last executing test programs: 2m35.710814198s ago: executing program 4 (id=74): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4810, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="f1e5ca4c5480ba330c4fa7236fdaa2484e6ca93e8009caee410da97394c04c07084f36aacfb1163b6fc130a0a379a44bccd1e4638985aceb5b720578e9b84a17fc7d32d0ed230b6fa732"], 0x11, 0x6a0, &(0x7f0000004200)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 2m33.523366094s ago: executing program 4 (id=78): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x3920e, r0, 0x5, 0x1, 0x9000000, 0x6}) 2m32.543022776s ago: executing program 4 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x1}}, 0x18) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)}, 0x0) 2m31.177455009s ago: executing program 4 (id=85): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f00000007c0)={[{@nodecompose}, {@creator={'creator', 0x3d, "5a1b3b9a"}}, {@nobarrier}, {@nobarrier}, {@gid}, {@creator={'creator', 0x3d, "07680f51"}}, {@nls={'nls', 0x3d, 'ascii'}}]}, 0x44, 0x718, &(0x7f00000011c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 2m28.265629511s ago: executing program 4 (id=90): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f00000001c0)={&(0x7f0000002140)=[0x7f, 0xfffffeb9, 0xb, 0x74fb, 0x3, 0x7, 0x40, 0x1, 0x0, 0x3, 0x8818, 0x8, 0x0, 0x5, 0x5, 0x8, 0x7fff, 0xf, 0x2, 0x8, 0x4, 0x8, 0x0, 0x8, 0x4, 0x6, 0x2, 0x5, 0xa2b, 0xf, 0x8, 0x275, 0x7, 0x9, 0x1ada, 0x3, 0x55da, 0x2, 0x7, 0x9, 0xb, 0x3, 0xc7, 0x400, 0xff, 0x80, 0x0, 0x6, 0x9, 0x8, 0x1, 0x101, 0xa00, 0x5, 0x5a, 0xfffffff7, 0x4, 0x4, 0x8, 0x10, 0x8, 0x9, 0xa, 0x1, 0xe, 0x8, 0x800000, 0x9, 0x401, 0x40, 0x100, 0x4, 0xa3, 0x8, 0x7ff, 0x9, 0xff, 0x48, 0x4, 0x4, 0x6, 0x9a, 0x6, 0x9, 0x5, 0xb, 0x9, 0x1, 0x12, 0xbd1, 0x8000, 0x2, 0x2dd, 0x0, 0x2, 0x7392, 0x8000, 0x4, 0x0, 0x4, 0x1, 0x15000, 0x3, 0x0, 0x101, 0x1, 0x6, 0x1, 0x80000000, 0x2, 0x3, 0xffffffff, 0x903, 0x1, 0x7, 0x1ff, 0x3, 0x9, 0x6, 0x285a3789, 0x1, 0x350, 0x2e, 0x3, 0x0, 0x2, 0x0, 0x1ff, 0x8, 0xffff7d37, 0x8000, 0x8, 0x7ff, 0x2, 0x1ff, 0x80000001, 0x8, 0x8, 0x0, 0xbdda, 0x7ff, 0x1, 0x0, 0x101, 0x10001, 0x3, 0x6, 0x44, 0x8, 0x0, 0x0, 0x5, 0x2, 0x9, 0x0, 0xf7f, 0xfffffffd, 0x4, 0xf0, 0x6, 0x9, 0xa, 0x7, 0x7, 0x800, 0xed79, 0x4, 0x5, 0x4, 0x10000, 0x7f, 0x4, 0x6, 0x10000, 0x52b, 0x7f, 0x5, 0x7b04, 0xffffffff, 0x9, 0x8000, 0x2, 0xfffffffa, 0x16, 0x2, 0xffffffff, 0x6, 0x441f, 0x0, 0x4, 0x72b, 0x100, 0xffffffff, 0x4, 0x736, 0x4, 0x829, 0xb10, 0xb, 0x3, 0x1, 0x2, 0x1, 0x400, 0x4352522b, 0x4, 0x9dd2, 0x10001, 0x1, 