last executing test programs: 16m32.60099618s ago: executing program 1 (id=1317): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x4, 0xfffffffffffffffe, 0xc6}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) fdatasync(r3) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @broadcast}, 0x10) epoll_create(0x1) rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 16m30.393790588s ago: executing program 1 (id=1320): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 16m28.036261243s ago: executing program 1 (id=1324): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000005680)="$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") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$dsp(r0, &(0x7f0000000100)='n', 0x1) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x2b}, @in=@private=0xa010100, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x104}}, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r1, 0x0, 0x80000000c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0xbf, 0xc8, &(0x7f00000002c0)="3fd2fd26e9a8fa9f40af3d2d745446fd986de3a5397a7df4477f318307bcba97fd747e76d3f686c54a3244508cad4652a7608274f80910221ffbb575dd1bc3876bc6c50822f794a3187d2d3c7ee8be5ef96a5b900300c2bee012c8014902a757dd6d7fa59333ff10470e766b4a4afddec2a42ea1f531d12c26f1e0ae69546139e7ce574881774c4e952c43e2b3d1610840dd6890a67cdbfc9d6608b3e940a4020326cd3659d063c595f80eb6f1eceaa9656551a61c53e923b4df42a83496b2", &(0x7f00000004c0)=""/200, 0x6, 0x0, 0x0, 0xae, &(0x7f00000005c0), &(0x7f0000000780)="398a4c35b3f081942d89ea190e567ce9dc2aabd9655a9079fe3d5d3a65ab1ab87e372714b6a47730439d29abee63cdb43a181b73c536be86a947f5449a0607decbe954295ca308368a4a221563ee4622c846199a3e1bca80bfb5a4cdf0adc6046b0e7922f3a5a72bd1cf8b4d680f7a8ee5b50111c6719cf263756d0723b9ac8f624b8fa79c4c8b3cff107e7fc27358c961d77c291932ab8ff3108ec73dc2bbf89bd71200c7ec3a8b29f099ff2f21", 0x3, 0x0, 0x9d}, 0x50) link(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000840)='./file1/file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0xfc, 0xc2d, &(0x7f0000003480)="$eJzs3UFsHNd9B+D/Gy3Fld1WTJyodhsXm7ZIZcZyZUkxFatwVzXNNoAsE6GYWwCuyJW6MEUSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZdEmKVH299nUb3fmvZn3ZnZnJEFvXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/30sXTz6YH3QoA4H66PPHV02fc/wHgE+WKP/8DAAAAAAAAAAAAAMBhl6KIxyLFwuWNNFW976pf6szdvDU5OrZztWOpqnmkKl/+1J89c/bcl54bOd/LD66/356IVyauXGy8OH9jYbG9tNSeaUzOdabnZ9q73sJe6283XB2Axo1Xb85cu7bUOPPM2S2rbw29N/joiaELI0+derJXdnJ0bGyir0xt4CPv/X3uNsLjaBRxKlI8/b2fpFZEFLH3Y3GPz85BO1Z1YrjqxOToWNWR2U5rbrlcOd47EEVEo69Ss3eM7sO52JNmxErZ/LLBw2X3JhZai62rs+3GeGtxubPcmZ8bT93Wlv1pRBHnU8RqRKwPvn9zA1FELVJ85/hGuhoRR3rH4YvVwOC7t6M4wD7uQtnOxkDEavEQnLNDbDCKeDlS/PTtIqbLY5Z/4gsRL5f5g4g3y3whIpUfjHMR7+7wOeLhVIsi/rw8/xc20kx1PehdVy59rfGVuWvzfWV715WH/v5wP22/NuX7z2G5NtWjiFbVqI300X+zAwAAAAAAAAAAAAAAAMB+OxZFPBEpXvr3P6rGFUc1Lv34hZHfH/rF/jHjj99jO2XZZyJipdjdmNyjeQjxeBpP6QGPJf4kq0cRf5zH/73xoBsDAAAAAAAAAAAAAAAAAADwCffjSPH8OyfTavTPKd6Zu9640ro6250Vtjf3b2/O9M3Nzc1G6mYz51TOlZyrOddyrueMItfP2cw5lXMl52rOtZzrOeNIrp+zmXMq50rO1ZxrOddzRi3Xz9nMOZVzJedqzrWc6znjkMzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xkaKFBHNiKno5tpgrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpiK+Hykaf9C8vawWEan6v+tk+cu5aB4t89PRHCnzhWhezNmqstZ844N2NHRwfeCjG0hF/ChSDNbfun3C8/kf6L67/TGIN795592v1Lp5pLdy6L3BR08cvzAy9muP3+112qkBw5c6czdvNSZHx8Ym+hbX8t4/3bdsKO+32J+uExFLr73+amt2tr34iXlRxKFoxoN6Ueu+qMUhac+uX+QLTux/9eIwfAuah+U49148wIsS9015/383Uvz2O//Ru+H37v+/0H13+w4fP/uTO/f/57dspXdH3v/7/2N9y57PvxsZqEXUl28sDJyIqC+99vqpzo3W9fb19ty506e/PDLy5bOnB45G1K91Ztt9r/Z6pAAAAAAAAAAAAAAAAADus1TE70aK1o+6b29V47WGLow8derJI3GkGm+1ZdzWKxNXLjZenL+xsNheWmrPNCbnOtPzM+3d7q5eDfeaHB3b/57sxrEDbv+x+ovzC68tdq7/4fKO6x+pX7y6tLzYmt55dRyLIqLZv2S4avDk6FjV6NlOa66qOr7jYLoPbyAV8Z+RYvpc42hvWR7/t32E/5bx/yvbN3RA4/8/1bes3GdKRfwsUvzWXzwen6/a+Ui875jlcn8TKYbPfy6Xi6NluV4bus8V6I4MLMv+b6T4h59vLdsbD/nYnbLP7va4PizK8388Unz/z74bv56XbX3+w87n/5HtGzqg8/+ZvmWPbHlewZ67Tj7/pyLFC4+9Fb+Rl33Q8z+K2Nzc/FbEyVz49vM5Duj8f7Zv2VB09/ub+9d9AAAAAAAAAACAh9ZAKuJvI8WTY7X0XF62m3//N7N9Qwf0779+uW/ZzH2ar2jPBxUAAAAADomBVMSPI8X15bduj6HeOv67b/zn79yZ6XU0bVtb/T3fL1XPDdjPv//rN5T3O7X3bgMAAAAAAAAAAAAAAAAAAMChklIRz+X51KfuMZ/6WqR46b+fzuXSibJcbx74oerX+uX5uVMXZ2fnp1vLrauz7cbEQmu6Xdb9TKTY+OvP5bpFNb/653Pd7hzv9c3eXOyLkWLs73plu3Ox9+Ym784H3p2LvSz7qUjxX3+/tWxvHuvP3il7piz7V5Hi6/+0c9kTd8qeLct+N1L88OuNXtlHyrK956N2n0lar8Vs+5np+dn3PQoVAAAAAAAAAAAAAAAAAAAAPqyBVMSfRor/ubEaK9Ww/zdur8pZ6y1485t98/1vc6ua53+omv//bq8/yvz/Q/vSSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeLikKOL1SLFweSOtDZbvu+qXOnM3b02Oju1c7Viqah6pypc/9WfPnD33pedGzvfyg+vvtyfilYkrFxsvzt9YWGwvLbVnGpNznen5mfaut7DX+ncOXddwdQAaN169OXPt2lLjzDNnt6y+NfTe4KMnhi6MPHXqyV7ZydGxsYm+MrWBD7H3D9W4O45GEX8ZKZ7+3k/SPw9GFLH3Y3GPz85BO1Z1YrjqxOToWNWR2U5rbrlcOd47EEVEo69Ss3eM7sO52JNmxErZ/LLBw2X3JhZai62rs+3GeGtxubPcmZ8bT93Wlv1pRBHnU8RqRKwP9m/oaM4iXo0U3zm+kf5lMOJI7zh88fLEV0+fuXs7igPt5T18q2pnYyBitXgIztkhNhhF/GOk+OnbJ+NfByNq0f2JL0S8XOYPIt4ss54/GOci3h180K1mv9SiiP8rz/+FjfT2YET1lamuK5e+1vjK3LX5vrK968r2+8NmRDxU94f76ZBfm+pRxA+rL/ZG+jffawAAAAAAAAAAAAAAAIBDpIhfjRTPv3MyVeODb48p7sxdb1xpXZ3tDuvrjf3rjZne3NzcbKRuNnNO5VzJuZpzLed6zihy/ZzNnFM5V3Ku5lzLuZ4zjuT6OZs5p3Ku5FzNuZZzPWfUcv2czZxTOVdyruZcy7meMw7J2D0AAAAAAAAAAAAAAAAAAODjpaj+S/Htb2ykzcHu/NJT0c0184F+7P1/AAAA///J9/Yg") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r7, r6, 0x0, 0x3ffff) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000002480)={{r5}, 0x0, 0x0, @unused, @subvolid=0x3}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000000)={0x50d000, 0x0, '\x00', 0x1, 0x0}) socket$isdn(0x22, 0x3, 0x25) 16m22.920491638s ago: executing program 1 (id=1335): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x50) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x6, 0x30000030, 0x8527, 0x9, 0x3, 0x2e, 0x4000000, 0x3, 0x7}, 0x0) bind$x25(r5, &(0x7f0000000e00), 0x12) write(r5, 0x0, 0x0) 16m20.301973853s ago: executing program 1 (id=1338): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x280000b, 0x11, r0, 0x0) 16m17.733480044s ago: executing program 1 (id=1346): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xa}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) socket(0x11, 0x800000003, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80001) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 16m1.472629715s ago: executing program 32 (id=1346): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xa}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) socket(0x11, 0x800000003, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80001) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 15m20.529918254s ago: executing program 3 (id=1430): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r1, 0x0, 0x0, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, 0x0}, 0x40}, @exit_looper], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000500)={0x4, 0x8, '\x00', 0x0, &(0x7f00000004c0)=[0x0]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r5, 0x1) 15m14.857387815s ago: executing program 3 (id=1442): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r0) 15m11.377027456s ago: executing program 3 (id=1448): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000100)="b9ff030f6044", 0x0, 0x34e152f7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x7, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_notify(r6, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="cd45041b6bd176e64ce13b6fbc35171e7ccaf3e2925cb726c69e18f3f4cf2370f08bcdfde07785942896df6b62c9cac85d772e52e80a6d6d5d57f7446345b9df016263b988971222150c566f", 0x4c}, {&(0x7f0000000340)="c02363de3c7fb649b433ad32398ffd492716df469ea80ca7c0b379d76f5e70abd846bb551d42a4a4b5c00d04aa0dcf4a08503a9452499a5284631fab667bc5807a9181f2d3149b8816570a039fbcf83993772711af2452094bc758113d76a0defae7499aff6a95", 0x67}, {&(0x7f0000000400)="10bb39057a5d6cc9ac32d2bf62d50ad909db90fba107c5f9de10f6ff080e51a94f4b9769303fa356c8749b3878514fdb00fd6ac31e2a04525422cd22cc56175b56103cff0b7b1b671d61e95b541bc80bc6b3163c7bd55b7b8e935198d2b4270857e0e2f64f2e8ca83cdca6469423e4162811a550be1d97c78a851ab8be59", 0x7e}], 0x3, 0x0, 0x0, 0x2c}, 0x4044004) 15m9.349746051s ago: executing program 3 (id=1451): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000100)="b9ff030f6044", 0x0, 0x34e152f7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x7, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x04', 0x42, 0x0, 0x0) mq_notify(r6, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="cd45041b6bd176e64ce13b6fbc35171e7ccaf3e2925cb726c69e18f3f4cf2370f08bcdfde07785942896df6b62c9cac85d772e52e80a6d6d5d57f7446345b9df016263b988971222150c566f", 0x4c}, {&(0x7f0000000340)="c02363de3c7fb649b433ad32398ffd492716df469ea80ca7c0b379d76f5e70abd846bb551d42a4a4b5c00d04aa0dcf4a08503a9452499a5284631fab667bc5807a9181f2d3149b8816570a039fbcf83993772711af2452094bc758113d76a0defae7499aff6a95", 0x67}, {&(0x7f0000000400)="10bb39057a5d6cc9ac32d2bf62d50ad909db90fba107c5f9de10f6ff080e51a94f4b9769303fa356c8749b3878514fdb00fd6ac31e2a04525422cd22cc56175b56103cff0b7b1b671d61e95b541bc80bc6b3163c7bd55b7b8e935198d2b4270857e0e2f64f2e8ca83cdca6469423e4162811a550be1d97c78a851ab8be59", 0x7e}], 0x3, 0x0, 0x0, 0x2c}, 0x4044004) 15m8.133612021s ago: executing program 3 (id=1453): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r1, 0x0, 0x0, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, 0x0}, 0x40}, @exit_looper], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000500)={0x4, 0x8, '\x00', 0x0, &(0x7f00000004c0)=[0x0]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r5, 0x1) 15m0.053978364s ago: executing program 3 (id=1464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000a40)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/4104, 0x1008}], 0x1}, 0x7}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(r5, 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[], 0x2c, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000a80)={0x4000, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 14m43.430450065s ago: executing program 33 (id=1464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000a40)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/4104, 0x1008}], 0x1}, 0x7}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(r5, 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[], 0x2c, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000a80)={0x4000, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 5m20.926329269s ago: executing program 2 (id=2423): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 5m14.775852187s ago: executing program 2 (id=2434): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20180) ioctl$EVIOCGABS20(r2, 0x80184560, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000180)}) 5m11.225022453s ago: executing program 5 (id=2440): r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x802, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @empty, 0xe}}, 0x24) r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m9.461232225s ago: executing program 2 (id=2445): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 5m8.628642563s ago: executing program 2 (id=2446): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xfaca}}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)}], 0x1}, 0x0) setns(r1, 0x24020000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9200a0005fe0500139502000300"], 0xf) 5m7.086241485s ago: executing program 5 (id=2450): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0xb, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000000)) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x100000000000f7) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000280)=0x14) read(r6, &(0x7f00000019c0)=""/4097, 0x1001) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f00000000c0)) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e23, 0x3, 'sed\x00', 0x10, 0x60000000, 0xc}, {@empty, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x10001}}, 0x44) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000200)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m5.109849814s ago: executing program 2 (id=2453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) 5m3.612373064s ago: executing program 5 (id=2456): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) pipe2$watch_queue(0x0, 0x80) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)={0x1, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}]}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4m57.553200612s ago: executing program 5 (id=2467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m56.559225855s ago: executing program 5 (id=2468): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xfaca}}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvbH9QftmK+AMEqaIRf7W0/JCDBzWacMDERA8YT3W7kMpCDa2JEKLVAx4NiXfj3T/AeNKLUU8mXvVuSIjhAnpaM7szZWl3S7fsdqH7+STTfW/mLe99Z+YxM+/tbgA9azT9k0Rsi4g/I2K4lr29wGjt5eb1S8V/r18qJlGpvPNPUi134/qlYl40f9/WWqZSyfKbGtR7+f2IqXK5dD7Lj8+f/Wh87sLFl2bOTp0unS6dmzx27PChvYNHJ4/Uv21orXGmcd3Y/ensnl3H37vyVvHklQ9+/S5t77Zse30c7TJa27sNPdPuyrpse1066e9iQ2hJX0Skh2ug2v+Hoy82L24bjje/6GrjgI6qVCqVRtfnzEIF2MCS6HYLgO7IL/Tp82++rNOtxz3h2mvVB6D8oad4czH+/ijUEvsGljzfttNoRJxc+O+bdIlWxyH2dahRAMCG9mN6//Nio/u/QjxSSwymfx7I5lBGIuLBiNgREQ9FxM6IeDiiWvbRiHisxfqXzpAsv/8pXF1zcKuQ3v+9ks1t5UtWb15kpC/Lba/GP5CcmimXDmb75EAMbDo1k5QmVqjjpzf++KrZtvr7v3RJ68/vBbN2XO1fMkA3PTU/dTcx17v2ecTu/kbxJ5FP4yQRsSsidq+xjpnnm08I3Tn+FbRhnqnybcSzteO/EEvizyVN5ycnXj46eWR8KMqlg+P5WbHcb79ffrtZ/bfHH0Mtxd8G6fHf0vD8X4x/JBmKmLtw8Ux1vnau9Tou//Vl02eaFs//49uz838webe6YjDb8MnU/Pz5iYjB5MTy9ZO3/rU8n5dP4z+wv3H/3xG39sTjEbEnIvZGxBPZo1fa9icj4qmI2L9C/L+8/vSHrce/wqh8G6XxT9/p+Ef98W890Xfm5x9ajz+XHv/D1dSBbM1q/v9bbQPvZt8BAADA/aJQ/Qx8UhhbTBcKY2O1z/DvjC2F8uzc/AunZj8+N137rPxIDBTyka7huvHQiWxsOM9PLskfysaNv+7bXM2PFWfL090OHnrc1ib9P/V3X7dbB3TcGubRXu1EO4D15/ua0Lv0f+hNif4PPU3/h97VqP9vblp67PuONgZYV67/0LtW0f8Xai+fdbwtwPpy/Yfepf9DT2r63fjCXX3lX6JtiRPPJXEPNGNZIgr3RDM2fqJ/1T9m0UKiMlzr/+maTQ3LLP9tJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvR/wEAAP//lDvbhQ==") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)}], 0x1}, 0x0) setns(r1, 0x24020000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4m53.468419732s ago: executing program 5 (id=2472): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="b5", 0x1}], 0x1}}], 0x3, 0x1005) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x9, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x0, 0x14, &(0x7f0000000100)="4c287bea56504901967e40dc8c55f811acf1642d"}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c0000000000", @ANYRES64], 0x38}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m51.329164848s ago: executing program 2 (id=2475): r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000068000100020000ffff7f0000000000"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4m50.37343807s ago: executing program 34 (id=2475): r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000068000100020000ffff7f0000000000"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4m37.460807377s ago: executing program 35 (id=2472): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="b5", 0x1}], 0x1}}], 0x3, 0x1005) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x9, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x0, 0x14, &(0x7f0000000100)="4c287bea56504901967e40dc8c55f811acf1642d"}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c0000000000", @ANYRES64], 0x38}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 44.800103105s ago: executing program 0 (id=2884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001200)={0x48, r1, 0xd55319eec59dfa33, 0xfffff7fd, 0x25dfdbfa, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x68}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0xc814}, 0xc2010) 44.514882536s ago: executing program 0 (id=2885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800c96edca5082bc204307de4530000000000000000000068d076ed3db5562d32c51d3851293e2d4f81aeeed6514540e697aa94f801582bf05a9b0c5d518c8ba9051a2f5e0b756c33b5b3ea4a77fe804f2abd856570660a3273cfb3883b031f93a1c7ae02a9224bb1cd72f77ab5ab5bb03bab28e397ca38d3ccd9a4e0c583053e376db372042d4f02f10f3e20b9afce2ec00e7285f2d3ed4a6e44d5e98a0d89593b618fcb587bd28e1eb6fa021e94822bb4017aff96ddad056f6e4309525c544ad8f6a8b78faba06f22090b40449b1e0c4029d9e4976d52434f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000008c0)) 43.18467082s ago: executing program 0 (id=2886): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0xb, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000000)) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x100000000000f7) keyctl$revoke(0x3, r4) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000280)=0x14) read(r6, &(0x7f00000019c0)=""/4097, 0x1001) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e23, 0x3, 'sed\x00', 0x10, 0x60000000, 0xc}, {@empty, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x10001}}, 0x44) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000200)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 38.310511568s ago: executing program 0 (id=2894): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xfaca}}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvbH9QftmK+AMEqaIRf7W0/JCDBzWacMDERA8YT3W7kMpCDa2JEKLVAx4NiXfj3T/AeNKLUU8mXvVuSIjhAnpaM7szZWl3S7fsdqH7+STTfW/mLe99Z+YxM+/tbgA9azT9k0Rsi4g/I2K4lr29wGjt5eb1S8V/r18qJlGpvPNPUi134/qlYl40f9/WWqZSyfKbGtR7+f2IqXK5dD7Lj8+f/Wh87sLFl2bOTp0unS6dmzx27PChvYNHJ4/Uv21orXGmcd3Y/ensnl3H37vyVvHklQ9+/S5t77Zse30c7TJa27sNPdPuyrpse1066e9iQ2hJX0Skh2ug2v+Hoy82L24bjje/6GrjgI6qVCqVRtfnzEIF2MCS6HYLgO7IL/Tp82++rNOtxz3h2mvVB6D8oad4czH+/ijUEvsGljzfttNoRJxc+O+bdIlWxyH2dahRAMCG9mN6//Nio/u/QjxSSwymfx7I5lBGIuLBiNgREQ9FxM6IeDiiWvbRiHisxfqXzpAsv/8pXF1zcKuQ3v+9ks1t5UtWb15kpC/Lba/GP5CcmimXDmb75EAMbDo1k5QmVqjjpzf++KrZtvr7v3RJ68/vBbN2XO1fMkA3PTU/dTcx17v2ecTu/kbxJ5FP4yQRsSsidq+xjpnnm08I3Tn+FbRhnqnybcSzteO/EEvizyVN5ycnXj46eWR8KMqlg+P5WbHcb79ffrtZ/bfHH0Mtxd8G6fHf0vD8X4x/JBmKmLtw8Ux1vnau9Tou//Vl02eaFs//49uz838webe6YjDb8MnU/Pz5iYjB5MTy9ZO3/rU8n5dP4z+wv3H/3xG39sTjEbEnIvZGxBPZo1fa9icj4qmI2L9C/L+8/vSHrce/wqh8G6XxT9/p+Ef98W890Xfm5x9ajz+XHv/D1dSBbM1q/v9bbQPvZt8BAADA/aJQ/Qx8UhhbTBcKY2O1z/DvjC2F8uzc/AunZj8+N137rPxIDBTyka7huvHQiWxsOM9PLskfysaNv+7bXM2PFWfL090OHnrc1ib9P/V3X7dbB3TcGubRXu1EO4D15/ua0Lv0f+hNif4PPU3/h97VqP9vblp67PuONgZYV67/0LtW0f8Xai+fdbwtwPpy/Yfepf9DT2r63fjCXX3lX6JtiRPPJXEPNGNZIgr3RDM2fqJ/1T9m0UKiMlzr/+maTQ3LLP9tJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvR/wEAAP//lDvbhQ==") r0 = getpid() syz_pidfd_open(r0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)}], 0x1}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9200a0005fe0500139502000300"], 0xf) 37.330361276s ago: executing program 0 (id=2897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800c96edca5082bc204307de4530000000000000000000068d076ed3db5562d32c51d3851293e2d4f81aeeed6514540e697aa94f801582bf05a9b0c5d518c8ba9051a2f5e0b756c33b5b3ea4a77fe804f2abd856570660a3273cfb3883b031f93a1c7ae02a9224bb1cd72f77ab5ab5bb03bab28e397ca38d3ccd9a4e0c583053e376db372042d4f02f10f3e20b9afce2ec00e7285f2d3ed4a6e44d5e98a0d89593b618fcb587bd28e1eb6fa021e94822bb4017aff96ddad056f6e4309525c544ad8f6a8b78faba06f22090b40449b1e0c4029d9e4976d52434f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f00000008c0)) 28.542965105s ago: executing program 0 (id=2907): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 27.788495971s ago: executing program 36 (id=2907): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 10.886538573s ago: executing program 4 (id=2936): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) r2 = mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x75, 0x0) read(r2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000300)='0\x00', 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r7, r2, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 10.446353762s ago: executing program 7 (id=2938): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl(0xffffffffffffffff, 0xbffff000, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwrite64(r3, &(0x7f00000005c0)="2f1be693443114536e4d830a310adfa1c06f6aab5e2a5f228dfc9e8dc36bbeb8ed160ca969aad87c2ee94a904cb94d3aecc6d35aed05bb560881dff9198f62e6864c0bbbcbb894c437bed8755f6f16d805914534ac966aa8157ffdd1c32ec59b5c5dc58ba8cebad7e7", 0x69, 0x6) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x4000080) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) close(0x3) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r7) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x10054) 9.620194533s ago: executing program 6 (id=2939): add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000000001}]) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) 9.520862814s ago: executing program 7 (id=2940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7.964347599s ago: executing program 4 (id=2941): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="776964655f6d6163732c657261737572655f636f64652c636f6d7072657373696f6e3d7a7374642c008e4db08b1e338bc1789d196d6813081b730f8d420bfe2ebfe7e9abfca2d9eb883ffcf034293663d88cb58397dee54777c37e28a4c5169b166f327ee74154185ce7489c9649c6209fd3b60a639d61fab9812be1093957d454d9fdd4f6486b4d851fd21743cba39aebf22fe386cfdbfd27629377c41a276a8c8cc0f084f409a4b733286ade06e9aac8a14fcdc69d7725afcf9c77e0894490b84a4402ab4f6bc5c88be0b08c702575c295612d0bc926"], 0x40, 0x11876, &(0x7f0000011940)="$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") syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xac1, &(0x7f0000000ec0)="$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") sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x48000) r0 = open(&(0x7f0000000080)='./file2\x00', 0x109042, 0x0) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0xfdef}], 0x1, 0x0, 0x0) 7.177474966s ago: executing program 7 (id=2942): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000005680)="$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") r0 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$dsp(r0, &(0x7f0000000100)='n', 0x1) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x2b}, @in=@private=0xa010100, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r1, 0x0, 0x80000000c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r4, 0x0, 0xbf, 0xc8, &(0x7f00000002c0)="3fd2fd26e9a8fa9f40af3d2d745446fd986de3a5397a7df4477f318307bcba97fd747e76d3f686c54a3244508cad4652a7608274f80910221ffbb575dd1bc3876bc6c50822f794a3187d2d3c7ee8be5ef96a5b900300c2bee012c8014902a757dd6d7fa59333ff10470e766b4a4afddec2a42ea1f531d12c26f1e0ae69546139e7ce574881774c4e952c43e2b3d1610840dd6890a67cdbfc9d6608b3e940a4020326cd3659d063c595f80eb6f1eceaa9656551a61c53e923b4df42a83496b2", &(0x7f00000004c0)=""/200, 0x6, 0x0, 0x0, 0xae, &(0x7f00000005c0), &(0x7f0000000780)="398a4c35b3f081942d89ea190e567ce9dc2aabd9655a9079fe3d5d3a65ab1ab87e372714b6a47730439d29abee63cdb43a181b73c536be86a947f5449a0607decbe954295ca308368a4a221563ee4622c846199a3e1bca80bfb5a4cdf0adc6046b0e7922f3a5a72bd1cf8b4d680f7a8ee5b50111c6719cf263756d0723b9ac8f624b8fa79c4c8b3cff107e7fc27358c961d77c291932ab8ff3108ec73dc2bbf89bd71200c7ec3a8b29f099ff2f21", 0x3, 0x0, 0x9d}, 0x50) link(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000840)='./file1/file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0xfc, 0xc2d, &(0x7f0000003480)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r7, &(0x7f0000000740)="cc", 0x1) sendfile(r7, r6, 0x0, 0x3ffff) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000002480)={{r5}, 0x0, 0x0, @unused, @subvolid=0x3}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000000)={0x50d000, 0x0, '\x00', 0x1, 0x0}) socket$isdn(0x22, 0x3, 0x25) 6.677170375s ago: executing program 4 (id=2943): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) r2 = mq_open(&(0x7f0000000140)='*+@[^#^\x00', 0x40, 0x75, 0x0) read(r2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000300)='0\x00', 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r7, r2, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 6.112889932s ago: executing program 6 (id=2944): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r1, 0x0, 0x0, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, 0x0}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000500)={0x4, 0x8, '\x00', 0x0, &(0x7f00000004c0)=[0x0]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r5, 0x1) 4.690630126s ago: executing program 7 (id=2945): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x4, 0xfffffffffffffffe, 0xc6}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x77, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) fdatasync(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x34}}, 0x200080c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="000068bd7000fcdbdf25"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x4881) rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 4.023327326s ago: executing program 4 (id=2946): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0xfaca}}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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") syz_pidfd_open(0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)}], 0x1}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9200a0005fe0500139502000300"], 0xf) 3.559704954s ago: executing program 4 (id=2947): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 3.054614576s ago: executing program 6 (id=2948): r0 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x20000004) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 2.502025842s ago: executing program 4 (id=2949): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) pipe2$watch_queue(0x0, 0x80) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)={0x1, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}]}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000002e00000008000300"], 0x28}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.500121599s ago: executing program 6 (id=2950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008091) sendmsg$nl_route_sched(r3, 0x0, 0x44004) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0x4}, {0x0}], 0x2}}], 0x2, 0x20004810) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r5 = socket$inet(0xa, 0x801, 0x100) listen(r5, 0x81) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, &(0x7f0000000580)=""/254, 0x34, 0xfe, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, r6, 0x3, 0x5, 0x1}, 0x50) getsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, &(0x7f00000007c0)) close(0x3) 1.90407097s ago: executing program 37 (id=2949): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) pipe2$watch_queue(0x0, 0x80) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000f40)={0x1, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}]}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000002e00000008000300"], 0x28}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.897100992s ago: executing program 6 (id=2952): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl(0xffffffffffffffff, 0xbffff000, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwrite64(r3, &(0x7f00000005c0)="2f1be693443114536e4d830a310adfa1c06f6aab5e2a5f228dfc9e8dc36bbeb8ed160ca969aad87c2ee94a904cb94d3aecc6d35aed05bb560881dff9198f62e6864c0bbbcbb894c437bed8755f6f16d805914534ac966aa8157ffdd1c32ec59b5c5dc58ba8cebad7e7", 0x69, 0x6) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x4000080) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) close(0x3) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r6) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x10054) 1.896039993s ago: executing program 7 (id=2953): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, 0xee01}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x9, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xf8, &(0x7f00000003c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000500), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000040)={0x2, {0x6, 