last executing test programs: 6m20.499156767s ago: executing program 1 (id=29): io_submit(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="dec3757550db", @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x5, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000380)='./cgroup/file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000480), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0x7192346c17744cfa) syz_emit_vhci(&(0x7f00000078c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{0xd}, 0xc}}}, 0x7) 6m16.054741903s ago: executing program 1 (id=32): unshare(0x62040200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x2, 0x0, 0x2}, 0x20) 6m13.658715268s ago: executing program 1 (id=38): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 6m10.113808726s ago: executing program 1 (id=40): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@nojournal_checksum}, {@grpjquota}, {@discard}]}, 0x0, 0x4a6, &(0x7f0000000a40)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 6m6.973761425s ago: executing program 1 (id=47): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1210086, &(0x7f0000000400)=ANY=[@ANYBLOB="756d30d750bd613030303030303030302c7a65726f5f73697a6c5f6469722c757466382c6769643dd298a32d9da3bacba32fe0cbc29a4571228fd7b93bb323746b39", @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000777,keep_last_dots,iocharset=iso8859-1,allow_utime=00000000000000000000003,\x00'], 0x5, 0x151e, &(0x7f0000001a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mlockall(0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 6m5.641496059s ago: executing program 1 (id=53): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6m3.228665203s ago: executing program 32 (id=53): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 5m19.236475161s ago: executing program 4 (id=111): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x313b}}, {@init_itable}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x679}}]}, 0x1, 0x621, &(0x7f0000001680)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000070000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001a80)=""/4096, 0x1000) 5m16.660217927s ago: executing program 4 (id=114): bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x8b) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b4050000fdff7f006110000000000000c60000000000000095000000000000009f33ef60916e6e911689a9396e7f889b817fd98cd824598949714ffaac8a6f770600dccae0f21f3ca90022d182054d54d53cd2b6db714e4beb5447000001eecd163199e28f7a674d5926000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2fe88afc50027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000fe0000b347abe6352a080f8140e5fd10747b6ecdb34533e1f10f35540546bf636ef897ed9bbe5026450200000000eb9e140000c8f7a187eaf60f3a17f0f046a307a403c17e9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb133e8833fed288a8eb3f591402503c2bbea4e16328dda19ecbc2b2f1065639d52090edcd03fcfe9b8603ef9a4f0855b0df0d9a39f0585d1c6c1c47a01d8eb71132744a2cf9f4db08ff74bcaa80d9f541b364ec4ebcdd11f553dc8a32458907ab99d738b2583203177a778b83f08f0f8c723e86ba548bd408e38db59f3a6e2d26416bb70a05969bd902e98690226ac9ad2dbe5692b58fd1d3f4b9358f988b8de97ed67dc242fba01d1d35ccb45df4a56aa410b3d52a86f653826c2871fe80031f8b63edbbc4553e0bb4de0dc090f5a529c8417ed8df02aa5366ca50a4a7c0fede698e353167bdd9e30a07dc0bdae73d156969722617f419d552f059aa4bf0ad4eefa3e5c7730499dafcf8da73093989565bc5d34f14d577be013c37dc81f67a5e3e53a402b325406011f3cca0b72dc7c2e38"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5m15.017665942s ago: executing program 4 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chroot(0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) keyctl$search(0xa, r4, &(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, r5) 5m8.897982511s ago: executing program 4 (id=123): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m5.375694985s ago: executing program 4 (id=128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008500000075000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 5m3.866966283s ago: executing program 4 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @loopback={0xff00000000000000}, @mcast1, [@srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}]}}}}}}}, 0x0) 4m48.079843211s ago: executing program 33 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @loopback={0xff00000000000000}, @mcast1, [@srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}]}}}}}}}, 0x0) 2m50.669750573s ago: executing program 5 (id=305): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900008500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0xffffffffffffff6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m44.385211929s ago: executing program 5 (id=311): open(&(0x7f0000000140)='./bus\x00', 0x127842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) 2m39.385636641s ago: executing program 5 (id=317): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000002ac0)='./file0\x00', 0x503042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r7, 0x0, r5, 0x0, 0x1000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2m35.448166669s ago: executing program 5 (id=321): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3}) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a7c9a640115d99d981b3886420589c6695d4982a83b7906769e737201a3fb7a7804454156569cb03a5be811debc957b5831b89b59d703e74a37c00", 0x25}, 0x48, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m32.48672938s ago: executing program 5 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) 2m22.481572236s ago: executing program 5 (id=356): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x313b}}, {@init_itable}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x679}}]}, 0x1, 0x621, &(0x7f0000001680)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000001a80)=""/4096, 0x1000) 2m20.275018719s ago: executing program 34 (id=356): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x313b}}, {@init_itable}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x679}}]}, 0x1, 0x621, &(0x7f0000001680)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000001a80)=""/4096, 0x1000) 15.967156812s ago: executing program 6 (id=750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file1\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x1214, &(0x7f00000036c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 10.420402003s ago: executing program 6 (id=762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x600}]}) 9.058053927s ago: executing program 2 (id=766): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x4b46, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) unshare(0x20000400) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x305800, 0x0) 8.828240561s ago: executing program 7 (id=767): bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x8b) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 8.576062835s ago: executing program 6 (id=768): r0 = io_uring_setup(0x6a3f, &(0x7f0000000340)={0x0, 0x94d2, 0x0, 0xfffffffd, 0x222}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0xfffffffd) close_range(r0, 0xffffffffffffffff, 0x0) 7.756627267s ago: executing program 7 (id=770): r0 = mq_open(&(0x7f0000000040)='!x\x00\x00\x00\x00\x00\a\x00'/18, 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x3ed7, 0x0) 7.515033006s ago: executing program 2 (id=772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x4) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x0, 0x2}) 7.319804754s ago: executing program 6 (id=773): syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x18, 0xc8, "0b6646251e1e2453"}}}}, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) 7.201207807s ago: executing program 3 (id=774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0x24020400) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = memfd_create(&(0x7f00000002c0)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86%0\x05\x9d4\xfa\x92H\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY', 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r3, 0x0) 6.885538575s ago: executing program 7 (id=775): syz_io_uring_setup(0x2a20, 0x0, 0x0, 0x0) 6.514251793s ago: executing program 2 (id=776): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) 6.390004323s ago: executing program 3 (id=778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000240)="66b9ae0300000f32baf80c66b85cde1f8566efbafc0c66edbaf80c66b8708cb28866efbafc0ced660f3814bb04000f20d86635200000000f22d866b9800000c00f326635008000000f3066b9800000c00f326635004000000f300f381ca70400660f3882bc750036660fedf1", 0x6c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.384514505s ago: executing program 7 (id=779): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 5.634492277s ago: executing program 2 (id=781): ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000200)={0x0, 0x0, 0xc00, 0x3}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) 5.554796871s ago: executing program 7 (id=782): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0xe3b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) 5.262570095s ago: executing program 2 (id=783): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x13) 5.070785353s ago: executing program 2 (id=784): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffbfffe9cc, 0xc, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) 4.798075021s ago: executing program 6 (id=785): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0417100000000000e40902"], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x20, 0x15, 0xba, "20271fcf3032be2da1364677d23fe101e76d279bd9144b6eec4b2fa1450b88d38993bb1472472b4863d2368c3f6a93ba5f223ffdf2a6fb504d66fad08a48774b174c7e54e28788eb68a31df61c294ad618b5e79b28c3c462bfdc1884cd67798e4e194835641bee188e4e8ecc1f7338ea13b411797758f17a0627a7861c7943c233be167b58794982dab4d0d0b3e9bddb78acc205a4be1e27a7dcbc52fc617f7d92b2bd8ddab9fd6f4a4a759ae65ac2dfbcf0547ad61c6a7501fc"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0xf5, {0xf3, "664fdd94c5b1ceb683f50ece41be7c0a2729fe880fa1c47bccc5a2333498c5127bf0e92ff49136ce1034184074c0c48a328b468e2b89b2fcb965691bcbe0f74a941eeba3a6c004b813033e9087d9eb781fff1c05290bcb07afb3041b00e0da6ec6dd2c3a05ad825356810e21936ec9eb6cd3b9fdb94189ccaa3ce18c544a13f7d6aeeaea5dfb91e683a7a254adecb441965a01fcc0c6858c9483a47867c6aa0d6725049017c2cd98a1e8a7580582b693b53dfce449c1a3812deb8029d61d3fb1da12e3a808c9150091a85d0063bdbc8c15804332f372dc6e32bad98b7353469d045ee1cc8179e72266936df9f898f3443324d5"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) 4.617074131s ago: executing program 0 (id=786): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="09009627"], 0x5) 4.319724506s ago: executing program 3 (id=787): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000840), r1) 3.929760717s ago: executing program 0 (id=788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) 2.781626358s ago: executing program 0 (id=789): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_setup(0x2a20, 0x0, 0x0, 0x0) 2.546651398s ago: executing program 3 (id=790): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) 1.16017025s ago: executing program 0 (id=791): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.122078051s ago: executing program 3 (id=792): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "ec9567adaa870ef0939ab3dcda90c755b8f624dd7d4c8f6f5dade5f939981b61ff746c571e283791e574feca828a2d9a585178a6fc796f8bf9336002e4bdec633e79052b69e4861950b954c0e7fb150bf96c06071c3e95e8a6dc"}, 0x65) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x20000002) 877.267545ms ago: executing program 7 (id=793): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000340)='=', 0x1}], 0x1) 746.497856ms ago: executing program 6 (id=794): unshare(0x20000400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x2) 511.704712ms ago: executing program 0 (id=795): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@getnexthop={0x20, 0x6a, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x2}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000003ec0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_max_data_len={{0x9}, {0x72, 0x77e, 0x2, 0x0, 0xb}}}}, 0xf) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="1400000035000b63d25a80648c", 0xd}, {&(0x7f0000002480)="f897763d7b56458961391a90c1c7b1f3704477a3a985de7783d78dc845fd31ed195444945a9ddc08cc171254acf1098833085fa5ad8a6c08a64d5bb49d6c8fe5ea538ff101c728676f17e8bd4c2f44b3b7cafea2a34801238f5ac78f5142bee4156798ade74d0114f083dc0900e246eaa2e348e010853a5d3befd70d294e2698943c84f9666beb9523d0d739d756108d330d4d0429939620d3f4c6e4938403b9a5def69153e91672dad9054068541ffa6d197def779ccf6a555c98bf77977fa8c1445554b227655893c50db0f249eb66178b250f4a20d794b63c5db7be30ee842760489429703710b274d672b2435a89374bdcd7f7443ce8484743b9654d9d357f917f3bac23913283cd4c2369ab93513b42c5988efcf63f9392cfaea8b9546a5e1a7d29072718362243b85a1861548ee6e080f953aea4e7949697630d3df89ad20c3eab0b10e08ae16bbfb175071c44dba96882a41d6652f90432030b50f385a4e95d1fda61e0750665151631bd64b3f704d58870f96ae5550fba8b56ef183f46bf71fa238352d05a562522ac5dc52f655ee275d8c45ebf920d6262c9d675acd8781320cad935a2d8bbee697b24ee273cad188ee8e71a8a5693551a3613ef885a46b832b821c55c11d9b2d614967632d838b89d5fef70f8a3fb451571507b56e75abdad561b20773cd039b3f5e22cb579504614d782c8c69892a7737d026480dc60be60c1ff3a2707630787d1cb023fd8729e1a1294f3f073509426f49557d9ccc3e813bf23d23b44ee82ee00940b791eab185ffcf33fc4222222ba89784a3b39029cce81253a1b309515265d08aa5fd53d1fc29ec5229c4f8e434a7b0d9415db51e6e3d9eaa6c78b1395f4cbbc4363c91b8d07a5b8d9634c932d5b1463aa7e083c9830264d0237fc6764667c60784c48a6641e85908cf91eb60bc28f3b42b083f450e43d012cced77bcaaf910d8a2d76d71ab768ccfcc4fd9f4a3fac3909038fd55b00dce9fc0b0d339d55fc7dfd926ba327c8b7f27e014ce9e7dc253b2e0a6f5d311f094a8493c97a341c6c82deaf64345fe641ec3cf36c03b4cd37f99cd19470e299fdedf5a29f9ed20fc79cfdd29a5a4f35fd90698f83a0227f1f5173c3842ec7504177ed86b68001866fdffc6e65f1d3333496b78978a2a6401fee1832da674042cf3403f139f894d4fee402818716da9313be0d8363744f7a73fb3d2af05479cbe62ff7a5699bb1acf60e5fd058a0e975dfcf293a5a5bc23ead1f27a27d4744952ebdeffba704ee45bc68f1915e8836ebdfcb3496cd94ca71a475fb4b5986516f2f661b6e64dd6881caac801e59eb77f501a45325d20a7fd5ff85932e16d3f7f5194941022912b67bfd10ec0007655dccfa46ce511ac8bef44515bd4351dc9e4b4c0ac2d957710c933aea6a936952d30ae3680a17a12bdcfdf3e12eb72778552abf768f15af5a6c2ff22521d87fadffca8118784b36f4b80922b7255819528d0856c2ec7b683676371595834bfb3dcc273fb2709182fb9673d6eb36e3c9229f294f540ef45ab2559c234ba49283207b18c497fa9b83e06c11d76365dee146779b924de515e66afc2145763a169d8e6f8b60d91f6bf6fdc2a6424de82c9341b4a999b20b6e29dd49c2d2b898454e96a641886e82111dcabf77be06a42b93fb57b81019e6652ce2ba287a4fd4d0887849ef3551026bfca727e38e5ec15b7040ce51dfa86cdf3967fe4a9243e85c4aa4da9caef2ac8e96576dcadea78ef53da096831afd7dcbb97e2f3a54bd6205e9b6fb24dbd803e09062349bcf7c9aee88b936100c0f36e2926bdb6e0b7d0ea48f4130bdf6bc3b8cb5f99a1869fb29b0addbaedbb37d23867ed34ab587204a91fb401b44fad5c4386550139b72439ff3a82d5cd572c4463a0bb61702f5b59a9b182809e0168b487bf70e808d95bf1d390265b97906b93a9a3a56f034aed435ff39317b742bfcdc69b509e91b72b839bf4464dfb1034e60d5ebf88432863fbc4d1e6675e83f513c8410cf1d68b0ebeb73ac8ed976768b60bc0ab29ebe5cc0872c416d8e6a761e9d49d97b5c2e24b879c52501442f1e2df66c07ae541ef2ee2f1afb5ab6ae2108e2c63afba5ac69b9e566a48f39095a9ded5493849c2933cf38ed7d738b764e4e934b5f84f0d4b04f08bb8b3b262b8af74668bdf8e4fe484f9bf3d900af37b45f3408ec1141daf49fac25788637490638bf659e6b75972956fc30160ba8a82182cf3e4e3cc78fcb44649b6e9a8c674fbcaf1baa71e44d85ddd708457b383f3e7cdbe766e8b40be4236dc2146d52c957a5a1f7d5643e72b3b7989de7022f3a927e04708ef36013ecd32c4f52c639d237187745a02b40ffb0f60435fc118b1f6373dfe2d0825a5b1ebd22856fbd90c43c4e459636666b41b4557e6e9328a69d0d7127e39c76c37621c19f6972b80821b85c3383b4d59ca2a45fce1654958da5093d98ed6ac955976bdb1ac25bb0034f612c770ba384bd786502ff33fd4ad0c178ddae0b1e52fc5a30d8fbcce8d52b9c9075b3c02d1aad6b2384209134d42a5b7c8c624310e5dc725d0aab0c34a8518ee0203f6e70eb5bd31ddcfbf6ca5222e53bb3c656bc0c36533fb84b39d0ac8fc2a59f4e89bc7d771c4d2d4a4d526abe673f539d3f7edf0db3ca1fcb5fc27c8c444f745f6d524157c089f2c8fc04442b4986923256f0707da86edc67467895dde3b8b5048244d9a8e733366428906d0b34a8fb50dc95b3c7b3434fe9ad6358e6fde3aaadeb99e8856010b9593bae799ea65084c93da5b6f30101d28f81d34da2ac57480b623a8dab724a57c1d89beec22eabb7ae6f8e8a0f542c341e95c5e88d9ef00e5ade1e137b334690f3691384e5eefcdbd628283928d09843a09eb087dbc1ed6e645075acc1d6c0474dd899b9bdbd11591ab8043c397740a2bb2d7f8d3b8a49d1239d4a46937904498973f969f26403cf618c24a766ea577297c2e77a691597c58c0343a085035c7d82290859db5836692378a6c9ad5c22de1039eaae0ead51276c55e9d5897895485e86bb5b3863de55036613a55f71b341a4847c4b7f931b4b5f351840823b8d328146f7d1c16507a7fe6a0d7d52203efe6688f352bf0b68732c97d2d3c21cd45af05717fb4e79014c901a582f299b98247abe9113d44df369847e7b6da90142f54cf17c9fa1e429a7b89a6f76830388342b5bb899559aa0974577a6139fd5c0634c96da6514ce9da1055f141b240752aa04d34ce30750491a98f9ad98f6b895d492e634e7ed4703a1c4e2bf09d46874ceb875bc362f8133321aba2277f54299f9feefb03462d82ced31f1b39edb201f0d872261633247fc6faa7c4f7f576a39b89f0ece8bfe268efdc88b3641ea56c5d45a313526acd7b366411e448f9ed9f9b213c4f918c8bb1874ac8ce71daab3d412d5c0c9cb4014d63b5fae72474eb1ff9462e3f2ed36da6739285b2ce293a520c9e6489cb4ddf7b9475f49a4dd2ae1e2e49eb411b0d03627b5a076e5243d808314ad8e9796da5b2dcb6c5b7a1aabb5e0e799d90900552b0e7c5c4d7b7fb2d54bc8887e486c0f1e8c978420e1e70c61e640ea2fdefc72fd82d4ceaa9f3781aa09695f9d737019db81e0f0ee0c77730b043654b2bee5cc8cb15ad3f1355c11955fe6595b23da9ee1480574536493567715cb16c3d7f6c3dbf37e8adb92bd652276b78ec4d73ed253e687cc4f052fd221b112779aa746512f22d397d3b57850efadda564f95aa4ceb95f24e3d38f817ab9d12adf3eaf3e4bd30ce1f465b7e07df7bb4df935135a3128d3b11f6d37a97affd5d86ce2abb3044e337c88355d831a5239656495e5b02cea0f43c6cfbb1e6f023a3f2eea1770d1361ddbf0612523a4cbff21d88621f5e215e930b894c6f9cd3c9e29a69e9cff9b8b131318001da8c5ff6846b1625ab7870776db2758dfeba4007cd0f805009d217c58a02919e33074a5f4cc8de829d08db71ae6ba07e62535605fac17698c1e91a2812fb491e35130c307ff5e6c69233c0f536d84e5fdf5e548aabd8d5fbc5bfc788019fe3cae896deab4026cf5d2c91637339f530ef31922686c34e682aec0c70f4ece6e06a293625ccb5e6c37eae979b49bbcd456bac31e6c440c08b3783f1508d59d50d460d618b79558869291a7418f04b8841bd50c0a0d87aa390c7b40dd0ffbe2dc595ae9ab6bc8480e7325d032db38eb31803ad436b5ec2a525d45c8291cc688072ade508abc57dd527154e4fc07aa2fb0395b12b33ffd3b717a12bda76960a20f2a7f72271e59ea3643429e4cff411dfa4c84f8b8cf358685e035b86e0aa9fc8de5721a3db09ee15ab342d018c5f25d4a66fc814ea2ffe01da8f52d43091122451c5bbe2d76ab288580c721d17e6956d7664c9eaf3f4c95921cb1bbe413d518353ce12b4a91d122a20420be44c5f0d2281cad7497d1e956f05ccd02a133741e4956771dc9c8fe560c1d943c88e51e5daf358de343b5b2167a4a94a3a48f51dad02a27d4190cc1d9ce466d5653a5501ad39a19c8476569019605fedf668967a271bfe22733758663e7bce9a08f457cc0e32f467d04bc9341f272e848c26004a616990549cf146b5123bcf214818831aa5b86bc590a5be7271c01af90c808f99e857819c90a6e7de66084c443d68b2a701f36c3ea620cf6c6dcd1f656dc806bd95357dfaf4af234aa2c6b9052a26d4e60cc3903e11c67ffcdcb723414162691e2be6f8a915d4dd4c8663f9ed7332c49c9c71c0628eabb9041b7228052bce4818156f50f029e1775fdf7ecd438c35aeefc611518852bc762c937a2a1522aad7619ec0b4d221a9c9e773f1a2d5ab9bc1a3e262f7bbc7e196505bf883c25ef0a04c2ff9286beb64bb50072e37dc0a307fce6c0de200d2cc3ca5f397a9269dee3bf5e57722377b2fb67d5f768df05169a28cab164d9149f9faa6cf6867db0afde03ead795c2b8c9c01aff79dd6c51fd6e1cd90cc15c13a6031064149bec072d6715828ecc5cc510afb46db9bda8f11fccb17daa5a8423d69208b6f2ebd59143d26e06d96a207f463a44f549f2a23922156bad598e2c0655371c86f77233c97f68e5459b9a998e9d6445424f1057202bc046522c19724dc14a79463288fd464093ce48e43438d2a61fc843a2827e0e2b249ce68e3d3744a5d68509c0dd51fdf28bcddbedc7c1c3ae0bee2da542336d577ce1e33f5645caa8bd8c7a82ba181cfab080d89c9bd51a7cac1024476053caee6f5a71eda9231941fa9686ba0da44860ec293c3135edf2d1472d349f51e478202223a1f6bb49ac426822c47b70389aa87211388292dd8de5a68a8ab306a5be3bb3205589066e8be6953a1e8100e15f38fd0324a5752077ecdeba71f24fbc7d81f92c9894942a89a14a63a88d1f8a877f232d9c81b7a96d05f063ec8c54d6c0a351362fd7253bd97c4778223b749936cb72466ed7fb1ab0884033f996b541a11340cc47e3a3da749b5143feb12f29156edbca45d28cac4f30e9db06ccd3c17", 0xf42}], 0x2}, 0x0) 333.61856ms ago: executing program 3 (id=796): bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x8b) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 0s ago: executing program 0 (id=797): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x2) kernel console output (not intermixed with test programs): ated IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.947765][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.341277][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.351394][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.436185][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.444473][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.697031][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.708741][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.885217][ T3817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.893472][ T3817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.051456][ T5974] loop0: detected capacity change from 0 to 1024 [ 276.218055][ T5974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.552054][ T5985] loop1: detected capacity change from 0 to 1764 [ 276.561157][ T5985] ======================================================= [ 276.561157][ T5985] WARNING: The mand mount option has been deprecated and [ 276.561157][ T5985] and is ignored by this kernel. Remove the mand [ 276.561157][ T5985] option from the mount to silence this warning. [ 276.561157][ T5985] ======================================================= [ 276.954732][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.393990][ T3817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.402057][ T3817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.573847][ T5996] loop1: detected capacity change from 0 to 512 [ 277.666423][ T5996] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 277.674832][ T5996] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 277.698017][ T3817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.707058][ T3817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.843558][ T5996] System zones: 0-1, 15-15, 18-18, 34-34 [ 277.850927][ T5996] EXT4-fs (loop1): orphan cleanup on readonly fs [ 277.858255][ T5996] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 277.883343][ T5996] EXT4-fs warning (device loop1): ext4_enable_quotas:7128: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 277.902935][ T5996] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 278.052553][ T5996] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.8: bad orphan inode 16 [ 278.103089][ T5996] ext4_test_bit(bit=15, block=18) = 1 [ 278.108809][ T5996] is_bad_inode(inode)=0 [ 278.113488][ T5996] NEXT_ORPHAN(inode)=0 [ 278.117794][ T5996] max_ino=32 [ 278.121212][ T5996] i_nlink=2 [ 278.126997][ T5996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.353237][ T5996] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 278.513339][ T5987] loop2: detected capacity change from 0 to 4096 [ 278.765706][ T6007] loop0: detected capacity change from 0 to 8 [ 278.810712][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.930441][ T5987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.029697][ T6021] loop0: detected capacity change from 0 to 512 [ 281.085901][ T6021] EXT4-fs: Ignoring removed nobh option [ 281.092055][ T6021] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.315352][ T6021] EXT4-fs: Mount option(s) incompatible with ext3 [ 281.414124][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.003718][ T6021] loop0: detected capacity change from 0 to 1024 [ 282.242040][ T6021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.872994][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18'. [ 282.929603][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.063015][ T6031] capability: warning: `syz.1.19' uses deprecated v2 capabilities in a way that may be insecure [ 284.066025][ T6036] loop3: detected capacity change from 0 to 1024 [ 284.189439][ T6036] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 284.961840][ T6055] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 285.047326][ T6055] 9pnet_virtio: no channels available for device ./cgroup/file0 [ 285.088019][ T5801] Bluetooth: hci3: Ignoring error of Inquiry Cancel command [ 285.136416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 285.751503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 285.752728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 285.761385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 285.853882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 286.058747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 286.160704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 286.263065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 286.263383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 286.272853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 288.053852][ T6036] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 288.054136][ T6036] EXT4-fs: failed to create workqueue [ 288.069603][ T6036] EXT4-fs (loop3): mount failed [ 289.295140][ T6064] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 290.482338][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 290.644002][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 290.707080][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.714104][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.730775][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 290.836535][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.848416][ T5875] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 291.079571][ T8] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 291.089717][ T8] usb 3-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 291.100195][ T8] usb 3-1: config 0 has no interface number 0 [ 291.106829][ T8] usb 3-1: config 0 interface 135 altsetting 15 bulk endpoint 0x6 has invalid maxpacket 16 [ 291.117278][ T8] usb 3-1: config 0 interface 135 has no altsetting 0 [ 291.157885][ T5875] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.167564][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.180666][ T5875] usb 4-1: Product: syz [ 291.188666][ T5875] usb 4-1: Manufacturer: syz [ 291.193813][ T5875] usb 4-1: SerialNumber: syz [ 291.490832][ T8] usb 3-1: New USB device found, idVendor=1546, idProduct=1104, bcdDevice=8d.01 [ 291.500979][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.509696][ T8] usb 3-1: Product: syz [ 291.514455][ T8] usb 3-1: Manufacturer: syz [ 291.519506][ T8] usb 3-1: SerialNumber: syz [ 292.083636][ T8] usb 3-1: config 0 descriptor?? [ 292.092321][ T6076] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 294.916575][ T6092] loop1: detected capacity change from 0 to 512 [ 294.947735][ T8] cdc_ether 3-1:0.135: invalid descriptor buffer length [ 294.955278][ T8] usb 3-1: bad CDC descriptors [ 295.254927][ T6092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.736398][ T8] usb 3-1: USB disconnect, device number 2 [ 296.172606][ T5875] cdc_ncm 4-1:1.0: bind() failure [ 296.312406][ T5875] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 296.379804][ T5875] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 296.494103][ T5875] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 296.612174][ T5875] usb 4-1: USB disconnect, device number 2 [ 296.630104][ T6097] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.032628][ T6103] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 297.095191][ T6092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.108755][ T6092] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.233573][ T6104] loop4: detected capacity change from 0 to 512 [ 297.242831][ T6104] EXT4-fs: Ignoring removed i_version option [ 297.249091][ T6104] EXT4-fs: Ignoring removed nobh option [ 297.325355][ T6104] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 297.339063][ T6104] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 297.622603][ T6104] EXT4-fs (loop4): 1 truncate cleaned up [ 297.635306][ T6104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.351070][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 298.659689][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.740162][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.109216][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 299.119010][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.133680][ T10] usb 4-1: config 0 descriptor?? [ 299.187958][ T10] cp210x 4-1:0.0: cp210x converter detected [ 299.344118][ T1130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.563084][ T1130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.617393][ T10] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 299.689731][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 299.698422][ T10] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 299.807989][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 299.850340][ T1130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.900545][ T10] usb 4-1: USB disconnect, device number 3 [ 299.975002][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 299.995636][ T10] cp210x 4-1:0.0: device disconnected [ 300.124806][ T1130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.696007][ T1130] bridge_slave_1: left allmulticast mode [ 300.707814][ T1130] bridge_slave_1: left promiscuous mode [ 300.714856][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.773226][ T1130] bridge_slave_0: left allmulticast mode [ 300.779281][ T1130] bridge_slave_0: left promiscuous mode [ 300.786670][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.493312][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.546609][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.571267][ T1130] bond0 (unregistering): Released all slaves [ 302.007471][ T6132] loop0: detected capacity change from 0 to 512 [ 302.267472][ T6132] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.57: invalid block [ 302.376513][ T6132] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.57: invalid indirect mapped block 4294967295 (level 1) [ 302.455782][ T6132] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.57: invalid indirect mapped block 4294967295 (level 1) [ 302.540159][ T6132] EXT4-fs (loop0): 2 truncates cleaned up [ 302.554434][ T6132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.658039][ T1130] hsr_slave_0: left promiscuous mode [ 302.770755][ T1130] hsr_slave_1: left promiscuous mode [ 302.818759][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.829311][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.842033][ T6132] EXT4-fs (loop0): shut down requested (1) [ 302.894996][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.903148][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.991008][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.024033][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.049272][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.084166][ T1130] veth1_macvtap: left promiscuous mode [ 303.090109][ T1130] veth0_macvtap: left promiscuous mode [ 303.096375][ T1130] veth1_vlan: left promiscuous mode [ 303.102104][ T1130] veth0_vlan: left promiscuous mode [ 303.112429][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.173703][ T5808] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 303.247230][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.364431][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.907592][ T6168] loop0: detected capacity change from 0 to 512 [ 304.987800][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 305.173156][ T6168] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.65: attempt to clear invalid blocks 1 len 1 [ 305.202320][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 305.520617][ T5801] Bluetooth: hci3: command tx timeout [ 306.166979][ T6173] loop4: detected capacity change from 0 to 512 [ 307.941027][ T6168] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.65: bg 0: block 343: padding at end of block bitmap is not set [ 308.014934][ T6173] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 308.123111][ T5801] Bluetooth: hci3: command tx timeout [ 308.382153][ T6168] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 308.692827][ T6168] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.65: invalid indirect mapped block 1819239214 (level 0) [ 308.953402][ T6168] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.65: invalid indirect mapped block 1819239214 (level 1) [ 309.119086][ T6168] EXT4-fs (loop0): 1 truncate cleaned up [ 309.127187][ T6168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.200619][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.211927][ T5801] Bluetooth: hci3: command tx timeout [ 311.099582][ T6144] chnl_net:caif_netlink_parms(): no params data found [ 311.404154][ T6192] loop0: detected capacity change from 0 to 128 [ 311.652855][ T6192] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.843998][ T6192] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.273891][ T5801] Bluetooth: hci3: command tx timeout [ 312.788238][ T6192] fscrypt: Error allocating hmac(sha512): -2 [ 315.140837][ T5794] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.280464][ T6218] futex_wake_op: syz.3.76 tries to shift op by -1; fix this program [ 319.674673][ T6223] loop4: detected capacity change from 0 to 256 [ 320.433124][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.441052][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.449164][ T6144] bridge_slave_0: entered allmulticast mode [ 320.458714][ T6144] bridge_slave_0: entered promiscuous mode [ 320.861137][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.869414][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.884849][ T6144] bridge_slave_1: entered allmulticast mode [ 320.894447][ T6144] bridge_slave_1: entered promiscuous mode [ 321.466631][ T6242] can0: slcan on ptm0. [ 322.686288][ T6231] can0 (unregistered): slcan off ptm0. [ 322.883918][ T6144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.089240][ T6144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.802348][ T6144] team0: Port device team_slave_0 added [ 323.904212][ T6144] team0: Port device team_slave_1 added [ 324.409399][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.416873][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.443844][ T6144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.577429][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.587676][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.615568][ T6144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.035832][ T6144] hsr_slave_0: entered promiscuous mode [ 325.116913][ T6258] loop2: detected capacity change from 0 to 1024 [ 325.146163][ T6144] hsr_slave_1: entered promiscuous mode [ 325.174866][ T6144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.183596][ T6144] Cannot create hsr debugfs directory [ 325.197295][ T6258] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 325.338989][ T6258] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 325.413628][ T6258] EXT4-fs (loop2): orphan cleanup on readonly fs [ 325.447431][ T6258] EXT4-fs warning (device loop2): ext4_enable_quotas:7128: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 325.463126][ T6258] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 325.539026][ T6258] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.84: Freeing blocks not in datazone - block = 0, count = 4096 [ 325.625331][ T6258] EXT4-fs (loop2): Remounting filesystem read-only [ 325.632470][ T6258] EXT4-fs (loop2): 1 orphan inode deleted [ 325.640523][ T6258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.056390][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.638445][ T6144] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.739708][ T6144] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.968575][ T6144] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.023750][ T6144] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 327.037575][ T6276] loop4: detected capacity change from 0 to 2048 [ 327.047585][ T6276] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.517934][ T6276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.967898][ T6144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.970826][ T6274] loop2: detected capacity change from 0 to 8192 [ 328.016461][ T6144] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.242152][ T6144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.255933][ T6144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.315134][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.323008][ T4031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.340052][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.347949][ T4031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.930726][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.965657][ T5855] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 329.182999][ T5855] usb 1-1: Using ep0 maxpacket: 8 [ 329.199771][ T5855] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.211374][ T5855] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.221847][ T5855] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.232132][ T5855] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 329.242691][ T5855] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 329.252814][ T5855] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 330.624207][ T6307] loop4: detected capacity change from 0 to 256 [ 330.813614][ T5855] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.823359][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.831937][ T5855] usb 1-1: Product: syz [ 330.836388][ T5855] usb 1-1: Manufacturer: syz [ 330.841270][ T5855] usb 1-1: SerialNumber: syz [ 331.152604][ T6307] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 332.818655][ T5855] cdc_ncm 1-1:1.0: bind() failure [ 332.840033][ T5855] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 332.847363][ T5855] cdc_ncm 1-1:1.1: bind() failure [ 333.175621][ T5855] usb 1-1: USB disconnect, device number 2 [ 333.601100][ T6321] loop4: detected capacity change from 0 to 1024 [ 333.664251][ T6321] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 333.811052][ T6144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.029657][ T6321] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 334.068616][ T6321] EXT4-fs (loop4): orphan cleanup on readonly fs [ 334.109778][ T6319] loop0: detected capacity change from 0 to 2048 [ 334.145796][ T6321] EXT4-fs warning (device loop4): ext4_enable_quotas:7128: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 334.160801][ T6321] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 334.168149][ T6321] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.97: Freeing blocks not in datazone - block = 0, count = 4096 [ 334.441532][ T6321] EXT4-fs (loop4): Remounting filesystem read-only [ 334.448632][ T6321] EXT4-fs (loop4): 1 orphan inode deleted [ 334.456436][ T6321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.012871][ T6319] loop0: unable to read partition table [ 335.019513][ T6319] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 335.405070][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.551938][ T5157] Alternate GPT is invalid, using primary GPT. [ 335.559322][ T5157] loop0: p1 p2 p3 [ 335.992573][ T6347] loop3: detected capacity change from 0 to 1024 [ 337.069432][ T6349] loop4: detected capacity change from 0 to 128 [ 337.488889][ T6144] veth0_vlan: entered promiscuous mode [ 337.526438][ T6144] veth1_vlan: entered promiscuous mode [ 337.626514][ T6144] veth0_macvtap: entered promiscuous mode [ 337.668302][ T6144] veth1_macvtap: entered promiscuous mode [ 337.803171][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.814024][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.824185][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.834990][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.845191][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.856016][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.870751][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.884857][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.901921][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.040075][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.051016][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.061192][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.072101][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.085700][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.097508][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.109931][ T6144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.121201][ T6144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.137098][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.231440][ T6144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.240714][ T6144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.249988][ T6144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.259273][ T6144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.167599][ T6349] EXT4-fs (loop4): Test dummy encryption mode enabled [ 339.467706][ T6368] loop3: detected capacity change from 0 to 1024 [ 339.497513][ T6349] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 339.583915][ T6368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.621346][ T6349] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 339.952488][ T6110] udevd[6110]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 340.055736][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 340.099253][ T6087] udevd[6087]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 342.926377][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.037751][ T5803] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.765118][ T6409] loop4: detected capacity change from 0 to 1024 [ 346.913636][ T6409] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 347.310435][ T6409] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 347.353519][ T6409] EXT4-fs (loop4): orphan cleanup on readonly fs [ 347.462974][ T6409] EXT4-fs warning (device loop4): ext4_enable_quotas:7128: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 347.478427][ T6409] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 347.573532][ T6409] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.111: Freeing blocks not in datazone - block = 0, count = 4096 [ 347.622752][ T6409] EXT4-fs (loop4): Remounting filesystem read-only [ 347.629748][ T6409] EXT4-fs (loop4): 1 orphan inode deleted [ 347.638021][ T6409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.204133][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.710025][ T6439] loop2: detected capacity change from 0 to 512 [ 350.872777][ T6439] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 352.142748][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.149559][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.218442][ T3418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.226812][ T3418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.321891][ T3418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.330025][ T3418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.148315][ T6464] loop3: detected capacity change from 0 to 512 [ 356.707081][ T6464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.724551][ T6464] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.524443][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.467507][ T6509] loop2: detected capacity change from 0 to 8192 [ 363.399364][ T6508] loop5: detected capacity change from 0 to 256 [ 363.443293][ T6508] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 