing program 5 (id=1575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 5m1.958567197s ago: executing program 5 (id=1578): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2200004, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 4m57.340422218s ago: executing program 5 (id=1587): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8927, &(0x7f0000001fc0)) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) 4m56.06988235s ago: executing program 5 (id=1590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x1c, r1, 0x1, 0x70bd27, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004840}, 0x4c004) 4m54.686008244s ago: executing program 5 (id=1594): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) msgget$private(0x0, 0x101) mkdirat(0xffffffffffffff9c, 0x0, 0xb1) socket$inet_tcp(0x2, 0x1, 0x0) syslog(0x4, &(0x7f00000000c0)=""/67, 0x43) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d66640e8e5cbdd1918fd7c3de39a996d6b61046edf7b8c39a8a46a4bd0663cac0d1cafdd17846bd10df15876d943cd958e857bae7d3"]) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025c000201c92d020904000001020d0000052407000105240008000d240f010900000003008000030624"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4m52.302928734s ago: executing program 7 (id=1599): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x12}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x3}}}}}}}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000180)=0x4, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wlan0\x00', 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='generic_add_lease\x00', r2}, 0x10) r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x2c0) fcntl$setlease(r3, 0x400, 0x1) 4m51.009064099s ago: executing program 7 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001900010a000000000000000004"], 0x1c}}, 0x0) 4m49.654669844s ago: executing program 7 (id=1604): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init1(0x0) 4m44.617855649s ago: executing program 7 (id=1613): symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) 4m43.132366694s ago: executing program 7 (id=1615): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a003000"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 4m41.444192424s ago: executing program 7 (id=1616): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xc52, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000340)=0x7, 0x4) r2 = dup2(r0, r0) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 4m38.896357768s ago: executing program 43 (id=1594): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) msgget$private(0x0, 0x101) mkdirat(0xffffffffffffff9c, 0x0, 0xb1) socket$inet_tcp(0x2, 0x1, 0x0) syslog(0x4, &(0x7f00000000c0)=""/67, 0x43) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d66640e8e5cbdd1918fd7c3de39a996d6b61046edf7b8c39a8a46a4bd0663cac0d1cafdd17846bd10df15876d943cd958e857bae7d3"]) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025c000201c92d020904000001020d0000052407000105240008000d240f010900000003008000030624"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4m25.691984267s ago: executing program 44 (id=1616): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xc52, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000340)=0x7, 0x4) r2 = dup2(r0, r0) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 3m49.516402316s ago: executing program 6 (id=1618): iopl(0x3) tkill(0x0, 0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) munlockall() 3m48.599957741s ago: executing program 6 (id=1694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000980), 0xff, 0x551, &(0x7f0000000cc0)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0), 0xfd, 0x4a0, &(0x7f0000000e00)="$eJzs3MtrXNUfAPDvnZkkfSe//uqjtdpoFYuPpEmrFhR8gOBCQdBFXUlM0lKbNtJEsCXYKKVuBC24F8GN4F/gypWoK8Gt7qVQpJtWVyM3c+90kszk0Ztkms7nAzdzzsy5c873Ps89d24C6Fj96Z8kYkdE/BERvRFRaiywtTal5W5enxn95/rMaBLV6lt/J+lsceP6zGheNMlet9cylfSLSpeSeKlJvVPnL5wemZgYP5flB6fPfDA4df7C06fOjJwcPzl+dvjYsaNHhp57dviZNYkzbdONfR9P7t/72jtX3hg9fuW9X75PGhrdGEdBz/fWkzP1ZbLQY2tU2Z1iZ0M6qbSxIaxKT0Skq6trbv/vjfKlXfXPeuPVT9vaOGBdVavV6nDrj2erwF0siXa3AGiP/ESfXv/m0wZ1Pe4I116uXQClcd/Mptonldo4SE/t2mjnOtXfHxHHZ//9Op1i1eMQXevUKgDgbvZj2v95qkn/rxJxb0O5Xdm9ob6I+F9E7I6I/0fEnoi4J2pl74uI+5tX0/9ui/r7F+QX939KVwuEt6y0//dCdm9rfv+vfhesr5zlds7F35WcODUxfjhbJoeiqyfNDzX99iRiNn39/YtW9Tf2/9IprT/vC2btuFrpmT/P2Mj0SOHAM9c+idhXaRZ/EpVbUcTeiNh3m3WceuK7/fPfKddTy8e/hDW4z1T9JuLx2vqfjQXx55Kl708ObomJ8cOD+Vax2K+/XX6zVf21+EuxdPxbiwfaQrr+tzXb/l+sx9+XNN6vnVr0Fd3L1XH5z89aXtPcWv8RW+beWdn23528Pa/yj0amp88NRXQnry9+v2GAO8/n5dP4Dx1svv/vzuZJ438gItKN+MGIeCgiDmRtfzgiHomIg0vE//Mrj77fMv4DBbb/NZDGP9b0+Ndq/a8+UT790w+t6l/Z8e9onplr1EqOfyttYJFlBwAAAJtFKSJ2RFIaqKdLpYGB2u/l98S20sTk1PSTJyY/PDtWe0agL7pK+UhXb8N46FA2Npznh7P8xSx/JBs3/qq8dS4/MDo5Mdbu4KHDbW+x/6f+KjeZYf2GooF28LwWdK7V7//L3vMFNonbP//rOcBmt8xeXNqodgAbz1kcOlez/f9iYyaJ2q/kgbuO8z90rvr+/+UKCjcM/S98eBPYfJY6/1d7N7AhwIbT/4eOVOS5/jwRUWj2Yon4NmLpMkl7GlYw8XmR2Ssb0MIotXH5dLdlpQyX27qpV1b6Xy3ifPVi4UrbfWQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYG/8FAAD//64O3bE=") r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x40000120) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) finit_module(r3, 0x0, 0x0) 3m47.076108399s ago: executing program 6 (id=1698): keyctl$get_keyring_id(0x0, 0x0, 0xe65) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f00000000c0)=ANY=[], 0x4, 0x7d8, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioperm(0x3, 0x4, 0x1000008) semctl$GETALL(0x0, 0x0, 0x14, &(0x7f0000000100)=""/44) 3m45.010569807s ago: executing program 6 (id=1703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xf000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00d600", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8}}}}}}}, 0x0) 3m44.189176015s ago: executing program 6 (id=1706): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2700) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}, 0x40004) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000001c0)=""/65) 3m28.635428041s ago: executing program 45 (id=1706): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2700) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x1}, 0x40004) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000001c0)=""/65) 18.146895415s ago: executing program 1 (id=2330): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40080b0}, 0x4000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0x0, &(0x7f0000000040)=0xfd) fspick(0xffffffffffffffff, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000000080)) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x80, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r5}) syz_genetlink_get_family_id$nl80211(0x0, r1) 17.896579401s ago: executing program 9 (id=2331): write(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x203, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001a000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) 16.818290725s ago: executing program 9 (id=2333): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 16.714596608s ago: executing program 1 (id=2334): syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x2, 0x556, &(0x7f0000000580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 15.729796907s ago: executing program 9 (id=2337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0x80000000, 0x7, 0xffff]}, &(0x7f0000000240)=0x44) bind$inet(r2, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000080)={0x0, 0x80080}, 0x20) 15.624126173s ago: executing program 1 (id=2338): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff11000000000000000000000000000000000000000000000000000000000000000000000000000000000b2500feffffff11000000"]}, 0xe0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000140)=0x99ab) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) close_range(r2, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r12, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r12, 0x7a8, &(0x7f0000000040)={{@local}, @local, 0x8, 0x6, 0x343, 0xffffffff7fffffe1, 0x7, 0x100, 0x9}) 6.900104689s ago: executing program 2 (id=2352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x3f, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'EAC', 0x8000, 0x0, 0x0, @empty, @private2, [@hopopts={0x89}], "98efd03a7e60b6"}}}}}}}, 0x0) 6.38270653s ago: executing program 4 (id=2353): ioctl$sock_netdev_private(0xffffffffffffffff, 0x8927, &(0x7f0000001fc0)) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) 5.612777899s ago: executing program 2 (id=2354): write(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001a000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) 4.866128464s ago: executing program 0 (id=2355): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b46, &(0x7f0000000180)) 4.686257293s ago: executing program 4 (id=2356): r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x241}, &(0x7f0000000140), &(0x7f0000000100)) io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x1e, 0x0, 0x0) 4.283317879s ago: executing program 2 (id=2357): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) 4.056553385s ago: executing program 0 (id=2358): madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.749744657s ago: executing program 4 (id=2359): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 3.654324503s ago: executing program 9 (id=2360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) 3.53961347s ago: executing program 1 (id=2361): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x400c1) 3.265034445s ago: executing program 2 (id=2362): syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x2, 0x556, &(0x7f0000000580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 3.264727971s ago: executing program 0 (id=2363): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) recvfrom(r0, &(0x7f0000000580)=""/4096, 0x1000, 0x0, 0x0, 0x0) 2.790010377s ago: executing program 4 (id=2364): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000000c0)=""/92) 2.683159952s ago: executing program 9 (id=2365): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4480}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.033272472s ago: executing program 2 (id=2366): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8927, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) 1.93443679s ago: executing program 0 (id=2367): write(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001a000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) 1.876893511s ago: executing program 4 (id=2368): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) write(r0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) 1.826655393s ago: executing program 9 (id=2369): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) dup(0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r2, 0x200004) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000140)={0x8080000, 0x4, 0x44, 0x1, 0x80000003}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000180)={0x921, 0x8001, 0x0, 0x5, 0x6bc486f0, 0x9, 0x80, 0x4}, &(0x7f00000001c0)={0x8000, 0x0, 0x6, 0xf, 0x7f, 0x21e5, 0x7, 0xfffffffffffffffc}, &(0x7f0000000200)={0xd, 0x57, 0x0, 0x2, 0x6, 0x1, 0x7, 0x8}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x7f]}, 0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.395791783s ago: executing program 1 (id=2370): socket$nl_audit(0x10, 0x3, 0x9) unshare(0x2a020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 1.035083813s ago: executing program 4 (id=2371): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xc, 0x40, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r2, 0x5459, 0x0) 961.223028ms ago: executing program 0 (id=2372): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) 236.080444ms ago: executing program 2 (id=2373): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 138.081237ms ago: executing program 1 (id=2374): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=2375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) kernel console output (not intermixed with test programs): commended to keep mac addresses unique to avoid problems! [ 863.497328][T10879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.510122][T10879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.526657][T10879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.923876][T11082] loop3: detected capacity change from 0 to 64 [ 863.974342][T10879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.983917][T10879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.995020][T10879] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.004699][T10879] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.361951][T11100] netlink: 'syz.3.1476': attribute type 16 has an invalid length. [ 865.370718][T11100] netlink: 'syz.3.1476': attribute type 17 has an invalid length. [ 865.500170][T11100] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.522754][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.659795][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1478'. [ 866.879369][T11115] loop3: detected capacity change from 0 to 128 [ 866.943731][T11115] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 867.739581][T11124] loop9: detected capacity change from 0 to 1024 [ 867.892290][T11124] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 868.127116][T11124] Invalid ELF header len 10 [ 868.547762][T11139] loop3: detected capacity change from 0 to 64 [ 868.571071][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 869.389969][T11148] loop9: detected capacity change from 0 to 64 [ 869.450755][T11145] loop5: detected capacity change from 0 to 1024 [ 869.501062][T11145] EXT4-fs: Ignoring removed oldalloc option [ 869.508962][T11145] EXT4-fs: Ignoring removed orlov option [ 869.664189][T11145] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 869.809551][T11145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.025091][ T30] audit: type=1800 audit(1746245703.444:59): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1486" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 870.166457][T11145] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 870.575768][T10614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.380479][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.389325][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.545647][T11176] loop5: detected capacity change from 0 to 512 [ 871.740311][T11176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.754570][T11176] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 871.814677][ T4861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.822795][ T4861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.304454][ T5918] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 872.348809][T11186] loop9: detected capacity change from 0 to 1024 [ 872.464756][T11186] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 872.473336][T10614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.535671][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 872.547417][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 872.558757][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 872.572128][ T5918] usb 4-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 872.581829][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.841626][ T5918] usb 4-1: config 0 descriptor?? [ 872.851383][T11183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 873.312021][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 873.443071][ T5918] wacom 0003:056A:037A.0004: probe with driver wacom failed with error -22 [ 873.578347][ T5918] usb 4-1: USB disconnect, device number 43 [ 873.877443][T11204] loop7: detected capacity change from 0 to 64 [ 874.073010][ T30] audit: type=1326 audit(1746245707.504:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.9.