0x0, 0xfffffffe, 0x6}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xa8}}, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000340)=@profile={'stack ', 's\"hed_switch\x00'}, 0x13) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x87d, 0xd, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) 996.184161ms ago: executing program 6 (id=2954): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munlockall() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) 0s ago: executing program 7 (id=2955): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl(0xffffffffffffffff, 0xbffff000, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwrite64(r3, &(0x7f00000005c0)="2f1be693443114536e4d830a310adfa1c06f6aab5e2a5f228dfc9e8dc36bbeb8ed160ca969aad87c2ee94a904cb94d3aecc6d35aed05bb560881dff9198f62e6864c0bbbcbb894c437bed8755f6f16d805914534ac966aa8157ffdd1c32ec59b5c5dc58ba8cebad7e7", 0x69, 0x6) kernel console output (not intermixed with test programs): ter): interface not active [ 1259.266602][T14524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.363966][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.421091][T14524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.671074][T14524] hsr_slave_0: entered promiscuous mode [ 1260.710036][T14524] hsr_slave_1: entered promiscuous mode [ 1260.744958][T14524] debugfs: 'hsr0' already exists in 'hsr' [ 1260.772195][T14524] Cannot create hsr debugfs directory [ 1261.210047][T14728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.030469][T14348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.454975][T14348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.784966][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.792147][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.905243][ T8604] usb 6-1: usb_control_msg returned -71 [ 1262.910877][ T8604] usbtmc 6-1:16.0: can't read capabilities [ 1263.005766][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.012940][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.032919][ T8604] usb 6-1: USB disconnect, device number 35 [ 1263.599841][T14348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1264.070954][T14752] ALSA: mixer_oss: invalid index 40000 [ 1266.586411][T14348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.603436][T14524] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1266.876744][T14524] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1267.114211][T14524] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1267.228512][T14524] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1269.648257][T14524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.898864][T14524] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.981695][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.988886][ T6844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.014846][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.022037][T12356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.366318][T14348] veth0_vlan: entered promiscuous mode [ 1270.764684][T14348] veth1_vlan: entered promiscuous mode [ 1271.122738][T14348] veth0_macvtap: entered promiscuous mode [ 1271.397983][T14348] veth1_macvtap: entered promiscuous mode [ 1271.597237][T14348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.799816][T14348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.878686][T12356] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.937519][T12356] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.550331][T12356] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.655324][ T6844] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.284065][T14851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1273.336486][T14524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.400058][T12356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.439217][T12356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.544003][ T5952] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1273.571450][T12351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.592620][T12351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.705078][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1273.740665][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1273.797611][ T5952] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1273.834700][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.853439][ T9618] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1273.898101][ T5952] usb 5-1: config 0 descriptor?? [ 1273.924689][T14853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1274.031144][ T9618] usb 3-1: Using ep0 maxpacket: 32 [ 1274.258364][ T9618] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1274.860894][ T9618] usb 3-1: config 125 has an invalid interface number: 27 but max is 0 [ 1274.882853][ T9618] usb 3-1: config 125 has no interface number 0 [ 1274.889170][ T9618] usb 3-1: config 125 interface 27 altsetting 24 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1275.037934][ T9618] usb 3-1: config 125 interface 27 altsetting 24 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1275.062935][ T9618] usb 3-1: config 125 interface 27 altsetting 24 endpoint 0x8A has invalid maxpacket 50534, setting to 1024 [ 1275.121276][ T9618] usb 3-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1275.172283][ T9618] usb 3-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1275.402888][ T9618] usb 3-1: config 125 interface 27 has no altsetting 0 [ 1275.444996][ T9618] usb 3-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1275.480432][ T9618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.283029][T14873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1276.422921][ T9618] usb 3-1: Product: syz [ 1276.427129][ T9618] usb 3-1: Manufacturer: syz [ 1276.431758][ T9618] usb 3-1: SerialNumber: syz [ 1276.443698][T14857] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1276.657431][ T9618] hub 3-1:125.27: bad descriptor, ignoring hub [ 1276.700967][ T9618] hub 3-1:125.27: probe with driver hub failed with error -5 [ 1276.856373][ T5952] usbhid 5-1:0.0: can't add hid device: -71 [ 1276.862417][ T5952] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1276.862979][ T9618] sierra 3-1:125.27: Sierra USB modem converter detected [ 1276.973111][ T5952] usb 5-1: USB disconnect, device number 14 [ 1276.991405][ T9618] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1277.052683][ T9618] usb 3-1: USB disconnect, device number 11 [ 1277.095863][ T9618] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1277.096514][ T9618] sierra 3-1:125.27: device disconnected [ 1279.163728][T14524] veth0_vlan: entered promiscuous mode [ 1279.318029][T14524] veth1_vlan: entered promiscuous mode [ 1279.537810][T14902] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1891'. [ 1279.549360][T14524] veth0_macvtap: entered promiscuous mode [ 1279.663722][T14524] veth1_macvtap: entered promiscuous mode [ 1279.792892][T14618] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1279.941180][T14524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.953854][T14902] usb usb8: usbfs: process 14902 (syz.2.1891) did not claim interface 0 before use [ 1280.037153][T14524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.146812][T14618] usb 5-1: Using ep0 maxpacket: 8 [ 1280.475468][T14618] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.055081][T12356] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.144085][T12356] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.395400][T14618] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1282.406120][T14618] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1282.417678][T14618] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1282.680622][T12356] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.746680][T14618] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1282.774811][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.823048][T14618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.893148][T14618] usb 5-1: can't set config #1, error -71 [ 1282.944974][T14618] usb 5-1: USB disconnect, device number 15 [ 1283.694501][T14932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1283.759127][T12229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.850133][T12229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.082929][ T8604] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1284.292940][ T8604] usb 3-1: Using ep0 maxpacket: 8 [ 1284.303333][ T8604] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.353072][ T8604] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1284.384598][ T6844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.392436][ T6844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.427238][ T8604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1284.518708][ T8604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1284.572976][ T8604] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1284.647711][ T8604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.730069][ T8604] hub 3-1:1.0: bad descriptor, ignoring hub [ 1284.805585][ T8604] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1284.946637][ T8604] cdc_wdm 3-1:1.0: skipping garbage [ 1284.966350][ T8604] cdc_wdm 3-1:1.0: skipping garbage [ 1284.988366][ T8604] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1285.026136][ T8604] cdc_wdm 3-1:1.0: Unknown control protocol [ 1286.111314][ T8604] usb 3-1: USB disconnect, device number 12 [ 1286.270895][T14952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1286.759225][T14959] trusted_key: encrypted_key: keylen parameter is missing [ 1288.023116][T14618] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1288.188081][T14618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1288.251059][T14618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1288.333336][T14618] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1288.381311][T14972] ALSA: mixer_oss: invalid index 40000 [ 1288.407368][T14618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.473596][T14618] usb 1-1: config 0 descriptor?? [ 1288.497548][T14970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1291.461804][T14618] usbhid 1-1:0.0: can't add hid device: -71 [ 1291.473128][T14618] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1291.520188][T14618] usb 1-1: USB disconnect, device number 23 [ 1299.266904][T15023] Bluetooth: hci4: command 0x0405 tx timeout [ 1299.508478][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.515884][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.062870][T15082] trusted_key: encrypted_key: keylen parameter is missing [ 1304.004682][T15103] loop2: detected capacity change from 0 to 7 [ 1304.073449][ T6156] Dev loop2: unable to read RDB block 7 [ 1304.100513][ T6156] loop2: unable to read partition table [ 1304.153982][ T6156] loop2: partition table beyond EOD, truncated [ 1304.327442][T15103] Dev loop2: unable to read RDB block 7 [ 1304.403188][T15103] loop2: unable to read partition table [ 1304.413087][T15103] loop2: partition table beyond EOD, truncated [ 1304.450963][T15103] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1304.593596][ T5230] Dev loop2: unable to read RDB block 7 [ 1304.613946][ T5230] loop2: unable to read partition table [ 1304.633142][ T5230] loop2: partition table beyond EOD, truncated [ 1307.463172][ T8604] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1307.645073][ T8604] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1307.684336][ T8604] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1307.755164][ T8604] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1307.806337][ T8604] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1307.919053][ T8604] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1308.020915][ T8604] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1308.073951][ T8604] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1308.081981][ T8604] usb 6-1: Product: syz [ 1308.195338][ T8604] usb 6-1: Manufacturer: syz [ 1308.256134][ T8604] cdc_wdm 6-1:1.0: skipping garbage [ 1308.300977][ T8604] cdc_wdm 6-1:1.0: skipping garbage [ 1308.368127][ T8604] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1308.407772][ T8604] cdc_wdm 6-1:1.0: Unknown control protocol [ 1308.492255][ T8604] usb 6-1: USB disconnect, device number 36 [ 1309.920739][T15161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1938'. [ 1310.013325][ T5960] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1310.333111][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 1311.049501][ T5960] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1311.059368][ T5960] usb 5-1: config 125 has an invalid interface number: 27 but max is 0 [ 1311.067877][ T5960] usb 5-1: config 125 has no interface number 0 [ 1311.206450][ T5960] usb 5-1: config 125 interface 27 altsetting 24 has an invalid endpoint descriptor of length 2, skipping [ 1311.279134][ T5960] usb 5-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1311.330074][ T5960] usb 5-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1311.422022][ T5960] usb 5-1: config 125 interface 27 has no altsetting 0 [ 1311.509488][ T5960] usb 5-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1311.559353][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.661366][ T5960] usb 5-1: Product: syz [ 1311.724224][ T5960] usb 5-1: Manufacturer: syz [ 1311.736452][ T5960] usb 5-1: SerialNumber: syz [ 1312.643695][T15154] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1937'. [ 1312.783115][ T5960] hub 5-1:125.27: bad descriptor, ignoring hub [ 1312.800686][ T5960] hub 5-1:125.27: probe with driver hub failed with error -5 [ 1312.850465][ T5960] sierra 5-1:125.27: Sierra USB modem converter detected [ 1312.909144][ T5960] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1312.993913][ T5960] usb 5-1: USB disconnect, device number 16 [ 1313.130239][ T5960] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1313.156658][ T5960] sierra 5-1:125.27: device disconnected [ 1313.177444][T15190] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1941'. [ 1313.195255][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1941'. [ 1313.972885][ T9618] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1314.143191][ T9618] usb 5-1: Using ep0 maxpacket: 32 [ 1314.166350][ T9618] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1314.176046][ T9618] usb 5-1: config 125 has an invalid interface number: 27 but max is 0 [ 1314.233113][ T9618] usb 5-1: config 125 has no interface number 0 [ 1314.262912][ T9618] usb 5-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1314.325326][ T9618] usb 5-1: config 125 interface 27 has no altsetting 0 [ 1314.386207][ T9618] usb 5-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1314.398550][ T9618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.477557][ T9618] usb 5-1: Product: syz [ 1314.508636][ T9618] usb 5-1: Manufacturer: syz [ 1314.545664][ T9618] usb 5-1: SerialNumber: syz [ 1314.926390][ T9618] hub 5-1:125.27: bad descriptor, ignoring hub [ 1314.936418][ T9618] hub 5-1:125.27: probe with driver hub failed with error -5 [ 1315.755876][ T9618] sierra 5-1:125.27: Sierra USB modem converter detected [ 1315.803271][ T9618] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1315.853264][ T9618] usb 5-1: USB disconnect, device number 17 [ 1315.903463][ T9618] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1315.957615][ T9618] sierra 5-1:125.27: device disconnected [ 1316.518548][T15208] lo speed is unknown, defaulting to 1000 [ 1318.506142][T15227] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1318.506142][T15227] program syz.7.1953 not setting count and/or reply_len properly [ 1322.837673][T15253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1330.034464][T15325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.663370][T15330] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1977'. [ 1332.257297][ T5960] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1332.443238][ T5960] usb 7-1: Using ep0 maxpacket: 8 [ 1332.598887][ T5960] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.631599][ T5960] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1332.715350][ T5960] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1332.832489][ T5960] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1332.850452][ T5960] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1332.872266][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.936955][ T5960] hub 7-1:1.0: bad descriptor, ignoring hub [ 1332.946773][ T5960] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1332.983293][ T5960] cdc_wdm 7-1:1.0: skipping garbage [ 1333.019650][ T5960] cdc_wdm 7-1:1.0: skipping garbage [ 1333.077979][ T5960] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1333.153782][ T5960] cdc_wdm 7-1:1.0: Unknown control protocol [ 1333.496009][ T5960] usb 7-1: USB disconnect, device number 2 [ 1338.773241][T15387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1339.252919][T12023] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1339.725789][T12023] usb 6-1: Using ep0 maxpacket: 32 [ 1339.734868][T12023] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1339.766747][T12023] usb 6-1: config 125 has an invalid interface number: 27 but max is 0 [ 1340.049383][T12023] usb 6-1: config 125 has no interface number 0 [ 1340.076425][T12023] usb 6-1: config 125 interface 27 altsetting 24 has an invalid endpoint descriptor of length 2, skipping [ 1340.399924][T12023] usb 6-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1340.448971][T12023] usb 6-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1340.576334][T12023] usb 6-1: config 125 interface 27 has no altsetting 0 [ 1340.612283][T15416] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2000'. [ 1340.631904][T12023] usb 6-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1340.659236][T12023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.681476][T12023] usb 6-1: Product: syz [ 1340.714240][T12023] usb 6-1: Manufacturer: syz [ 1340.740237][T12023] usb 6-1: SerialNumber: syz [ 1340.997488][T15395] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1996'. [ 1341.210165][T12023] hub 6-1:125.27: bad descriptor, ignoring hub [ 1341.320026][T12023] hub 6-1:125.27: probe with driver hub failed with error -5 [ 1341.347690][T12023] sierra 6-1:125.27: Sierra USB modem converter detected [ 1341.433206][T12023] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 1341.493789][T12023] usb 6-1: USB disconnect, device number 37 [ 1341.605227][ T8604] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1341.631089][T12023] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1341.654394][T12023] sierra 6-1:125.27: device disconnected [ 1341.773151][ T8604] usb 5-1: Using ep0 maxpacket: 32 [ 1341.803756][ T8604] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1341.853544][ T8604] usb 5-1: config 125 has an invalid interface number: 27 but max is 0 [ 1341.893035][ T8604] usb 5-1: config 125 has no interface number 0 [ 1341.899784][ T8604] usb 5-1: config 125 interface 27 altsetting 24 has an invalid endpoint descriptor of length 2, skipping [ 1342.001509][ T8604] usb 5-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1342.075870][ T8604] usb 5-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1342.110819][ T8604] usb 5-1: config 125 interface 27 has no altsetting 0 [ 1342.141906][ T8604] usb 5-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1342.156661][ T8604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.210229][ T8604] usb 5-1: Product: syz [ 1342.220096][ T8604] usb 5-1: Manufacturer: syz [ 1342.230576][ T8604] usb 5-1: SerialNumber: syz [ 1342.546044][ T8604] hub 5-1:125.27: bad descriptor, ignoring hub [ 1342.553163][T15023] Bluetooth: hci2: command 0x0406 tx timeout [ 1342.566260][ T8604] hub 5-1:125.27: probe with driver hub failed with error -5 [ 1342.713808][ T8604] sierra 5-1:125.27: Sierra USB modem converter detected [ 1342.827082][ T8604] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1342.865792][ T8604] usb 5-1: USB disconnect, device number 18 [ 1342.886124][ T8604] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1342.919726][ T8604] sierra 5-1:125.27: device disconnected [ 1344.493117][ T30] audit: type=1326 audit(1758097364.918:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15440 comm="syz.7.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56de18eba9 code=0x7ffc0000 [ 1344.763261][ T30] audit: type=1326 audit(1758097364.918:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15440 comm="syz.7.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56de18eba9 code=0x7ffc0000 [ 1345.788102][ T30] audit: type=1326 audit(1758097364.918:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15440 comm="syz.7.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f56de18eba9 code=0x7ffc0000 [ 1345.862934][ T30] audit: type=1326 audit(1758097364.918:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15440 comm="syz.7.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56de18eba9 code=0x7ffc0000 [ 1345.885601][ T30] audit: type=1326 audit(1758097364.928:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15440 comm="syz.7.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56de18eba9 code=0x7ffc0000 [ 1345.908160][T15446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1346.475674][T15449] ALSA: mixer_oss: invalid index 40000 [ 1348.913285][T15470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1354.647372][T15509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1354.955554][ T30] audit: type=1326 audit(1758097375.518:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c40d8eba9 code=0x7ffc0000 [ 1355.009434][ T30] audit: type=1326 audit(1758097375.518:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f0c40d8eba9 code=0x7ffc0000 [ 1355.161704][ T30] audit: type=1326 audit(1758097375.528:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c40d8eba9 code=0x7ffc0000 [ 1355.434896][ T30] audit: type=1326 audit(1758097375.528:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c40d8eba9 code=0x7ffc0000 [ 1355.733017][ T9618] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1355.896402][ T9618] usb 8-1: Using ep0 maxpacket: 32 [ 1355.919031][ T9618] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1355.934436][ T9618] usb 8-1: config 125 has an invalid interface number: 27 but max is 0 [ 1355.963023][ T9618] usb 8-1: config 125 has no interface number 0 [ 1356.143913][T15525] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1356.162100][ T9618] usb 8-1: config 125 interface 27 altsetting 24 has an invalid endpoint descriptor of length 2, skipping [ 1356.186745][T12023] IPVS: starting estimator thread 0... [ 1356.196174][ T9618] usb 8-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1356.212373][ T9618] usb 8-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1356.335929][ T9618] usb 8-1: config 125 interface 27 has no altsetting 0 [ 1356.343980][T15533] IPVS: using max 32 ests per chain, 76800 per kthread [ 1356.356085][ T9618] usb 8-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1356.365703][ T9618] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.424718][ T9618] usb 8-1: Product: syz [ 1356.428911][ T9618] usb 8-1: Manufacturer: syz [ 1356.463695][ T9618] usb 8-1: SerialNumber: syz [ 1356.765475][T15519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2026'. [ 1356.975986][ T9618] hub 8-1:125.27: bad descriptor, ignoring hub [ 1357.010107][ T9618] hub 8-1:125.27: probe with driver hub failed with error -5 [ 1357.032260][ T9618] sierra 8-1:125.27: Sierra USB modem converter detected [ 1357.059853][ T9618] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 1357.139262][ T9618] usb 8-1: USB disconnect, device number 2 [ 1357.214181][ T9618] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1357.249710][ T9618] sierra 8-1:125.27: device disconnected [ 1357.929427][T15023] Bluetooth: hci4: command 0x0405 tx timeout [ 1360.949063][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.956006][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.073274][T15589] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1363.142973][ T9615] IPVS: starting estimator thread 0... [ 1363.801985][T15591] IPVS: using max 25 ests per chain, 60000 per kthread [ 1364.699837][ T30] audit: type=1326 audit(1758097384.738:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15596 comm="syz.6.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1364.834268][ T30] audit: type=1326 audit(1758097384.738:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15596 comm="syz.6.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1365.088652][ T30] audit: type=1326 audit(1758097384.738:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15596 comm="syz.6.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1365.200700][ T30] audit: type=1326 audit(1758097384.738:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15596 comm="syz.6.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1365.318953][ T30] audit: type=1326 audit(1758097384.738:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15596 comm="syz.6.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa02558d510 code=0x7ffc0000 [ 1365.348052][ T30] audit: type=1326 audit(1758097384.738:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15596 comm="syz.6.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1365.424029][ T30] audit: type=1326 audit(1758097384.738:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15596 comm="syz.6.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa02558d510 code=0x7ffc0000 [ 1365.696407][T15605] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1365.745263][ T5960] IPVS: starting estimator thread 0... [ 1365.829594][ T30] audit: type=1326 audit(1758097384.738:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15596 comm="syz.6.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1365.854500][T15607] IPVS: using max 26 ests per chain, 62400 per kthread [ 1365.916242][ T30] audit: type=1326 audit(1758097384.738:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15596 comm="syz.6.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1366.020409][ T30] audit: type=1326 audit(1758097384.738:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15596 comm="syz.6.