0x8, 0xffffffff, 0xa, 0x1767, 0xd6, 0xb, 0x7b, 0x3, 0x6, 0x0, 0xffffffff, 0x200, 0x5, 0x78d7, 0x991c, 0xfffffff0, 0x10001, 0x9, 0x7ff, 0x7ff, 0x3, 0x6, 0x0, 0x3, 0x2, 0x3, 0x6, 0xffff, 0x3, 0xc, 0x0, 0x8001, 0x7ff, 0x6, 0x6, 0x9, 0x400, 0xe, 0x9, 0xffffffff, 0x0, 0x9, 0x2, 0x2, 0xffffffba, 0x1, 0x6, 0x6, 0xe, 0x8, 0x8000, 0x401, 0x7, 0x7, 0x7, 0x75458d08, 0x73, 0x0, 0x5, 0x2eaf, 0x8, 0x2, 0xfffffffd, 0x5, 0x1, 0xb03f, 0xcb, 0x1, 0x5677, 0x10, 0x1, 0xd, 0xe602, 0xb2, 0x2, 0x6, 0xc, 0x34000000, 0x5, 0x0, 0x0, 0x6, 0x79a4, 0x3, 0x5, 0x9, 0x8, 0x4, 0x528340cd, 0x4, 0xaf, 0x0, 0xfffffff9, 0x8, 0x7, 0x2, 0x8, 0x9, 0x6, 0x7, 0xb6, 0x4, 0x400, 0x2, 0x81, 0x8, 0x8, 0x7f, 0x5, 0x1, 0x3, 0x401, 0x27, 0x80, 0x7f, 0x5, 0x3, 0x6, 0x1, 0x1, 0x6, 0xe, 0x2, 0x2, 0xfffffffc, 0x5b, 0x7, 0x6, 0xffff, 0xc, 0xfffffff9, 0x9, 0x11, 0x3776, 0x7fffffff, 0x5, 0x1, 0x1, 0x80, 0x8000, 0xffff, 0xded, 0x0, 0x6, 0x5a61, 0x3, 0x5, 0x1, 0x2a5, 0x80, 0x4, 0x4, 0xa, 0x200, 0xb, 0xd, 0xef, 0x401, 0xb8, 0x6, 0x7, 0x40, 0x4, 0x680, 0x7, 0x101, 0x3, 0x7, 0xd7, 0x8000000, 0xffff8001, 0x9, 0x9, 0x33, 0x8001, 0x7, 0x5b, 0x2, 0x8, 0xfd, 0x1000, 0x401, 0xdc27, 0x80, 0x8, 0x5, 0xfffff800, 0x3, 0x100, 0x3, 0x1, 0xbf, 0x1, 0x4825, 0x4, 0xb5a, 0x6, 0x5, 0x1, 0xffffff72, 0x133f9e25, 0x6, 0x0, 0x20, 0x8001, 0x2, 0x0, 0x7, 0x3, 0xffff9e47, 0xfffffff7, 0x4, 0x7, 0x800, 0x3, 0x5, 0x4, 0x400, 0x8, 0x3, 0x1, 0x3, 0x9, 0x7, 0x10000, 0x9, 0x0, 0x3, 0x7c, 0x7, 0x5, 0xffffffff, 0xffffff80, 0x0, 0xfffffffc, 0x1ff, 0x7, 0x1, 0x0, 0x0, 0x100, 0x7ff, 0x8, 0x62eb, 0x1, 0x401, 0x4, 0x39c, 0x7, 0x1, 0x0, 0x5333, 0x9, 0xd, 0x800, 0xfffffff9, 0x1, 0x5, 0xfffffff9, 0x80000001, 0x2, 0x7, 0xf, 0x6, 0x3, 0x401, 0x1, 0x2, 0x2, 0x100, 0x2, 0x1c, 0x9, 0x5, 0x3f83, 0x0, 0x401, 0x5, 0x1, 0x3, 0x4, 0x9, 0xfff, 0xf, 0x5, 0x5, 0x1, 0x2, 0x5, 0x9, 0x2, 0x62, 0x7f839178, 0x3, 0x9, 0x9, 0x5, 0x80000001, 0x800, 0xfffffff6, 0x0, 0x9, 0x1, 0x4, 0x5, 0xa, 0x7, 0x7, 0x2, 0x5, 0x54000, 0x1ff, 0x12, 0xf, 0x1ff, 0xfff, 0x2, 0x401, 0x1fb, 0x24, 0x5, 0x0, 0x0, 0x1, 0x1, 0x6, 0x7, 0x800, 0xdb, 0x0, 0xb, 0x80, 0x1000, 0x9, 0x7, 0x4, 0x9, 0x83, 0x1, 0xfffffffb, 0x5, 0x7, 0xd0, 0x10, 0x6, 0x0, 0x400, 0x7, 0x16c, 0x7, 0x2, 0x5d, 0xfffffff8, 0x5, 0x80000001, 0xa65, 0x1, 0x7, 0x5, 0x9, 0x4, 0x1ff, 0x2, 0x3ff, 0x4, 0x7fff, 0x7f, 0x8, 0x400010, 0x8, 0x1400, 0xcb, 0x2, 0x6, 0xfffffffa, 0xd, 0x8000, 0x8, 0xd, 0x8, 0x200, 0x8, 0x3, 0x7, 0x2, 0x40, 0x1, 0x4f5d, 0x8001, 0xa, 0x3, 0x9238, 0x8, 0x7, 0x2, 0x5, 0x9, 0x40, 0xa, 0x4, 0x9, 0xffffffff, 0x9, 0x0, 0x9, 0x3, 0x1ff, 0x8, 0xab, 