363.578199][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.586829][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.595075][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.603124][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.610862][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.619327][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.627341][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.635311][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.643339][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.643971][ T6508] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 363.650975][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.651164][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.663353][ T6508] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 363.668614][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.682488][ T6508] UDF-fs: Scanning with blocksize 512 failed [ 363.689306][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.712582][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.720292][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.728196][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.736334][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.744246][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.752085][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.759877][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.762855][ T6508] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 363.767914][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.790511][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.798513][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.806438][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.814315][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.822132][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.829875][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.837773][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.845718][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.854343][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.862145][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.869905][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.877801][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.890188][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.899415][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.907296][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.915191][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.923069][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.930813][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.938701][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.949038][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.957425][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 363.965340][ T5881] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 364.197352][ T6508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.333976][ T5881] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 366.842848][ T6537] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 373.908126][ T6567] loop0: detected capacity change from 0 to 8192 [ 374.930710][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 374.937164][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 374.949233][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 374.957184][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 377.230886][ T6582] loop2: detected capacity change from 0 to 256 [ 377.518335][ T6582] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 378.915351][ T6587] loop3: detected capacity change from 0 to 512 [ 379.365648][ T6587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 379.379085][ T6587] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.235227][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.245468][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.256948][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.421167][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.433452][ T5808] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 380.443144][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.680957][ T6607] loop0: detected capacity change from 0 to 1024 [ 381.992594][ T6607] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 382.152821][ T6605] loop2: detected capacity change from 0 to 512 [ 382.241205][ T6607] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 382.250314][ T6605] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 382.264682][ T6607] EXT4-fs (loop0): orphan cleanup on readonly fs [ 382.303659][ T6605] EXT4-fs (loop2): invalid journal inode [ 382.309944][ T6605] EXT4-fs (loop2): can't get journal size [ 382.388102][ T6607] EXT4-fs warning (device loop0): ext4_enable_quotas:7128: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 382.404617][ T6607] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 382.412989][ T6607] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.159: Freeing blocks not in datazone - block = 0, count = 4096 [ 382.492263][ T6607] EXT4-fs (loop0): Remounting filesystem read-only [ 382.499246][ T6607] EXT4-fs (loop0): 1 orphan inode deleted [ 382.507395][ T6607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.507900][ T6605] EXT4-fs (loop2): 1 truncate cleaned up [ 382.536241][ T6605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.732041][ T5808] Bluetooth: hci5: command tx timeout [ 383.078146][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 383.102171][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.166879][ T4571] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.689492][ T4571] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.938063][ T6596] chnl_net:caif_netlink_parms(): no params data found [ 384.018988][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.742728][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 384.763775][ T5808] Bluetooth: hci5: command tx timeout [ 384.788259][ T4571] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.937818][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.949485][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.960233][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.978707][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.992000][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.317428][ T4571] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.506241][ T10] usb 4-1: config 0 descriptor?? [ 386.115928][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 386.147707][ T10] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 386.225894][ T4571] bridge_slave_1: left allmulticast mode [ 386.232164][ T4571] bridge_slave_1: left promiscuous mode [ 386.238876][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.334732][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 386.358963][ T4571] bridge_slave_0: left allmulticast mode [ 386.365520][ T4571] bridge_slave_0: left promiscuous mode [ 386.372459][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.473450][ T10] usb 4-1: USB disconnect, device number 4 [ 387.047452][ T5808] Bluetooth: hci5: command tx timeout [ 387.266839][ T6643] loop5: detected capacity change from 0 to 8192 [ 387.548057][ T4571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.774341][ T4571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.917781][ T4571] bond0 (unregistering): Released all slaves [ 388.082832][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.090648][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.098703][ T6596] bridge_slave_0: entered allmulticast mode [ 388.108044][ T6596] bridge_slave_0: entered promiscuous mode [ 388.272125][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.280126][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.288531][ T6596] bridge_slave_1: entered allmulticast mode [ 388.298483][ T6596] bridge_slave_1: entered promiscuous mode [ 389.062773][ T5808] Bluetooth: hci5: command tx timeout [ 389.342039][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.625691][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.752476][ T6658] loop2: detected capacity change from 0 to 1024 [ 389.806395][ T6658] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 390.874880][ T6658] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 390.876128][ T6658] EXT4-fs (loop2): orphan cleanup on readonly fs [ 390.884337][ T6658] EXT4-fs warning (device loop2): ext4_enable_quotas:7128: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 390.909355][ T6658] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 390.909814][ T6658] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.173: Freeing blocks not in datazone - block = 0, count = 4096 [ 390.921866][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 390.922122][ T6658] EXT4-fs (loop2): 1 orphan inode deleted [ 390.923872][ T6658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.271956][ T4571] hsr_slave_0: left promiscuous mode [ 391.292220][ T4571] hsr_slave_1: left promiscuous mode [ 391.297620][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.297822][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.301363][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.301500][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.362716][ T4571] veth1_macvtap: left promiscuous mode [ 391.362874][ T4571] veth0_macvtap: left promiscuous mode [ 391.363188][ T4571] veth1_vlan: left promiscuous mode [ 391.363432][ T4571] veth0_vlan: left promiscuous mode [ 391.686223][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.509074][ T4571] team0 (unregistering): Port device team_slave_1 removed [ 392.598484][ T4571] team0 (unregistering): Port device team_slave_0 removed [ 393.434605][ T6596] team0: Port device team_slave_0 added [ 393.511390][ T6596] team0: Port device team_slave_1 added [ 393.959489][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.967005][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.997814][ T6596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.403743][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.410972][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.438354][ T6596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.193649][ T6694] loop0: detected capacity change from 0 to 8192 [ 395.667941][ T6699] loop2: detected capacity change from 0 to 16 [ 395.816747][ T6699] erofs: (device loop2): mounted with root inode @ nid 36. [ 395.877920][ T6596] hsr_slave_0: entered promiscuous mode [ 395.956047][ T6596] hsr_slave_1: entered promiscuous mode [ 395.981110][ T6596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.989706][ T6596] Cannot create hsr debugfs directory [ 397.221683][ T6707] syz.2.184: attempt to access beyond end of device [ 397.221683][ T6707] loop2: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 397.236143][ T6707] syz.2.184: attempt to access beyond end of device [ 397.236143][ T6707] loop2: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 397.250590][ T6707] erofs: (device loop2): z_erofs_read_folio: read error -5 @ 124 of nid 36 [ 397.841150][ T6705] loop5: detected capacity change from 0 to 1024 [ 398.039404][ T6705] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 398.210752][ T6705] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 398.304532][ T6705] EXT4-fs (loop5): orphan cleanup on readonly fs [ 398.405484][ T6705] EXT4-fs warning (device loop5): ext4_enable_quotas:7128: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 398.421952][ T6705] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 398.637152][ T6705] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.185: Freeing blocks not in datazone - block = 0, count = 4096 [ 398.845251][ T6705] EXT4-fs (loop5): Remounting filesystem read-only [ 398.852771][ T6705] EXT4-fs (loop5): 1 orphan inode deleted [ 398.861058][ T6705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.560730][ T6596] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 399.667789][ T6596] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 399.863474][ T6144] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.967922][ T6596] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.167235][ T6596] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.407359][ T6720] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 400.849096][ T29] audit: type=1326 audit(1731996202.513:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 400.871959][ T29] audit: type=1326 audit(1731996202.513:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 400.894683][ T29] audit: type=1326 audit(1731996202.523:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 400.917523][ T29] audit: type=1326 audit(1731996202.523:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 400.940145][ T29] audit: type=1326 audit(1731996202.523:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 400.966091][ T29] audit: type=1326 audit(1731996202.533:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 400.989806][ T29] audit: type=1326 audit(1731996202.533:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 401.012636][ T29] audit: type=1326 audit(1731996202.533:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 401.035197][ T29] audit: type=1326 audit(1731996202.533:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 401.061399][ T29] audit: type=1326 audit(1731996202.533:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 402.430005][ T6726] loop3: detected capacity change from 0 to 512 [ 407.368182][ T6596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.594134][ T6596] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.056807][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.064711][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.876069][ T6815] loop0: detected capacity change from 0 to 8192 [ 413.351668][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.359435][ T6800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.608849][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.615773][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 417.927404][ T6596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.145016][ T6904] loop3: detected capacity change from 0 to 512 [ 420.684484][ T6908] loop2: detected capacity change from 0 to 8192 [ 420.819257][ T6904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 420.835295][ T6904] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.359598][ T6596] veth0_vlan: entered promiscuous mode [ 422.503053][ T6596] veth1_vlan: entered promiscuous mode [ 422.820098][ T6596] veth0_macvtap: entered promiscuous mode [ 422.892527][ T6596] veth1_macvtap: entered promiscuous mode [ 