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1371.202940][ T9615] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1371.367407][ T9615] usb 6-1: Using ep0 maxpacket: 32 [ 1371.383261][T12023] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1371.403353][ T9615] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1371.556746][ T9615] usb 6-1: config 125 has an invalid interface number: 27 but max is 0 [ 1371.599688][ T9615] usb 6-1: config 125 has no interface number 0 [ 1371.632139][ T9615] usb 6-1: config 125 interface 27 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1371.663062][T12023] usb 5-1: Using ep0 maxpacket: 32 [ 1371.677861][T12023] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1371.698353][T12023] usb 5-1: config 125 has an invalid interface number: 27 but max is 0 [ 1371.716211][ T9615] usb 6-1: config 125 interface 27 has no altsetting 0 [ 1371.834710][T12023] usb 5-1: config 125 has no interface number 0 [ 1371.875756][T12023] usb 5-1: config 125 interface 27 altsetting 24 has an invalid endpoint descriptor of length 2, skipping [ 1371.889195][ T9615] usb 6-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1371.902957][ T9615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.911087][T12023] usb 5-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1371.923048][ T9615] usb 6-1: Product: syz [ 1371.937060][ T9615] usb 6-1: Manufacturer: syz [ 1371.941855][T12023] usb 5-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1371.995961][ T9615] usb 6-1: SerialNumber: syz [ 1372.041189][T15647] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1372.052353][T12023] usb 5-1: config 125 interface 27 has no altsetting 0 [ 1372.062058][T12023] usb 5-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1372.072692][T12023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.086429][T12023] usb 5-1: Product: syz [ 1372.091540][T12023] usb 5-1: Manufacturer: syz [ 1372.098225][T12023] usb 5-1: SerialNumber: syz [ 1372.196349][T15655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1372.338441][T12023] hub 5-1:125.27: bad descriptor, ignoring hub [ 1372.347073][T15647] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2060'. [ 1372.393239][T12023] hub 5-1:125.27: probe with driver hub failed with error -5 [ 1372.498192][T12023] sierra 5-1:125.27: Sierra USB modem converter detected [ 1372.518065][ T9615] hub 6-1:125.27: bad descriptor, ignoring hub [ 1372.524743][T12023] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1372.611633][ T9615] hub 6-1:125.27: probe with driver hub failed with error -5 [ 1372.657193][ T9615] sierra 6-1:125.27: Sierra USB modem converter detected [ 1372.677309][T12023] usb 5-1: USB disconnect, device number 19 [ 1372.691489][ T9615] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 1372.705952][T12023] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1372.743004][T12023] sierra 5-1:125.27: device disconnected [ 1372.780521][ T9615] usb 6-1: USB disconnect, device number 38 [ 1372.816671][ T9615] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1372.896431][ T9615] sierra 6-1:125.27: device disconnected [ 1373.183272][T15023] Bluetooth: hci4: command 0x0405 tx timeout [ 1373.903066][ T8604] IPVS: starting estimator thread 0... [ 1373.996683][T15675] IPVS: using max 23 ests per chain, 55200 per kthread [ 1374.685562][T15677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1377.996796][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2078'. [ 1378.128314][ T9615] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1378.334795][ T9615] usb 6-1: Using ep0 maxpacket: 32 [ 1378.522577][ T9615] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1378.601167][ T9615] usb 6-1: config 125 has an invalid interface number: 27 but max is 0 [ 1378.615439][ T9615] usb 6-1: config 125 has no interface number 0 [ 1378.645941][ T9615] usb 6-1: config 125 interface 27 altsetting 24 has an invalid endpoint descriptor of length 5, skipping [ 1378.732142][ T9615] usb 6-1: config 125 interface 27 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 1378.796571][ T9615] usb 6-1: config 125 interface 27 altsetting 24 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1378.890429][ T9615] usb 6-1: config 125 interface 27 has no altsetting 0 [ 1378.950033][ T9615] usb 6-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 1379.054483][ T9615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.156989][ T9615] usb 6-1: Product: syz [ 1379.253944][ T9615] usb 6-1: Manufacturer: syz [ 1379.265509][ T9615] usb 6-1: SerialNumber: syz [ 1379.432966][T14618] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1379.641438][ T9615] hub 6-1:125.27: bad descriptor, ignoring hub [ 1379.711034][ T9615] hub 6-1:125.27: probe with driver hub failed with error -5 [ 1379.720672][ T9615] sierra 6-1:125.27: Sierra USB modem converter detected [ 1379.732588][ T9615] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 1379.776441][ T9615] usb 6-1: USB disconnect, device number 39 [ 1379.797320][ T9615] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1379.843833][ T9615] sierra 6-1:125.27: device disconnected [ 1379.863139][T14618] usb 7-1: Using ep0 maxpacket: 8 [ 1379.875105][T14618] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1379.901726][T14618] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1379.937206][T14618] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1379.964165][T14618] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1380.051066][T14618] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1380.091497][T14618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.615432][T14618] usb 7-1: GET_CAPABILITIES returned 0 [ 1380.621128][T14618] usbtmc 7-1:16.0: can't read capabilities [ 1383.435601][T15761] loop2: detected capacity change from 0 to 7 [ 1383.443085][T15761] Dev loop2: unable to read RDB block 7 [ 1383.448635][T15761] loop2: unable to read partition table [ 1383.503094][T15761] loop2: partition table beyond EOD, truncated [ 1383.569949][T15761] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1383.760368][ T5230] Dev loop2: unable to read RDB block 7 [ 1383.772925][ T5230] loop2: unable to read partition table [ 1383.803188][ T5230] loop2: partition table beyond EOD, truncated [ 1385.079982][ T5960] usb 7-1: USB disconnect, device number 3 [ 1385.659611][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'. [ 1391.881185][T15813] tipc: Started in network mode [ 1391.949810][T15813] tipc: Node identity 4a8a35e1c2c6, cluster identity 4711 [ 1392.014361][T15813] tipc: Enabled bearer , priority 0 [ 1392.074652][T15816] syzkaller0: entered promiscuous mode [ 1392.080153][T15816] syzkaller0: entered allmulticast mode [ 1392.217532][T15813] tipc: Resetting bearer [ 1392.403414][T15812] tipc: Resetting bearer [ 1392.639691][T15812] tipc: Disabling bearer [ 1402.155558][T15893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1405.009482][T15900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1409.183232][T15939] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2133'. [ 1409.199877][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2133'. [ 1410.042909][ T8604] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1410.208346][ T8604] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1410.226915][ T8604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.268711][ T8604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.343070][ T8604] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1410.430012][ T8604] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1410.484462][ T8604] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1410.517061][ T8604] usb 1-1: Manufacturer: syz [ 1410.569201][ T8604] usb 1-1: config 0 descriptor?? [ 1411.280911][ T8604] usbhid 1-1:0.0: can't add hid device: -71 [ 1411.300943][ T8604] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1411.342722][ T8604] usb 1-1: USB disconnect, device number 24 [ 1413.820862][T15973] loop2: detected capacity change from 0 to 7 [ 1413.841961][T15973] Dev loop2: unable to read RDB block 7 [ 1413.852933][T15973] loop2: AHDI p1 p2 p3 [ 1413.857129][T15973] loop2: partition table partially beyond EOD, truncated [ 1413.971145][T15973] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1414.003065][T15973] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1414.012752][T15976] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1414.012752][T15976] program syz.2.2141 not setting count and/or reply_len properly [ 1414.060886][T15978] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 1415.447837][T15990] syzkaller1: entered promiscuous mode [ 1415.505246][T15990] syzkaller1: entered allmulticast mode [ 1416.156251][T15998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1417.463026][T16007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1418.039372][T16015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.183245][ T5952] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1420.343040][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 1420.350955][ T5952] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1420.359745][ T5952] usb 3-1: config 0 has no interface number 0 [ 1420.394066][ T5952] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1420.404028][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.467564][ T5952] usb 3-1: Product: syz [ 1420.483491][ T5952] usb 3-1: Manufacturer: syz [ 1420.504875][ T5952] usb 3-1: SerialNumber: syz [ 1420.623324][ T5952] usb 3-1: config 0 descriptor?? [ 1420.824925][ T5952] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1420.849005][ T5952] usb 3-1: selecting invalid altsetting 1 [ 1420.880782][ T5952] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1421.094166][ T5952] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1421.166286][ T5952] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1421.233378][ T5952] usb 3-1: media controller created [ 1421.367573][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1422.483707][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.490210][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.552940][ T5952] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1422.560188][ T5952] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1422.648310][ T5952] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1422.998763][ T5952] usb 3-1: USB disconnect, device number 13 [ 1423.908704][T16052] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1424.182548][T16053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.237571][T16045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1424.435044][T16056] loop2: detected capacity change from 0 to 7 [ 1424.473218][T16056] Dev loop2: unable to read RDB block 7 [ 1424.478833][T16056] loop2: unable to read partition table [ 1424.578791][T16056] loop2: partition table beyond EOD, truncated [ 1424.596869][T16056] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1424.662037][ T5230] Dev loop2: unable to read RDB block 7 [ 1424.667811][ T5230] loop2: unable to read partition table [ 1424.679003][ T5230] loop2: partition table beyond EOD, truncated [ 1424.823084][T12239] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1424.973050][T12239] usb 3-1: Using ep0 maxpacket: 8 [ 1425.011207][T12239] usb 3-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 1425.144924][T12239] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1425.351116][T12239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1425.362962][T12239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1425.432977][T12239] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1426.105933][T16064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1426.231036][T12239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.449756][T12239] hub 3-1:1.0: bad descriptor, ignoring hub [ 1426.497496][T12239] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1426.557616][T12239] cdc_wdm 3-1:1.0: skipping garbage [ 1426.596360][T12239] cdc_wdm 3-1:1.0: skipping garbage [ 1426.693275][T12239] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1426.762258][T12239] cdc_wdm 3-1:1.0: Unknown control protocol [ 1426.783012][ T9615] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1426.853057][T12239] usb 3-1: USB disconnect, device number 14 [ 1426.963010][ T9615] usb 7-1: Using ep0 maxpacket: 8 [ 1426.974687][ T9615] usb 7-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 1426.995269][ T9615] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1427.013211][ T9615] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1427.046874][ T5230] Dev loop2: unable to read RDB block 7 [ 1427.052460][ T5230] loop2: unable to read partition table [ 1427.052990][ T9615] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1427.093819][ T5230] loop2: partition table beyond EOD, truncated [ 1427.151163][ T9615] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1427.188372][ T9615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.278141][ T9615] hub 7-1:1.0: bad descriptor, ignoring hub [ 1427.343967][ T9615] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1427.374813][ T9615] cdc_wdm 7-1:1.0: skipping garbage [ 1427.380091][ T9615] cdc_wdm 7-1:1.0: skipping garbage [ 1427.457323][ T9615] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1427.680743][ T9615] cdc_wdm 7-1:1.0: Unknown control protocol [ 1428.473642][ T9615] usb 7-1: USB disconnect, device number 4 [ 1428.773493][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1428.773513][ T30] audit: type=1326 audit(1758097449.338:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1429.116955][ T30] audit: type=1326 audit(1758097449.338:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1429.243797][ T30] audit: type=1326 audit(1758097449.358:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1430.141708][ T30] audit: type=1326 audit(1758097449.398:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb31938d510 code=0x7ffc0000 [ 1430.169162][ T30] audit: type=1326 audit(1758097449.398:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1430.192115][ T30] audit: type=1326 audit(1758097449.408:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb31938d510 code=0x7ffc0000 [ 1430.216087][ T30] audit: type=1326 audit(1758097449.408:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1430.473754][ T30] audit: type=1326 audit(1758097449.418:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1430.545195][ T30] audit: type=1326 audit(1758097449.418:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1430.629257][ T30] audit: type=1326 audit(1758097449.428:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16086 comm="syz.2.2179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1431.104322][T16107] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1431.326782][T12239] IPVS: starting estimator thread 0... [ 1431.423230][T16109] IPVS: using max 24 ests per chain, 57600 per kthread [ 1436.064480][T10433] Bluetooth: hci4: command 0x0405 tx timeout [ 1436.818827][T16143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1440.272990][ T5952] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1440.435401][ T5952] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1440.492579][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.564147][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.862989][ T5952] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1441.285902][ T5952] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1441.336505][ T5952] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1441.368106][ T5952] usb 7-1: Manufacturer: syz [ 1441.538039][ T5952] usb 7-1: config 0 descriptor?? [ 1441.988703][ T5952] usbhid 7-1:0.0: can't add hid device: -71 [ 1442.006929][ T5952] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1442.609434][ T5952] usb 7-1: USB disconnect, device number 5 [ 1444.049714][T16202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1447.193062][ T8604] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1447.610667][ T8604] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1447.654515][ T8604] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1448.040520][ T8604] usb 8-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1448.069101][ T8604] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.093709][ T8604] usb 8-1: config 0 descriptor?? [ 1448.099759][T16224] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1449.809561][ T8604] usbhid 8-1:0.0: can't add hid device: -71 [ 1449.925820][ T8604] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1450.218303][ T8604] usb 8-1: USB disconnect, device number 3 [ 1453.213776][T16272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1453.568410][T16274] loop7: detected capacity change from 0 to 512 [ 1453.661631][T16274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1454.437887][T14524] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.678599][T16290] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1457.188080][T16308] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1459.755848][T16341] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1460.235884][T16330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.148112][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2249'. [ 1465.873089][ T9615] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1466.452971][ T9615] usb 6-1: Using ep0 maxpacket: 8 [ 1466.487220][ T9615] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1466.537910][ T9615] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1466.596912][ T9615] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1466.652840][ T9615] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1466.702345][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1466.717090][ T30] audit: type=1326 audit(1758097487.288:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1466.780198][ T9615] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1466.790811][ T30] audit: type=1326 audit(1758097487.288:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1466.820523][ T9615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.839430][ T30] audit: type=1326 audit(1758097487.288:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1466.986294][ T30] audit: type=1326 audit(1758097487.288:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb31938d510 code=0x7ffc0000 [ 1467.142730][ T30] audit: type=1326 audit(1758097487.288:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1467.170309][ T9615] usb 6-1: GET_CAPABILITIES returned 0 [ 1467.178437][ T9615] usbtmc 6-1:16.0: can't read capabilities [ 1467.268280][ T30] audit: type=1326 audit(1758097487.288:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb31938d510 code=0x7ffc0000 [ 1467.468234][ T9615] usb 6-1: USB disconnect, device number 40 [ 1467.691079][ T30] audit: type=1326 audit(1758097487.288:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1467.773029][ T30] audit: type=1326 audit(1758097487.298:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1467.834817][ T30] audit: type=1326 audit(1758097487.298:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1467.966540][ T30] audit: type=1326 audit(1758097487.298:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1468.475480][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2261'. [ 1468.487378][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2261'. [ 1474.543786][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1474.543805][ T30] audit: type=1326 audit(1758097495.138:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.7.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56de18eba9 code=0x7ffc0000 [ 1474.928234][ T30] audit: type=1326 audit(1758097495.138:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.7.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56de18eba9 code=0x7ffc0000 [ 1475.243010][ T30] audit: type=1326 audit(1758097495.198:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.7.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f56de18eba9 code=0x7ffc0000 [ 1475.334966][ T30] audit: type=1326 audit(1758097495.198:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.7.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56de18eba9 code=0x7ffc0000 [ 1475.476946][ T30] audit: type=1326 audit(1758097495.198:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16459 comm="syz.7.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56de18eba9 code=0x7ffc0000 [ 1475.575318][T16467] usb usb8: usbfs: process 16467 (syz.4.2279) did not claim interface 0 before use [ 1476.905586][T16476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1477.053223][ T9615] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1477.247119][ T9615] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1477.307084][ T9615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.441503][ T9615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.529192][ T9615] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1477.608885][T16482] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1477.698286][ T9615] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1477.728511][ T9615] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1477.798867][ T9615] usb 3-1: Manufacturer: syz [ 1477.824514][ T9615] usb 3-1: config 0 descriptor?? [ 1478.323830][ T9615] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 1478.413865][ T9615] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1478.537769][ T9615] usb 3-1: USB disconnect, device number 15 [ 1479.168046][T16484] fido_id[16484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1479.694014][T16491] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1481.333019][T14618] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1482.312140][T16507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1482.383067][T14618] usb 7-1: Using ep0 maxpacket: 32 [ 1482.407408][T14618] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1482.554804][T14618] usb 7-1: config 0 has no interface number 0 [ 1482.602384][T14618] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1482.679057][T14618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.711597][T14618] usb 7-1: Product: syz [ 1482.761108][T14618] usb 7-1: Manufacturer: syz [ 1482.774061][T14618] usb 7-1: SerialNumber: syz [ 1482.796163][T14618] usb 7-1: config 0 descriptor?? [ 1482.848656][T14618] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1483.210230][T14618] usb 7-1: selecting invalid altsetting 1 [ 1483.221366][T14618] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1483.245031][T14618] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1483.264224][T14618] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1483.279653][T14618] usb 7-1: media controller created [ 1483.388274][T14618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1483.735830][T14618] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1483.775300][T14618] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1483.827653][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.834035][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1483.858265][T14618] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1484.032492][T14618] usb 7-1: USB disconnect, device number 6 [ 1484.356702][T16519] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2293'. [ 1486.040271][T16522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1486.509147][T16528] loop2: detected capacity change from 0 to 64 [ 1486.985941][T16542] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1489.136111][T16558] loop2: detected capacity change from 0 to 7 [ 1489.182625][T16558] Dev loop2: unable to read RDB block 7 [ 1489.229854][T16558] loop2: AHDI p1 p2 p3 [ 1489.278632][T16558] loop2: partition table partially beyond EOD, truncated [ 1489.303131][T16558] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1489.361548][T16558] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1489.700718][T16564] loop5: detected capacity change from 0 to 512 [ 1490.397968][T16564] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1490.616011][T16564] EXT4-fs (loop5): 1 truncate cleaned up [ 1490.665132][T16564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1490.791467][ T30] audit: type=1800 audit(1758097511.378:2257): pid=16564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2307" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1490.814888][T12023] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1491.036100][T12023] usb 3-1: Using ep0 maxpacket: 32 [ 1491.312172][T12023] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1491.509327][T12023] usb 3-1: config 0 has no interface number 0 [ 1491.619236][T12023] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1492.285920][T12023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.323102][T12023] usb 3-1: Product: syz [ 1492.333147][T12023] usb 3-1: Manufacturer: syz [ 1492.341079][T12023] usb 3-1: SerialNumber: syz [ 1492.389052][ T5878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.397069][T12023] usb 3-1: config 0 descriptor?? [ 1492.442133][T12023] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1492.505849][T12023] usb 3-1: selecting invalid altsetting 1 [ 1492.511591][T12023] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1492.570193][T12023] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1492.591228][T12023] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1492.599845][T12023] usb 3-1: media controller created [ 1492.626009][T12023] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1493.948338][T12023] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1493.985210][T12023] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1494.015327][T16569] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1494.053006][T16598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1494.282345][T16600] loop2: detected capacity change from 0 to 7 [ 1494.379210][T16600] Dev loop2: unable to read RDB block 7 [ 1494.399484][T16600] loop2: unable to read partition table [ 1494.424034][T16600] loop2: partition table beyond EOD, truncated [ 1494.613053][T12023] usb 3-1: USB disconnect, device number 16 [ 1494.623310][T16600] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1495.612596][ T6844] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.854460][ T6844] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.982480][T16614] loop2: detected capacity change from 0 to 16 [ 1496.196005][T16614] erofs (device loop2): mounted with root inode @ nid 36. [ 1497.061715][ T6844] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.670683][ T6844] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.896536][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1497.907034][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1497.929356][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1497.948488][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1498.139055][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1499.131030][T16642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1499.317872][T16628] lo speed is unknown, defaulting to 1000 [ 1499.451168][T16644] loop0: detected capacity change from 0 to 512 [ 1499.543872][T16644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1499.673853][T16644] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.2331: Unimplemented hash flags: 0x0001 [ 1499.685844][T16644] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2331: Corrupt directory, running e2fsck is recommended [ 1499.699308][T16644] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.2331: path /430/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 1499.858676][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.915512][ T6844] bridge_slave_1: left allmulticast mode [ 1499.921202][ T6844] bridge_slave_1: left promiscuous mode [ 1499.965125][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.104345][ T6844] bridge_slave_0: left allmulticast mode [ 1500.110026][ T6844] bridge_slave_0: left promiscuous mode [ 1500.159912][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.225816][ T5876] Bluetooth: hci4: command tx timeout [ 1502.247675][ T30] audit: type=1326 audit(1758097522.828:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16678 comm="syz.4.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1502.318548][ T5876] Bluetooth: hci4: command tx timeout [ 1502.437975][ T30] audit: type=1326 audit(1758097522.828:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16678 comm="syz.4.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1502.465481][T16687] loop6: detected capacity change from 0 to 64 [ 1502.568651][ T30] audit: type=1326 audit(1758097522.828:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16678 comm="syz.4.