0xffff0000, 0xaa43, 0x2, 0x401, 0x0, 0x3d04, 0x9, 0x9, 0x2000000, 0x80, 0x3, 0x6, 0xd, 0x6, 0x1, 0x3, 0x5a1, 0x9, 0xffffffff, 0x8, 0xb, 0xb1, 0x8, 0x1, 0x6, 0x0, 0x54df, 0xa116208, 0xfffffff9, 0x7, 0x1, 0x0, 0x5, 0x9, 0xf, 0x1ff, 0x2, 0x0, 0xba, 0x1, 0x7fff, 0x2, 0xa0000000, 0xffffff7f, 0x3, 0xd0, 0x8f, 0xd, 0xb, 0x1, 0xffffffff, 0xc4d, 0x7fffffff, 0x3ff, 0x873f, 0x2, 0x101, 0x8, 0x7, 0x9, 0x0, 0x4, 0x3f027cf, 0x6, 0x7, 0x8, 0x4, 0x7, 0x2, 0xd, 0xffff3241, 0x7fff, 0xffff0000, 0x4, 0x8, 0x8000, 0x6, 0xffff, 0xf, 0x7, 0x2, 0x242, 0x40, 0x9, 0x401, 0x0, 0x6, 0x7f, 0x401, 0x52, 0xffff1f69, 0x0, 0x1000, 0x162, 0x9, 0x7, 0x0, 0x2, 0x400, 0x4, 0x800, 0x4, 0x7, 0x8, 0x9, 0x3, 0x6, 0x0, 0x6, 0x5, 0x214f539f, 0x7, 0x26d3, 0x4, 0x80000000, 0x1000, 0xa1c, 0x9, 0x4, 0xe, 0x80, 0x1e4, 0x0, 0x7, 0x3, 0x4, 0x7fff, 0x9, 0x0, 0x401, 0xa50, 0x6, 0x6, 0x9, 0x1, 0x5, 0x0, 0x6, 0x3, 0x1, 0x87a4, 0x3, 0x1, 0x8, 0x2, 0x7fffffff, 0x4f, 0x3, 0xc8d, 0x62, 0x4, 0x3, 0xbc, 0xa8cd, 0x5, 0xc6, 0xbd9a, 0x0, 0x6a1, 0x6, 0x3d9e, 0x4, 0x0, 0x4, 0x3, 0x3, 0xf49f, 0x7, 0x6, 0xa, 0xc48, 0x2, 0x3, 0x2, 0x5, 0x56, 0x6, 0x98, 0x2, 0xfffffff7, 0x5076, 0x9, 0x774, 0x6, 0x6, 0x7, 0x8, 0xfff, 0xfffffffc, 0x6, 0xfffff166, 0xd5b, 0xe8b, 0x9, 0x1, 0x3ff, 0x6, 0x9, 0x0, 0x5, 0x0, 0x541, 0xfff, 0x2, 0x4, 0x4, 0x9, 0xb, 0x7fffffff, 0x1, 0x8, 0x2, 0x3fe, 0xfffffffc, 0x8, 0x5, 0x8, 0x4, 0x3, 0x9, 0x1, 0x95a9, 0x3, 0x6, 0x401, 0x6, 0x32b6, 0x2, 0xfffffffc, 0xff, 0x10, 0xff, 0xb, 0x1, 0x9, 0x4, 0x9, 0x15, 0x4, 0x7fffffff, 0x10, 0x3, 0x101, 0xdff8, 0x80000001, 0x8e4, 0x3ff1, 0x8, 0x218b, 0x3, 0x3, 0x0, 0x1, 0x6, 0x8cd8, 0x400, 0xa, 0x7, 0x69e, 0xc1, 0x6, 0x3, 0x9, 0x200, 0x1, 0x100, 0x5, 0x5, 0x4, 0x6, 0xfffffff9, 0x7b0e, 0x10, 0xffffff00, 0xffffffff, 0x6, 0xfa3, 0x10001, 0x6, 0xbe1, 0x400, 0x4, 0x9, 0x4, 0x7, 0x6, 0x6, 0x51c, 0x7ff, 0x1, 0x3, 0xffffffff, 0x7, 0x2, 0x0, 0x7, 0x401, 0xfff, 0x0, 0xfffeffff, 0x40d, 0x0, 0x9, 0xe, 0x6, 0x9, 0x8, 0x0, 0x1, 0x401, 0x1, 0x2, 0x5, 0x4b, 0xfffffffa, 0x10000, 0x22, 0xb, 0x6, 0xccc0, 0x80000000, 0x370, 0xd, 0x2, 0x80, 0x37a, 0x5, 0x7, 0x1, 0x9, 0x0, 0x5cd, 0x50, 0x5, 0xc, 0x5, 0x1ff, 0x3, 0x7fff, 0xffffff0b, 0x8, 0x4a, 0x4, 0x5, 0x1, 0x101, 0x1, 0x78e, 0x6, 0xfffffffd, 0x5, 0x8, 0x1, 0xfffffffd, 0x1, 0x7, 0x5, 0x6, 0x66, 0x58, 0x7, 0xfffffff8, 0x81, 0x0, 0x7, 0x7, 0x0, 0x0, 0x300, 0xffffffff, 0x3ff, 0x3ff, 0x0, 0x3, 0x5, 0x3, 0x80000001, 0xfff, 0x7, 0x5, 0x5, 0x101, 0xcc1, 0x4, 0x1, 0x3, 0x81, 0x2, 0xe, 0x8001, 0x136, 0x5, 0x2, 0x8, 0x7, 0x401, 0x10000, 0x1, 0x8, 0x5, 0x4, 0x1000, 0xb, 0xc1, 