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x7ffc0000 [ 874.257594][ T30] audit: type=1326 audit(1746245707.564:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.9.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7ff5539 code=0x7ffc0000 [ 874.398431][ T30] audit: type=1326 audit(1746245707.754:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.9.1499" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x0 [ 874.940431][T11213] loop5: detected capacity change from 0 to 1024 [ 874.978020][T11213] EXT4-fs: Ignoring removed nobh option [ 874.984122][T11213] EXT4-fs: inline encryption not supported [ 874.990223][T11213] EXT4-fs: Ignoring removed bh option [ 875.183228][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 875.436054][T11213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.732710][T11213] EXT4-fs warning (device loop5): ext4_rename_delete:3728: inode #12: comm syz.5.1502: Deleting old file: nlink 2, error=-2 [ 876.265315][T10614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.297503][T11238] loop5: detected capacity change from 0 to 256 [ 877.367037][T11238] exfat: Unknown parameter '²áSÌh_‚&†aÐúÊ^©Ë@RY »ÊécayrÍïFzQ>P߆º*Ù¹àV£µ8‡‰d|ëCüŸpÅIýÑ7°7ò"€T©U®ûT¹ªCHK; ^ ­j¡_—]Ñ7ò5³q•Yçb¯Yþ•ÉF' [ 877.663874][T11240] loop3: detected capacity change from 0 to 164 [ 877.795919][T11237] loop5: detected capacity change from 0 to 512 [ 878.483063][T11250] loop9: detected capacity change from 0 to 512 [ 878.604289][T11250] EXT4-fs (loop9): Invalid default hash set in the superblock [ 879.097882][ T9096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.520252][ T9096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.783923][ T9096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.950123][T11258] loop9: detected capacity change from 0 to 64 [ 880.012566][ T9096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.014479][T11259] loop5: detected capacity change from 0 to 64 [ 880.944271][ T9096] bridge_slave_1: left allmulticast mode [ 880.950211][ T9096] bridge_slave_1: left promiscuous mode [ 880.957264][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.058371][ T9096] bridge_slave_0: left allmulticast mode [ 881.065117][ T9096] bridge_slave_0: left promiscuous mode [ 881.071888][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.939214][ T9096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.984416][ T9096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.003830][ T9096] bond0 (unregistering): Released all slaves [ 882.685221][ T9096] hsr_slave_0: left promiscuous mode [ 882.734234][ T9096] hsr_slave_1: left promiscuous mode [ 882.742352][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.750848][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.828483][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.841135][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.982448][ T9096] veth1_macvtap: left promiscuous mode [ 882.988899][ T9096] veth0_macvtap: left promiscuous mode [ 882.995178][ T9096] veth1_vlan: left promiscuous mode [ 883.000777][ T9096] veth0_vlan: left promiscuous mode [ 883.451058][T11280] loop7: detected capacity change from 0 to 1024 [ 883.800166][ T5092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 883.849322][T11280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 883.858120][ T5092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 883.895635][ T5092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 883.937915][ T5092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 883.973085][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 884.422142][T11297] 9pnet_fd: Insufficient options for proto=fd [ 884.563009][T11298] loop9: detected capacity change from 0 to 764 [ 884.600337][ T9096] team0 (unregistering): Port device team_slave_1 removed [ 884.704557][ T9096] team0 (unregistering): Port device team_slave_0 removed [ 885.058939][T11300] loop5: detected capacity change from 0 to 1024 [ 885.162329][T10879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 885.261995][T11300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.870374][T11308] loop9: detected capacity change from 0 to 128 [ 886.036835][ T8401] Bluetooth: hci4: command tx timeout [ 886.070024][T10614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.146013][T11308] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 886.178337][T11308] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 886.930574][T11289] chnl_net:caif_netlink_parms(): no params data found [ 886.941442][T11320] loop5: detected capacity change from 0 to 64 [ 887.910723][T11327] loop7: detected capacity change from 0 to 256 [ 887.957357][T11327] exfat: Bad value for 'uid' [ 887.962250][T11327] exfat: Bad value for 'uid' [ 888.120253][ T8401] Bluetooth: hci4: command tx timeout [ 888.323988][ T5918] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 888.544768][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 888.573121][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 888.585094][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 888.596899][ T5918] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 888.606388][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.728239][ T5918] usb 6-1: config 0 descriptor?? [ 888.736896][T11330] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 888.777154][ T5918] hub 6-1:0.0: USB hub found [ 888.866782][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.878122][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.886870][T11289] bridge_slave_0: entered allmulticast mode [ 888.897142][T11289] bridge_slave_0: entered promiscuous mode [ 888.967489][ T5918] hub 6-1:0.0: 1 port detected [ 889.025145][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.032905][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.041550][T11289] bridge_slave_1: entered allmulticast mode [ 889.051810][T11289] bridge_slave_1: entered promiscuous mode [ 889.192134][ T5918] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 889.199129][ T5918] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 889.305054][ T5918] usbhid 6-1:0.0: can't add hid device: -71 [ 889.311762][ T5918] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 889.348564][T11334] loop7: detected capacity change from 0 to 1024 [ 889.389833][ T5918] usb 6-1: USB disconnect, device number 9 [ 889.435200][T11334] EXT4-fs: Ignoring removed nobh option [ 889.442366][T11334] EXT4-fs: Ignoring removed bh option [ 889.580730][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.630461][T11334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.676152][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.981680][T11289] team0: Port device team_slave_0 added [ 890.041541][T10879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.075256][T11289] team0: Port device team_slave_1 added [ 890.210962][ T8401] Bluetooth: hci4: command tx timeout [ 890.353724][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.360961][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.388610][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.523837][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.531054][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.557739][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.607712][ T9446] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 890.947388][T11346] 9pnet_fd: Insufficient options for proto=fd [ 891.028134][T11344] loop5: detected capacity change from 0 to 512 [ 891.309638][T11344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.323830][T11344] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 891.337185][T11289] hsr_slave_0: entered promiscuous mode [ 891.348323][T11289] hsr_slave_1: entered promiscuous mode [ 891.357318][T11289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 891.365293][T11289] Cannot create hsr debugfs directory [ 891.619360][T11353] loop9: detected capacity change from 0 to 2048 [ 891.811995][T11359] loop7: detected capacity change from 0 to 64 [ 891.879650][T11353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.032445][T10614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.272819][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.284249][ T8401] Bluetooth: hci4: command tx timeout [ 892.974373][T11370] loop5: detected capacity change from 0 to 64 [ 893.716261][T11289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 893.865572][T11289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 893.985331][T11289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 894.126727][T11289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 894.579410][T11383] loop5: detected capacity change from 0 to 1024 [ 894.746027][T11383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 894.766823][T11388] 9pnet_fd: Insufficient options for proto=fd [ 895.043692][T11383] Invalid ELF header len 10 [ 895.436479][T11289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.453813][T10614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 895.639802][T11289] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.752991][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.760700][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.901521][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.909250][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.464185][T11412] loop5: detected capacity change from 0 to 1024 [ 898.250361][T11289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.265669][T11421] loop9: detected capacity change from 0 to 512 [ 898.290899][T11421] EXT4-fs: Ignoring removed mblk_io_submit option [ 898.301804][T11421] EXT4-fs: inline encryption not supported [ 898.309600][T11421] EXT4-fs: Ignoring removed mblk_io_submit option [ 898.404259][T11421] EXT4-fs (loop9): Test dummy encryption mode enabled [ 898.411357][T11421] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 898.682343][T11421] EXT4-fs (loop9): 1 truncate cleaned up [ 898.693312][T11421] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.911690][T11289] veth0_vlan: entered promiscuous mode [ 898.969638][T11289] veth1_vlan: entered promiscuous mode [ 899.079719][T11431] loop5: detected capacity change from 0 to 64 [ 899.343112][T11289] veth0_macvtap: entered promiscuous mode [ 899.431927][T11421] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 899.448412][T11432] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 899.492184][T11289] veth1_macvtap: entered promiscuous mode [ 899.797109][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.808217][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.818603][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.832709][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.843761][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.854661][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.864963][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.875892][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.891523][T11289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.257448][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.266371][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.293911][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.366481][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.377355][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.387648][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.398687][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.408959][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.419811][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.430080][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.441036][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.460433][T11289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.738187][ T8401] Bluetooth: Wrong link type (-71) [ 900.928011][T11289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.937748][T11289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.947001][T11289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.959268][T11289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.187176][T11448] loop9: detected capacity change from 0 to 1024 [ 901.242930][T11448] EXT4-fs: Ignoring removed nobh option [ 901.249104][T11448] EXT4-fs: Ignoring removed bh option [ 901.455934][T11448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.820954][T11457] loop5: detected capacity change from 0 to 1024 [ 902.066925][T11457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 902.125224][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.427220][T11457] Invalid ELF header len 10 [ 902.936217][T10614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 903.075954][T11469] loop9: detected capacity change from 0 to 1024 [ 903.804073][T11476] loop5: detected capacity change from 0 to 512 [ 903.965146][T11476] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c11c, mo2=0002] [ 904.024826][T11476] EXT4-fs (loop5): orphan cleanup on readonly fs [ 904.088651][T11476] Quota error (device loop5): v2_read_file_info: Block with free entry 2 out of range (1, 0). [ 904.100264][T11476] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 904.144353][T11476] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 