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1502.649651][ T30] audit: type=1326 audit(1758097522.828:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16678 comm="syz.4.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc662d8d510 code=0x7ffc0000 [ 1502.697662][ T30] audit: type=1326 audit(1758097522.828:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16678 comm="syz.4.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1503.072849][ T30] audit: type=1326 audit(1758097522.828:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16678 comm="syz.4.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc662d8d510 code=0x7ffc0000 [ 1503.095301][ C0] vkms_vblank_simulate: vblank timer overrun [ 1503.205779][ T30] audit: type=1326 audit(1758097522.828:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16678 comm="syz.4.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1503.228242][ C0] vkms_vblank_simulate: vblank timer overrun [ 1503.419254][ T30] audit: type=1326 audit(1758097522.828:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16678 comm="syz.4.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1503.454967][ T30] audit: type=1326 audit(1758097522.828:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16678 comm="syz.4.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1504.194372][ T30] audit: type=1326 audit(1758097522.838:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16678 comm="syz.4.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1504.382872][ T5876] Bluetooth: hci4: command tx timeout [ 1504.825534][ T6844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1504.853777][ T6844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1504.884094][ T6844] bond0 (unregistering): Released all slaves [ 1504.953031][T16665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1505.509727][ T6844] tipc: Left network mode [ 1505.549503][T16707] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1505.549503][T16707] program syz.0.2344 not setting count and/or reply_len properly [ 1506.463364][ T5876] Bluetooth: hci4: command tx timeout [ 1506.793486][T16722] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1506.793486][T16722] program syz.4.2347 not setting count and/or reply_len properly [ 1507.289452][T16628] chnl_net:caif_netlink_parms(): no params data found [ 1508.213189][ T6844] hsr_slave_0: left promiscuous mode [ 1508.262886][ T6844] hsr_slave_1: left promiscuous mode [ 1508.293098][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1508.300485][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1508.373733][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1508.396355][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1509.161119][ T6844] veth1_macvtap: left promiscuous mode [ 1509.174767][ T6844] veth0_macvtap: left promiscuous mode [ 1509.191661][ T6844] veth1_vlan: left promiscuous mode [ 1509.213272][ T6844] veth0_vlan: left promiscuous mode [ 1510.063455][T16752] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1514.321486][ T6844] team0 (unregistering): Port device team_slave_1 removed [ 1514.549150][ T6844] team0 (unregistering): Port device team_slave_0 removed [ 1516.397041][T16628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.924005][T16628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.931850][T16628] bridge_slave_0: entered allmulticast mode [ 1516.945014][T16628] bridge_slave_0: entered promiscuous mode [ 1516.974552][T16628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.981733][T16628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.036396][T16628] bridge_slave_1: entered allmulticast mode [ 1517.087341][T16628] bridge_slave_1: entered promiscuous mode [ 1517.093797][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1517.093817][ T30] audit: type=1326 audit(1758097537.678:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16804 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1517.238348][ T30] audit: type=1326 audit(1758097537.718:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16804 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1517.490879][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 1517.558115][ T30] audit: type=1326 audit(1758097537.718:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16804 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1517.685132][ T30] audit: type=1326 audit(1758097537.718:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16804 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1517.885506][T16821] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1517.885506][T16821] program syz.5.2366 not setting count and/or reply_len properly [ 1518.529009][ T30] audit: type=1326 audit(1758097537.718:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16804 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1518.580318][T16628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.816962][T16824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1518.881529][ T30] audit: type=1326 audit(1758097537.718:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16804 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1519.003406][T16628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.076617][ T30] audit: type=1326 audit(1758097537.718:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16804 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1519.113619][T16834] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1519.134845][ T30] audit: type=1326 audit(1758097537.728:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16804 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1519.164378][ T30] audit: type=1326 audit(1758097537.728:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16804 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1519.309523][ T30] audit: type=1326 audit(1758097537.728:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16804 comm="syz.2.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb31938eba9 code=0x7ffc0000 [ 1519.578695][T16628] team0: Port device team_slave_0 added [ 1519.599035][ T6844] IPVS: stop unused estimator thread 0... [ 1519.613750][T16628] team0: Port device team_slave_1 added [ 1519.832603][T16628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.862895][T16628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.053157][T16628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1520.294160][T16628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1520.301144][T16628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.471625][T16628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.910611][T16628] hsr_slave_0: entered promiscuous mode [ 1520.944233][T16628] hsr_slave_1: entered promiscuous mode [ 1520.989793][T16628] debugfs: 'hsr0' already exists in 'hsr' [ 1521.018730][T16628] Cannot create hsr debugfs directory [ 1521.456565][T16852] loop2: detected capacity change from 0 to 7 [ 1521.496873][T16852] Dev loop2: unable to read RDB block 7 [ 1521.502476][T16852] loop2: AHDI p1 p2 p3 [ 1521.523287][T16852] loop2: partition table partially beyond EOD, truncated [ 1521.540155][T16852] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1521.557439][T16852] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1523.413326][T16873] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1524.582670][ T30] audit: type=1326 audit(1758097545.168:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.6.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1524.713478][ T30] audit: type=1326 audit(1758097545.188:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.6.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1524.903525][ T30] audit: type=1326 audit(1758097545.188:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.6.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1524.927259][ T30] audit: type=1326 audit(1758097545.198:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.6.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa02558d510 code=0x7ffc0000 [ 1524.949760][ T30] audit: type=1326 audit(1758097545.208:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.6.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1524.973110][T12023] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1525.069265][ T30] audit: type=1326 audit(1758097545.208:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.6.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1525.196622][T12023] usb 1-1: Using ep0 maxpacket: 32 [ 1525.281920][T12023] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1525.310259][T12023] usb 1-1: config 0 has no interface number 0 [ 1525.367862][T12023] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1525.393229][ T30] audit: type=1326 audit(1758097545.208:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.6.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa02558d510 code=0x7ffc0000 [ 1525.430676][T12023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.491624][T12023] usb 1-1: Product: syz [ 1525.561915][T12023] usb 1-1: Manufacturer: syz [ 1525.582330][T12023] usb 1-1: SerialNumber: syz [ 1525.592451][ T30] audit: type=1326 audit(1758097545.208:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.6.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1525.649407][T12023] usb 1-1: config 0 descriptor?? [ 1525.691846][T12023] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1525.751086][T12023] usb 1-1: selecting invalid altsetting 1 [ 1525.776112][ T30] audit: type=1326 audit(1758097545.218:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.6.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1525.801064][T12023] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1525.873823][T12023] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1525.918964][ T30] audit: type=1326 audit(1758097545.218:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16876 comm="syz.6.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1525.955482][T12023] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1525.987348][T12023] usb 1-1: media controller created [ 1526.111512][T12023] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1526.944185][T16882] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1527.013397][T12023] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1527.076195][T16628] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1527.083209][T12023] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1527.127708][T12023] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1527.194555][T16628] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1527.277953][T16628] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1527.344614][T16628] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1527.395407][T12023] usb 1-1: USB disconnect, device number 25 [ 1527.756691][T16628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.781829][T16628] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.968517][T12446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.975736][T12446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.997739][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.004914][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.314843][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 1529.608397][T16628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.162927][T16951] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1530.162927][T16951] program syz.6.2386 not setting count and/or reply_len properly [ 1530.495584][T16961] loop2: detected capacity change from 0 to 16 [ 1530.603252][T16961] erofs (device loop2): mounted with root inode @ nid 36. [ 1530.666201][T16964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1531.811475][T16969] loop4: detected capacity change from 0 to 2048 [ 1531.852416][T16969] msdos: Unknown parameter 'msdos' [ 1534.225875][T16628] veth0_vlan: entered promiscuous mode [ 1534.245736][T16628] veth1_vlan: entered promiscuous mode [ 1534.286662][T16628] veth0_macvtap: entered promiscuous mode [ 1534.300504][T16628] veth1_macvtap: entered promiscuous mode [ 1534.361926][T16628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.344051][T16628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1535.404992][ T6982] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.489723][ T6982] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.570869][ T6982] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1535.640457][ T6982] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.813733][ T6982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.821580][ T6982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.146646][ T6825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.191761][ T6825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.506935][T17011] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1537.675465][T17017] loop2: detected capacity change from 0 to 7 [ 1537.941271][T17017] Dev loop2: unable to read RDB block 7 [ 1538.293280][T17017] loop2: AHDI p1 p2 p3 [ 1538.305494][T17017] loop2: partition table partially beyond EOD, truncated [ 1538.360613][T17017] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1538.392690][T17017] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1539.464213][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout [ 1539.820008][T17034] loop5: detected capacity change from 0 to 16 [ 1539.851999][T17034] erofs (device loop5): mounted with root inode @ nid 36. [ 1543.878293][ T9618] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1544.642907][ T9618] usb 3-1: Using ep0 maxpacket: 16 [ 1544.820804][ T9618] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1544.838873][ T9618] usb 3-1: can't read configurations, error -61 [ 1544.977522][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1544.977545][ T30] audit: type=1326 audit(1758097565.568:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17072 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1545.009017][ T9618] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1545.074186][ T30] audit: type=1326 audit(1758097565.568:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17072 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1545.191579][ T30] audit: type=1326 audit(1758097565.568:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17072 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1545.252865][ T9618] usb 3-1: Using ep0 maxpacket: 16 [ 1545.267048][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.273936][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'. [ 1545.291354][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.298352][ T9618] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1545.310075][ T9618] usb 3-1: can't read configurations, error -61 [ 1545.357002][ T30] audit: type=1326 audit(1758097565.608:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17072 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1545.390002][ T9618] usb usb3-port1: attempt power cycle [ 1545.473953][ T30] audit: type=1326 audit(1758097565.608:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17072 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1545.598712][ T30] audit: type=1326 audit(1758097565.608:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17072 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1545.764518][ T30] audit: type=1326 audit(1758097565.618:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17072 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1545.787297][ T9618] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1545.836951][ T9618] usb 3-1: Using ep0 maxpacket: 16 [ 1545.853465][ T30] audit: type=1326 audit(1758097565.618:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17072 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1545.883103][ T9618] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1545.901840][ T9618] usb 3-1: can't read configurations, error -61 [ 1545.970828][ T30] audit: type=1326 audit(1758097565.618:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17072 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1546.083605][ T9618] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1546.207669][ T9618] usb 3-1: Using ep0 maxpacket: 16 [ 1546.234255][ T9618] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1546.242919][ T9618] usb 3-1: can't read configurations, error -61 [ 1546.299961][ T9618] usb usb3-port1: unable to enumerate USB device [ 1546.313151][ T30] audit: type=1326 audit(1758097565.618:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17072 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc662d8eba9 code=0x7ffc0000 [ 1546.483623][T17091] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1547.247699][T17098] loop2: detected capacity change from 0 to 7 [ 1547.277665][T17098] Dev loop2: unable to read RDB block 7 [ 1547.306781][T17098] loop2: unable to read partition table [ 1547.334079][T17098] loop2: partition table beyond EOD, truncated [ 1547.349784][T17098] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1548.265313][ T8604] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1548.391315][T17112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1548.593026][ T8604] usb 8-1: Using ep0 maxpacket: 8 [ 1548.651432][ T8604] usb 8-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 1548.786489][ T8604] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1548.944466][ T8604] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10 [ 1549.163056][ T8604] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25391, setting to 1024 [ 1549.280883][ T8604] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1549.423064][ T8604] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.498453][ T8604] hub 8-1:1.0: bad descriptor, ignoring hub [ 1549.542861][ T8604] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1549.611075][ T8604] cdc_wdm 8-1:1.0: skipping garbage [ 1549.632975][ T8604] cdc_wdm 8-1:1.0: skipping garbage [ 1549.673235][ T8604] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1549.737686][ T8604] cdc_wdm 8-1:1.0: Unknown control protocol [ 1549.901598][T17126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1549.963654][ T8604] usb 8-1: USB disconnect, device number 4 [ 1551.372906][ T9618] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1551.532886][ T9618] usb 8-1: device descriptor read/64, error -71 [ 1551.793002][ T9618] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1551.964125][ T9618] usb 8-1: device descriptor read/64, error -71 [ 1552.143349][ T9618] usb usb8-port1: attempt power cycle [ 1552.553125][ T9618] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1552.619237][ T9618] usb 8-1: device descriptor read/8, error -71 [ 1552.923018][ T9618] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1553.003080][ T9618] usb 8-1: device descriptor read/8, error -71 [ 1553.145295][ T9618] usb usb8-port1: unable to enumerate USB device [ 1554.608979][T17164] loop4: detected capacity change from 0 to 512 [ 1555.579102][T17164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1555.632952][ T8604] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1556.027306][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.061215][ T8604] usb 1-1: Using ep0 maxpacket: 16 [ 1556.104647][ T8604] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.132978][ T8604] usb 1-1: config 0 has no interfaces? [ 1556.168984][ T8604] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1556.210801][ T8604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.242308][ T8604] usb 1-1: config 0 descriptor?? [ 1556.908516][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'. [ 1556.930179][ T30] audit: type=1326 audit(1758097577.508:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17180 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1557.033718][T17167] macvtap2: entered promiscuous mode [ 1557.051267][ T30] audit: type=1326 audit(1758097577.508:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17180 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1557.121701][T17167] bond0: entered promiscuous mode [ 1557.150418][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 1557.303450][T17167] bond_slave_0: entered promiscuous mode [ 1557.437935][T17167] bond_slave_1: entered promiscuous mode [ 1557.467733][ T30] audit: type=1326 audit(1758097577.508:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17180 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1557.513034][T17167] macvtap2: entered allmulticast mode [ 1557.577797][T17167] bond0: entered allmulticast mode [ 1557.599806][ T30] audit: type=1326 audit(1758097577.508:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17180 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1557.639614][T17167] bond_slave_0: entered allmulticast mode [ 1557.659995][T17167] bond_slave_1: entered allmulticast mode [ 1557.674088][T17167] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1557.685526][ T30] audit: type=1326 audit(1758097577.508:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17180 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1557.768819][ T30] audit: type=1326 audit(1758097577.518:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17180 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1557.878642][ T30] audit: type=1326 audit(1758097577.518:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17180 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1558.039931][ T5960] usb 1-1: USB disconnect, device number 26 [ 1558.262134][ T30] audit: type=1326 audit(1758097577.518:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17180 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1558.443331][ T30] audit: type=1326 audit(1758097577.518:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17180 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1558.579718][T17204] fuse: Unknown parameter 'grou00000000000000000000' [ 1558.652912][ T30] audit: type=1326 audit(1758097577.518:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17180 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa02558eba9 code=0x7ffc0000 [ 1559.006917][T17207] loop0: detected capacity change from 0 to 16 [ 1559.071676][T17207] erofs (device loop0): mounted with root inode @ nid 36. [ 1562.597306][T17235] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1562.597306][T17235] program syz.2.2445 not setting count and/or reply_len properly [ 1563.591721][T17242] loop2: detected capacity change from 0 to 512 [ 1563.632124][T17242] EXT4-fs: Ignoring removed mblk_io_submit option [ 1563.718695][T17242] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1563.863656][T17242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 1564.020652][T17246] loop7: detected capacity change from 0 to 1024 [ 1564.033072][T17242] System zones: 1-12 [ 1564.093161][T17242] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2446: corrupted in-inode xattr: e_value size too large [ 1564.286098][T17242] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2446: couldn't read orphan inode 15 (err -117) [ 1564.469844][T17242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1564.520643][ T6844] hfsplus: b-tree write err: -5, ino 4 [ 1564.872736][ T5876] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1565.104980][T17257] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1565.485147][T17262] loop7: detected capacity change from 0 to 16 [ 1565.653023][T17262] erofs (device loop7): mounted with root inode @ nid 36. [ 1567.956054][T17270] loop7: detected capacity change from 0 to 16 [ 1568.023382][T17270] erofs (device loop7): mounted with root inode @ nid 36. [ 1571.281174][ T5862] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /415/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1571.429410][ T5862] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1571.593956][ T5862] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /415/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1571.720477][ T5862] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1571.892300][ T5862] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /415/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1572.119760][ T5862] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1572.320311][ T5862] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /415/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1572.470159][ T5862] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1572.614847][ T5862] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /415/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1572.781371][ T5862] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1572.913224][T17307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1573.101387][T17309] loop0: detected capacity change from 0 to 16 [ 1573.208989][T17309] erofs (device loop0): mounted with root inode @ nid 36. [ 1576.358223][ T5862] EXT4-fs error: 67 callbacks suppressed [ 1576.358246][ T5862] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1576.504754][T17322] loop5: detected capacity change from 0 to 512 [ 1576.511951][T17322] EXT4-fs: Ignoring removed mblk_io_submit option [ 1576.601270][T17322] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1576.643799][ T5862] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /415/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1576.722041][ T5862] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1576.779209][T17322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 1576.809763][ T5862] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /415/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1576.813402][T17322] System zones: [ 1576.856859][ T5862] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1576.913000][T17322] 1-12 [ 1577.349538][ T5862] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /415/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1577.420995][T17322] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2468: corrupted in-inode xattr: e_value size too large [ 1577.458996][ T5862] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1577.493023][T17322] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2468: couldn't read orphan inode 15 (err -117) [ 1577.564800][T17322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1577.645402][ T5862] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /415/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1577.703971][ T5862] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1577.793224][ T5862] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /415/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1578.268549][ T8604] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1578.473209][ T8604] usb 7-1: Using ep0 maxpacket: 16 [ 1578.484898][ T8604] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.516688][ T8604] usb 7-1: config 0 has no interfaces? [ 1578.546182][ T8604] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1578.682651][ T8604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.910338][ T8604] usb 7-1: config 0 descriptor?? [ 1579.269851][T17330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2470'. [ 1579.543690][ T8604] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1579.596230][T17330] bond_slave_0: entered promiscuous mode [ 1579.602311][T17330] bond_slave_1: entered promiscuous mode [ 1579.662586][T17330] macvtap1: entered promiscuous mode [ 1579.761527][T17330] bond0: entered promiscuous mode [ 1579.773071][ T8604] usb 1-1: Using ep0 maxpacket: 16 [ 1579.804564][ T8604] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.827628][ T8604] usb 1-1: config 0 has no