0x8000, 0x8ad], 0x3, 0x400, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a00000007000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00 \x00'/22], 0x50) 2m23.505973881s ago: executing program 4 (id=98): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000002a00)=[{}, {}], 0x0) fcntl$setsig(r0, 0xa, 0x21) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 2m21.359562241s ago: executing program 32 (id=98): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) io_setup(0x6, &(0x7f0000000040)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000002a00)=[{}, {}], 0x0) fcntl$setsig(r0, 0xa, 0x21) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 21.246528805s ago: executing program 0 (id=373): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") 18.474537799s ago: executing program 0 (id=378): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000004a40)={0x9, 0xf3c, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80803, 0x87) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 13.667780509s ago: executing program 0 (id=388): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xd3, 0x1, 0x1, {0x22, 0x6c0}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x71, 0x40, 0x4}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)="ab762adca0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 13.374345775s ago: executing program 6 (id=392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002200000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000018000900000000000000000004000080450011"], 0x5c}], 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.275631301s ago: executing program 1 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40800) 13.241356839s ago: executing program 2 (id=394): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 12.956893688s ago: executing program 6 (id=396): sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) 12.851016361s ago: executing program 2 (id=397): r0 = socket(0x1e, 0x4, 0xfffffff7) sendmmsg(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001e00010d"], 0x28}}, 0x0) 12.530198583s ago: executing program 6 (id=398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = semget(0x1, 0x6, 0x2a0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000300)=[0x5]) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000004c0)=""/85) 11.820847308s ago: executing program 2 (id=400): syz_mount_image$squashfs(&(0x7f0000000140), &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a163851811e0c5e4fcb67f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f000000000000000000000000f51901f9e5c0d6c2a87da700ed0dbb3de5f4e9919523a78b2df3ead13eaf357bfd13f8f10ac3d1a885a49837a979637c9a41cbf9c4f31431a4a82524449b2f377a21eb757c76bc8ebb43f45a089eff7f8a541906018715c2336cc3c939f5885601cde39a8c93c14d4ca3e750d296"], 0x84, 0x181, &(0x7f0000000740)="$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") chdir(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 11.820220941s ago: executing program 6 (id=401): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x32, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) mlockall(0x2) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x6, &(0x7f0000000000)=0x1, 0x8) 11.781762818s ago: executing program 1 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 11.173628181s ago: executing program 2 (id=403): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 10.845947078s ago: executing program 1 (id=405): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 10.574054084s ago: executing program 2 (id=406): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80240, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000040)) 10.482680351s ago: executing program 6 (id=407): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xffffffcc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000"], 0x50) socket$packet(0x11, 0x2, 0x300) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x52, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r6, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) close_range(r2, 0xffffffffffffffff, 0x0) 10.338784209s ago: executing program 3 (id=408): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000a80)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@block_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x4, 0x43a, &(0x7f0000000340)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) syz_emit_ethernet(0x66, &(0x7f0000000040)={@multicast, @random="f368656e065b", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x3, 0x58, 0x64, 0x0, 0xf, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x10}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x7, 0x1, 0xfa, 0x3, 0x0, 0x1, 0x6, 0x6}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x7, 0x3, 0x1, 0x3, 0x7, 0x7}, 0x2, {0xff, 0x1, 0x2, 0x5, 0x1, 0x1, 0x3}}}}}}}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24001c00) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, 0x0) 10.157952275s ago: executing program 1 (id=409): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xffffffffffffffff, 