904.223724][ T5853] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 904.248793][T11476] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.1567: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 904.354613][T11476] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1567: couldn't read orphan inode 13 (err -117) [ 904.404687][ T5853] usb 8-1: Using ep0 maxpacket: 16 [ 904.414967][T11476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback. [ 904.428403][T11489] loop9: detected capacity change from 0 to 64 [ 904.476134][ T5853] usb 8-1: unable to get BOS descriptor or descriptor too short [ 904.528809][ T5853] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 904.542676][ T5853] usb 8-1: config 1 has no interface number 1 [ 904.551091][ T5853] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 904.639833][T11476] EXT4-fs (loop5): re-mounted 00000000-0000-0b00-0000-000000000000. [ 904.697198][ T5853] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 904.706819][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.716398][ T5853] usb 8-1: Product: syz [ 904.720819][ T5853] usb 8-1: Manufacturer: syz [ 904.727561][ T5853] usb 8-1: SerialNumber: syz [ 905.061616][T10614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0b00-0000-000000000000. [ 905.225693][ T5853] usb 8-1: 2:1 : no UAC_FORMAT_TYPE desc [ 905.447573][ T5853] usb 8-1: USB disconnect, device number 2 [ 905.844957][ T9943] udevd[9943]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.651837][T11508] loop7: detected capacity change from 0 to 128 [ 906.873999][T11508] syz.7.1574: attempt to access beyond end of device [ 906.873999][T11508] loop7: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 907.564251][ T30] audit: type=1326 audit(1746245740.984:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.9.1577" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff5539 code=0x0 [ 907.696698][T11522] loop5: detected capacity change from 0 to 1024 [ 908.129467][ T5853] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 908.344491][ T5853] usb 8-1: config 0 has an invalid interface number: 95 but max is 0 [ 908.353139][ T5853] usb 8-1: config 0 has no interface number 0 [ 908.359815][ T5853] usb 8-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 908.584169][ T5853] usb 8-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 908.593828][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.602110][ T5853] usb 8-1: Product: syz [ 908.606729][ T5853] usb 8-1: Manufacturer: syz [ 908.611590][ T5853] usb 8-1: SerialNumber: syz [ 908.659814][ T5853] usb 8-1: config 0 descriptor?? [ 908.668664][T11526] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 908.778402][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.786939][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.026264][ T5853] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 909.035469][ T5853] usb 8-1: MIDIStreaming interface descriptor not found [ 909.115634][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.124407][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.346605][ T5853] usb 8-1: USB disconnect, device number 3 [ 909.886852][ T9733] udevd[9733]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.383992][ T5853] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 911.661346][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.673042][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.683261][ T5853] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 911.696782][ T5853] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 911.709951][ T5853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.791087][ T5853] usb 8-1: config 0 descriptor?? [ 912.250123][T11558] loop9: detected capacity change from 0 to 512 [ 912.396504][ T5853] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 912.546692][T11558] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.560014][T11558] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 912.583724][ T5853] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 912.867455][ T5853] usb 8-1: USB disconnect, device number 4 [ 913.328626][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.879150][T11591] 9pnet: Could not find request transport: fdŽ\½Ñ‘×ÃÞ9©–Ö¶Fí÷¸ÃšŠF¤½cÊÀÑÊýÑxF½ß‡m”<ÙXèWºçÓ [ 916.224146][ T5853] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 916.423893][ T5853] usb 6-1: Using ep0 maxpacket: 8 [ 916.472156][ T5853] usb 6-1: unable to get BOS descriptor or descriptor too short [ 916.576541][ T5853] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.588514][ T5853] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 916.598559][ T5853] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 916.837442][ T5853] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 916.846874][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.855420][ T5853] usb 6-1: Product: syz [ 916.859802][ T5853] usb 6-1: Manufacturer: syz [ 916.864763][ T5853] usb 6-1: SerialNumber: syz [ 916.979714][T11603] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1598'. [ 920.287001][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1605'. [ 920.298402][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1605'. [ 920.312085][T11628] tc_dump_action: action bad kind [ 922.079548][ T5853] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 922.087255][ T5853] cdc_ncm 6-1:1.0: bind() failure [ 925.192442][ T8401] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 925.202586][ T8401] CPU: 1 UID: 0 PID: 8401 Comm: kworker/u9:0 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 925.202755][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 925.202894][ T8401] Workqueue: hci1 hci_rx_work [ 925.203100][ T8401] Call Trace: [ 925.203160][ T8401] [ 925.203240][ T8401] __dump_stack+0x26/0x30 [ 925.203419][ T8401] dump_stack_lvl+0x1df/0x270 [ 925.203611][ T8401] dump_stack+0x1e/0x25 [ 925.203775][ T8401] sysfs_create_dir_ns+0x46c/0x540 [ 925.203971][ T8401] kobject_add_internal+0xeed/0x1840 [ 925.204194][ T8401] kobject_add+0x2c1/0x410 [ 925.204422][ T8401] ? kmsan_get_metadata+0x105/0x1b0 [ 925.204595][ T8401] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 925.204779][ T8401] device_add+0xa70/0x1c10 [ 925.204987][ T8401] hci_conn_add_sysfs+0x15f/0x2f0 [ 925.205153][ T8401] le_conn_complete_evt+0x1b32/0x21b0 [ 925.205405][ T8401] hci_le_enh_conn_complete_evt+0x158/0x260 [ 925.205618][ T8401] hci_le_meta_evt+0x61a/0x8d0 [ 925.205804][ T8401] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 925.206016][ T8401] hci_event_packet+0xcb3/0x1df0 [ 925.206173][ T8401] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 925.206414][ T8401] hci_rx_work+0x9a8/0x12b0 [ 925.206610][ T8401] ? __pfx_hci_rx_work+0x10/0x10 [ 925.206782][ T8401] process_scheduled_works+0xb97/0x1d90 [ 925.207004][ T8401] worker_thread+0xedf/0x1590 [ 925.207194][ T8401] kthread+0xd59/0xf00 [ 925.207356][ T8401] ? __pfx_worker_thread+0x10/0x10 [ 925.207533][ T8401] ? __pfx_kthread+0x10/0x10 [ 925.207691][ T8401] ret_from_fork+0x6e/0x90 [ 925.207872][ T8401] ? __pfx_kthread+0x10/0x10 [ 925.208032][ T8401] ret_from_fork_asm+0x1a/0x30 [ 925.208274][ T8401] [ 925.382612][ T8401] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 925.399726][ T8401] Bluetooth: hci1: failed to register connection device [ 926.535866][T11666] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1615'. [ 926.545279][T11666] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1615'. [ 929.242600][T11676] loop9: detected capacity change from 0 to 512 [ 929.461919][T11676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 929.475795][T11676] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.982633][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 930.973156][T11686] loop9: detected capacity change from 0 to 256 [ 931.257085][T11686] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 931.600083][T11686] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 931.610316][T11686] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 931.618754][T11686] UDF-fs: Scanning with blocksize 512 failed [ 931.845532][T11686] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 932.230079][T11686] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 932.908062][T11703] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 932.934926][T11703] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 932.963976][T11703] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 932.995811][T11703] Bluetooth: hci3: command 0x0406 tx timeout [ 933.018540][T11703] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 933.036386][T11703] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 935.235858][ T5092] Bluetooth: hci5: command tx timeout [ 936.319381][T11700] chnl_net:caif_netlink_parms(): no params data found [ 937.323923][ T5092] Bluetooth: hci5: command tx timeout [ 938.040274][T11742] loop9: detected capacity change from 0 to 1024 [ 938.264123][T11742] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 938.368066][T11700] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.375886][T11700] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.383667][T11700] bridge_slave_0: entered allmulticast mode [ 938.392244][T11700] bridge_slave_0: entered promiscuous mode [ 938.408105][T11700] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.415880][T11700] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.424288][T11700] bridge_slave_1: entered allmulticast mode [ 938.439099][T11700] bridge_slave_1: entered promiscuous mode [ 938.546332][T11742] Invalid ELF header len 10 [ 938.917972][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 938.959295][T11700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.034911][T11700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.404642][ T5092] Bluetooth: hci5: command tx timeout [ 939.558312][T11700] team0: Port device team_slave_0 added [ 939.624347][ T8769] kernel write not supported for file /280/net/sockstat (pid: 8769 comm: kworker/0:2) [ 939.698794][T11700] team0: Port device team_slave_1 added [ 940.061002][ T8769] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 940.110100][T11700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.117825][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.144445][T11700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.289307][ T8769] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.299760][ T8769] usb 10-1: config 0 interface 0 has no altsetting 0 [ 940.306802][ T8769] usb 10-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 940.316279][ T8769] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.417987][T11700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.425413][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.451940][T11700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.503898][ T8769] usb 10-1: config 0 descriptor?? [ 940.971634][ T8769] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0 [ 940.980229][ T8769] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0 [ 940.989021][ T8769] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0 [ 941.001384][ T8769] logitech-djreceiver 0003:046D:C532.0006: unknown main item tag 0x0 [ 941.304813][ T5872] usb 10-1: USB disconnect, device number 11 [ 941.354321][T11700] hsr_slave_0: entered promiscuous mode [ 941.363836][T11700] hsr_slave_1: entered promiscuous mode [ 941.371910][T11700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.380661][T11700] Cannot create hsr debugfs directory [ 941.484372][ T5092] Bluetooth: hci5: command tx timeout [ 944.063229][T11778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 944.182317][T11776] loop9: detected capacity change from 0 to 1024 [ 944.320397][T11700] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 944.557625][T11700] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 944.698159][T11700] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 944.803844][T11776] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 944.917607][T11700] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 945.211694][T11703] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 945.234825][T11703] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 945.251973][T11703] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 945.290983][T11703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 945.328281][T11703] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 945.905611][T11776] Invalid ELF header len 10 [ 946.339720][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 947.184707][T11786] chnl_net:caif_netlink_parms(): no params data found [ 947.476180][T11703] Bluetooth: hci6: command tx timeout [ 947.555683][T11799] loop9: detected capacity change from 0 to 164 [ 948.491631][T11700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.708567][T11700] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.884379][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.891788][ T9096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.017616][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.025175][ T9096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.561868][T11703] Bluetooth: hci6: command tx timeout [ 949.656843][T11810] loop9: detected capacity change from 0 to 8 [ 950.114889][T11810] SQUASHFS error: Failed to read block 0x2d7: -5 [ 950.121534][T11810] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 951.316756][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.324389][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.332063][T11786] bridge_slave_0: entered allmulticast mode [ 951.345230][T11786] bridge_slave_0: entered promiscuous mode [ 951.621646][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.629619][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.638291][T11786] bridge_slave_1: entered allmulticast mode [ 951.651748][T11786] bridge_slave_1: entered promiscuous mode [ 951.694976][T11703] Bluetooth: hci6: command tx timeout [ 952.003932][T11822] loop9: detected capacity change from 0 to 512 [ 952.109050][T11822] EXT4-fs: Ignoring removed nobh option [ 952.196190][T11786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.408632][T11822] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1651: invalid indirect mapped block 256 (level 2) [ 952.458578][T11786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.524640][T11822] EXT4-fs (loop9): 2 truncates cleaned up [ 