interfaces? [ 1579.839430][T17330] macvtap1: entered allmulticast mode [ 1579.865580][ T8604] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1579.904272][T17330] bond0: entered allmulticast mode [ 1579.911686][ T8604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.959308][ T8604] usb 1-1: config 0 descriptor?? [ 1580.048526][T17330] bond_slave_0: entered allmulticast mode [ 1580.124763][ T5862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.142979][T17330] bond_slave_1: entered allmulticast mode [ 1580.226900][T17330] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1580.235899][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2474'. [ 1580.392455][T17341] bond0: left allmulticast mode [ 1580.397559][T17341] bond_slave_0: left allmulticast mode [ 1580.425800][T17341] bond_slave_1: left allmulticast mode [ 1580.460549][T17341] bond0: left promiscuous mode [ 1580.500049][T17341] bond_slave_0: left promiscuous mode [ 1580.505940][T17341] bond_slave_1: left promiscuous mode [ 1580.635114][ T9615] usb 7-1: USB disconnect, device number 7 [ 1580.782227][T17340] macvtap3: entered promiscuous mode [ 1580.830212][T17340] macvtap3: entered allmulticast mode [ 1580.880281][T17340] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1581.032643][ T9615] usb 1-1: USB disconnect, device number 27 [ 1581.522136][T17345] loop4: detected capacity change from 0 to 16 [ 1581.555419][T17345] erofs (device loop4): mounted with root inode @ nid 36. [ 1584.170828][T17365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1584.646610][T10433] Bluetooth: hci4: command 0x0405 tx timeout [ 1585.177705][T10433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1585.190119][T10433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1585.222759][T10433] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1585.243384][T10433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1585.251192][T10433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1585.576983][ T6825] bridge_slave_1: left allmulticast mode [ 1585.600283][ T6825] bridge_slave_1: left promiscuous mode [ 1585.612725][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.650142][ T6825] bridge_slave_0: left allmulticast mode [ 1585.670538][ T6825] bridge_slave_0: left promiscuous mode [ 1585.680207][ T5878] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /456/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1585.712193][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.843872][ T5878] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1586.139101][ T5878] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /456/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1586.419959][ T5878] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1586.682197][ T5878] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /456/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1586.945590][ T5878] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1587.131169][ T5878] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /456/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1587.221528][T17382] loop7: detected capacity change from 0 to 16 [ 1587.249728][ T5878] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1587.291478][T17382] erofs (device loop7): mounted with root inode @ nid 36. [ 1587.346971][T10433] Bluetooth: hci1: command tx timeout [ 1587.597315][ T5878] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /456/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1588.294453][ T5878] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1589.081535][T17390] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1589.452866][T10433] Bluetooth: hci1: command tx timeout [ 1590.733366][ T5878] EXT4-fs error: 71 callbacks suppressed [ 1590.733389][ T5878] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1590.835677][ T6825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1590.878103][ T5878] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /456/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1590.915803][ T6825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1590.990600][ T5878] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1591.030513][ T6825] bond0 (unregistering): Released all slaves [ 1591.084209][ T6825] bond1 (unregistering): Released all slaves [ 1591.099508][ T5878] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /456/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1591.147615][ T6825] bond2 (unregistering): Released all slaves [ 1591.232043][ T6825] bond3 (unregistering): Released all slaves [ 1591.279309][ T5878] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1591.469167][ T5878] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /456/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1591.505975][T10433] Bluetooth: hci1: command tx timeout [ 1591.700811][ T5878] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1591.750438][T17378] lo speed is unknown, defaulting to 1000 [ 1591.762845][ T6825] : left promiscuous mode [ 1591.812587][ T5878] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /456/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1591.963626][ T5878] EXT4-fs error (device loop5): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1592.193289][ T5878] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /456/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1594.060322][T10433] Bluetooth: hci1: command tx timeout [ 1595.113014][T17378] chnl_net:caif_netlink_parms(): no params data found [ 1595.710322][T12239] IPVS: starting estimator thread 0... [ 1595.777748][T17453] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1596.003681][T17456] IPVS: using max 23 ests per chain, 55200 per kthread [ 1596.609624][ T5876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1596.624446][ T5876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1596.632940][ T5876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1596.643642][ T5876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1596.651455][ T5876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1596.719345][T17463] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1597.016090][T17378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.072953][T17378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.160866][T17378] bridge_slave_0: entered allmulticast mode [ 1597.218390][T17378] bridge_slave_0: entered promiscuous mode [ 1597.298774][T17467] loop4: detected capacity change from 0 to 2048 [ 1597.393983][T17467] msdos: Unknown parameter 'msdos' [ 1598.753503][T10433] Bluetooth: hci0: command 0x0c1a tx timeout [ 1598.753604][ T5876] Bluetooth: hci6: command tx timeout [ 1600.793008][ T5876] Bluetooth: hci6: command tx timeout [ 1600.863072][T17378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.870371][T17378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.961023][T17378] bridge_slave_1: entered allmulticast mode [ 1600.992979][T17378] bridge_slave_1: entered promiscuous mode [ 1601.443263][T17378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.516394][T17378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.649417][ T6825] hsr_slave_0: left promiscuous mode [ 1601.691895][ T6825] hsr_slave_1: left promiscuous mode [ 1601.708423][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.748394][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.224045][T17502] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1602.863286][ T5876] Bluetooth: hci6: command tx timeout [ 1603.792756][T17517] usb usb8: usbfs: process 17517 (syz.7.2507) did not claim interface 0 before use [ 1604.066945][T17328] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.596009][T17526] loop7: detected capacity change from 0 to 32768 [ 1604.721574][T17526] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1604.730292][T17526] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1604.868653][T17526] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 6ms [ 1604.953511][ T5876] Bluetooth: hci6: command tx timeout [ 1605.062721][ T9618] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1605.113044][ T9618] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1605.316590][T17532] loop4: detected capacity change from 0 to 16 [ 1605.343100][T17532] erofs (device loop4): mounted with root inode @ nid 36. [ 1605.456142][ T9618] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 343ms [ 1605.471092][ T9618] gfs2: fsid=syz:syz.0: jid=0: Done [ 1605.508042][T17526] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1606.182634][ T6825] team0 (unregistering): Port device team_slave_1 removed [ 1606.414427][ T6825] team0 (unregistering): Port device team_slave_0 removed [ 1606.962458][T17542] ubi31: attaching mtd0 [ 1606.969409][T17542] ubi31: scanning is finished [ 1606.974155][T17542] ubi31: empty MTD device detected [ 1607.593590][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.602936][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.673145][T17542] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1609.353590][T12023] lo speed is unknown, defaulting to 1000 [ 1609.373019][T12023] infiniband syz0: ib_query_port failed (-19) [ 1609.691209][T17378] team0: Port device team_slave_0 added [ 1609.766957][T17378] team0: Port device team_slave_1 added [ 1610.426822][T17572] overlayfs: missing 'lowerdir' [ 1611.638367][T17378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.670554][T17378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.737686][T17378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.877868][T17378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.958381][T17378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1612.065916][T17378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.116564][T17586] usb usb8: usbfs: process 17586 (syz.4.2521) did not claim interface 0 before use [ 1612.754082][T17378] hsr_slave_0: entered promiscuous mode [ 1612.796014][T17592] loop4: detected capacity change from 0 to 16 [ 1612.822191][T17378] hsr_slave_1: entered promiscuous mode [ 1612.906817][T17592] erofs (device loop4): mounted with root inode @ nid 36. [ 1613.880422][ T6825] IPVS: stop unused estimator thread 0... [ 1615.161247][T17607] loop4: detected capacity change from 0 to 128 [ 1615.206770][T17607] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1615.321827][T17607] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1615.460580][T17607] ext4 filesystem being mounted at /494/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1615.922422][T17607] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1617.154418][T17462] chnl_net:caif_netlink_parms(): no params data found [ 1617.410206][ T5866] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1618.624043][T17462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.631552][T17462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.639077][T17462] bridge_slave_0: entered allmulticast mode [ 1618.660225][T17462] bridge_slave_0: entered promiscuous mode [ 1618.868281][T17462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.955219][T17462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.039861][T17462] bridge_slave_1: entered allmulticast mode [ 1619.094737][T17462] bridge_slave_1: entered promiscuous mode [ 1619.257145][T17658] usb usb8: usbfs: process 17658 (syz.0.2533) did not claim interface 0 before use [ 1619.725372][T17378] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1619.794345][T17462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.835229][T17668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1620.568667][T17462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1620.710847][T17378] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1620.774480][T17378] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1621.059921][T17462] team0: Port device team_slave_0 added [ 1621.110139][T17462] team0: Port device team_slave_1 added [ 1621.162703][T17676] loop4: detected capacity change from 0 to 4096 [ 1621.218609][T17378] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1621.269667][ T6825] bridge_slave_1: left allmulticast mode [ 1621.277973][ T6825] bridge_slave_1: left promiscuous mode [ 1621.291097][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.313739][ T6825] bridge_slave_0: left allmulticast mode [ 1621.319557][ T6825] bridge_slave_0: left promiscuous mode [ 1621.330892][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.353667][T17676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1622.037880][T17679] loop0: detected capacity change from 0 to 128 [ 1622.152127][T17679] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1622.239063][T17679] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1622.264352][T17679] ext4 filesystem being mounted at /469/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1623.520683][T17689] capability: warning: `syz.4.2537' uses 32-bit capabilities (legacy support in use) [ 1624.202327][T10433] Bluetooth: hci4: command 0x0405 tx timeout [ 1624.325390][ T5861] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1626.759745][ T6825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.780443][ T6825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1626.794475][ T6825] bond0 (unregistering): Released all slaves [ 1626.828740][ T6825] bond1 (unregistering): Released all slaves [ 1626.968264][ T5960] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1626.986784][T17462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.994237][T17462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1627.027705][T17462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.134964][T17462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.141955][T17462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1627.142865][ T5960] usb 7-1: Using ep0 maxpacket: 32 [ 1627.210726][T17462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.266616][ T5876] Bluetooth: hci6: command 0x0405 tx timeout [ 1627.279360][ T5960] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1627.303762][ T6825] : left promiscuous mode [ 1627.336965][ T5960] usb 7-1: config 0 has no interface number 0 [ 1627.395856][ T5960] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1627.982412][T17723] loop7: detected capacity change from 0 to 16 [ 1628.000798][T17723] erofs (device loop7): mounted with root inode @ nid 36. [ 1628.035640][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.099695][ T5960] usb 7-1: Product: syz [ 1628.126541][ T5960] usb 7-1: Manufacturer: syz [ 1628.238112][ T5960] usb 7-1: SerialNumber: syz [ 1628.282438][ T5960] usb 7-1: config 0 descriptor?? [ 1628.528088][ T5960] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1628.829896][ T5960] usb 7-1: selecting invalid altsetting 1 [ 1629.184622][ T5960] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1629.206651][ T5960] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1629.238700][T17732] loop0: detected capacity change from 0 to 16 [ 1629.268150][ T5960] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1629.279383][T17732] erofs (device loop0): mounted with root inode @ nid 36. [ 1630.165831][ T5960] usb 7-1: media controller created [ 1630.448472][T17462] hsr_slave_0: entered promiscuous mode [ 1630.483059][T17462] hsr_slave_1: entered promiscuous mode [ 1630.522298][T17743] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1630.534845][T17462] debugfs: 'hsr0' already exists in 'hsr' [ 1630.540618][T17462] Cannot create hsr debugfs directory [ 1630.727327][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1631.093299][ T5960] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1631.103921][ T5960] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1631.178480][ T5960] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1631.497556][ T5960] usb 7-1: USB disconnect, device number 8 [ 1632.603170][T12023] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1632.737456][T17378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.807199][T12023] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1632.868611][T12023] usb 8-1: config 1 descriptor has 1 excess byte, ignoring [ 1632.957659][T12023] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1633.010675][T12023] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1633.085422][T17378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.145620][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.152863][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.172234][T12023] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1633.198942][T12023] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1633.233869][T12023] usb 8-1: Product: syz [ 1633.262558][T12023] usb 8-1: Manufacturer: syz [ 1633.269373][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.276531][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.317930][T12023] cdc_wdm 8-1:1.0: skipping garbage [ 1633.387140][T12023] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1633.525493][T12023] usb 8-1: USB disconnect, device number 9 [ 1634.465872][T17378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1634.653104][T17787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1634.757684][T17462] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1634.830113][T17793] loop7: detected capacity change from 0 to 16 [ 1634.840033][T17793] erofs (device loop7): mounted with root inode @ nid 36. [ 1635.037824][T17462] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1636.039968][T17462] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1636.086528][T17802] trusted_key: encrypted_key: keylen parameter is missing [ 1636.579746][T17462] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1637.809761][ T6825] hsr_slave_0: left promiscuous mode [ 1638.052476][ T6825] hsr_slave_1: left promiscuous mode [ 1638.069746][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1638.899011][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.168763][T17817] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2562'. [ 1639.197038][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2562'. [ 1641.232965][T12023] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1641.590039][T12023] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1641.622908][T12023] usb 7-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1641.684752][T12023] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1641.695778][T12023] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1641.767626][T12023] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1641.788564][T12023] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1641.817375][T12023] usb 7-1: Product: syz [ 1641.821573][T12023] usb 7-1: Manufacturer: syz [ 1641.865867][T12023] cdc_wdm 7-1:1.0: skipping garbage [ 1641.871545][T12023] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1642.106786][ T9615] usb 7-1: USB disconnect, device number 9 [ 1643.231244][T17839] loop7: detected capacity change from 0 to 16 [ 1643.307739][T17839] erofs (device loop7): mounted with root inode @ nid 36. [ 1644.067027][T17845] ubi31: attaching mtd0 [ 1644.073315][T17845] ubi31: scanning is finished [ 1644.735185][T17847] tty tty21: ldisc open failed (-12), clearing slot 20 [ 1644.853597][T17845] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1646.093445][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1646.103547][ T6825] team0 (unregistering): Port device team_slave_1 removed [ 1646.115406][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1646.802683][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1646.818824][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1646.837122][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1646.863849][ T6825] team0 (unregistering): Port device team_slave_0 removed [ 1647.276357][T17869] trusted_key: encrypted_key: keylen parameter is missing [ 1648.023664][T17862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1648.964976][ T5876] Bluetooth: hci5: command tx timeout [ 1649.637136][T17891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1650.741780][T17462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.989496][T17856] chnl_net:caif_netlink_parms(): no params data found [ 1651.023513][ T5876] Bluetooth: hci5: command tx timeout [ 1651.157827][ T6825] IPVS: stop unused estimator thread 0... [ 1651.167296][T17462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.356895][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.364094][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.734482][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.741667][T12229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.315031][T17462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1652.345772][T17462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1652.414050][T17856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.444275][T17856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.523327][T17856] bridge_slave_0: entered allmulticast mode [ 1652.565195][T17856] bridge_slave_0: entered promiscuous mode [ 1652.840167][T17856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.886566][T17856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.948909][T17856] bridge_slave_1: entered allmulticast mode [ 1652.973249][ T5960] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1653.033171][T17856] bridge_slave_1: entered promiscuous mode [ 1653.252868][ T5876] Bluetooth: hci5: command tx timeout [ 1653.393266][ T5960] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1654.312746][ T5960] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1654.464738][ T5960] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1654.477296][ T5960] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1654.531793][ T5960] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1654.541265][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1654.661980][ T5960] usb 1-1: Product: syz [ 1654.666323][ T5960] usb 1-1: Manufacturer: syz [ 1654.666851][T17934] loop6: detected capacity change from 0 to 128 [ 1654.743475][T17934] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1654.787070][ T5960] cdc_wdm 1-1:1.0: skipping garbage [ 1654.792324][ T5960] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1654.827666][T17934] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1654.849089][T17856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.935831][T17934] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1654.935909][T17856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1655.010426][ T9615] usb 1-1: USB disconnect, device number 28 [ 1655.263557][ T5876] Bluetooth: hci5: command tx timeout [ 1656.088622][T14348] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1657.007607][T17856] team0: Port device team_slave_0 added [ 1657.105783][T17856] team0: Port device team_slave_1 added [ 1657.204889][T10433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1657.217943][T10433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1657.237419][T10433] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1657.252066][T10433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1657.261573][T10433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1659.622592][T10433] Bluetooth: hci1: command tx timeout [ 1660.350841][T17977] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1660.621612][T17988] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2598'. [ 1660.884067][T17856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1660.891047][T17856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1660.933976][T17988] usb usb8: usbfs: process 17988 (syz.7.2598) did not claim interface 0 before use [ 1660.999504][T17856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.127094][T17856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.152897][T17856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.292834][T17856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.022996][T10433] Bluetooth: hci1: command tx timeout [ 1663.024249][T18002] ubi31: attaching mtd0 [ 1663.056462][T18002] ubi31: scanning is finished [ 1663.716818][T18002] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1664.063669][T10433] Bluetooth: hci1: command tx timeout [ 1664.166933][T17856] hsr_slave_0: entered promiscuous mode [ 1664.174113][T17856] hsr_slave_1: entered promiscuous mode [ 1664.180629][T17856] debugfs: 'hsr0' already exists in 'hsr' [ 1664.186427][T17856] Cannot create hsr debugfs directory [ 1664.352320][T18013] ubi31: attaching mtd0 [ 1664.376642][T18013] ubi31: scanning is finished [ 1664.983002][T12023] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1665.155504][T12023] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1665.181537][T12023] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1665.218579][T12023] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1665.219595][T18013] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1665.401282][T12023] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1665.436670][ T6825] bridge_slave_1: left allmulticast mode [ 1665.463944][ T6825] bridge_slave_1: left promiscuous mode [ 1665.466657][T12023] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1665.469779][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.497505][T12023] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1665.532574][T12023] usb 5-1: Product: syz [ 1665.542583][T12023] usb 5-1: Manufacturer: syz [ 1666.245403][T10433] Bluetooth: hci1: command tx timeout [ 1666.365726][ T6825] bridge_slave_0: left allmulticast mode [ 1666.370844][T12023] cdc_wdm 5-1:1.0: skipping garbage [ 1666.387666][ T6825] bridge_slave_0: left promiscuous mode [ 1666.388499][T12023] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1666.405140][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.437630][T18025] loop7: detected capacity change from 0 to 128 [ 1666.470674][T18025] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1666.741028][T14618] usb 5-1: USB disconnect, device number 20 [ 1666.754710][T18025] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1666.843219][T18025] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1667.799204][T16628] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1668.460744][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.496100][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.652962][T18044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1668.726117][ T9618] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1668.923120][ T9618] usb 7-1: Using ep0 maxpacket: 32 [ 1668.929953][ T9618] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 1668.947783][ T9618] usb 7-1: config 0 has no interface number 0 [ 1668.957937][ T9618] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1668.988480][ T9618] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1669.073182][ T9618] usb 7-1: config 0 interface 126 has no altsetting 0 [ 1669.099357][ T9618] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1669.109950][ T9618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.130007][ T9618] usb 7-1: Product: syz [ 1669.140113][ T9618] usb 7-1: Manufacturer: syz [ 1669.146546][ T9618] usb 7-1: SerialNumber: syz [ 1669.190121][ T9618] usb 7-1: config 0 descriptor?? [ 1669.202915][T18043] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1669.211405][T18043] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1669.800540][ T9618] ir_usb 7-1:0.126: IR Dongle converter detected [ 1669.809788][ T6825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.561857][ T6825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.593652][ T9618] usb 7-1: IRDA