423.129196][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.140775][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.151164][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.161974][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.176950][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.189013][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.199196][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.210110][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.225778][ T6596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.537126][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.549148][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.560153][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.571287][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.585832][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.597814][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.607991][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.618779][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.634434][ T6596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.716472][ T6929] syz.0.212[6929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.717610][ T6929] syz.0.212[6929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.731271][ T6929] syz.0.212[6929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.787727][ T6596] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.808572][ T6596] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.817917][ T6596] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.827204][ T6596] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.395648][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 425.952410][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 430.041983][ T6972] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 432.207477][ T6985] loop2: detected capacity change from 0 to 256 [ 433.445989][ T6992] loop0: detected capacity change from 0 to 8192 [ 433.456638][ T5855] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 433.725477][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.738168][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.748588][ T5855] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.762641][ T5855] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.772202][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.541364][ T5855] usb 6-1: config 0 descriptor?? [ 437.762315][ T5855] usbhid 6-1:0.0: can't add hid device: -71 [ 437.769019][ T5855] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 438.478145][ T5855] usb 6-1: USB disconnect, device number 2 [ 441.061302][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.094230][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.212242][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.230915][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.245919][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 441.255670][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.278551][ T6817] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.468542][ T5808] Bluetooth: hci2: command tx timeout [ 443.477629][ T7038] loop2: detected capacity change from 0 to 128 [ 443.514667][ T7038] EXT4-fs (loop2): Test dummy encryption mode enabled [ 443.534591][ T7038] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 444.632850][ T7038] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 444.688209][ T6817] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.331271][ T6817] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.543287][ T5808] Bluetooth: hci2: command tx timeout [ 446.049533][ T7048] fscrypt (loop2): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 446.150274][ T6817] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.495721][ T7058] warning: `syz.3.236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 446.556222][ T7024] chnl_net:caif_netlink_parms(): no params data found [ 447.674797][ T52] Bluetooth: hci2: command tx timeout [ 448.129005][ T6817] bridge_slave_1: left allmulticast mode [ 448.135202][ T6817] bridge_slave_1: left promiscuous mode [ 448.142236][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.188969][ T5795] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.238039][ T7062] loop0: detected capacity change from 0 to 2048 [ 448.273450][ T6817] bridge_slave_0: left allmulticast mode [ 448.279492][ T6817] bridge_slave_0: left promiscuous mode [ 448.288015][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.305319][ T7062] EXT4-fs error (device loop0): __ext4_fill_super:5489: inode #2: comm syz.0.233: casefold flag without casefold feature [ 448.332083][ T7062] EXT4-fs (loop0): get root inode failed [ 448.338129][ T7062] EXT4-fs (loop0): mount failed [ 449.667457][ T6817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.703210][ T52] Bluetooth: hci2: command tx timeout [ 449.743744][ T6817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.149614][ T6817] bond0 (unregistering): Released all slaves [ 451.801305][ T6817] hsr_slave_0: left promiscuous mode [ 451.865808][ T6817] hsr_slave_1: left promiscuous mode [ 451.966117][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.974880][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.078498][ T7093] loop3: detected capacity change from 0 to 8192 [ 452.094620][ T6817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.102521][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.263913][ T6817] veth1_macvtap: left promiscuous mode [ 452.269971][ T6817] veth0_macvtap: left promiscuous mode [ 452.276743][ T6817] veth1_vlan: left promiscuous mode [ 452.282515][ T6817] veth0_vlan: left promiscuous mode [ 454.112755][ T6817] team0 (unregistering): Port device team_slave_1 removed [ 454.187387][ T6817] team0 (unregistering): Port device team_slave_0 removed [ 454.849531][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 454.849627][ T29] audit: type=1326 audit(1731996256.873:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 455.074555][ T29] audit: type=1326 audit(1731996257.103:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 455.098453][ T29] audit: type=1326 audit(1731996257.103:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 455.127285][ T29] audit: type=1326 audit(1731996257.103:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 455.152307][ T29] audit: type=1326 audit(1731996257.103:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 455.174915][ T29] audit: type=1326 audit(1731996257.113:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 455.199213][ T29] audit: type=1326 audit(1731996257.113:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 455.225195][ T29] audit: type=1326 audit(1731996257.113:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 455.249306][ T29] audit: type=1326 audit(1731996257.113:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 455.271938][ T29] audit: type=1326 audit(1731996257.113:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 456.337468][ T7024] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.352010][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.359964][ T7024] bridge_slave_0: entered allmulticast mode [ 456.369503][ T7024] bridge_slave_0: entered promiscuous mode [ 456.574443][ T7024] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.582421][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.590284][ T7024] bridge_slave_1: entered allmulticast mode [ 456.600601][ T7024] bridge_slave_1: entered promiscuous mode [ 456.944684][ T7024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.049215][ T7124] loop2: detected capacity change from 0 to 1024 [ 457.320589][ T7124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.356690][ T7024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.163029][ T7134] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 458.607323][ T7024] team0: Port device team_slave_0 added [ 458.753706][ T7024] team0: Port device team_slave_1 added [ 459.509549][ T7124] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 459.806918][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.814397][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.844917][ T7024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.322637][ T7024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.329873][ T7024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.362639][ T7024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.581077][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.373790][ T7024] hsr_slave_0: entered promiscuous mode [ 461.556419][ T7024] hsr_slave_1: entered promiscuous mode [ 461.711896][ T7024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.719757][ T7024] Cannot create hsr debugfs directory [ 462.057478][ T7153] loop2: detected capacity change from 0 to 2048 [ 462.519148][ T7153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.532823][ T7153] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.113845][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.504484][ T7024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 463.533583][ T7024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 463.567974][ T7024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 463.604123][ T7024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 464.722193][ T7176] loop3: detected capacity change from 0 to 8192 [ 465.956312][ T7024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.250189][ T7024] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.661973][ T7024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.672740][ T7024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.126357][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.134249][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.153141][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.160914][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.328845][ T7209] loop2: detected capacity change from 0 to 256 [ 470.565478][ T7209] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 472.774255][ T7024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.438450][ T7235] loop5: detected capacity change from 0 to 8192 [ 475.112205][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.119055][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.377031][ T7241] loop3: detected capacity change from 0 to 512 [ 475.437816][ T7241] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 476.877122][ T7024] veth0_vlan: entered promiscuous mode [ 476.925930][ T7024] veth1_vlan: entered promiscuous mode [ 477.042453][ T7024] veth0_macvtap: entered promiscuous mode [ 477.088567][ T7024] veth1_macvtap: entered promiscuous mode [ 477.135619][ T7254] loop0: detected capacity change from 0 to 1024 [ 477.214600][ T7254] EXT4-fs: Ignoring removed orlov option [ 477.220682][ T7254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 477.316163][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.327093][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.338269][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.353386][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.364951][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.375770][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.386031][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.396927][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.412796][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.433174][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.448351][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.459891][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.472892][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.483600][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.494384][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.504642][ T7024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.515446][ T7024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.530983][ T7024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.557581][ T7024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.567331][ T7024] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.576703][ T7024] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.586020][ T7024] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.130083][ T7254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.635607][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 478.635689][ T29] audit: type=1326 audit(1731996280.663:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 478.666778][ T29] audit: type=1326 audit(1731996280.663:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 478.693323][ T29] audit: type=1326 audit(1731996280.673:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 478.717315][ T29] audit: type=1326 audit(1731996280.673:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 478.740120][ T29] audit: type=1326 audit(1731996280.673:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 478.762970][ T29] audit: type=1326 audit(1731996280.683:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f888317d0f0 code=0x7ffc0000 [ 478.789487][ T29] audit: type=1326 audit(1731996280.683:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 479.097263][ T29] audit: type=1326 audit(1731996280.883:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8883175727 code=0x7ffc0000 [ 479.120343][ T29] audit: type=1326 audit(1731996280.883:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f888311a0f9 code=0x7ffc0000 [ 479.143244][ T29] audit: type=1326 audit(1731996280.883:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7264 comm="syz.2.