952.533781][T11822] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.780150][T11700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.187351][T11786] team0: Port device team_slave_0 added [ 953.374509][T11786] team0: Port device team_slave_1 added [ 953.716425][T11703] Bluetooth: hci6: command tx timeout [ 954.144076][T11786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.151441][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.178035][T11786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.529784][T11786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.537535][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.564169][T11786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.995051][T11825] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 955.967994][T11786] hsr_slave_0: entered promiscuous mode [ 955.980496][T11786] hsr_slave_1: entered promiscuous mode [ 955.989892][T11786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 955.997847][T11786] Cannot create hsr debugfs directory [ 956.264906][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.526273][ T9495] usb 6-1: USB disconnect, device number 10 [ 957.810647][ T4861] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.839831][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'. [ 957.987595][ T4861] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.211832][ T4861] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.412799][ T4861] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.955231][ T5853] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 959.131456][T11700] veth0_vlan: entered promiscuous mode [ 959.177439][ T5853] usb 10-1: Using ep0 maxpacket: 16 [ 959.258584][ T5853] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 959.267843][ T5853] usb 10-1: config 0 has no interface number 0 [ 959.404501][ T5853] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 959.414458][ T5853] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.423124][ T5853] usb 10-1: Product: syz [ 959.431840][ T5853] usb 10-1: Manufacturer: syz [ 959.438116][ T5853] usb 10-1: SerialNumber: syz [ 959.567235][ T5853] usb 10-1: config 0 descriptor?? [ 959.641126][ T5853] asix 10-1:0.251: probe with driver asix failed with error -22 [ 959.685339][ T4861] bridge_slave_1: left allmulticast mode [ 959.691471][ T4861] bridge_slave_1: left promiscuous mode [ 959.698538][ T4861] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.857661][ T4861] bridge_slave_0: left allmulticast mode [ 959.863803][ T4861] bridge_slave_0: left promiscuous mode [ 959.870649][ T4861] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.886857][ T5853] usb 10-1: USB disconnect, device number 12 [ 960.741951][ T4861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.856498][ T4861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.934617][ T4861] bond0 (unregistering): Released all slaves [ 961.161102][T11700] veth1_vlan: entered promiscuous mode [ 961.672238][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.681843][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 961.830126][T11882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1662'. [ 962.154539][ T4861] hsr_slave_0: left promiscuous mode [ 962.218632][ T4861] hsr_slave_1: left promiscuous mode [ 962.227347][ T4861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.235647][ T4861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.300573][ T4861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.309951][ T4861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.381896][T11703] Bluetooth: hci2: Malformed LE Event: 0x1d [ 962.486176][ T4861] veth1_macvtap: left promiscuous mode [ 962.492207][ T4861] veth0_macvtap: left promiscuous mode [ 962.500805][ T4861] veth1_vlan: left promiscuous mode [ 962.506389][ T4861] veth0_vlan: left promiscuous mode [ 963.470718][ T4861] team0 (unregistering): Port device team_slave_1 removed [ 963.640765][ T4861] team0 (unregistering): Port device team_slave_0 removed [ 965.029552][T11786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 965.129197][T11700] veth0_macvtap: entered promiscuous mode [ 965.192484][T11786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 965.375701][T11700] veth1_macvtap: entered promiscuous mode [ 965.406017][T11786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 965.486430][T11786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 965.727154][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.738075][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.748318][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.759225][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.769414][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.784265][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.795721][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 965.806570][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 965.822001][T11700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.355142][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.366175][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.382990][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.397735][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.426689][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.437540][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.447768][T11700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.458625][T11700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.474744][T11700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.778445][T11700] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.787754][T11700] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.801212][T11700] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.811362][T11700] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.130033][T11911] loop9: detected capacity change from 0 to 128 [ 967.388376][T11911] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 967.476245][T11911] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 967.657969][T11786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.876243][T11786] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.085814][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.093635][ T3675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.252069][ T3675] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.259633][ T3675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.533047][ T9446] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 968.710244][T11786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 971.156292][T11786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.287188][T11948] loop9: detected capacity change from 0 to 1024 [ 971.428414][T11948] hfsplus: failed to load root directory [ 971.914319][ T3675] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.131769][ T3675] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.294761][ T3675] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.512156][ T3675] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.931240][T11947] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 973.220134][ T3675] bridge_slave_1: left allmulticast mode [ 973.226295][ T3675] bridge_slave_1: left promiscuous mode [ 973.232950][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.347740][ T3675] bridge_slave_0: left allmulticast mode [ 973.360635][ T3675] bridge_slave_0: left promiscuous mode [ 973.370557][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.095984][ T3675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.161155][ T3675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.240942][ T3675] bond0 (unregistering): Released all slaves [ 974.542091][T11983] netlink: 'syz.9.1680': attribute type 1 has an invalid length. [ 974.550266][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1680'. [ 975.580076][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1683'. [ 975.794863][ T3675] hsr_slave_0: left promiscuous mode [ 975.834643][ T3675] hsr_slave_1: left promiscuous mode [ 975.843136][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.852912][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.928569][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.941393][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.109284][ T3675] veth1_macvtap: left promiscuous mode [ 976.118626][ T3675] veth0_macvtap: left promiscuous mode [ 976.124876][ T3675] veth1_vlan: left promiscuous mode [ 976.130466][ T3675] veth0_vlan: left promiscuous mode [ 976.897571][ T3675] team0 (unregistering): Port device team_slave_1 removed [ 977.032256][ T3675] team0 (unregistering): Port device team_slave_0 removed [ 977.480874][T11786] veth0_vlan: entered promiscuous mode [ 977.802017][T11786] veth1_vlan: entered promiscuous mode [ 977.817777][ T9096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.825940][ T9096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.301779][ T3675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.310165][ T3675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.389542][T11786] veth0_macvtap: entered promiscuous mode [ 978.462997][T11786] veth1_macvtap: entered promiscuous mode [ 978.714849][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.726629][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.736973][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.748112][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.758346][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.769299][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.782715][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.794682][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.810088][T11786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.108750][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.119711][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.130124][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.141353][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.151594][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.162617][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.173007][T11786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.183877][T11786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.203193][T11786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.427007][T11786] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.436389][T11786] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.445663][T11786] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.454919][T11786] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.122578][T12049] loop6: detected capacity change from 0 to 1024 [ 981.279825][T12049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 981.530858][T12055] loop9: detected capacity change from 0 to 2048 [ 981.563037][T12049] Invalid ELF header len 10 [ 981.627108][T12055] EXT4-fs: Ignoring removed bh option [ 981.857695][T12055] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 982.046681][T11700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 982.345357][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.161147][T12073] loop6: detected capacity change from 0 to 764 [ 983.263233][T12073] iso9660: Unknown parameter 'TIPC' [ 986.884598][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.892728][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.132841][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.141153][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.229668][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.240001][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.396085][ T30] audit: type=1326 audit(1746245820.824:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 987.418907][ T30] audit: type=1326 audit(1746245820.824:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 987.441655][ T30] audit: type=1326 audit(1746245820.834:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 987.464088][ T30] audit: type=1326 audit(1746245820.834:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 987.490982][ T30] audit: type=1326 audit(1746245820.834:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 987.514904][ T30] audit: type=1326 audit(1746245820.834:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 987.537504][ T30] audit: type=1326 audit(1746245820.834:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 987.560153][ T30] audit: type=1326 audit(1746245820.834:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 987.582756][ T30] audit: type=1326 audit(1746245820.864:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 987.609636][ T30] audit: type=1326 audit(1746245820.864:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12123 comm="syz.0.1711" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 990.254258][ T9495] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 990.494052][ T9495] usb 1-1: Using ep0 maxpacket: 16 [ 990.579352][ T9495] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.590869][ T9495] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.601127][ T9495] usb 1-1: config 0 interface 0 has no altsetting 0 [ 990.608407][ T9495] usb 1-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 990.617937][ T9495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.678999][T12159] loop4: detected capacity change from 0 to 256 [ 990.775345][T12159] exfat: Deprecated parameter 'utf8' [ 990.898978][ T9495] usb 1-1: config 0 descriptor?? [ 990.911690][T12159] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5040162d, utbl_chksum : 0xe619d30d) [ 991.419429][ T9495] wacom 0003:056A:00CC.0007: probe with driver wacom failed with error -22 [ 991.614638][ T5853] usb 1-1: USB disconnect, device number 64 [ 994.104990][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 994.270331][T12180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 994.642559][ T5853] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 994.870063][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 994.920671][ T5853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.932762][ T5853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.943470][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 994.950430][ T5853] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 994.962551][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.131590][ T5853] usb 5-1: config 0 descriptor?? [ 995.304222][T12188] loop9: detected capacity change from 0 to 1024 [ 995.651561][ T5853] a4tech 0003:09DA:000A.0008: unbalanced collection at end of report description [ 995.722479][ T5853] a4tech 0003:09DA:000A.0008: parse failed [ 995.729277][ T5853] a4tech 0003:09DA:000A.0008: probe with driver a4tech failed with error -22 [ 995.883949][ T9495] usb 5-1: USB disconnect, device number 31 [ 996.730216][T12195] loop9: detected capacity change from 0 to 64 [ 996.778628][T11703] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 996.788831][T11703] CPU: 0 UID: 0 PID: 11703 Comm: kworker/u9:2 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 996.788990][T11703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 996.789064][T11703] Workqueue: hci2 hci_rx_work [ 996.789182][T11703] Call Trace: [ 996.789217][T11703] [ 996.789251][T11703] __dump_stack+0x26/0x30 [ 996.789375][T11703] dump_stack_lvl+0x1df/0x270 [ 996.789493][T11703] dump_stack+0x1e/0x25 [ 996.789597][T11703] sysfs_create_dir_ns+0x46c/0x540 [ 996.789725][T11703] kobject_add_internal+0xeed/0x1840 [ 996.789882][T11703] kobject_add+0x2c1/0x410 [ 996.790022][T11703] ? kmsan_get_metadata+0x105/0x1b0 [ 996.790137][T11703] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 996.790258][T11703] device_add+0xa70/0x1c10 [ 996.790405][T11703] hci_conn_add_sysfs+0x15f/0x2f0 [ 996.790512][T11703] le_conn_complete_evt+0x1b32/0x21b0 [ 996.790669][T11703] hci_le_enh_conn_complete_evt+0x158/0x260 [ 996.790809][T11703] hci_le_meta_evt+0x61a/0x8d0 [ 996.790930][T11703] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 996.791072][T11703] hci_event_packet+0xcb3/0x1df0 [ 996.791179][T11703] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 996.791327][T11703] hci_rx_work+0x9a8/0x12b0 [ 996.791463][T11703] ? __pfx_hci_rx_work+0x10/0x10 [ 996.791576][T11703] process_scheduled_works+0xb97/0x1d90 [ 996.791723][T11703] worker_thread+0xedf/0x1590 [ 996.791849][T11703] kthread+0xd59/0xf00 [ 996.791953][T11703] ? __pfx_worker_thread+0x10/0x10 [ 996.792070][T11703] ? __pfx_kthread+0x10/0x10 [ 996.792175][T11703] ret_from_fork+0x6e/0x90 [ 996.792293][T11703] ? __pfx_kthread+0x10/0x10 [ 996.792407][T11703] ret_from_fork_asm+0x1a/0x30 [ 996.792543][T11703] [ 996.792622][T11703] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 996.984321][T11703] Bluetooth: hci2: failed to register connection device [ 997.770857][T12204] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1738'. [ 997.780942][T12204] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1738'. [ 999.883948][ T5853] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1000.086596][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 1000.113746][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.113890][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.222760][ T5853] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1000.222923][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.223051][ T5853] usb 5-1: Product: syz [ 1000.223159][ T5853] usb 5-1: Manufacturer: syz [ 1000.223283][ T5853] usb 5-1: SerialNumber: syz [ 1000.498178][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1000.528716][ T5853] usb 5-1: 0:2 : does not exist [ 1000.623526][ T5853] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1000.814793][ T5853] usb 5-1: USB disconnect, device number 32 [ 1000.929884][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.155758][T11853] udevd[11853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.166070][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1001.216915][ T9] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 1001.225356][ T9] usb 1-1: Manufacturer: syz [ 1001.230108][ T9] usb 1-1: SerialNumber: syz [ 1001.533937][ T9] usb 1-1: config 0 descriptor?? [ 1001.792853][ T9] usb 1-1: USB disconnect, device number 65 [ 1002.187627][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1002.202760][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1002.217967][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1002.241096][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1002.263578][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1002.518740][T12240] loop4: detected capacity change from 0 to 64 [ 1004.355303][T11703] Bluetooth: hci1: command tx timeout [ 1004.515348][T12234] chnl_net:caif_netlink_parms(): no params data found [ 1006.438459][T11703] Bluetooth: hci1: command tx timeout [ 1007.148215][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.157693][T12234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.165785][T12234] bridge_slave_0: entered allmulticast mode [ 1007.175752][T12234] bridge_slave_0: entered promiscuous mode [ 1007.331934][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.339593][T12234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.354697][T12234] bridge_slave_1: entered allmulticast mode [ 1007.363195][T12234] bridge_slave_1: entered promiscuous mode [ 1007.374238][T12279] loop9: detected capacity change from 0 to 1024 [ 1007.474923][T12279] EXT4-fs: Ignoring removed oldalloc option [ 1007.481779][T12279] ext2: Unknown parameter 'noacl' [ 1007.490865][T12282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 1008.116662][T12234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.241162][T12234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.515326][ T5092] Bluetooth: hci1: command tx timeout [ 1008.808456][T12234] team0: Port device team_slave_0 added [ 1008.894931][T12234] team0: Port device team_slave_1 added [ 1009.095435][ T9495] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1009.243682][T12234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.250988][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.277680][T12234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.314953][T12295] loop9: detected capacity change from 0 to 2048 [ 1009.323173][ T9495] usb 5-1: Using ep0 maxpacket: 8 [ 1009.345249][ T9495] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1009.353999][ T9495] usb 5-1: config 179 has an invalid descriptor of length 48, skipping remainder of the config [ 1009.365291][ T9495] usb 5-1: config 179 has no interface number 0 [ 1009.371854][ T9495] usb 5-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1009.385667][ T9495] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1009.392873][ T9495] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1009.407379][ T9495] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.423715][T12295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1009.562922][T12234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.571023][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.597770][T12234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.795075][ T5092] Bluetooth: hci4: command 0x0406 tx timeout [ 1009.868874][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1009.887606][ T9495] usb 5-1: USB disconnect, device number 33 [ 1010.069445][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1010.081814][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 254, changing to 11 [ 1010.093721][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 58848, setting to 1024 [ 1010.105441][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1010.117475][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.201736][T12302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1768'. [ 1010.341192][T12234] hsr_slave_0: entered promiscuous mode [ 1010.355415][T12234] hsr_slave_1: entered promiscuous mode [ 1010.365111][T12234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.373008][T12234] Cannot create hsr debugfs directory [ 1010.401002][T12295] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1010.471586][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1010.480982][ T9] usb 10-1: invalid MIDI out EP 0 [ 1010.610640][T11703] Bluetooth: hci1: command tx timeout [ 1010.858141][ T9] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1010.955050][ T9] usb 10-1: USB disconnect, device number 13 [ 1010.995258][T11853] udevd[11853]: setting owner of /dev/bus/usb/010/013 to uid=0, gid=0 failed: No such file or directory [ 1011.494467][T12309] udevd[12309]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.862893][T12319] loop9: detected capacity change from 0 to 2048 [ 1013.074106][T11703] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1013.085965][T11703] Bluetooth: hci2: Injecting HCI hardware error event [ 1013.097518][ T5092] Bluetooth: hci2: hardware error 0x00 [ 1013.162181][T12319] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.175769][T12319] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.468297][ T30] audit: type=1800 audit(1746245846.904:74): pid=12319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1771" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1013.537758][T12234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1013.604677][T12234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1013.750696][T12234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1013.809967][T12234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1014.461498][T12339] loop4: detected capacity change from 0 to 256 [ 1015.159534][ T5092] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1015.566665][ T30] audit: type=1800 audit(1746245848.964:75): pid=12328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1771" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1015.675420][T12234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.910455][T12234] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.062594][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.070426][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.238577][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.246323][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.417232][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1016.644749][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.690446][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1016.725237][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1016.734093][ T9] usb 5-1: config 179 has an invalid descriptor of length 48, skipping remainder of the config [ 1016.744954][ T9] usb 5-1: config 179 has no interface number 0 [ 1016.751504][ T9] usb 5-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1016.765875][ T9] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1016.775144][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1016.785151][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.156338][ T9] usb 5-1: USB disconnect, device number 34 [ 1019.088748][T12369] veth3: entered allmulticast mode [ 1019.358558][T12376] input: syz1 as /devices/virtual/input/input20 [ 1019.438369][T12234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.530120][T12234] veth0_vlan: entered promiscuous mode [ 1020.581360][T12234] veth1_vlan: entered promiscuous mode [ 1020.730061][ T9096] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.982243][ T9096] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.139261][ T9096] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.312638][T12234] veth0_macvtap: entered promiscuous mode [ 1021.368402][ T9096] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.414493][T12234] veth1_macvtap: entered promiscuous mode [ 1021.720191][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.732202][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.742558][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.753602][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.763805][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.774659][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.784950][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.802948][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.815019][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.825834][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.842292][T12234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.912649][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.923702][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.933962][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.944800][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.955838][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.967750][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.978079][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.989016][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.002882][T12234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.014837][T12234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.030356][T12234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.102892][T12234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.114105][T12234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.123705][T12234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.132733][T12234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.254255][ T9096] bridge_slave_1: left allmulticast mode [ 1022.260330][ T9096] bridge_slave_1: left promiscuous mode [ 1022.269078][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.413956][ T9096] bridge_slave_0: left allmulticast mode [ 1022.420018][ T9096] bridge_slave_0: left promiscuous mode [ 1022.426923][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.453650][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1022.648221][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1022.695975][ T9] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1022.704907][ T9] usb 10-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 1022.718559][ T9] usb 10-1: config 179 has no interface number 0 [ 1022.726283][ T9] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1022.738101][ T9] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1022.750061][ T9] usb 10-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1022.763940][ T9] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1022.771221][ T9] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1022.781280][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.116668][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.127932][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.445510][ T9] usb 10-1: USB disconnect, device number 14 [ 1023.668724][ T9096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.704992][ T9096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.756552][ T9096] bond0 (unregistering): Released all slaves [ 1024.817279][ T9096] hsr_slave_0: left promiscuous mode [ 1024.864065][ T9096] hsr_slave_1: left promiscuous mode [ 1024.872382][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.880420][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.971236][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.979347][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.104293][ T9096] veth1_macvtap: left promiscuous mode [ 1025.110288][ T9096] veth0_macvtap: left promiscuous mode [ 1025.116498][ T9096] veth1_vlan: left promiscuous mode [ 1025.122133][ T9096] veth0_vlan: left promiscuous mode [ 1025.132388][T12432] loop4: detected capacity change from 0 to 256 [ 1026.081239][ T9096] team0 (unregistering): Port device team_slave_1 removed [ 1026.136048][ T9096] team0 (unregistering): Port device team_slave_0 removed [ 1027.042576][T12444] loop9: detected capacity change from 0 to 512 [ 1027.352132][T12444] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1027.360501][T12444] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1027.403657][T12449] loop4: detected capacity change from 0 to 512 [ 1027.519082][T12444] System zones: 0-1, 15-15, 18-18, 34-34 [ 1027.566107][T12444] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1027.572935][T12444] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 1027.582932][T12444] EXT4-fs warning (device loop9): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1027.598112][T12444] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 1027.614441][T12449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1027.705839][T12444] EXT4-fs error (device loop9): ext4_orphan_get:1416: comm syz.9.1806: bad orphan inode 16 [ 1027.787026][T12444] ext4_test_bit(bit=15, block=18) = 1 [ 1027.792929][T12444] is_bad_inode(inode)=0 [ 1027.800099][T12444] NEXT_ORPHAN(inode)=0 [ 1027.805382][T12444] max_ino=32 [ 1027.812803][T12444] i_nlink=2 [ 1027.822420][T12444] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1027.841409][T12449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.854950][T12449] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.228645][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.318410][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.009548][T12475] loop4: detected capacity change from 0 to 8 [ 1029.123681][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1029.283738][ T5853] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1029.334181][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1029.376187][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1029.384464][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1029.393993][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.497490][ T9] usb 1-1: config 0 descriptor?? [ 1029.526230][ T5853] usb 10-1: Using ep0 maxpacket: 8 [ 1029.595662][ T5853] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1029.604678][ T5853] usb 10-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 1029.615810][ T5853] usb 10-1: config 179 has no interface number 0 [ 1029.622763][ T5853] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1029.634928][ T5853] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1029.647139][ T5853] usb 10-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1029.661189][ T5853] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1029.668946][ T5853] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1029.680382][ T5853] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.059831][ T9] hid (null): report_id 0 is invalid [ 1030.344805][ T9] usb 1-1: USB disconnect, device number 66 [ 1030.455779][ T24] usb 10-1: USB disconnect, device number 15 [ 1031.349621][T12499] loop4: detected capacity change from 0 to 256 [ 1031.561808][T12503] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1818'. [ 1031.839685][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1819'. [ 1031.859735][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1819'. [ 1031.976533][T12499] exFAT-fs (loop4): start_clu is invalid cluster(0x400) [ 1032.924042][ T3933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.932308][ T3933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.301081][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.310299][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.788170][T12528] loop9: detected capacity change from 0 to 2048 [ 1034.050869][T12528] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.064371][T12528] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.265227][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1034.285695][ T5092] Bluetooth: hci0: link tx timeout [ 1034.461047][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1034.482179][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.497472][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.508972][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1034.516663][ T9] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1034.526402][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.711239][ T9] usb 5-1: config 0 descriptor?? [ 1035.035289][T12547] loop2: detected capacity change from 0 to 256 [ 1035.120969][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.159701][ T9] a4tech 0003:09DA:000A.000A: unbalanced collection at end of report description [ 1035.259708][ T9] a4tech 0003:09DA:000A.000A: parse failed [ 1035.266391][ T9] a4tech 0003:09DA:000A.000A: probe with driver a4tech failed with error -22 [ 1035.275921][T12547] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 1035.289973][T12547] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1035.435405][ T9] usb 5-1: USB disconnect, device number 35 [ 1035.972304][T12555] loop9: detected capacity change from 0 to 512 [ 1036.144072][T12555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1036.360082][T12555] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1036.373783][T12555] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.142353][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.129996][T12582] loop9: detected capacity change from 0 to 256 [ 1038.432482][T12582] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1039.466528][T12589] loop2: detected capacity change from 0 to 8192 [ 1039.591025][T12589] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1039.616111][T12601] loop9: detected capacity change from 0 to 256 [ 1039.717860][ T30] audit: type=1800 audit(1746245873.144:76): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1841" name="bus" dev="loop2" ino=64 res=0 errno=0 [ 1039.738997][ T30] audit: type=1804 audit(1746245873.154:77): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1841" name="/newroot/3/file0/bus" dev="loop2" ino=64 res=1 errno=0 [ 1039.761528][ T30] audit: type=1800 audit(1746245873.154:78): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1841" name="bus" dev="loop2" ino=64 res=0 errno=0 [ 1041.004370][ T5092] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1041.013002][ T5092] Bluetooth: hci6: Injecting HCI hardware error event [ 1041.022121][ T5092] Bluetooth: hci6: hardware error 0x00 [ 1041.059603][T12612] loop4: detected capacity change from 0 to 512 [ 1041.286948][T12612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1041.464202][T12612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.477939][T12612] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1042.320081][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.030439][T12647] loop2: detected capacity change from 0 to 512 [ 1043.116839][T12647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1043.183662][ T5092] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1043.235383][T12647] EXT4-fs (loop2): 1 truncate cleaned up [ 1043.243863][T12647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.447107][T12654] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1043.984754][ T24] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 1044.091625][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.191273][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1858'. [ 1044.303711][ T24] usb 1-1: config 0 has no interfaces? [ 1044.404020][ T24] usb 1-1: config 0 has no interfaces? [ 1044.460271][ T24] usb 1-1: config 0 has no interfaces? [ 1044.538772][ T24] usb 1-1: string descriptor 0 read error: -22 [ 1044.545951][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1044.555498][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.707032][ T24] usb 1-1: config 0 descriptor?? [ 1044.982542][T12663] loop2: detected capacity change from 0 to 256 [ 1044.990636][ T5853] usb 1-1: USB disconnect, device number 67 [ 1046.624572][T12678] loop2: detected capacity change from 0 to 512 [ 1046.745747][T12678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1047.089313][T12678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.102715][T12678] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.866130][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.904102][T12702] loop9: detected capacity change from 0 to 128 [ 1049.107432][T12702] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1049.272130][T12702] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.240743][ T9446] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1050.842764][T12723] loop9: detected capacity change from 0 to 256 [ 1053.295670][T12739] loop9: detected capacity change from 0 to 4096 [ 1053.352141][T12742] loop4: detected capacity change from 0 to 512 [ 1053.374011][T12739] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1053.454622][T12742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1053.674269][T12742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.687673][T12742] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.781232][T12739] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1054.528907][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.351450][T12772] loop4: detected capacity change from 0 to 128 [ 1056.475103][T12766] orangefs_mount: mount request failed with -4 [ 1056.567641][T12772] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1056.675763][T12772] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.076443][T12779] IPv6: addrconf: prefix option has invalid lifetime [ 1057.141245][T12782] IPv6: addrconf: prefix option has invalid lifetime [ 1057.680869][T11786] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1064.009169][T12835] loop4: detected capacity change from 0 to 128 [ 1064.144025][T12835] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1064.164194][T12835] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1065.184750][T11786] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1065.840069][T12848] loop4: detected capacity change from 0 to 256 [ 1066.196270][T12851] overlayfs: failed to clone upperpath [ 1067.524137][ T30] audit: type=1326 audit(1746245900.944:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12865 comm="syz.4.1904" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x0 [ 1067.909720][T12867] loop2: detected capacity change from 0 to 2048 [ 1068.024946][T12867] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1068.153245][T12310] udevd[12310]: incorrect nilfs2 checksum on /dev/loop2 [ 1068.226956][T12876] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1068.383575][ T30] audit: type=1800 audit(1746245901.804:80): pid=12878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1905" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1070.373868][ T30] audit: type=1800 audit(1746245903.794:81): pid=12867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1905" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1071.743691][ T30] audit: type=1326 audit(1746245905.154:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 1071.911268][T12897] loop2: detected capacity change from 0 to 128 [ 1071.919978][ T30] audit: type=1326 audit(1746245905.224:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 1071.942933][ T30] audit: type=1326 audit(1746245905.284:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 1071.972275][ T30] audit: type=1326 audit(1746245905.294:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 1071.996853][ T30] audit: type=1326 audit(1746245905.294:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 1072.019551][ T30] audit: type=1326 audit(1746245905.304:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 1072.042077][ T30] audit: type=1326 audit(1746245905.304:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc8567 code=0x7ffc0000 [ 1072.331235][T12897] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1072.364787][T12897] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.671139][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 1072.671216][ T30] audit: type=1326 audit(1746245906.104:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12892 comm="syz.0.1913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc8539 code=0x7ffc0000 [ 1072.729361][T12904] loop4: detected capacity change from 0 to 256 [ 1073.260586][T12234] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1073.773604][T12815] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1074.021098][T12815] usb 1-1: config 0 has no interfaces? [ 1074.027103][T12815] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1074.036642][T12815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.136322][T12815] usb 1-1: config 0 descriptor?? [ 1074.429565][T12815] usb 1-1: USB disconnect, device number 68 [ 1074.666899][T12921] bridge0: port 3(syz_tun) entered blocking state [ 1074.674353][T12921] bridge0: port 3(syz_tun) entered disabled state [ 1074.681618][T12921] syz_tun: entered allmulticast mode [ 1074.691000][T12921] syz_tun: entered promiscuous mode [ 1074.698840][T12921] bridge0: port 3(syz_tun) entered blocking state [ 1074.705929][T12921] bridge0: port 3(syz_tun) entered forwarding state [ 1074.909801][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'. [ 1074.919264][T12921] syz_tun: left allmulticast mode [ 1074.924682][T12921] syz_tun: left promiscuous mode [ 1074.930873][T12921] bridge0: port 3(syz_tun) entered disabled state [ 1075.104006][T12921] bridge_slave_1: left allmulticast mode [ 1075.109967][T12921] bridge_slave_1: left promiscuous mode [ 1075.117691][T12921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.196235][T12921] bridge_slave_0: left allmulticast mode [ 1075.202370][T12921] bridge_slave_0: left promiscuous mode [ 1075.209399][T12921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.911305][T12940] loop9: detected capacity change from 0 to 1024 [ 