class descriptor not found, device not bound [ 1670.617004][ T9618] usb 7-1: USB disconnect, device number 10 [ 1670.686843][ T6825] bond0 (unregistering): Released all slaves [ 1670.999380][ T6825] hsr_slave_0: left promiscuous mode [ 1671.075952][ T6825] hsr_slave_1: left promiscuous mode [ 1671.076681][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.105404][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.758478][T18062] loop6: detected capacity change from 0 to 32768 [ 1671.803695][T18065] loop7: detected capacity change from 0 to 32768 [ 1671.876817][T18065] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 1671.891901][T18065] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1671.955789][T18065] grow_buffers: requested out-of-range block 432345564227567648 for device loop7 [ 1671.965264][T18065] (syz.7.2617,18065,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 1671.974200][T18065] (syz.7.2617,18065,0):ocfs2_search_chain:1817 ERROR: status = -12 [ 1671.982468][T18065] (syz.7.2617,18065,0):ocfs2_search_chain:1940 ERROR: status = -12 [ 1671.990527][T18065] (syz.7.2617,18065,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12 [ 1671.999150][T18065] (syz.7.2617,18065,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12 [ 1672.007689][T18065] (syz.7.2617,18065,0):__ocfs2_claim_clusters:2438 ERROR: status = -12 [ 1672.015983][T18065] (syz.7.2617,18065,0):__ocfs2_claim_clusters:2446 ERROR: status = -12 [ 1672.024389][T18065] (syz.7.2617,18065,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -12 [ 1672.033281][T18065] (syz.7.2617,18065,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -12 [ 1672.042059][T18065] (syz.7.2617,18065,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12 [ 1672.051268][T18065] (syz.7.2617,18065,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12 [ 1672.060661][T18065] (syz.7.2617,18065,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12 [ 1672.069575][T18065] (syz.7.2617,18065,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12 [ 1672.079839][T18065] (syz.7.2617,18065,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12 [ 1672.089171][T18065] (syz.7.2617,18065,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12 [ 1672.098427][T18065] (syz.7.2617,18065,0):ocfs2_mknod:360 ERROR: status = -12 [ 1672.106047][T18065] (syz.7.2617,18065,0):ocfs2_mknod:505 ERROR: status = -12 [ 1672.113542][T18065] (syz.7.2617,18065,0):ocfs2_mkdir:661 ERROR: status = -12 [ 1672.978591][T18062] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names [ 1672.978617][T18062] allowing incompatible features above 0.0: (unknown version) [ 1672.978631][T18062] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1673.013920][T18062] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 1673.022311][T18062] bcachefs (loop6): recovering from clean shutdown, journal seq 14 [ 1673.030419][T18062] bcachefs (loop6): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 1673.030419][T18062] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 1673.166520][T18062] bcachefs (loop6): accounting_read... [ 1673.181308][T16628] ocfs2: Unmounting device (7,7) on (node local) [ 1673.203008][T18062] done [ 1673.205826][T18062] bcachefs (loop6): alloc_read... done [ 1673.219061][T18062] bcachefs (loop6): snapshots_read... done [ 1673.232937][T18062] bcachefs (loop6): check_allocations... [ 1673.238249][T18062] bcachefs (loop6): btree ptr not marked in member info btree allocated bitmap [ 1673.238312][T18062] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 1673.277829][T18062] bcachefs (loop6): btree ptr not marked in member info btree allocated bitmap [ 1673.277852][T18062] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 1673.338477][T18062] bcachefs (loop6): btree ptr not marked in member info btree allocated bitmap [ 1673.338502][T18062] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 1673.371041][T18062] bcachefs (loop6): btree ptr not marked in member info btree allocated bitmap [ 1673.371066][T18062] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 1673.399050][T18062] bcachefs (loop6): btree ptr not marked in member info btree allocated bitmap [ 1673.399074][T18062] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 1673.425112][T18062] bcachefs (loop6): btree ptr not marked in member info btree allocated bitmap [ 1673.425136][T18062] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 1673.524024][T18062] done [ 1673.532531][T18062] bcachefs (loop6): going read-write [ 1673.631353][T18062] bcachefs (loop6): journal_replay... done [ 1673.696573][T18062] bcachefs (loop6): check_extents_to_backpointers... [ 1673.697905][T18062] bcachefs (loop6): scanning for missing backpointers in 6/128 buckets [ 1673.716707][T18062] done [ 1673.723870][T18062] bcachefs (loop6): check_inodes... done [ 1673.731675][T18062] bcachefs (loop6): resume_logged_ops... done [ 1673.738779][T18062] bcachefs (loop6): delete_dead_inodes... done [ 1673.757336][T18062] bcachefs (loop6): Fixed errors, running fsck a second time to verify fs is clean [ 1673.766970][T18062] bcachefs (loop6): check_extents_to_backpointers... done [ 1673.783147][T18062] bcachefs (loop6): check_inodes... done [ 1673.790162][T18062] bcachefs (loop6): resume_logged_ops... done [ 1673.797139][T18062] bcachefs (loop6): delete_dead_inodes... done [ 1673.808470][T18062] bcachefs (loop6): done starting filesystem [ 1674.966718][ T9618] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1675.154763][ T9618] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1675.202343][T18086] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1675.220144][T18062] syz.6.2616 (18062) used greatest stack depth: 12984 bytes left [ 1675.243173][ T9618] usb 8-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1675.265236][ T9618] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1675.274414][ T9618] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1675.318638][ T9618] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1675.355392][ T9618] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1675.506426][ T9618] usb 8-1: Product: syz [ 1675.536798][ T9618] usb 8-1: Manufacturer: syz [ 1675.747256][T14348] bcachefs (loop6): shutting down [ 1675.759177][ T9618] cdc_wdm 8-1:1.0: skipping garbage [ 1675.777008][T14348] bcachefs (loop6): going read-only [ 1675.782727][T14348] bcachefs (loop6): finished waiting for writes to stop [ 1675.783322][ T9618] cdc_wdm 8-1:1.0: skipping garbage [ 1676.444138][ T9618] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1676.674593][T17380] usb 8-1: USB disconnect, device number 10 [ 1676.692729][T14348] bcachefs (loop6): flushing journal and stopping allocators, journal seq 26 [ 1676.720789][ T6825] team0 (unregistering): Port device team_slave_1 removed [ 1676.843416][T14348] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 26 [ 1676.919203][T14348] bcachefs (loop6): clean shutdown complete, journal seq 27 [ 1676.934327][T14348] bcachefs (loop6): marking filesystem clean [ 1677.068605][ T6825] team0 (unregistering): Port device team_slave_0 removed [ 1677.124560][T14348] bcachefs (loop6): shutdown complete [ 1683.027762][T18149] ubi31: attaching mtd0 [ 1683.067680][T18149] ubi31: scanning is finished [ 1683.090069][T17956] chnl_net:caif_netlink_parms(): no params data found [ 1683.942120][T18149] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1685.053840][ T5952] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1685.395895][ T5952] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1685.404720][ T5952] usb 8-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1685.435518][ T5952] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1686.212973][ T5952] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1686.236031][ T5952] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1686.245293][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1686.255457][ T5952] usb 8-1: Product: syz [ 1686.262896][ T5952] usb 8-1: Manufacturer: syz [ 1686.284034][ T5952] cdc_wdm 8-1:1.0: skipping garbage [ 1686.299535][ T5952] cdc_wdm 8-1:1.0: skipping garbage [ 1686.300647][T17956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.305475][ T5952] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1687.053337][T17956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.060699][T17956] bridge_slave_0: entered allmulticast mode [ 1687.069234][T17956] bridge_slave_0: entered promiscuous mode [ 1687.077618][ T5952] usb 8-1: USB disconnect, device number 11 [ 1687.196275][T18180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1687.346508][T17956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.386124][T17956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.419709][T17956] bridge_slave_1: entered allmulticast mode [ 1687.422463][T17956] bridge_slave_1: entered promiscuous mode [ 1687.809927][T18195] loop6: detected capacity change from 0 to 1024 [ 1689.885883][ T6821] hfsplus: b-tree write err: -5, ino 4 [ 1689.917378][T17956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.149645][T18199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1691.029959][T18215] binder: 18213:18215 unknown command 0 [ 1691.045426][T18215] binder: 18213:18215 ioctl c0306201 200000000080 returned -22 [ 1691.160394][T17956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.829964][T17956] team0: Port device team_slave_0 added [ 1694.971083][T17956] team0: Port device team_slave_1 added [ 1695.082930][ T9618] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1695.176222][T17956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.203030][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.262737][T17956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.283779][ T9618] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1695.292579][ T9618] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1695.333495][ T9618] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1695.342475][ T9618] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1695.454918][ T9618] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1695.465584][T17956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.472532][T17956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.502856][ T9618] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1695.519384][ T9618] usb 5-1: Product: syz [ 1695.541995][ T9618] usb 5-1: Manufacturer: syz [ 1695.571482][ T9618] cdc_wdm 5-1:1.0: skipping garbage [ 1695.591458][T18247] loop7: detected capacity change from 0 to 2048 [ 1695.608247][ T9618] cdc_wdm 5-1:1.0: skipping garbage [ 1695.614182][T17956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.617585][T18247] msdos: Unknown parameter 'msdos' [ 1695.636427][ T9618] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1695.979545][T17380] usb 5-1: USB disconnect, device number 21 [ 1696.089346][T17856] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1696.156362][T18253] loop6: detected capacity change from 0 to 128 [ 1696.165880][T17856] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1696.202892][T18253] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1696.239721][T17856] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1696.266575][T18253] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1696.309974][T18253] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1696.725936][T17956] hsr_slave_0: entered promiscuous mode [ 1696.732379][T17956] hsr_slave_1: entered promiscuous mode [ 1697.428369][T17856] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1697.636222][T14348] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1698.983217][ T6825] bridge_slave_1: left allmulticast mode [ 1698.990563][ T6825] bridge_slave_1: left promiscuous mode [ 1699.001290][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.198065][ T6825] bridge_slave_0: left allmulticast mode [ 1699.228653][ T6825] bridge_slave_0: left promiscuous mode [ 1699.460030][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.614132][ T6825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1701.733854][ T6825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1701.836674][ T6825] bond0 (unregistering): Released all slaves [ 1702.382456][ T6825] hsr_slave_0: left promiscuous mode [ 1702.439933][ T6825] hsr_slave_1: left promiscuous mode [ 1702.763793][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.859004][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1704.427089][T18340] loop0: detected capacity change from 0 to 128 [ 1704.518878][T18340] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1704.580875][T18340] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1704.605696][T18340] ext4 filesystem being mounted at /504/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1705.795094][ T5861] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1706.000033][T10433] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1706.015701][T10433] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1706.104628][T10433] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1706.221580][T10433] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1706.229854][T10433] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1706.430677][ T6825] team0 (unregistering): Port device team_slave_1 removed [ 1706.551688][ T6825] team0 (unregistering): Port device team_slave_0 removed [ 1707.356597][T18360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1708.373096][ T5876] Bluetooth: hci6: command tx timeout [ 1708.753773][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802950bc00: rx timeout, send abort [ 1709.255342][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802950bc00: abort rx timeout. Force session deactivation [ 1710.142311][T18392] ubi31: attaching mtd0 [ 1710.402995][ T5876] Bluetooth: hci6: command tx timeout [ 1710.699832][T18392] ubi31: scanning is finished [ 1710.857276][T18392] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1712.463197][ T5876] Bluetooth: hci6: command tx timeout [ 1714.542898][ T5876] Bluetooth: hci6: command tx timeout [ 1715.740964][T18442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1716.345585][T18449] loop0: detected capacity change from 0 to 16 [ 1716.409968][T18449] erofs (device loop0): mounted with root inode @ nid 36. [ 1717.831105][T18456] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2693'. [ 1717.840794][T18456] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2693'. [ 1717.851273][T18456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2693'. [ 1718.536328][T18345] chnl_net:caif_netlink_parms(): no params data found [ 1718.548318][T10433] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1718.560022][T10433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1718.571383][T10433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1718.581789][T10433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1718.590006][T10433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1720.714673][T10433] Bluetooth: hci5: command tx timeout [ 1723.067827][T10433] Bluetooth: hci5: command tx timeout [ 1723.875834][T18496] loop0: detected capacity change from 0 to 16 [ 1724.020320][T18496] erofs (device loop0): mounted with root inode @ nid 36. [ 1725.088301][T18512] netlink: 'syz.0.2705': attribute type 1 has an invalid length. [ 1725.113741][T10433] Bluetooth: hci5: command tx timeout [ 1725.198915][T18512] netlink: 'syz.0.2705': attribute type 1 has an invalid length. [ 1725.234904][T18512] netlink: 'syz.0.2705': attribute type 1 has an invalid length. [ 1725.562916][T18345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.603288][T18345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.610583][T18345] bridge_slave_0: entered allmulticast mode [ 1725.677336][T18345] bridge_slave_0: entered promiscuous mode [ 1725.830330][T18345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.855424][T18345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.883367][T18345] bridge_slave_1: entered allmulticast mode [ 1725.914108][T18345] bridge_slave_1: entered promiscuous mode [ 1726.123934][ T6825] bridge_slave_1: left allmulticast mode [ 1726.129616][ T6825] bridge_slave_1: left promiscuous mode [ 1726.154125][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.204723][ T6825] bridge_slave_0: left allmulticast mode [ 1726.210929][ T6825] bridge_slave_0: left promiscuous mode [ 1726.333104][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.361395][T18521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1727.192946][T10433] Bluetooth: hci5: command tx timeout [ 1727.232694][ T6825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1727.378617][ T6825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1727.581058][ T6825] bond0 (unregistering): Released all slaves [ 1727.959637][T18345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.098231][ T6825] hsr_slave_0: left promiscuous mode [ 1728.106603][ T6825] hsr_slave_1: left promiscuous mode [ 1728.131754][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1728.187714][ T6825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1729.588456][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.595228][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.045634][T18553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1730.784601][ T6825] team0 (unregistering): Port device team_slave_1 removed [ 1730.908961][ T6825] team0 (unregistering): Port device team_slave_0 removed [ 1732.754057][T18345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.100911][T18577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.214325][T18580] loop7: detected capacity change from 0 to 128 [ 1733.308542][T18345] team0: Port device team_slave_0 added [ 1733.340788][T18580] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1733.378165][T18345] team0: Port device team_slave_1 added [ 1733.453233][T18580] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1733.490675][T18580] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1734.427910][T18345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1734.450046][T18345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1734.630981][T18345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1734.763971][T18345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1734.770953][T18345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1734.861825][T18345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1734.983881][T18455] chnl_net:caif_netlink_parms(): no params data found [ 1735.016892][T16628] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1736.870063][T18345] hsr_slave_0: entered promiscuous mode [ 1737.023295][T18345] hsr_slave_1: entered promiscuous mode [ 1737.072343][T18345] debugfs: 'hsr0' already exists in 'hsr' [ 1737.088664][T18345] Cannot create hsr debugfs directory [ 1737.734836][T18620] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2723'. [ 1737.744358][T18620] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2723'. [ 1737.753406][T18620] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2723'. [ 1739.859203][T18455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.869285][T18455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.877048][T18455] bridge_slave_0: entered allmulticast mode [ 1739.893021][T18455] bridge_slave_0: entered promiscuous mode [ 1739.975311][T18455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.025238][T18455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.032552][T18455] bridge_slave_1: entered allmulticast mode [ 1740.059426][T18455] bridge_slave_1: entered promiscuous mode [ 1742.529646][T18455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.751627][T18455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.385072][ T5876] Bluetooth: hci5: command 0x0405 tx timeout [ 1744.885528][T18674] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1744.946616][ T9615] IPVS: starting estimator thread 0... [ 1745.083254][T18676] IPVS: using max 32 ests per chain, 76800 per kthread [ 1745.204250][T18455] team0: Port device team_slave_0 added [ 1745.788732][T18685] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2738'. [ 1745.798254][T18685] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2738'. [ 1745.807324][T18685] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2738'. [ 1746.773578][T18455] team0: Port device team_slave_1 added [ 1747.815025][T18455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1747.863306][T18455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.043630][T18455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.263505][T18455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.307975][T18455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.453581][T18455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1750.126811][T18455] hsr_slave_0: entered promiscuous mode [ 1750.139530][T18455] hsr_slave_1: entered promiscuous mode [ 1750.173183][ T9615] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1750.191216][T18455] debugfs: 'hsr0' already exists in 'hsr' [ 1750.209329][T18455] Cannot create hsr debugfs directory [ 1750.333049][ T9615] usb 8-1: Using ep0 maxpacket: 32 [ 1750.356102][ T9615] usb 8-1: config 0 has no interfaces? [ 1750.372005][ T9615] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1750.406642][ T9615] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.475142][ T9615] usb 8-1: Product: syz [ 1750.494530][ T9615] usb 8-1: Manufacturer: syz [ 1750.535905][ T9615] usb 8-1: SerialNumber: syz [ 1750.588237][ T9615] usb 8-1: config 0 descriptor?? [ 1750.873849][ T9615] usb 8-1: USB disconnect, device number 12 [ 1751.187822][ T36] bridge_slave_1: left allmulticast mode [ 1751.206555][ T36] bridge_slave_1: left promiscuous mode [ 1751.248347][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.266187][ T36] bridge_slave_0: left allmulticast mode [ 1751.273196][ T36] bridge_slave_0: left promiscuous mode [ 1751.279020][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.108195][T18745] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2752'. [ 1752.117764][T18745] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2752'. [ 1752.126871][T18745] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2752'. [ 1752.963705][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1753.026684][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1753.061944][ T36] bond0 (unregistering): Released all slaves [ 1753.388902][ T5952] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1753.457544][ T5952] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1754.316083][T18345] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1754.581538][T18762] fido_id[18762]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1754.599368][ T36] hsr_slave_0: left promiscuous mode [ 1754.683039][ T36] hsr_slave_1: left promiscuous mode [ 1754.764305][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1754.805782][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1756.163057][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1756.308995][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1757.151622][T18345] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1757.194292][T18345] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1757.221638][T18345] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1758.123942][ T5960] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1758.796187][T18345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1758.871170][T18345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1758.891886][ T5960] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 1758.945580][ T5960] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.986465][T12351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1758.993677][T12351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1759.017283][ T5960] usb 7-1: config 0 has no interface number 0 [ 1759.070220][ T5960] usb 7-1: config 0 interface 235 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1759.154053][ T5960] usb 7-1: config 0 interface 235 has no altsetting 0 [ 1759.190568][ T5960] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1759.202566][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.209730][ T6982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1759.231554][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.278508][ T5960] usb 7-1: Product: syz [ 1759.282711][ T5960] usb 7-1: Manufacturer: syz [ 1759.328648][ T5960] usb 7-1: SerialNumber: syz [ 1759.362684][ T5960] usb 7-1: config 0 descriptor?? [ 1759.397207][ T5960] keyspan 7-1:0.235: Keyspan 1 port adapter converter detected [ 1759.483738][ T5960] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 87 [ 1759.491688][ T5960] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 7 [ 1759.570558][ T5960] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 81 [ 1759.630208][ T5960] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 1 [ 1759.663527][ T5960] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 85 [ 1759.671472][ T5960] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 5 [ 1760.003530][ T5960] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1760.109089][T18827] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2774'. [ 1760.833106][ T5960] usb 7-1: USB disconnect, device number 11 [ 1760.884025][ T5960] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1760.904097][ T5960] keyspan 7-1:0.235: device disconnected [ 1761.038988][T18455] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1761.241331][T18455] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1761.310622][T18455] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1761.735926][T18846] ubi31: attaching mtd0 [ 1761.765435][T18846] ubi31: scanning is finished [ 1762.390644][T18455] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1762.485416][T18846] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1763.491048][T18455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1763.871447][T18455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1764.274760][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.281937][ T6846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.354578][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.361761][ T6846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1766.366877][T18455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1766.584524][T10433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1766.599267][T10433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1766.610002][T10433] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1766.621178][T10433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1766.639418][T10433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1768.702926][T10433] Bluetooth: hci1: command tx timeout [ 1770.088704][T18935] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1770.839547][T10433] Bluetooth: hci1: command tx timeout [ 1771.416019][T18455] veth0_vlan: entered promiscuous mode [ 1771.572288][T18455] veth1_vlan: entered promiscuous mode [ 1771.604368][T12351] bridge_slave_1: left allmulticast mode [ 1771.610059][T12351] bridge_slave_1: left promiscuous mode [ 1771.674468][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.699920][T12351] bridge_slave_0: left allmulticast mode [ 1771.716478][T12351] bridge_slave_0: left promiscuous mode [ 1771.795860][T18960] loop0: detected capacity change from 0 to 16 [ 1771.911256][T18960] erofs (device loop0): mounted with root inode @ nid 36. [ 1771.924368][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.863584][ T5876] Bluetooth: hci1: command tx