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 479.339877][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.415495][ T7319] netlink: 'syz.3.290': attribute type 6 has an invalid length. [ 484.838755][ T7320] overlayfs: missing 'lowerdir' [ 485.029089][ T7316] loop0: detected capacity change from 0 to 1024 [ 485.375081][ T7316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.503737][ T3817] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 16777241 free clusters [ 486.582222][ T3817] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 486.594906][ T3817] EXT4-fs (loop0): This should not happen!! Data will be lost [ 486.594906][ T3817] [ 486.605624][ T3817] EXT4-fs (loop0): Total free blocks count 0 [ 486.612099][ T3817] EXT4-fs (loop0): Free/Dirty block details [ 486.618245][ T3817] EXT4-fs (loop0): free_blocks=268435456 [ 486.624277][ T3817] EXT4-fs (loop0): dirty_blocks=32 [ 486.629664][ T3817] EXT4-fs (loop0): Block reservation details [ 486.636387][ T3817] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 486.745096][ T6830] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 487.958913][ T7343] can0: slcan on ptm0. [ 488.521109][ T7332] can0 (unregistered): slcan off ptm0. [ 493.186235][ T7375] loop3: detected capacity change from 0 to 128 [ 495.844643][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.852938][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.133769][ T7375] EXT4-fs: error -4 creating inode table initialization thread [ 496.163401][ T7375] EXT4-fs (loop3): mount failed [ 497.555651][ T3817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.563975][ T3817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.839611][ T7382] netlink: 64 bytes leftover after parsing attributes in process `syz.5.305'. [ 497.849568][ T7382] netlink: 64 bytes leftover after parsing attributes in process `syz.5.305'. [ 498.017637][ T7393] loop2: detected capacity change from 0 to 16 [ 498.159042][ T7393] erofs: Unknown parameter '18446744073709551615n&*4c N3iVEl?lѾνB^'׃juL]CJ(Hyt pdNGn+'X [ 498.159042][ T7393] ' [ 498.429709][ T7393] loop2: detected capacity change from 0 to 512 [ 498.490879][ T7393] ext3: Unknown parameter 'uid<00000000000000000000' [ 498.633181][ T7393] cgroup: Unknown subsys name 'cpuset' [ 502.125011][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 502.162589][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 502.182506][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 502.220379][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 502.246584][ T5808] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 502.273908][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 504.587450][ T5808] Bluetooth: hci5: command tx timeout [ 506.579804][ T7440] loop2: detected capacity change from 0 to 16 [ 506.679770][ T3817] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.735204][ T5808] Bluetooth: hci5: command tx timeout [ 506.821424][ T7440] erofs: (device loop2): mounted with root inode @ nid 36. [ 506.845364][ T7440] syz.2.314: attempt to access beyond end of device [ 506.845364][ T7440] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 506.858981][ T7440] erofs: (device loop2): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 507.437252][ T3817] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.106071][ T3817] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.336340][ T7412] chnl_net:caif_netlink_parms(): no params data found [ 508.529031][ T3817] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.752617][ T5808] Bluetooth: hci5: command tx timeout [ 509.762766][ T3817] bridge_slave_1: left allmulticast mode [ 509.768857][ T3817] bridge_slave_1: left promiscuous mode [ 509.775906][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.876985][ T3817] bridge_slave_0: left allmulticast mode [ 509.883306][ T3817] bridge_slave_0: left promiscuous mode [ 509.890155][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.953124][ T7457] loop5: detected capacity change from 0 to 128 [ 510.038076][ T7457] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 510.097762][ T7457] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.989628][ T5808] Bluetooth: hci5: command tx timeout [ 510.996072][ T7457] syz.5.321 (pid 7457) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 511.204798][ T7457] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 511.219382][ T7457] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 511.239853][ T7457] overlayfs: failed to create directory ./file0/work (errno: 65); mounting read-only [ 512.333863][ T3817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.482534][ T3817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.522439][ T3817] bond0 (unregistering): Released all slaves [ 512.560129][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 1024 [ 512.614159][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 512.649290][ T6144] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 512.719269][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 1024 [ 512.744001][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 512.764401][ T6144] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 512.795996][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 1024 [ 512.874392][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 512.984297][ T6144] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 513.088078][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 1024 [ 513.555964][ T7488] loop0: detected capacity change from 0 to 1024 [ 513.580501][ T7488] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 513.901874][ T7488] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 513.923984][ T7488] EXT4-fs (loop0): orphan cleanup on readonly fs [ 513.939972][ T7488] EXT4-fs warning (device loop0): ext4_enable_quotas:7128: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 513.955240][ T7488] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 514.023186][ T7488] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.329: Freeing blocks not in datazone - block = 0, count = 4096 [ 514.040469][ T7488] EXT4-fs (loop0): Remounting filesystem read-only [ 514.049449][ T7488] EXT4-fs (loop0): 1 orphan inode deleted [ 514.057910][ T7488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 514.112021][ T3817] hsr_slave_0: left promiscuous mode [ 514.121737][ T3817] hsr_slave_1: left promiscuous mode [ 514.143139][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.150924][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.178727][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.186829][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.225384][ T3817] veth1_macvtap: left promiscuous mode [ 514.231673][ T3817] veth0_macvtap: left promiscuous mode [ 514.237648][ T3817] veth1_vlan: left promiscuous mode [ 514.244201][ T3817] veth0_vlan: left promiscuous mode [ 514.789328][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.667864][ T3817] team0 (unregistering): Port device team_slave_1 removed [ 515.826492][ T3817] team0 (unregistering): Port device team_slave_0 removed [ 516.274719][ T7497] netlink: 'syz.3.330': attribute type 29 has an invalid length. [ 516.566190][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.574384][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.582538][ T7412] bridge_slave_0: entered allmulticast mode [ 516.592009][ T7412] bridge_slave_0: entered promiscuous mode [ 516.788181][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.796576][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.804753][ T7412] bridge_slave_1: entered allmulticast mode [ 516.814269][ T7412] bridge_slave_1: entered promiscuous mode [ 517.291736][ T7412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.353919][ T7412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.656200][ T6144] EXT4-fs error: 221 callbacks suppressed [ 517.656349][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 1024 [ 517.755851][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 517.975994][ T6144] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 518.060198][ T7412] team0: Port device team_slave_0 added [ 518.078332][ T7412] team0: Port device team_slave_1 added [ 518.178694][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 1024 [ 518.248893][ T7539] loop2: detected capacity change from 0 to 1024 [ 518.309306][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.316828][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.343997][ T7412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.383682][ T7539] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 518.426085][ T7539] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 518.446089][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 518.457072][ T7539] EXT4-fs (loop2): orphan cleanup on readonly fs [ 518.467918][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.467998][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.468176][ T7412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.592163][ T7539] EXT4-fs warning (device loop2): ext4_enable_quotas:7128: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 518.611762][ T7539] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 518.619060][ T7539] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.342: Freeing blocks not in datazone - block = 0, count = 4096 [ 518.826697][ T6144] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 518.826837][ T7539] EXT4-fs (loop2): Remounting filesystem read-only [ 518.827083][ T7539] EXT4-fs (loop2): 1 orphan inode deleted [ 518.918067][ T7539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 518.953859][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 1024 [ 519.034687][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 8192 [ 519.352718][ T7412] hsr_slave_0: entered promiscuous mode [ 519.413432][ T7412] hsr_slave_1: entered promiscuous mode [ 519.452021][ T7412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.460055][ T7412] Cannot create hsr debugfs directory [ 519.554317][ T6144] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 519.580756][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.635863][ T6144] EXT4-fs error (device loop5): ext4_readdir:221: inode #11: comm syz-executor: path /46/file0/lost+found: directory fails checksum at offset 1024 [ 521.875518][ T7412] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 522.101711][ T7412] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 522.263957][ T7412] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 522.316102][ T6144] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.457560][ T1130] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.544290][ T7412] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 522.691226][ T1130] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.987764][ T1130] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.197432][ T1130] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.505409][ T1130] bridge_slave_1: left allmulticast mode [ 524.511364][ T1130] bridge_slave_1: left promiscuous mode [ 524.520109][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.566066][ T1130] bridge_slave_0: left allmulticast mode [ 524.573855][ T1130] bridge_slave_0: left promiscuous mode [ 524.580594][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.163139][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.252618][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.306477][ T1130] bond0 (unregistering): Released all slaves [ 525.652158][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.791070][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.856947][ T7412] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.953588][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.973333][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.001210][ T7412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.012520][ T7412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.058381][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.066309][ T6645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.088018][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.095934][ T6645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.207269][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 526.223115][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 526.302966][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.384741][ T1130] hsr_slave_0: left promiscuous mode [ 527.433256][ T1130] hsr_slave_1: left promiscuous mode [ 527.589672][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.597715][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.634400][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.642322][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.724070][ T1130] veth1_macvtap: left promiscuous mode [ 527.729918][ T1130] veth0_macvtap: left promiscuous mode [ 527.736779][ T1130] veth1_vlan: left promiscuous mode [ 527.742583][ T1130] veth0_vlan: left promiscuous mode [ 527.899469][ T7630] Illegal XDP return value 4294967282 on prog (id 179) dev N/A, expect packet loss! [ 528.501154][ T5808] Bluetooth: hci2: command tx timeout [ 528.859011][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 528.965888][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 529.432116][ T7634] netlink: 'syz.3.371': attribute type 29 has an invalid length. [ 529.681937][ T7412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.662513][ T5808] Bluetooth: hci2: command tx timeout [ 531.416140][ T7601] chnl_net:caif_netlink_parms(): no params data found [ 532.388946][ T7412] veth0_vlan: entered promiscuous mode [ 532.753864][ T5808] Bluetooth: hci2: command tx timeout [ 532.799732][ T7412] veth1_vlan: entered promiscuous mode [ 533.000745][ T7412] veth0_macvtap: entered promiscuous mode [ 533.133988][ T7412] veth1_macvtap: entered promiscuous mode [ 533.519276][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.530500][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.540920][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.551863][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.565386][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.577609][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.593317][ T7412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.730958][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.744688][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.756236][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.770647][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.781994][ T7412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.793697][ T7412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.809617][ T7412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.844652][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.854019][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.868527][ T7601] bridge_slave_0: entered allmulticast mode [ 533.879070][ T7601] bridge_slave_0: entered promiscuous mode [ 533.983515][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.991345][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.999459][ T7601] bridge_slave_1: entered allmulticast mode [ 534.009112][ T7601] bridge_slave_1: entered promiscuous mode [ 534.193407][ T7412] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.202640][ T7412] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.211939][ T7412] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.221074][ T7412] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.608277][ T7601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.730633][ T7601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.823128][ T5808] Bluetooth: hci2: command tx timeout [ 535.064159][ T7601] team0: Port device team_slave_0 added [ 535.205770][ T7601] team0: Port device team_slave_1 added [ 536.138897][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.146827][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.173423][ T7601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.346629][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.354016][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.380627][ T7601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.534922][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.541882][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.049881][ T7601] hsr_slave_0: entered promiscuous mode [ 537.133936][ T7601] hsr_slave_1: entered promiscuous mode [ 537.212752][ T7601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.220726][ T7601] Cannot create hsr debugfs directory [ 539.053594][ T7601] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 539.128067][ T7601] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 539.174617][ T7601] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 539.233930][ T7601] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 540.044933][ T7601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.095940][ T7601] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.240008][ T7601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.250927][ T7601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.335717][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.343662][ T6645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.360411][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.368294][ T6645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.191252][ T7601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.865736][ T6645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.876839][ T6645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.418732][ T6645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.427798][ T6645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.486969][ T7601] veth0_vlan: entered promiscuous mode [ 545.531878][ T7601] veth1_vlan: entered promiscuous mode [ 545.653756][ T7601] veth0_macvtap: entered promiscuous mode [ 545.675650][ T7601] veth1_macvtap: entered promiscuous mode [ 545.735130][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.750159][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.761723][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.772612][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.783805][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.796095][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.810724][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.824576][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.840815][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.867125][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.878004][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.888146][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.899894][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.910044][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.920948][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.931444][ T7601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.944645][ T7601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.967095][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.988142][ T7601] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.997376][ T7601] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.006584][ T7601] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.015882][ T7601] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.931440][ T7881] veth0_vlan: entered allmulticast mode [ 548.951239][ T7880] netlink: 'syz.2.439': attribute type 29 has an invalid length. [ 549.100990][ T7880] netlink: 'syz.2.439': attribute type 29 has an invalid length. [ 549.115067][ T7880] netlink: 'syz.2.439': attribute type 29 has an invalid length. [ 549.132979][ T7880] netlink: 'syz.2.439': attribute type 29 has an invalid length. [ 550.193716][ T7887] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 550.202390][ T7887] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 551.134232][ T7897] loop6: detected capacity change from 0 to 8192 [ 553.056239][ T7924] syzkaller0: entered promiscuous mode [ 553.063261][ T7924] syzkaller0: entered allmulticast mode [ 555.114248][ T7944] netlink: 44 bytes leftover after parsing attributes in process `syz.0.463'. [ 555.124239][ T7944] veth0_to_bond: entered allmulticast mode [ 555.133214][ T7944] netlink: 'syz.0.463': attribute type 2 has an invalid length. [ 555.141122][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 555.443544][ T3817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.452533][ T3817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.799771][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.808086][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.225508][ T7954] loop6: detected capacity change from 0 to 8192 [ 562.601796][ T5849] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 562.770270][ T5849] usb 4-1: config 1 interface 0 has no altsetting 0 [ 562.791381][ T5849] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 562.801107][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.809528][ T5849] usb 4-1: Product: syz [ 562.814045][ T5849] usb 4-1: Manufacturer: syz [ 562.818917][ T5849] usb 4-1: SerialNumber: syz [ 563.360749][ T5849] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 252 proto 1 vid 0x0525 pid 0xA4A8 [ 563.511423][ T5849] usb 4-1: USB disconnect, device number 5 [ 563.556723][ T5849] usblp0: removed [ 564.614763][ T8038] loop2: detected capacity change from 0 to 8192 [ 571.381815][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 571.712364][ T8091] netlink: 'syz.6.508': attribute type 11 has an invalid length. [ 575.111713][ T5849] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 575.302139][ T5849] usb 4-1: Using ep0 maxpacket: 32 [ 575.333076][ T5849] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 575.345570][ T5849] usb 4-1: config 0 has no interface number 0 [ 575.389154][ T5849] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 575.398859][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.407359][ T5849] usb 4-1: Product: syz [ 575.411920][ T5849] usb 4-1: Manufacturer: syz [ 575.416783][ T5849] usb 4-1: SerialNumber: syz [ 575.491732][ T5849] usb 4-1: config 0 descriptor?? [ 575.529827][ T5808] Bluetooth: hci5: Malformed HCI Event [ 575.621447][ T5849] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 575.841306][ T8139] netlink: 'syz.2.521': attribute type 11 has an invalid length. [ 576.554802][ T5849] gspca_topro: reg_w err -110 [ 576.596159][ T5849] gspca_topro: Sensor soi763a [ 578.503001][ T5849] usb 4-1: USB disconnect, device number 6 [ 581.287496][ T8186] loop0: detected capacity change from 0 to 8192 [ 584.354637][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 584.571777][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 584.625460][ T5881] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 584.636230][ T5881] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.649957][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 584.662963][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.815476][ T5881] usbtmc 3-1:16.0: bulk endpoints not found [ 585.007676][ T5881] usb 3-1: USB disconnect, device number 3 [ 589.508644][ T8253] loop7: detected capacity change from 0 to 8192 [ 593.259111][ T8303] loop2: detected capacity change from 0 to 7 [ 593.347699][ T8303] Dev loop2: unable to read RDB block 7 [ 593.355202][ T8303] loop2: unable to read partition table [ 593.402993][ T8303] loop2: partition table beyond EOD, truncated [ 593.409836][ T8303] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 594.041945][ T8304] Zero length message leads to an empty skb [ 597.089930][ T8339] loop3: detected capacity change from 0 to 8192 [ 598.062461][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.073074][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.957691][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 603.936647][ T52] Bluetooth: Wrong link type (-57) [ 605.554465][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 607.307072][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 607.307163][ T29] audit: type=1326 audit(1731996409.353:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.7.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 607.619684][ T29] audit: type=1326 audit(1731996409.593:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.7.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 607.643458][ T29] audit: type=1326 audit(1731996409.593:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.7.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 607.665764][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.672883][ T29] audit: type=1326 audit(1731996409.593:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.7.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 608.196313][ T29] audit: type=1326 audit(1731996409.763:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.7.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 608.223749][ T29] audit: type=1326 audit(1731996409.763:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.7.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 608.248621][ T29] audit: type=1326 audit(1731996409.813:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.7.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 608.271876][ T29] audit: type=1326 audit(1731996409.813:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.7.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 608.294584][ T29] audit: type=1326 audit(1731996409.833:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.7.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 608.322294][ T29] audit: type=1326 audit(1731996409.833:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.7.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 615.691836][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 615.691922][ T29] audit: type=1326 audit(1731996417.733:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.7.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 615.722939][ T29] audit: type=1326 audit(1731996417.733:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.7.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 615.880540][ T29] audit: type=1326 audit(1731996417.813:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.7.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 615.902971][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.913409][ T29] audit: type=1326 audit(1731996417.823:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.7.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 615.935866][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.943030][ T29] audit: type=1326 audit(1731996417.843:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.7.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 615.965425][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.972469][ T29] audit: type=1326 audit(1731996417.853:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.7.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 615.998867][ T29] audit: type=1326 audit(1731996417.883:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.7.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 616.023311][ T29] audit: type=1326 audit(1731996417.883:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.7.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 616.046543][ T29] audit: type=1326 audit(1731996417.913:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.7.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 616.068910][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.075721][ T29] audit: type=1326 audit(1731996417.913:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8563 comm="syz.7.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0e57e759 code=0x7ffc0000 [ 616.098194][ C1] vkms_vblank_simulate: vblank timer overrun [ 618.727472][ T8589] binder: BINDER_SET_CONTEXT_MGR already set [ 618.734670][ T8589] binder: 8586:8589 ioctl 4018620d 20000040 returned -16 [ 621.839076][ T8628] Cannot find del_set index 0 as target [ 622.985726][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 622.985804][ T29] audit: type=1326 audit(1731996425.033:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 623.015656][ T29] audit: type=1326 audit(1731996425.033:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 623.038392][ T29] audit: type=1326 audit(1731996425.083:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 623.065793][ T29] audit: type=1326 audit(1731996425.083:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 623.089846][ T29] audit: type=1326 audit(1731996425.083:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 623.113063][ T29] audit: type=1326 audit(1731996425.133:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 623.135812][ T29] audit: type=1326 audit(1731996425.133:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 623.162850][ T29] audit: type=1326 audit(1731996425.133:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 623.186698][ T29] audit: type=1326 audit(1731996425.133:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 623.209422][ T29] audit: type=1326 audit(1731996425.143:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.2.