1077.089814][T12940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1077.233948][T12940] Invalid ELF header len 10 [ 1077.616379][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1078.061784][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'. [ 1078.188936][ T30] audit: type=1326 audit(1746245911.614:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.1.1926" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 1079.214092][T12959] infiniband syz1: set active [ 1079.219072][T12959] infiniband syz1: added syz_tun [ 1079.467169][T12953] loop2: detected capacity change from 0 to 2048 [ 1079.766460][T12959] RDS/IB: syz1: added [ 1079.770894][T12959] smc: adding ib device syz1 with port count 1 [ 1079.777960][T12959] smc: ib device syz1 port 1 has pnetid [ 1082.718674][T12974] loop4: detected capacity change from 0 to 128 [ 1082.897416][T12974] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1082.997229][T12974] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.772201][T11786] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1084.350343][T12992] netlink: 'syz.0.1932': attribute type 10 has an invalid length. [ 1084.364642][T12992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1932'. [ 1084.373994][T12992] batadv0: entered promiscuous mode [ 1084.379456][T12992] batadv0: entered allmulticast mode [ 1084.389230][T12992] bridge0: port 3(batadv0) entered blocking state [ 1084.396428][T12992] bridge0: port 3(batadv0) entered disabled state [ 1084.410211][T12992] bridge0: port 3(batadv0) entered blocking state [ 1084.417377][T12992] bridge0: port 3(batadv0) entered forwarding state [ 1084.572010][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.580320][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.758633][ T1108] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1084.771218][ T1108] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1085.515112][T13004] loop9: detected capacity change from 0 to 1024 [ 1085.649047][T13004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1085.679534][T13012] loop4: detected capacity change from 0 to 8 [ 1085.830389][T13012] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1085.838929][T13012] SQUASHFS error: Failed to read block 0x91: -5 [ 1085.845681][T13012] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1085.853136][T13012] SQUASHFS error: Unable to read inode 0x11f [ 1085.875175][T13004] Invalid ELF header len 10 [ 1086.207066][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1086.908268][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1938'. [ 1087.785893][T13029] loop9: detected capacity change from 0 to 128 [ 1087.944351][T13029] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1088.037198][T13029] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.562810][T13036] loop4: detected capacity change from 0 to 256 [ 1088.771142][ T9446] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1090.733538][T13053] loop4: detected capacity change from 0 to 1024 [ 1090.784381][T13053] EXT4-fs: Ignoring removed nobh option [ 1090.790281][T13053] EXT4-fs: Ignoring removed bh option [ 1090.890647][T13060] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1090.898284][T13060] overlayfs: failed to set xattr on upper [ 1090.904960][T13060] overlayfs: ...falling back to redirect_dir=nofollow. [ 1090.915966][T13060] overlayfs: ...falling back to index=off. [ 1090.922006][T13060] overlayfs: ...falling back to uuid=null. [ 1090.957995][T13053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.449290][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.865948][T13075] loop9: detected capacity change from 0 to 128 [ 1091.974206][T13075] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1092.020998][T13075] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.595933][ T9446] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1093.191216][T13087] loop9: detected capacity change from 0 to 256 [ 1094.353356][ C0] hrtimer: interrupt took 260492 ns [ 1099.963770][T13172] loop2: detected capacity change from 0 to 1024 [ 1100.176619][T13172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1100.314604][T13172] Invalid ELF header len 10 [ 1100.617526][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1101.414538][T13198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 1101.868626][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1986'. [ 1101.878210][T13205] bridge_slave_1: left allmulticast mode [ 1101.884277][T13205] bridge_slave_1: left promiscuous mode [ 1101.891042][T13205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.002291][T13205] bridge_slave_0: left allmulticast mode [ 1102.009647][T13205] bridge_slave_0: left promiscuous mode [ 1102.016662][T13205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.125544][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 1106.018856][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2000'. [ 1106.028443][T13251] bridge_slave_1: left allmulticast mode [ 1106.034675][T13251] bridge_slave_1: left promiscuous mode [ 1106.041440][T13251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.284411][T13251] bridge_slave_0: left allmulticast mode [ 1106.290371][T13251] bridge_slave_0: left promiscuous mode [ 1106.297467][T13251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.425922][T13270] loop2: detected capacity change from 0 to 256 [ 1108.946510][ T30] audit: type=1326 audit(1746245942.374:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13287 comm="syz.1.2014" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 1109.764884][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'. [ 1111.048741][T13327] loop2: detected capacity change from 0 to 256 [ 1112.059567][T13342] loop4: detected capacity change from 0 to 512 [ 1112.097376][T13342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1112.353108][T13342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.366690][T13342] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.437018][T13348] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1113.098048][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.365401][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2036'. [ 1114.515620][T13386] loop4: detected capacity change from 0 to 256 [ 1115.524206][T13401] loop2: detected capacity change from 0 to 512 [ 1115.629774][T13401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1115.851363][T13401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.865032][T13401] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1116.042255][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2052'. [ 1116.729951][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.719586][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 1117.773559][T13443] loop9: detected capacity change from 0 to 256 [ 1118.538387][T13450] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1119.225055][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2066'. [ 1121.448624][T13498] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1121.509449][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2079'. [ 1122.135308][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 1122.717738][T13524] loop4: detected capacity change from 0 to 512 [ 1122.803908][T13524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1122.918649][T13524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.933124][T13524] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.915166][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.535403][T13553] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1124.545454][T13558] loop4: detected capacity change from 0 to 256 [ 1124.663681][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2094'. [ 1125.332118][T13561] orangefs_mount: mount request failed with -4 [ 1125.458366][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'. [ 1126.824213][T13594] loop4: detected capacity change from 0 to 512 [ 1126.923885][T13594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1127.128310][T13594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.141689][T13594] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.411825][T13610] 9pnet_fd: Insufficient options for proto=fd [ 1127.641820][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2107'. [ 1127.943506][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.008616][T13622] orangefs_mount: mount request failed with -4 [ 1129.977345][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 1130.258569][T13653] 9pnet_fd: Insufficient options for proto=fd [ 1130.921035][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2121'. [ 1132.504821][T13682] orangefs_mount: mount request failed with -4 [ 1132.932190][T13698] 9pnet_fd: Insufficient options for proto=fd [ 1133.388972][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'. [ 1134.115346][T13716] bridge0: port 3(syz_tun) entered blocking state [ 1134.126715][T13716] bridge0: port 3(syz_tun) entered disabled state [ 1134.134051][T13716] syz_tun: entered allmulticast mode [ 1134.142831][T13716] syz_tun: entered promiscuous mode [ 1134.150704][T13716] bridge0: port 3(syz_tun) entered blocking state [ 1134.157816][T13716] bridge0: port 3(syz_tun) entered forwarding state [ 1134.251527][T13720] loop2: detected capacity change from 0 to 256 [ 1134.317044][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2138'. [ 1134.330585][T13716] syz_tun: left allmulticast mode [ 1134.336740][T13716] syz_tun: left promiscuous mode [ 1134.342950][T13716] bridge0: port 3(syz_tun) entered disabled state [ 1134.502300][T13716] bridge_slave_1: left allmulticast mode [ 1134.508488][T13716] bridge_slave_1: left promiscuous mode [ 1134.515488][T13716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.600347][T13716] bridge_slave_0: left allmulticast mode [ 1134.606658][T13716] bridge_slave_0: left promiscuous mode [ 1134.613720][T13716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.988779][T13745] 9pnet_fd: Insufficient options for proto=fd [ 1136.172247][T13748] loop9: detected capacity change from 0 to 512 [ 1136.247552][T13748] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1136.356530][T13748] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.370723][T13748] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.439605][T13740] orangefs_mount: mount request failed with -4 [ 1136.452293][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2150'. [ 1136.957769][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.373202][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2159'. [ 1139.009013][T13796] 9pnet_fd: Insufficient options for proto=fd [ 1139.066244][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2162'. [ 1139.732500][T13810] loop4: detected capacity change from 0 to 512 [ 1139.774432][T13810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1139.902300][T13810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.915725][T13810] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1140.071063][T13803] orangefs_mount: mount request failed with -4 [ 1140.725073][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.072429][T13834] loop9: detected capacity change from 0 to 256 [ 1141.755936][T13842] 9pnet_fd: Insufficient options for proto=fd [ 1142.022249][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2176'. [ 1142.598211][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2177'. [ 1143.751441][T13863] orangefs_mount: mount request failed with -4 [ 1144.765828][T13893] loop9: detected capacity change from 0 to 256 [ 1145.254282][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'. [ 1145.989732][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1145.999263][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1146.923092][T13927] bridge0: port 4(syz_tun) entered blocking state [ 1146.930225][T13927] bridge0: port 4(syz_tun) entered disabled state [ 1146.937518][T13927] syz_tun: entered allmulticast mode [ 1146.946402][T13927] syz_tun: entered promiscuous mode [ 1146.954217][T13927] bridge0: port 4(syz_tun) entered blocking state [ 1146.961218][T13927] bridge0: port 4(syz_tun) entered forwarding state [ 1146.990937][T13931] 9pnet_fd: Insufficient options for proto=fd [ 1146.994202][T13915] orangefs_mount: mount request failed with -4 [ 1147.052358][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2197'. [ 1147.065492][T13927] syz_tun: left allmulticast mode [ 1147.070803][T13927] syz_tun: left promiscuous mode [ 1147.077255][T13927] bridge0: port 4(syz_tun) entered disabled state [ 1147.204384][T13927] bridge0: port 3(batadv0) entered disabled state [ 1147.336174][T13927] bridge_slave_1: left allmulticast mode [ 1147.342130][T13927] bridge_slave_1: left promiscuous mode [ 1147.353116][T13927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.451015][T13927] bridge_slave_0: left allmulticast mode [ 1147.457293][T13927] bridge_slave_0: left promiscuous mode [ 1147.464269][T13927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.770978][T13939] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2202'. [ 1147.867589][T13941] loop4: detected capacity change from 0 to 512 [ 1147.967322][T13941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1148.120517][T13941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.135331][T13941] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.973027][T13951] orangefs_mount: mount request failed with -4 [ 1149.237094][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.838626][T13987] 9pnet_fd: Insufficient options for proto=fd [ 1150.919658][T13990] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2215'. [ 1151.028403][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'. [ 1151.572577][T14001] loop2: detected capacity change from 0 to 256 [ 1152.658574][T14012] orangefs_mount: mount request failed with -4 [ 1154.143922][T14040] 9pnet_fd: Insufficient options for proto=fd [ 1154.329134][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2230'. [ 1154.943014][T14055] loop2: detected capacity change from 0 to 256 [ 1154.973228][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2233'. [ 1155.657874][ T11] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1155.963133][ T11] usb 1-1: config 0 has no interfaces? [ 1156.055507][ T11] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1156.065409][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.073849][ T11] usb 1-1: Product: syz [ 1156.078363][ T11] usb 1-1: Manufacturer: syz [ 1156.083195][ T11] usb 