timeout [ 1773.146911][T18974] loop7: detected capacity change from 0 to 128 [ 1773.166914][T18974] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1773.243731][T18974] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1773.266057][T18974] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1774.131389][T16628] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1774.943292][ T5876] Bluetooth: hci1: command 0x0419 tx timeout [ 1775.043969][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1775.116858][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1775.343163][T12351] bond0 (unregistering): Released all slaves [ 1775.477056][T18906] chnl_net:caif_netlink_parms(): no params data found [ 1775.948795][T12351] hsr_slave_0: left promiscuous mode [ 1776.083377][T12351] hsr_slave_1: left promiscuous mode [ 1776.103276][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1776.130348][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.343219][T10433] Bluetooth: hci1: command 0x0419 tx timeout [ 1778.927450][ T5876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1778.963078][ T5876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1778.971842][ T5876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1778.991061][ T5876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1778.999938][ T5876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1779.347581][T12351] team0 (unregistering): Port device team_slave_1 removed [ 1779.627132][T12351] team0 (unregistering): Port device team_slave_0 removed [ 1780.947537][T19045] input: syz0 as /devices/virtual/input/input21 [ 1781.106883][ T5876] Bluetooth: hci6: command tx timeout [ 1783.199062][ T5876] Bluetooth: hci6: command tx timeout [ 1784.621739][T18906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.652707][T18906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.691582][T18906] bridge_slave_0: entered allmulticast mode [ 1784.731869][T18906] bridge_slave_0: entered promiscuous mode [ 1784.767447][T18906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.915205][T18906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.943442][T18906] bridge_slave_1: entered allmulticast mode [ 1784.965216][T18906] bridge_slave_1: entered promiscuous mode [ 1785.273744][ T5876] Bluetooth: hci6: command tx timeout [ 1785.355991][T18906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1785.413704][T18906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1785.599893][T19081] netlink: 'syz.0.2822': attribute type 1 has an invalid length. [ 1785.646914][T19081] netlink: 'syz.0.2822': attribute type 1 has an invalid length. [ 1786.345036][T18906] team0: Port device team_slave_0 added [ 1786.470170][T18906] team0: Port device team_slave_1 added [ 1786.637059][T18906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1786.645167][T18906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1786.675007][T18906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.402958][ T5876] Bluetooth: hci6: command tx timeout [ 1787.683756][T18906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.690787][T18906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.741273][T18906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.684107][T18906] hsr_slave_0: entered promiscuous mode [ 1789.701804][T18906] hsr_slave_1: entered promiscuous mode [ 1789.993664][T19118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1790.471470][T19030] chnl_net:caif_netlink_parms(): no params data found [ 1791.129580][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.137149][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.266635][T19030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.415507][T19030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.563055][T19030] bridge_slave_0: entered allmulticast mode [ 1792.571151][T19030] bridge_slave_0: entered promiscuous mode [ 1792.929106][T19030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.963976][T19030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.971331][T19030] bridge_slave_1: entered allmulticast mode [ 1793.523154][T19030] bridge_slave_1: entered promiscuous mode [ 1794.084109][T12351] bridge_slave_1: left allmulticast mode [ 1794.091177][T12351] bridge_slave_1: left promiscuous mode [ 1794.146081][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.160383][T19174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1794.203407][T12351] bridge_slave_0: left allmulticast mode [ 1794.209465][T12351] bridge_slave_0: left promiscuous mode [ 1794.217264][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.893866][T12351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1797.974256][T12351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1797.990956][T12351] bond0 (unregistering): Released all slaves [ 1798.600225][T19030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.629378][T12351] hsr_slave_0: left promiscuous mode [ 1798.642532][T12351] hsr_slave_1: left promiscuous mode [ 1798.659469][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1798.679969][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.908021][T12351] veth1_vlan: left promiscuous mode [ 1798.927648][T12351] veth0_vlan: left promiscuous mode [ 1800.718917][T19206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1801.047436][T19213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1801.359038][T12351] team0 (unregistering): Port device team_slave_1 removed [ 1801.920274][T12351] team0 (unregistering): Port device team_slave_0 removed [ 1805.661797][T19232] ubi31: attaching mtd0 [ 1805.686926][T19232] ubi31: scanning is finished [ 1806.320367][T19232] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1806.952608][T19030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.083109][T19219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1809.739600][T19030] team0: Port device team_slave_0 added [ 1809.768287][T19030] team0: Port device team_slave_1 added [ 1810.336166][T19030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1810.466010][T19030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1811.392307][T19030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1811.643473][T19030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1811.652363][T19030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1811.720146][T19030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1812.162721][T19283] ubi31: attaching mtd0 [ 1812.188386][T19283] ubi31: scanning is finished [ 1812.868928][T19283] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1813.258878][T19030] hsr_slave_0: entered promiscuous mode [ 1813.289533][T19030] hsr_slave_1: entered promiscuous mode [ 1813.313358][T19030] debugfs: 'hsr0' already exists in 'hsr' [ 1813.327855][T19030] Cannot create hsr debugfs directory [ 1814.651368][T18906] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1814.706325][T18906] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1814.975247][T18387] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1815.681807][T18906] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1815.832986][T18387] usb 7-1: Using ep0 maxpacket: 32 [ 1815.852322][T18906] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1815.881719][T18387] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 1815.934543][T18387] usb 7-1: config 0 has no interface number 0 [ 1815.940693][T18387] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1816.002093][T18387] usb 7-1: config 0 interface 126 has no altsetting 0 [ 1816.033602][T18387] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1816.103383][T18387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.125374][T18387] usb 7-1: Product: syz [ 1816.307271][T18387] usb 7-1: Manufacturer: syz [ 1816.323098][T18387] usb 7-1: SerialNumber: syz [ 1816.350860][T18387] usb 7-1: config 0 descriptor?? [ 1816.366693][T19301] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1816.604283][T18387] ir_usb 7-1:0.126: required endpoints missing [ 1816.776825][T18387] usb 7-1: USB disconnect, device number 12 [ 1817.858512][T18906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.702518][T18906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1819.044125][T12446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.051321][T12446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1819.118352][T19347] ubi31: attaching mtd0 [ 1819.143048][T19347] ubi31: scanning is finished [ 1819.755056][T12446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.762237][T12446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1819.869768][T19347] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1821.091132][T19030] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1821.138110][T19030] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1821.194813][T19030] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1821.305377][T19030] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1822.195978][T18906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.845611][T19030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.005639][T19030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.085699][T12446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.092919][T12446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.185319][T12446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.192500][T12446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.383763][T19398] loop7: detected capacity change from 0 to 2048 [ 1824.424408][T19398] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1824.446939][T19398] NILFS (loop7): too large checkpoint size: 1741 bytes [ 1824.454865][T19398] NILFS (loop7): error -22 while loading super root [ 1824.693159][T19404] trusted_key: encrypted_key: keylen parameter is missing [ 1824.704320][T19030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1825.203274][T19220] udevd[19220]: incorrect nilfs2 checksum on /dev/loop7 [ 1827.718073][T19424] ubi31: attaching mtd0 [ 1827.743267][T19424] ubi31: scanning is finished [ 1828.391988][T19424] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1828.561798][T10433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1828.574509][T19030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.581969][T10433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1828.593675][T10433] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1828.613261][T10433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1828.624911][T10433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1830.200658][T19454] loop6: detected capacity change from 0 to 2048 [ 1830.275970][T19454] msdos: Unknown parameter 'msdos' [ 1830.787332][T10433] Bluetooth: hci1: command tx timeout [ 1831.325711][T19464] loop6: detected capacity change from 0 to 2048 [ 1831.400342][T19442] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1831.413210][T19464] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1831.433201][T19464] NILFS (loop6): too large checkpoint size: 1741 bytes [ 1831.440288][T19464] NILFS (loop6): error -22 while loading super root [ 1831.681533][T19220] udevd[19220]: incorrect nilfs2 checksum on /dev/loop6 [ 1832.261005][T19472] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1832.776185][T19030] veth0_vlan: entered promiscuous mode [ 1832.861538][T19428] chnl_net:caif_netlink_parms(): no params data found [ 1832.873155][T10433] Bluetooth: hci1: command tx timeout [ 1833.217595][T19167] bridge_slave_1: left allmulticast mode [ 1833.229341][T19167] bridge_slave_1: left promiscuous mode [ 1833.250892][T19167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.311339][T19167] bridge_slave_0: left allmulticast mode [ 1833.326434][T19167] bridge_slave_0: left promiscuous mode [ 1833.345150][T19167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.579615][T19476] loop0: detected capacity change from 0 to 512 [ 1833.643773][T19476] EXT4-fs: Ignoring removed mblk_io_submit option [ 1833.762671][T19476] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1833.842389][T19476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 1833.866004][T19476] System zones: 1-12 [ 1833.874502][T19476] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2894: corrupted in-inode xattr: e_value size too large [ 1834.023652][T19476] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2894: couldn't read orphan inode 15 (err -117) [ 1834.113009][T19476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1834.261618][T10433] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1834.583359][T19487] trusted_key: encrypted_key: keylen parameter is missing [ 1834.943054][T10433] Bluetooth: hci1: command tx timeout [ 1835.981342][T19167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1836.062496][T19167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1836.075825][T19167] bond0 (unregistering): Released all slaves [ 1836.966613][T19030] veth1_vlan: entered promiscuous mode [ 1837.023039][T10433] Bluetooth: hci1: command tx timeout [ 1837.050165][T19167] hsr_slave_0: left promiscuous mode [ 1837.057655][T19167] hsr_slave_1: left promiscuous mode [ 1837.071261][T19167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1837.101577][ T5861] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /572/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1837.142256][T19167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1837.174189][ T5861] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1837.269826][ T5861] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /572/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1837.334407][ T5861] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1837.459364][ T5861] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /572/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1837.572444][ T5861] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1837.719669][ T5861] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /572/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1837.889032][ T5861] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1838.073608][ T5861] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 18: comm syz-executor: path /572/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 1838.175314][ T5861] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 1838.640558][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1838.660799][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1838.673174][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1838.699575][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1838.720153][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1839.941187][T19509] loop7: detected capacity change from 0 to 32768 [ 1839.949494][T19167] team0 (unregistering): Port device team_slave_1 removed [ 1840.168026][T19167] team0 (unregistering): Port device team_slave_0 removed [ 1840.310807][T19509] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names [ 1840.310838][T19509] allowing incompatible features above 0.0: (unknown version) [ 1840.310853][T19509] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1840.461334][T10732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.512465][T19509] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 1840.571999][T19509] bcachefs (loop7): recovering from clean shutdown, journal seq 14 [ 1840.580753][T19509] bcachefs (loop7): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 1840.580753][T19509] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 1840.682134][T19509] bcachefs (loop7): accounting_read... done [ 1840.706315][T19509] bcachefs (loop7): alloc_read... done [ 1840.718469][T19509] bcachefs (loop7): snapshots_read... done [ 1840.729795][T19509] bcachefs (loop7): check_allocations... [ 1840.731811][T19509] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap [ 1840.731833][T19509] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 18efb381d2ec84b2 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 1840.783433][ T5876] Bluetooth: hci5: command tx timeout [ 1840.785026][T19509] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap [ 1840.812942][T19509] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq eb946090a3e301b5 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 1840.888152][T19509] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap [ 1840.888178][T19509] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1b163e2cac54a139 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 1840.918103][T19509] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap [ 1840.918128][T19509] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c59150a5cc8748d6 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 1840.966255][T19509] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap [ 1840.966293][T19509] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2e86b5535b69cce2 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 1841.070207][T19509] bcachefs (loop7): btree ptr not marked in member info btree allocated bitmap [ 1841.070226][T19509] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq af1b2a109e85bae1 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 1841.189417][T19509] done [ 1841.226055][T19509] bcachefs (loop7): going read-write [ 1841.275906][T19509] bcachefs (loop7): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 1841.287852][T19509] bcachefs (loop7): flushing journal and stopping allocators, journal seq 14 [ 1841.298756][T19509] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 14 [ 1841.331298][T19509] bcachefs (loop7): unclean shutdown complete, journal seq 15 [ 1841.341522][T19509] bcachefs (loop7): error in recovery: EINTR [ 1841.341538][T19509] emergency read only at seq 15 [ 1841.370837][T19509] bcachefs (loop7): bch2_fs_start(): error starting filesystem EINTR [ 1841.403402][T19509] bcachefs (loop7): shutting down [ 1841.477389][T19509] bcachefs (loop7): shutdown complete [ 1841.905699][T19515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1842.129354][T19428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.142568][T19428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.327067][T19428] bridge_slave_0: entered allmulticast mode [ 1842.335343][T19428] bridge_slave_0: entered promiscuous mode [ 1843.113468][ T5876] Bluetooth: hci5: command tx timeout [ 1843.134339][T19428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1843.203066][T19428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.210344][T19428] bridge_slave_1: entered allmulticast mode [ 1843.281953][T19428] bridge_slave_1: entered promiscuous mode [ 1843.574044][T19428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1843.690210][T19428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1844.059873][T19428] team0: Port device team_slave_0 added [ 1844.098641][T19428] team0: Port device team_slave_1 added [ 1844.503488][T19428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1844.510560][T19428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1844.543571][T19428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1844.557014][T19428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1844.565468][T19428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1844.604435][T19428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1845.193899][ T5876] Bluetooth: hci5: command tx timeout [ 1845.609174][T10433] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1845.628817][T10433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1845.638366][T10433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1845.651460][T10433] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1845.664164][T10433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1846.323708][T19509] bcachefs: bch2_fs_get_tree() error: EINTR [ 1846.505681][T19428] hsr_slave_0: entered promiscuous mode [ 1846.512522][T19428] hsr_slave_1: entered promiscuous mode [ 1847.314195][T10433] Bluetooth: hci5: command tx timeout [ 1847.743123][T10433] Bluetooth: hci0: command tx timeout [ 1847.787734][T19564] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1848.052714][T19510] chnl_net:caif_netlink_parms(): no params data found [ 1848.507402][T19570] ubi31: attaching mtd0 [ 1848.532915][T19570] ubi31: scanning is finished [ 1849.615784][T19570] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1849.822993][T10433] Bluetooth: hci0: command tx timeout [ 1851.496566][T19510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.537124][T19510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.583396][T19510] bridge_slave_0: entered allmulticast mode [ 1851.675247][T19510] bridge_slave_0: entered promiscuous mode [ 1851.729917][T19510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.772888][T19510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.780262][T19510] bridge_slave_1: entered allmulticast mode [ 1851.827494][T19510] bridge_slave_1: entered promiscuous mode [ 1851.903393][T10433] Bluetooth: hci0: command tx timeout [ 1852.096318][T19595] loop7: detected capacity change from 0 to 32768 [ 1852.379874][T19510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1852.469110][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.475817][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.610330][T19510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1852.640172][T19167] bridge_slave_1: left allmulticast mode [ 1852.650982][T19167] bridge_slave_1: left promiscuous mode [ 1852.655078][T19595] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=compression=zstd,erasure_code,wide_macs,nojournal_transaction_names [ 1852.657077][T19167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.719534][T19167] bridge_slave_0: left allmulticast mode [ 1852.722341][T19595] allowing incompatible features above 0.0: (unknown version) [ 1852.732375][T19167] bridge_slave_0: left promiscuous mode [ 1852.739203][T19167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.753384][T19595] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1852.978575][T19595] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 1852.986967][T19595] bcachefs (loop7): recovering from clean shutdown, journal seq 14 [ 1852.995044][T19595] bcachefs (loop7): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 1852.995044][T19595] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 1854.016974][T10433] Bluetooth: hci0: command tx timeout [ 1854.035589][T19595] syz.7.2923: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1854.105352][T19595] CPU: 0 UID: 0 PID: 19595 Comm: syz.7.2923 Not tainted syzkaller #0 PREEMPT(full) [ 1854.105388][T19595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1854.105405][T19595] Call Trace: [ 1854.105415][T19595] [ 1854.105426][T19595] dump_stack_lvl+0x189/0x250 [ 1854.105468][T19595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1854.105499][T19595] ? __pfx__printk+0x10/0x10 [ 1854.105536][T19595] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1854.105567][T19595] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1854.105599][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.105628][T19595] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1854.105661][T19595] warn_alloc+0x214/0x310 [ 1854.105708][T19595] ? __pfx_warn_alloc+0x10/0x10 [ 1854.105755][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.105784][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.105812][T19595] ? __get_vm_area_node+0x28f/0x300 [ 1854.105848][T19595] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 1854.105894][T19595] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1854.105960][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.105988][T19595] ? alloc_pages_mpol+0x3cd/0x4a0 [ 1854.106027][T19595] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1854.106070][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.106098][T19595] ? rcu_is_watching+0x15/0xb0 [ 1854.106126][T19595] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 1854.106165][T19595] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 1854.106202][T19595] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 1854.106239][T19595] ? bch2_fs_journal_start+0x2b4/0x12b0 [ 1854.106296][T19595] bch2_fs_journal_start+0x2b4/0x12b0 [ 1854.106356][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.106388][T19595] ? bch2_journal_log_msg+0xd9/0x120 [ 1854.106417][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.106447][T19595] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 1854.106487][T19595] ? __pfx_bch2_journal_log_msg+0x10/0x10 [ 1854.106516][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.106544][T19595] ? bch2_fs_resize_on_mount+0x404/0x4d0 [ 1854.106592][T19595] bch2_fs_recovery+0x2298/0x3a50 [ 1854.106645][T19595] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 1854.106682][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.106716][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.106744][T19595] ? __lock_acquire+0xab9/0xd20 [ 1854.106791][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.106820][T19595] ? __mutex_trylock_common+0x153/0x260 [ 1854.106853][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.106882][T19595] ? __lock_acquire+0xab9/0xd20 [ 1854.106930][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.106958][T19595] ? __lock_acquire+0xab9/0xd20 [ 1854.107020][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.107052][T19595] ? bch2_fs_start+0xa0f/0xda0 [ 1854.107089][T19595] ? up_write+0x1c4/0x420 [ 1854.107115][T19595] ? bch2_fs_start+0x5e7/0xda0 [ 1854.107152][T19595] bch2_fs_start+0xaaf/0xda0 [ 1854.107188][T19595] ? bch2_fs_start+0x5e7/0xda0 [ 1854.107225][T19595] ? __pfx_bch2_fs_start+0x10/0x10 [ 1854.107289][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.107317][T19595] ? sget+0x267/0x620 [ 1854.107355][T19595] bch2_fs_get_tree+0xb39/0x1520 [ 1854.107421][T19595] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 1854.107484][T19595] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1854.107528][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.107561][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.107594][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.107627][T19595] vfs_get_tree+0x92/0x2b0 [ 1854.107666][T19595] do_new_mount+0x2a2/0x9e0 [ 1854.107708][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.107737][T19595] ? ns_capable+0x8a/0xf0 [ 1854.107762][T19595] ? __pfx_do_new_mount+0x10/0x10 [ 1854.107797][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.107825][T19595] ? path_mount+0x61c/0xfe0 [ 1854.107859][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.107902][T19595] __se_sys_mount+0x317/0x410 [ 1854.107948][T19595] ? __pfx___se_sys_mount+0x10/0x10 [ 1854.107984][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.108021][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.108050][T19595] ? __x64_sys_mount+0x20/0xc0 [ 1854.108091][T19595] do_syscall_64+0xfa/0x3b0 [ 1854.108118][T19595] ? lockdep_hardirqs_on+0x9c/0x150 [ 1854.108143][T19595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.108167][T19595] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1854.108196][T19595] ? exc_page_fault+0x9f/0xf0 [ 1854.108223][T19595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.108248][T19595] RIP: 0033:0x7fcbdab9034a [ 1854.108270][T19595] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1854.108297][T19595] RSP: 002b:00007fcbdb9f7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1854.108324][T19595] RAX: ffffffffffffffda RBX: 00007fcbdb9f7ef0 RCX: 00007fcbdab9034a [ 1854.108344][T19595] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 00007fcbdb9f7eb0 [ 1854.108363][T19595] RBP: 