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888317e759 code=0x7ffc0000 [ 625.272828][ T5849] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 625.534458][ T5849] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 625.543784][ T5849] usb 7-1: config 0 has no interface number 0 [ 625.550153][ T5849] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.561678][ T5849] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 625.574239][ T5849] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 625.585747][ T5849] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 625.597113][ T5849] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 625.610609][ T5849] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 625.625272][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.628552][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 626.044660][ T5849] usb 7-1: config 0 descriptor?? [ 626.063304][ T8669] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 626.089785][ T5849] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 626.460291][ T5849] usb 7-1: USB disconnect, device number 2 [ 626.528807][ T5849] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 626.808173][ T8677] loop7: detected capacity change from 0 to 8192 [ 629.524281][ T5849] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 629.694930][ T5849] usb 7-1: Using ep0 maxpacket: 8 [ 629.731276][ T5849] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.742588][ T5849] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 629.754632][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 629.766154][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 629.776346][ T5849] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 630.142452][ T5849] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 630.152177][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 630.160633][ T5849] usb 7-1: Product: syz [ 630.165301][ T5849] usb 7-1: Manufacturer: syz [ 630.170211][ T5849] usb 7-1: SerialNumber: syz [ 630.296044][ T5849] usb 7-1: config 0 descriptor?? [ 630.518032][ T5849] radio-si470x 7-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 630.725605][ T5849] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 630.742054][ T5849] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 630.754068][ T5849] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 630.906425][ T5849] usb 7-1: USB disconnect, device number 3 [ 631.204339][ T52] Bluetooth: hci0: unexpected event for opcode 0x200c [ 633.212475][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 633.212570][ T29] audit: type=1326 audit(1731996435.223:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96cb7e759 code=0x7ffc0000 [ 633.940838][ T29] audit: type=1326 audit(1731996435.343:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96cb7e759 code=0x7ffc0000 [ 633.965528][ T29] audit: type=1326 audit(1731996435.573:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96cb7e759 code=0x7ffc0000 [ 633.991120][ T29] audit: type=1326 audit(1731996435.573:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96cb7e759 code=0x7ffc0000 [ 634.021378][ T29] audit: type=1326 audit(1731996435.573:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96cb7e759 code=0x7ffc0000 [ 634.123749][ T29] audit: type=1326 audit(1731996436.103:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96cb7e759 code=0x7ffc0000 [ 634.146938][ T29] audit: type=1326 audit(1731996436.103:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96cb7e759 code=0x7ffc0000 [ 634.169738][ T29] audit: type=1326 audit(1731996436.103:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96cb7e759 code=0x7ffc0000 [ 634.192588][ T29] audit: type=1326 audit(1731996436.103:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96cb7e759 code=0x7ffc0000 [ 634.218504][ T29] audit: type=1326 audit(1731996436.103:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8733 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96cb7e759 code=0x7ffc0000 [ 635.735082][ T8757] loop3: detected capacity change from 0 to 8192 [ 639.079301][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 639.079378][ T29] audit: type=1326 audit(1731996441.123:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 639.201379][ T29] audit: type=1326 audit(1731996441.203:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 639.226252][ T29] audit: type=1326 audit(1731996441.203:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 639.251791][ T29] audit: type=1326 audit(1731996441.213:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 639.275500][ T29] audit: type=1326 audit(1731996441.213:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 639.298356][ T29] audit: type=1326 audit(1731996441.213:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 639.321160][ T29] audit: type=1326 audit(1731996441.213:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 639.345866][ T29] audit: type=1326 audit(1731996441.213:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 639.369235][ T29] audit: type=1326 audit(1731996441.213:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 639.392295][ T29] audit: type=1326 audit(1731996441.233:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8781 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 642.982490][ T8821] loop7: detected capacity change from 0 to 8192 [ 645.715229][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 647.856351][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 647.856421][ T29] audit: type=1326 audit(1731996449.903:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 648.052099][ T29] audit: type=1326 audit(1731996449.963:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 648.074829][ T29] audit: type=1326 audit(1731996449.983:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 648.097705][ T29] audit: type=1326 audit(1731996449.983:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 648.120638][ T29] audit: type=1326 audit(1731996449.983:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 648.146048][ T29] audit: type=1326 audit(1731996450.023:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 648.169643][ T29] audit: type=1326 audit(1731996450.023:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 648.192584][ T29] audit: type=1326 audit(1731996450.023:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 648.215275][ T29] audit: type=1326 audit(1731996450.053:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 648.238075][ T29] audit: type=1326 audit(1731996450.063:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 648.871797][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 649.110511][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 649.144391][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 649.189774][ T8] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 649.199110][ T8] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 649.207760][ T8] usb 4-1: config 129 descriptor has 1 excess byte, ignoring [ 649.215562][ T8] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 649.225083][ T8] usb 4-1: config 129 has no interface number 0 [ 649.231833][ T8] usb 4-1: config 129 has no interface number 1 [ 649.238339][ T8] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 649.252412][ T8] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 649.263714][ T8] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 649.282209][ T8] usb 4-1: config 129 interface 135 has no altsetting 0 [ 649.289465][ T8] usb 4-1: config 129 interface 5 has no altsetting 0 [ 649.848166][ T8885] loop6: detected capacity change from 0 to 8192 [ 649.992777][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 650.002563][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.010873][ T8] usb 4-1: Product: syz [ 650.015728][ T8] usb 4-1: Manufacturer: syz [ 650.020715][ T8] usb 4-1: SerialNumber: syz [ 650.887388][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.895050][ T8] usb 4-1: MIDIStreaming interface descriptor not found [ 651.271104][ T5808] Bluetooth: hci2: command 0x0405 tx timeout [ 651.412086][ T8] usb 4-1: USB disconnect, device number 7 [ 651.466621][ T8893] sctp: failed to load transform for md5: -2 [ 651.477063][ T8889] sctp: failed to load transform for md5: -2 [ 651.653135][ T8891] sctp: failed to load transform for md5: -2 [ 651.748400][ T8895] sctp: failed to load transform for md5: -2 [ 651.784689][ T8899] sctp: failed to load transform for md5: -2 [ 653.241797][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.722519][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 653.722606][ T29] audit: type=1326 audit(1731996455.743:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 653.752153][ T29] audit: type=1326 audit(1731996455.763:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 653.777693][ T29] audit: type=1326 audit(1731996455.763:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 653.801268][ T29] audit: type=1326 audit(1731996455.763:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 653.928837][ T29] audit: type=1326 audit(1731996455.883:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 653.947242][ T8948] input: syz1 as /devices/virtual/input/input8 [ 653.952541][ T29] audit: type=1326 audit(1731996455.883:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 653.984922][ T29] audit: type=1326 audit(1731996455.883:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 654.008749][ T29] audit: type=1326 audit(1731996455.913:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 654.031598][ T29] audit: type=1326 audit(1731996455.913:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 654.054397][ T29] audit: type=1326 audit(1731996455.963:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8945 comm="syz.0.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f5f6ff7e759 code=0x7ffc0000 [ 658.379435][ T5855] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 658.629115][ T5855] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 658.637877][ T5855] usb 7-1: config 0 has no interface number 0 [ 658.644490][ T5855] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 658.655750][ T5855] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 658.668045][ T5855] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 658.679615][ T5855] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 658.693718][ T5855] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 658.708118][ T5855] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 658.717644][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.043311][ T5855] usb 7-1: config 0 descriptor?? [ 659.054574][ T9001] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 659.205210][ T5855] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 659.326923][ T5855] usb 7-1: USB disconnect, device number 4 [ 659.342936][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.350118][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.360211][ T5855] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 660.951953][ T5855] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 661.233033][ T5855] usb 7-1: too many configurations: 228, using maximum allowed: 8 [ 661.257440][ T5855] usb 7-1: config 0 has no interfaces? [ 661.292781][ T5855] usb 7-1: config 0 has no interfaces? [ 661.386702][ T5855] usb 7-1: config 0 has no interfaces? [ 661.441967][ T5855] usb 7-1: config 0 has no interfaces? [ 661.632112][ T5855] usb 7-1: config 0 has no interfaces? [ 661.702742][ T5855] usb 7-1: config 0 has no interfaces? [ 661.713423][ T5855] usb 7-1: config 0 has no interfaces? [ 661.804500][ T5855] usb 7-1: config 0 has no interfaces? [ 661.810366][ T5855] usb 7-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 661.820014][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.314372][ T5855] usb 7-1: config 0 descriptor?? [ 663.158094][ T8] usb 7-1: USB disconnect, device number 5 [ 664.706192][ T52] Bluetooth: hci0: unexpected event for opcode 0x202f [ 665.040315][ T52] ===================================================== [ 665.047914][ T52] BUG: KMSAN: uninit-value in hci_rx_work+0x10a8/0x1130 [ 665.055286][ T52] hci_rx_work+0x10a8/0x1130 [ 665.060073][ T52] process_scheduled_works+0xae0/0x1c40 [ 665.066016][ T52] worker_thread+0xea7/0x14f0 [ 665.070929][ T52] kthread+0x3e2/0x540 [ 665.075382][ T52] ret_from_fork+0x6d/0x90 [ 665.080013][ T52] ret_from_fork_asm+0x1a/0x30 [ 665.085183][ T52] [ 665.087629][ T52] Uninit was created at: [ 665.092324][ T52] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 665.098465][ T52] kmalloc_reserve+0x13d/0x4a0 [ 665.103640][ T52] __alloc_skb+0x363/0x7b0 [ 665.108292][ T52] vhci_write+0x127/0x900 [ 665.112958][ T52] vfs_write+0xb2b/0x1540 [ 665.117523][ T52] ksys_write+0x240/0x4b0 [ 665.122177][ T52] __x64_sys_write+0x93/0xe0 [ 665.126975][ T52] x64_sys_call+0x3161/0x3c30 [ 665.131959][ T52] do_syscall_64+0xcd/0x1e0 [ 665.136711][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.145787][ T52] [ 665.149069][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 665.159742][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 665.170224][ T52] Workqueue: hci0 hci_rx_work [ 665.175218][ T52] ===================================================== [ 665.182345][ T52] Disabling lock debugging due to kernel taint [ 665.188756][ T52] Kernel panic - not syncing: kmsan.panic set ... [ 665.195339][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G B 6.12.0-syzkaller-00239-gc6d64479d609 #0 [ 665.207488][ T52] Tainted: [B]=BAD_PAGE [ 665.211808][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 665.222047][ T52] Workqueue: hci0 hci_rx_work [ 665.226977][ T52] Call Trace: [ 665.230432][ T52] [ 665.233495][ T52] dump_stack_lvl+0x216/0x2d0 [ 665.238412][ T52] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 665.244433][ T52] dump_stack+0x1e/0x30 [ 665.248821][ T52] panic+0x4e2/0xcf0 [ 665.252952][ T52] ? kmsan_get_metadata+0x111/0x1c0 [ 665.258383][ T52] kmsan_report+0x2c7/0x2d0 [ 665.263168][ T52] ? kmsan_get_metadata+0x13e/0x1c0 [ 665.268558][ T52] ? __msan_warning+0x95/0x120 [ 665.273561][ T52] ? hci_rx_work+0x10a8/0x1130 [ 665.278503][ T52] ? process_scheduled_works+0xae0/0x1c40 [ 665.284432][ T52] ? worker_thread+0xea7/0x14f0 [ 665.289476][ T52] ? kthread+0x3e2/0x540 [ 665.293931][ T52] ? ret_from_fork+0x6d/0x90 [ 665.298702][ T52] ? ret_from_fork_asm+0x1a/0x30 [ 665.303952][ T52] ? filter_irq_stacks+0x60/0x1a0 [ 665.309236][ T52] ? kmsan_get_metadata+0x13e/0x1c0 [ 665.314642][ T52] ? kmsan_get_metadata+0x13e/0x1c0 [ 665.320034][ T52] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 665.326626][ T52] ? kmsan_get_metadata+0x13e/0x1c0 [ 665.332015][ T52] ? kmsan_get_metadata+0x13e/0x1c0 [ 665.337401][ T52] ? kmsan_get_metadata+0x13e/0x1c0 [ 665.342781][ T52] ? kmsan_get_metadata+0x13e/0x1c0 [ 665.348182][ T52] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 665.354792][ T52] ? kmsan_get_metadata+0x13e/0x1c0 [ 665.360212][ T52] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 665.366223][ T52] __msan_warning+0x95/0x120 [ 665.371044][ T52] hci_rx_work+0x10a8/0x1130 [ 665.375825][ T52] ? __pfx_hci_rx_work+0x10/0x10 [ 665.380954][ T52] process_scheduled_works+0xae0/0x1c40 [ 665.386744][ T52] worker_thread+0xea7/0x14f0 [ 665.391675][ T52] kthread+0x3e2/0x540 [ 665.395971][ T52] ? __pfx_worker_thread+0x10/0x10 [ 665.401314][ T52] ? __pfx_kthread+0x10/0x10 [ 665.406138][ T52] ret_from_fork+0x6d/0x90 [ 665.410736][ T52] ? __pfx_kthread+0x10/0x10 [ 665.415568][ T52] ret_from_fork_asm+0x1a/0x30 [ 665.420565][ T52] [ 665.424108][ T52] Kernel Offset: disabled [ 665.428523][ T52] Rebooting in 86400 seconds..