1-1: SerialNumber: syz [ 1156.224267][ T11] usb 1-1: config 0 descriptor?? [ 1159.900070][T14095] 9pnet_fd: Insufficient options for proto=fd [ 1160.127761][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2245'. [ 1160.725567][T14102] loop9: detected capacity change from 0 to 512 [ 1160.783772][T14102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1160.919857][T14102] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.933609][T14102] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.016021][T14105] loop2: detected capacity change from 0 to 256 [ 1161.276543][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 1161.612707][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.241874][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2259'. [ 1165.379597][T14153] loop9: detected capacity change from 0 to 512 [ 1165.478241][T14153] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1165.680804][T14153] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.300614][T14162] loop2: detected capacity change from 0 to 512 [ 1166.345656][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.385331][T14162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1166.688814][T14162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.702078][T14162] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.966694][T12815] usb 1-1: USB disconnect, device number 69 [ 1167.317809][T14172] loop9: detected capacity change from 0 to 256 [ 1167.568187][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.633922][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 1169.111451][T12815] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1169.313774][T12815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.325607][T12815] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1169.335277][T12815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.485043][T12815] usb 1-1: config 0 descriptor?? [ 1170.017344][T12815] megaworld 0003:07B5:0312.000B: item fetching failed at offset 0/3 [ 1170.099915][T12815] megaworld 0003:07B5:0312.000B: parse failed [ 1170.106887][T12815] megaworld 0003:07B5:0312.000B: probe with driver megaworld failed with error -22 [ 1170.232808][T12815] usb 1-1: USB disconnect, device number 70 [ 1170.514445][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2270'. [ 1171.571215][T14208] loop9: detected capacity change from 0 to 512 [ 1171.728966][T14208] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1171.946829][T14208] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.885128][ T9446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.854705][T14231] loop9: detected capacity change from 0 to 256 [ 1174.927413][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 1175.596986][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2282'. [ 1176.100635][ T30] audit: type=1326 audit(1746246009.514:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 1176.126755][ T30] audit: type=1326 audit(1746246009.534:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 1176.150651][ T30] audit: type=1326 audit(1746246009.534:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 1176.173149][ T30] audit: type=1326 audit(1746246009.534:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 1176.196024][ T30] audit: type=1326 audit(1746246009.564:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 1176.221042][ T30] audit: type=1326 audit(1746246009.564:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 1176.244866][ T30] audit: type=1326 audit(1746246009.564:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 1176.267370][ T30] audit: type=1326 audit(1746246009.564:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 1176.743891][ T30] audit: type=1326 audit(1746246009.734:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 1176.766959][ T30] audit: type=1326 audit(1746246009.734:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.4.2283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 1177.490229][T14263] loop4: detected capacity change from 0 to 512 [ 1177.599907][T14263] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1177.751672][T14263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.442707][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.753623][T11703] Bluetooth: hci1: command 0x0406 tx timeout [ 1179.150405][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2294'. [ 1179.634414][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2296'. [ 1181.760523][T14322] loop2: detected capacity change from 0 to 512 [ 1181.820717][T14322] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1181.950571][T14322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1182.153930][T14330] loop4: detected capacity change from 0 to 256 [ 1182.704318][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2308'. [ 1182.827891][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.213987][ T11] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1184.481272][ T11] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.491814][ T11] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1184.505572][ T11] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1184.519695][ T11] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1184.529027][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.891815][ T11] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1184.900255][ T11] usb 1-1: invalid MIDI out EP 0 [ 1185.297458][ T11] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1185.431892][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 1185.689576][T14364] loop2: detected capacity change from 0 to 512 [ 1185.784280][T14364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1185.991863][T14364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.005416][T14364] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.819958][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.602413][T14375] loop4: detected capacity change from 0 to 512 [ 1187.743803][T14375] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1187.918312][T14375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.614583][T11786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.394494][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2322'. [ 1190.732556][T14406] loop2: detected capacity change from 0 to 512 [ 1190.858559][T14406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1191.090092][T14406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1191.103665][T14406] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1191.675709][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 1192.160440][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.680925][T14429] loop9: detected capacity change from 0 to 256 [ 1193.658401][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'. [ 1194.150033][T12815] usb 1-1: USB disconnect, device number 71 [ 1194.188624][T14351] delete_channel: no stack [ 1198.750523][T14482] netlink: 'syz.4.2344': attribute type 4 has an invalid length. [ 1198.875225][T14486] netlink: 'syz.4.2344': attribute type 4 has an invalid length. [ 1200.154447][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 1200.203009][T14494] loop4: detected capacity change from 0 to 256 [ 1201.224054][T14499] loop2: detected capacity change from 0 to 512 [ 1201.273851][T14499] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1201.287777][T14501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2349'. [ 1201.378487][T14499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.207180][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.997469][T14513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2351'. [ 1203.060937][T14513] veth0_macvtap: left promiscuous mode [ 1205.645209][T14539] loop4: detected capacity change from 0 to 256 [ 1206.083998][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2360'. [ 1206.292918][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2361'. [ 1206.362085][T14553] loop2: detected capacity change from 0 to 512 [ 1206.456046][T14553] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1206.579094][T14553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.969468][T14564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1207.157058][T12234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.427088][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.433953][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1209.392171][ T4861] ===================================================== [ 1209.399825][ T4861] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xafd/0x98a0 [ 1209.408831][ T4861] n_tty_receive_buf_standard+0xafd/0x98a0 [ 1209.414961][ T4861] n_tty_receive_buf_common+0x1a68/0x2540 [ 1209.420943][ T4861] n_tty_receive_buf2+0x4c/0x60 [ 1209.426230][ T4861] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1209.431644][ T4861] tty_port_default_receive_buf+0xd7/0x1a0 [ 1209.437994][ T4861] flush_to_ldisc+0x44c/0xdb0 [ 1209.442857][ T4861] process_scheduled_works+0xb97/0x1d90 [ 1209.448639][ T4861] worker_thread+0xedf/0x1590 [ 1209.453631][ T4861] kthread+0xd59/0xf00 [ 1209.457834][ T4861] ret_from_fork+0x6e/0x90 [ 1209.462392][ T4861] ret_from_fork_asm+0x1a/0x30 [ 1209.467417][ T4861] [ 1209.469801][ T4861] Uninit was stored to memory at: [ 1209.475210][ T4861] n_tty_receive_buf_standard+0xaf6/0x98a0 [ 1209.481255][ T4861] n_tty_receive_buf_common+0x1a68/0x2540 [ 1209.490430][ T4861] n_tty_receive_buf2+0x4c/0x60 [ 1209.496940][ T4861] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1209.502282][ T4861] tty_port_default_receive_buf+0xd7/0x1a0 [ 1209.508368][ T4861] flush_to_ldisc+0x44c/0xdb0 [ 1209.513454][ T4861] process_scheduled_works+0xb97/0x1d90 [ 1209.519208][ T4861] worker_thread+0xedf/0x1590 [ 1209.524242][ T4861] kthread+0xd59/0xf00 [ 1209.528436][ T4861] ret_from_fork+0x6e/0x90 [ 1209.532994][ T4861] ret_from_fork_asm+0x1a/0x30 [ 1209.538022][ T4861] [ 1209.540412][ T4861] Uninit was created at: [ 1209.544890][ T4861] __kmalloc_noprof+0x95f/0x1310 [ 1209.550089][ T4861] __tty_buffer_request_room+0x3d4/0x7a0 [ 1209.556107][ T4861] __tty_insert_flip_string_flags+0x157/0x6f0 [ 1209.562398][ T4861] uart_insert_char+0x368/0x930 [ 1209.567619][ T4861] serial8250_read_char+0x1ba/0x670 [ 1209.573074][ T4861] serial8250_handle_irq+0x930/0x1110 [ 1209.578860][ T4861] serial8250_default_handle_irq+0x116/0x2b0 [ 1209.585309][ T4861] serial8250_interrupt+0xc8/0x400 [ 1209.594549][ T4861] __handle_irq_event_percpu+0x11c/0xbf0 [ 1209.600439][ T4861] handle_irq_event+0xe0/0x2a0 [ 1209.606778][ T4861] handle_edge_irq+0x450/0xfd0 [ 1209.611769][ T4861] __common_interrupt+0x9f/0x220 [ 1209.617116][ T4861] common_interrupt+0x94/0xb0 [ 1209.622043][ T4861] asm_common_interrupt+0x2b/0x40 [ 1209.627453][ T4861] [ 1209.629917][ T4861] CPU: 0 UID: 0 PID: 4861 Comm: kworker/u8:27 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1209.642641][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1209.653369][ T4861] Workqueue: events_unbound flush_to_ldisc [ 1209.659429][ T4861] ===================================================== [ 1209.666663][ T4861] Disabling lock debugging due to kernel taint [ 1209.672973][ T4861] Kernel panic - not syncing: kmsan.panic set ... [ 1209.679574][ T4861] CPU: 0 UID: 0 PID: 4861 Comm: kworker/u8:27 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1209.693746][ T4861] Tainted: [B]=BAD_PAGE [ 1209.698052][ T4861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1209.708316][ T4861] Workqueue: events_unbound flush_to_ldisc [ 1209.714375][ T4861] Call Trace: [ 1209.717792][ T4861] [ 1209.720871][ T4861] __dump_stack+0x26/0x30 [ 1209.725457][ T4861] dump_stack_lvl+0x53/0x270 [ 1209.730288][ T4861] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1209.736382][ T4861] dump_stack+0x1e/0x25 [ 1209.740773][ T4861] panic+0x4bd/0xd50 [ 1209.744965][ T4861] kmsan_report+0x29d/0x2a0 [ 1209.749718][ T4861] ? event_enable_read+0x432/0x990 [ 1209.755047][ T4861] ? __msan_warning+0x96/0x120 [ 1209.760043][ T4861] ? n_tty_receive_buf_standard+0xafd/0x98a0 [ 1209.766227][ T4861] ? n_tty_receive_buf_common+0x1a68/0x2540 [ 1209.772357][ T4861] ? n_tty_receive_buf2+0x4c/0x60 [ 1209.777557][ T4861] ? tty_ldisc_receive_buf+0xc3/0x2c0 [ 1209.783189][ T4861] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1209.789405][ T4861] ? flush_to_ldisc+0x44c/0xdb0 [ 1209.794461][ T4861] ? process_scheduled_works+0xb97/0x1d90 [ 1209.800407][ T4861] ? worker_thread+0xedf/0x1590 [ 1209.805479][ T4861] ? kthread+0xd59/0xf00 [ 1209.809950][ T4861] ? ret_from_fork+0x6e/0x90 [ 1209.814791][ T4861] ? ret_from_fork_asm+0x1a/0x30 [ 1209.819980][ T4861] ? ret_from_fork_asm+0x1a/0x30 [ 1209.825177][ T4861] ? stack_depot_save_flags+0x35/0x7c0 [ 1209.830900][ T4861] ? kmsan_get_metadata+0x105/0x1b0 [ 1209.836354][ T4861] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1209.842924][ T4861] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1209.848966][ T4861] ? n_tty_receive_char+0xfae/0x1440 [ 1209.854482][ T4861] ? kmsan_get_metadata+0x105/0x1b0 [ 1209.859893][ T4861] __msan_warning+0x96/0x120 [ 1209.864675][ T4861] n_tty_receive_buf_standard+0xafd/0x98a0 [ 1209.870742][ T4861] ? kmsan_get_metadata+0x105/0x1b0 [ 1209.876160][ T4861] ? sched_clock_cpu+0x59/0xa80 [ 1209.881220][ T4861] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1209.887786][ T4861] n_tty_receive_buf_common+0x1a68/0x2540 [ 1209.893751][ T4861] ? _raw_spin_trylock_bh+0xa1/0xc0 [ 1209.899151][ T4861] ? stack_depot_save_flags+0x35/0x7c0 [ 1209.904884][ T4861] n_tty_receive_buf2+0x4c/0x60 [ 1209.909949][ T4861] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1209.915703][ T4861] tty_ldisc_receive_buf+0xc3/0x2c0 [ 1209.921105][ T4861] tty_port_default_receive_buf+0xd7/0x1a0 [ 1209.927120][ T4861] flush_to_ldisc+0x44c/0xdb0 [ 1209.931994][ T4861] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1209.938636][ T4861] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1209.944045][ T4861] process_scheduled_works+0xb97/0x1d90 [ 1209.949860][ T4861] worker_thread+0xedf/0x1590 [ 1209.954777][ T4861] kthread+0xd59/0xf00 [ 1209.959046][ T4861] ? __pfx_worker_thread+0x10/0x10 [ 1209.964378][ T4861] ? __pfx_kthread+0x10/0x10 [ 1209.969169][ T4861] ret_from_fork+0x6e/0x90 [ 1209.973804][ T4861] ? __pfx_kthread+0x10/0x10 [ 1209.978596][ T4861] ret_from_fork_asm+0x1a/0x30 [ 1209.983658][ T4861] [ 1209.987113][ T4861] Kernel Offset: disabled [ 1209.991529][ T4861] Rebooting in 86400 seconds..