00002000000000c0 R08: 00007fcbdb9f7ef0 R09: 0000000000000000 [ 1854.108381][T19595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100 [ 1854.108397][T19595] R13: 00007fcbdb9f7eb0 R14: 0000000000011876 R15: 0000200000000300 [ 1854.108436][T19595] [ 1854.736366][T19595] Mem-Info: [ 1854.740383][T19595] active_anon:14477 inactive_anon:0 isolated_anon:0 [ 1854.740383][T19595] active_file:18056 inactive_file:40752 isolated_file:0 [ 1854.740383][T19595] unevictable:768 dirty:138 writeback:0 [ 1854.740383][T19595] slab_reclaimable:12518 slab_unreclaimable:109411 [ 1854.740383][T19595] mapped:36666 shmem:7821 pagetables:1496 [ 1854.740383][T19595] sec_pagetables:0 bounce:0 [ 1854.740383][T19595] kernel_misc_reclaimable:0 [ 1854.740383][T19595] free:1267156 free_pcp:21822 free_cma:0 [ 1854.857431][T19595] Node 0 active_anon:63008kB inactive_anon:0kB active_file:72224kB inactive_file:162804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151664kB dirty:552kB writeback:0kB shmem:34648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13400kB pagetables:5960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1854.925026][T19595] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1854.955712][T19595] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1854.998546][T19595] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 1855.011177][T19595] Node 0 DMA32 free:1184776kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63060kB inactive_anon:0kB active_file:72224kB inactive_file:161228kB unevictable:1536kB writepending:548kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:41896kB local_pcp:34172kB free_cma:0kB [ 1855.107622][T19595] lowmem_reserve[]: 0 0 1 1 1 [ 1855.140657][T19595] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1855.223257][T19595] lowmem_reserve[]: 0 0 0 0 0 [ 1855.228034][T19595] Node 1 Normal free:3868376kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:41396kB local_pcp:18340kB free_cma:0kB [ 1855.333735][T19595] lowmem_reserve[]: 0 0 0 0 0 [ 1855.338528][T19595] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1855.352032][T19595] Node 0 DMA32: 242*4kB (UME) 180*8kB (UME) 211*16kB (UME) 170*32kB (ME) 87*64kB (ME) 89*128kB (UME) 135*256kB (UM) 51*512kB (UME) 19*1024kB (UM) 7*2048kB (M) 260*4096kB (M) = 1187608kB [ 1855.387897][T19595] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1855.475636][T19595] Node 1 Normal: 234*4kB (UE) 58*8kB (UME) 46*16kB (UME) 106*32kB (UME) 35*64kB (UME) 11*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 4*2048kB (UE) 939*4096kB (M) = 3868376kB [ 1855.597562][T19595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.673138][T19595] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1855.687143][T19595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1855.880080][T19595] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1855.893045][T19595] 64936 total pagecache pages [ 1855.897917][T19595] 0 pages in swap cache [ 1855.920465][T19595] Free swap = 124996kB [ 1855.924903][T19595] Total swap = 124996kB [ 1855.929249][T19595] 2097051 pages RAM [ 1855.933882][T19595] 0 pages HighMem/MovableOnly [ 1855.939087][T19595] 425672 pages reserved [ 1855.979690][T19595] 0 pages cma reserved [ 1856.104044][T19595] bcachefs (loop7): error reallocating journal fifo (32768 open entries) [ 1856.114094][T19595] bcachefs (loop7): error in recovery: ENOMEM_journal_pin_fifo [ 1856.114147][T19595] emergency read only at seq 0 [ 1856.136899][T19595] bcachefs (loop7): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 1856.162560][T19595] bcachefs (loop7): shutting down [ 1856.253248][T19595] bcachefs (loop7): shutdown complete [ 1856.558328][T19167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1856.617179][T19167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1856.643163][T19167] bond0 (unregistering): Released all slaves [ 1856.991261][T19167] hsr_slave_0: left promiscuous mode [ 1857.009492][T19167] hsr_slave_1: left promiscuous mode [ 1857.034060][T19167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1857.053819][T19167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1857.135014][T19167] veth1_vlan: left promiscuous mode [ 1857.140431][T19167] veth0_vlan: left promiscuous mode [ 1857.406089][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2930'. [ 1858.413941][T19595] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 1859.023806][T19167] team0 (unregistering): Port device team_slave_1 removed [ 1859.277300][T19167] team0 (unregistering): Port device team_slave_0 removed [ 1859.793040][ T9615] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1859.984805][ T9615] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1859.996630][ T9615] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1860.020416][ T9615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.050074][ T9615] usb 7-1: config 0 descriptor?? [ 1860.136807][ T9615] pwc: Askey VC010 type 2 USB webcam detected. [ 1860.517995][ T9615] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1860.525648][ T9615] pwc: recv_control_msg error -32 req 02 val 2700 [ 1860.533057][ T9615] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1860.540639][ T9615] pwc: recv_control_msg error -32 req 04 val 1000 [ 1860.557704][ T9615] pwc: recv_control_msg error -32 req 04 val 1300 [ 1860.570382][ T9615] pwc: recv_control_msg error -32 req 04 val 1400 [ 1860.578460][ T9615] pwc: recv_control_msg error -32 req 02 val 2000 [ 1860.588630][ T9615] pwc: recv_control_msg error -32 req 02 val 2100 [ 1860.604436][ T9615] pwc: recv_control_msg error -32 req 04 val 1500 [ 1860.611690][ T9615] pwc: recv_control_msg error -32 req 02 val 2500 [ 1860.619452][ T9615] pwc: recv_control_msg error -32 req 02 val 2400 [ 1860.627165][ T9615] pwc: recv_control_msg error -32 req 02 val 2600 [ 1860.634956][ T9615] pwc: recv_control_msg error -32 req 02 val 2900 [ 1860.780171][T19510] team0: Port device team_slave_0 added [ 1860.788457][T19551] chnl_net:caif_netlink_parms(): no params data found [ 1860.843236][ T9615] pwc: recv_control_msg error -71 req 04 val 1100 [ 1860.854282][ T9615] pwc: recv_control_msg error -71 req 04 val 1200 [ 1860.870012][ T9615] pwc: Registered as video103. [ 1860.909376][ T9615] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 1860.910187][T19510] team0: Port device team_slave_1 added [ 1860.971535][ T9615] usb 7-1: USB disconnect, device number 13 [ 1861.173266][T19653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1861.750644][T19510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1861.880278][T19510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.102906][T19510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.193678][T19510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.200680][T19510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.289060][T19510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1863.112311][T19551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.136640][T19551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.161202][T19551] bridge_slave_0: entered allmulticast mode [ 1863.185771][T19551] bridge_slave_0: entered promiscuous mode [ 1863.229378][T19551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.236975][T19551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.244933][T19551] bridge_slave_1: entered allmulticast mode [ 1863.254169][T19551] bridge_slave_1: entered promiscuous mode [ 1863.801438][T19510] hsr_slave_0: entered promiscuous mode [ 1863.819127][T19510] hsr_slave_1: entered promiscuous mode [ 1863.838913][T19510] debugfs: 'hsr0' already exists in 'hsr' [ 1863.848401][T19510] Cannot create hsr debugfs directory [ 1863.879065][T19551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1863.912354][T19551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1864.098921][T19551] team0: Port device team_slave_0 added [ 1864.154393][T19551] team0: Port device team_slave_1 added [ 1864.266414][T19428] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1864.333367][T19428] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1864.362719][T19428] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1864.385425][T19551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1864.399195][T19551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1864.472947][T19551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1864.648051][T19428] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1864.671609][T19551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1864.709495][T19551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1864.770658][T19551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1865.129710][T19551] hsr_slave_0: entered promiscuous mode [ 1865.145744][T19551] hsr_slave_1: entered promiscuous mode [ 1865.163079][T19551] debugfs: 'hsr0' already exists in 'hsr' [ 1865.173739][T19551] Cannot create hsr debugfs directory [ 1865.255920][T19704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1865.319856][T19690] loop7: detected capacity change from 0 to 32768 [ 1865.345720][T19690] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2942 (19690) [ 1865.419902][T19690] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1865.467866][T19690] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1865.734045][T19723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2944'. [ 1865.763585][T19690] BTRFS info (device loop7): enabling ssd optimizations [ 1865.775207][T19690] BTRFS info (device loop7): enabling free space tree [ 1866.128860][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1866.128878][ T30] audit: type=1800 audit(1758097886.718:2372): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2942" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 1866.355698][ T30] audit: type=1804 audit(1758097886.938:2373): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2942" name="/newroot/131/file0/bus" dev="loop7" ino=263 res=1 errno=0 [ 1866.566441][ T30] audit: type=1804 audit(1758097886.938:2374): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2942" name="/newroot/131/file0/bus" dev="loop7" ino=263 res=1 errno=0 [ 1867.407068][T19428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1867.485778][T16628] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1867.855676][T19428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1867.914982][T10433] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1868.125594][T19103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.132729][T19103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1868.224272][T19103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.231506][T19103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1868.430816][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1868.802017][T19510] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1869.140953][T19744] pimreg: entered allmulticast mode [ 1869.150113][T19510] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1869.264743][T19510] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1869.313879][T19510] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1870.407929][T19760] loop7: detected capacity change from 0 to 128 [ 1870.443831][T19760] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1870.500442][T19760] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1870.529354][T19760] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1871.726984][T16628] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1871.926999][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1871.948816][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1871.963098][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1871.972330][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1871.989247][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1873.214291][T19510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1873.496160][T19428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1873.554587][T19795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2957'. [ 1873.642206][T19551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1874.029247][T19551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1874.073598][T10433] Bluetooth: hci3: command tx timeout [ 1874.297583][T19551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1874.450479][T19167] bridge_slave_1: left allmulticast mode [ 1874.502872][T19167] bridge_slave_1: left promiscuous mode [ 1874.525760][T19167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.575806][T19167] bridge_slave_0: left allmulticast mode [ 1874.581462][T19167] bridge_slave_0: left promiscuous mode [ 1874.609794][T19167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.143353][T10433] Bluetooth: hci3: command tx timeout [ 1876.523228][T14618] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1876.573973][T19167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.599881][T19167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.624518][T19167] bond0 (unregistering): Released all slaves [ 1876.657507][T19551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1876.673027][T14618] usb 7-1: Using ep0 maxpacket: 8 [ 1876.691714][T14618] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1876.789849][T19510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1876.793032][T14618] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1876.943017][T14618] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1876.961270][T14618] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1876.984078][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.991270][T12356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1877.037415][T14618] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1877.072856][T14618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.399444][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.406758][T12356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1877.425081][T14618] usb 7-1: GET_CAPABILITIES returned 0 [ 1877.430667][T14618] usbtmc 7-1:16.0: can't read capabilities [ 1878.235350][T10433] Bluetooth: hci3: command tx timeout [ 1879.705291][T17380] usb 7-1: USB disconnect, device number 14 [ 1879.797377][T19551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1879.920809][T19428] veth0_vlan: entered promiscuous mode [ 1880.083277][T19771] chnl_net:caif_netlink_parms(): no params data found [ 1880.296949][T19551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1880.316406][T10433] Bluetooth: hci3: command tx timeout [ 1880.459954][T19428] veth1_vlan: entered promiscuous mode [ 1880.624332][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1880.631577][ T6982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1880.679385][T19510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1881.236247][T12446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.243471][T12446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1881.497830][T19771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.541518][T19771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.597436][T19771] bridge_slave_0: entered allmulticast mode [ 1881.620032][T19771] bridge_slave_0: entered promiscuous mode [ 1881.695911][T19771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.715957][T19771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1881.733783][T19771] bridge_slave_1: entered allmulticast mode [ 1881.776015][T19771] bridge_slave_1: entered promiscuous mode [ 1882.155602][T19771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1882.168965][T19771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1882.295003][T19771] team0: Port device team_slave_0 added [ 1882.317643][T19428] veth0_macvtap: entered promiscuous mode [ 1882.340244][T19771] team0: Port device team_slave_1 added [ 1882.427694][T19428] veth1_macvtap: entered promiscuous mode [ 1882.436815][T19771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1882.444280][T19771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1882.472753][T19771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1882.486791][T19771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1882.494712][T19771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1882.525652][T19771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1882.599965][T19167] hsr_slave_0: left promiscuous mode [ 1882.607166][T19167] hsr_slave_1: left promiscuous mode [ 1882.615045][T19167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1882.623322][T19167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1883.031276][T19167] team0 (unregistering): Port device team_slave_1 removed [ 1883.079558][T19167] team0 (unregistering): Port device team_slave_0 removed [ 1883.581843][T19771] hsr_slave_0: entered promiscuous mode [ 1883.616103][T19771] hsr_slave_1: entered promiscuous mode [ 1883.622756][T19771] debugfs: 'hsr0' already exists in 'hsr' [ 1883.642632][T19771] Cannot create hsr debugfs directory [ 1883.671874][T19510] veth0_vlan: entered promiscuous mode [ 1883.784639][T19428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1883.798412][T19510] veth1_vlan: entered promiscuous mode [ 1883.855606][T19428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.019694][T12446] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.085464][T19103] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.111084][T19510] veth0_macvtap: entered promiscuous mode [ 1884.135742][T19551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1884.143694][T12446] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.150358][T19167] IPVS: stop unused estimator thread 0... [ 1884.198275][T12446] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.209687][T19510] veth1_macvtap: entered promiscuous mode [ 1884.390084][T19510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.604564][T12446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.612406][T12446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.650697][T19510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1884.691849][T12351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1884.713247][T12351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1884.779867][T12356] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.818754][T12356] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.845579][T12356] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1884.966690][T19551] veth0_vlan: entered promiscuous mode [ 1884.983733][T12446] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.140153][T19551] veth1_vlan: entered promiscuous mode [ 1885.367771][T19551] veth0_macvtap: entered promiscuous mode [ 1885.447200][T19551] veth1_macvtap: entered promiscuous mode [ 1885.477766][T19103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.505149][T19103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.588482][T19551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1885.691385][T19551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1885.905084][T19771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1885.916447][T19167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.952987][T19167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.960404][T19771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1886.016681][T19771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1886.062375][T12356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.081636][T12356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.275763][T19103] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.308571][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1886.321281][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1886.342572][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1886.350473][T19771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1886.359382][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1886.379445][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1886.394025][T12356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.437257][T19167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.564581][T19103] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.747857][T19103] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.870861][T19103] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.965876][T12351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1886.983788][T12351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1887.143879][T17545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1887.151736][T17545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1887.507446][T19771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1887.618305][T19771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1887.675919][T19103] bridge_slave_1: left allmulticast mode [ 1887.698522][T19103] bridge_slave_1: left promiscuous mode [ 1887.991747][T19103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1888.359193][T19103] bridge_slave_0: left allmulticast mode [ 1888.377724][T19103] bridge_slave_0: left promiscuous mode [ 1888.393613][T19103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1888.463897][T10433] Bluetooth: hci1: command tx timeout [ 1888.975435][T19103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1888.988372][T19103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1888.999121][T19103] bond0 (unregistering): Released all slaves [ 1889.056488][T12351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.063692][T12351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1889.107919][T12351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.115132][T12351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1889.266889][T19908] chnl_net:caif_netlink_parms(): no params data found [ 1889.520551][T19103] hsr_slave_0: left promiscuous mode [ 1889.526988][T19103] hsr_slave_1: left promiscuous mode [ 1889.538851][T19103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1889.547350][T19103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1889.555967][T19103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1889.571590][T19103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1889.623960][T19103] veth1_macvtap: left promiscuous mode [ 1889.629544][T19103] veth0_macvtap: left promiscuous mode [ 1889.642557][T19103] veth1_vlan: left promiscuous mode [ 1889.648096][T19103] veth0_vlan: left promiscuous mode [ 1890.299147][T19103] team0 (unregistering): Port device team_slave_1 removed [ 1890.343175][T19103] team0 (unregistering): Port device team_slave_0 removed [ 1890.543246][T10433] Bluetooth: hci1: command tx timeout [ 1890.840481][T19908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.848589][T19908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.856486][T19908] bridge_slave_0: entered allmulticast mode [ 1890.867319][T19908] bridge_slave_0: entered promiscuous mode [ 1890.893830][T19908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.910630][T19908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.932711][T19908] bridge_slave_1: entered allmulticast mode [ 1890.941815][T19908] bridge_slave_1: entered promiscuous mode [ 1891.040969][T19908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1891.081362][T19908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1891.234152][T19908] team0: Port device team_slave_0 added [ 1891.247853][T19908] team0: Port device team_slave_1 added [ 1891.352604][T19908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1891.373132][T19908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1891.399169][T19908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1891.424988][T19908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1891.446936][T19908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1891.474266][T19908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1891.529563][T19771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.611038][T19908] hsr_slave_0: entered promiscuous mode [ 1891.624878][T19908] hsr_slave_1: entered promiscuous mode [ 1891.789519][T19771] veth0_vlan: entered promiscuous mode [ 1891.822702][T19771] veth1_vlan: entered promiscuous mode [ 1892.040163][T19771] veth0_macvtap: entered promiscuous mode [ 1892.060906][T19771] veth1_macvtap: entered promiscuous mode [ 1892.127876][T19771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1892.166709][T19771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1892.211494][ T6982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.239179][ T6982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.277504][ T6982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.289766][T12356] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.500596][T12356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.531723][T12356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.611000][T19908] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1892.623766][T10433] Bluetooth: hci1: command tx timeout [ 1892.648321][T19908] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1892.671610][T19103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.679178][T19908] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1892.689988][T19103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.702317][T19908] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1893.041406][T19908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1893.171871][T19908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1893.218849][T19103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1893.226117][T19103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1893.305218][T19103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1893.312397][T19103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1894.170325][T19908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1894.660097][T19908] veth0_vlan: entered promiscuous mode [ 1894.677430][T19908] veth1_vlan: entered promiscuous mode [ 1894.704464][T10433] Bluetooth: hci1: command tx timeout [ 1894.771002][T19908] veth0_macvtap: entered promiscuous mode [ 1894.809698][T19908] veth1_macvtap: entered promiscuous mode [ 1894.840830][T19908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1894.856643][T19908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1894.896429][T12351] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.912386][T12351] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.928998][T12351] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.969679][T12351] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.112488][T12446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.150955][T12446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.218237][ T6982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.231818][ T6982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.919572][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1913.927915][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1962.063255][ T5876] Bluetooth: hci5: command 0x0406 tx timeout [ 1972.303404][T10433] Bluetooth: hci0: command 0x0406 tx timeout [ 1975.348949][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.355547][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1997.903231][T20416] Bluetooth: hci3: command 0x0406 tx timeout [ 2013.263037][T20416] Bluetooth: hci1: command 0x0406 tx timeout [ 2036.791928][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2036.799511][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.228371][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.235052][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2159.667199][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2159.678087][ T1300] ieee802154 phy1 wpan1: encryption failed: -22