0x7f, 0x0, 0x4, 0x2, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x311900, 0x0) r3 = fcntl$getown(r2, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0x5, &(0x7f00000000c0)='ext4\x00'}, 0x30) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r4, &(0x7f0000009880)=[{{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b80)="de95", 0x2}], 0x1}}], 0x1, 0x20044840) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4bfb, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000000) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r5, 0x81785501, 0x0) 10.116308921s ago: executing program 2 (id=410): sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) 9.687352821s ago: executing program 3 (id=411): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000050, &(0x7f0000000600)=ANY=[], 0x2, 0x1518, &(0x7f0000001040)="$eJzs3Au4TtXWOPAx5pyLTehNcp9jjsWbXCZJkktCIkmSJMktIUmSJCQ2uSUhCbknuYfkFju532+5J8mRJElISDL/j07n7+vf932d8z99x/cc4/c88zGHtcZ459pj7/ddaz7P3t90GFSlXtVKdZgZ/in4139SASAFAPoCwNUAEAFAyawlswIOhQwaU/+5FxF/rgenXu4ViMtJ+n9lk/4LceWSn/8rm/T/31eGv+Mc6f+VTfp/ZZP+C3El2zIt1zV/zgi/7gD/WfVk/CvGv27/H2T//38d+fz/N3Ko6Ogv1hW9ruM/kCL9v7JJ/69s0v8rm/T/yib9v7JJ///NRQAV/5vD0v8rm/RfiCvZ5d5/lnF5x+X+/hNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIcWU4Gy4xAPC3+eVelxBCCCGEEEIIIf48If1vwtOXbSFCCCGEEEIIIYT4H4SgQIOBCNJBekiBDJARroJMkBmywNWQgGsgK1wL2eA6yA45ICfkgtyQB/KCBQIHDDHkg/yQhOuhANwABaEQFIYi4KEoFIMboTjcBCXgZigJt0ApuBVKQxkoC+XgNigPt0MFqAiV4A6oDHdCFagKd0E1uBuqwz1QA+6FmnAf1IL7oTY8AHXgQagLD0E9eBjqwyPQABpCI2gMTf6/8l+ALvAidIVukArdoQe8BD2hF/SGPtAXXoZ+8Ar0h1dhAAyEQfAaDIbXYQi8AUNhGAyHN2EEjIRRMBrGwFgYB2/BeHgbJsA7MBEmwWSYAlNhGkyHd2EGzIRZ8B7MhvdhDsyFeTAfFsAHsBAWQRp8CJnhI1gCS2EZLIcVsBJWwWpYA2thHayHDbARNsFm2AIfw1bYBtthB+yEXbAbPoE98Cnshc9gH3z+D+af+X/yOyIgoEKFBg2mw3SYgimYETNiJsyEWTALJjCBWTErZsNsmB2zY07MibkxN+bFvEhIyMiYD/NhEpNYAAtgQSyIhbEwevRYDIthcbwJS2AJLIklsRSWwtJYBstgOSyH5bE8VsAKWAkrYWWsjFWwCt6Fd+HdWB2rYw2sgTWxJtbCWlgba2MdrIN1sS7Ww3pYH+tjA2yAjbARNsEm2BSbYjNshi2wBbbEltgKW2FrbI1tsA22xbbYDtthe2yPHbADdsRO2AlfwBfwRXwRu2Fl1R17YA/siT2xN/bBPvgy9sNX8BV8FQfgQByEr+Fr+DoOwdM4FIfhcByO5dVIHIWjkdVYHIfjcDyOxwk4ASfiJJyEU3AqTsPpOB1n4Eycie/hbHwf38e5OBfn4wJcgAtxEaZhGi7GM7gEl+IyXI4rcCWuwNW4BlfjOlyP63AjbsTNuBk/xo9xG27DHbgDd+Eu/AQ/wU/xUxyA+3Af7sf9eAAP4EE8iIfwEB7Gw3gEj+BRPIrH8BgexxN4Ek/gKTyFp/EMnsWzeA7P4Xl8LvdXdXcVWjsA1EVGGZVOpVMpKkVlVBlVJpVJZVFZVEIlVFaVVWVT2VR2lV3lVDlVbpVb5VV5FSlSrGKVT+VTSZVUBVQBVVAVVIVVYeWVV8VUMVVcFVclVAlVUt2iSqlbVWlVRjX35VQ5VV618BVURVVJVVKV1Z2qiqqqqqpqqpqqrqqrGqqGqqlqqlrqflVbdcfe+KC62Jl6aiDWV4OwgWqoGqnG6nV8VDVVQ7CZaq5aqMfVMByKrVRT31o9pdqoUdhWPaNG47OqvRqLHdTzqqPqpDqrF1QX1cx3TffrW6Cagj1VL9Vb9VEz8E51sWNV1KtqgBqoBqnX1Hx8XQ1Rb6ihapgart5UI9RINUqNVmPUWDVOvaXGq7fVBPWOmqgmXZispqipapqart5VM9RMNUu9p2ar99UcNVfNU/PVAvWBWqgWqTT1oVqsPlJL1FK1TC1XK9RKtUqtVmvUWrVOrVcb1Ea1SW1WW9THaqvaprarHWqn2qV2q0/UHvWp2qs+U/vU52q/+os6oL5QB9WX6pD6Sh1WX6sj6ht1VH2rjqnv1HF1Qp1U36tT6gd1Wp1RZ9WP6pz6SZ1XP6sLKijQqJXW2uhIp9PpdYrOoDPqq3QmnVln0VfrhL5GZ9XX6mz6Op1d59A5dS6dW+fRebXVpJ1mHet8Or9O6ut1AX2DLqgL6cK6iPa6qC6mb9TF9U26hL5Zl9S36FL6Vl1al9FldTl9my6vb9cVdEVdSd+hK+s7dRVdVd+lq+m7dXV9j66h79U19X26lr5f19YP6Dr6QV1XP6Tr6Yd1ff2IbqAb6ka6sW6iH9VN9WO6mW6uW+jHdUv9hG6ln9St9VO6jX5at9XP6Hb6Wd1eP6c76Od1R91Jd9Y/6ws66K66m07V3XUP/ZLuqXvp3rqP7qtf1v30K7q/flUP0AP1IP2aHqxf10P0G3qoHqaH6zf1CD1Sj9Kj9Rg9Vo/Tb+nx+m09Qb+jJ+pJerKeoqfqabr3r5Vm/R35b/8n+f1/efXNeov+WG/V2/R2vUPv1Lv0br1b79F79F69V+/T+/R+vV8f0Af0QX1QH9KH9GF9WB/RR/RRfVQf08f0cX1C/6i/16f0D/q0PqPP6B/1OX1On//1awAGjTLaGBOZdCa9STEZTEZzlclkMpss5mqTMNeYrOZak81cZ7KbHCanyWVymzwmr7GGjDNsYpPP5DdJc70pYG4wBU0hU9gUMd4UNcXMjf90/h+tr4lpYpqapqaZaWZamBampWlpWplWprVpbdqYNqataWvamXamvWlvOpgOpqPpaDqbzqaL6WK6mq4m1aSaHuYl09P0Mr1NH9PXvGz6mX6mv+lvBpgBZpAZZAabwWaIGWKGmqFmuBluRpgRZpQZZcaYMWacGWfGm/FmgplgJpqJZrKZbKaaqWa6mW5mmBlmlpllZpvZZo6ZY+aZeWaBWWAWmoUmzaSZxWaxWWKWmqVmuVluVpqVZrVZbdaatWa9WW82mo1midlitpitZqvZbrabnWan2W12mz1mj9lr9pp9Zp/Zb/abA+aAOWgOmkPmkDlsDpsj5og5ao6aY+aYOW6Om5PmpDllTpnT5rQ5a86ac+acOW/OmwvmwsXbvkhFKjKRidJF6aKUKCXKGGWMMkWZoixRligRJaKsUdYoW3RdlD3KEeWMckW5ozxRKtiIIhdxFEf5ovxRMro+KhDdEBWMCkWFoyKRj4pGxaIbo+LRTVGJ6OaoZHRLVCq6NSodlYnKRuWi26Ly0e1RhahiVCm6I6oc3RlViapGd0XVoruj6tE9UY3o3qhmdF9UK7o/qh09ENWJHozqRg9F9aKHo/rRI1GDqGHUKGocNflT64dwOsdjvqvtZlNtd9vDvmR72l62t+1j+9qXbT/7iu1vX7UD7EA7yL5mB9vX7RD7hh1qh9nh9k07wo60o+xoO8aOtePsW3a8fdtOsO/YiXaSnWyn2Kl2mp1u37Uz7Ew7y75nZ9v37Rw7186z8+0C+4FdaBfZNPuhXWw/skvsUrvMLrcr7Eq7yq62a+xau86utxvsRrvJbrZb7Md2q91mt9sddqfdZXfbT+we+6ndaz+z++zndr/9iz1gv7AH7Zf2kP3KHrZf2yP2G3vUfmuP2e/scXvCnrTf21P2B3vanrFn7Y/2nP3Jnrc/2ws2XLy5v/jxToYMpaN0lEIplJEyUibKRFkoCyUoQVkpK2WjbJSdslNOykm5KTflpbx0ERNTPspHSUpSASpABakgFabC5MlTMSpGxak4laASVJJKUikqRaWpNJWlsnQb3Ua30+1UkSrSHXQH3Ul3UlWqStWoGlWn6lSDalBNqkm1qBbVptpUh+pQXapL9age1af61IAaUCNqRE2oCTWlptSMmlELakEtqSW1olbUmlpTG2pDbakttaN21J7aUwfqQB2pI3WmztSFulBX6kqplEo9qAf1pJ7Um3pTX+pL/agf9af+NIAG0CAaRINpMA2hITSUhtFwepNG0EgaRaNpDI2lcTSOxtN4mkATaCJNpMk0mabSVJpO02kGzaBZNItm02yaQ3NoHs2jBbSAFtJCSqM0WkyLaQktoWW0jFbQClpFq2gNraF1tI420AbaRJtoC22hrbSVttN22kk7aTftpj20h/bSXtpH+2g/7acDdIAO0kE6RIfoMB2mI3SEjtJROkbH6Dgdp5N0kk7RKTpNp+ksnaVz9BOdp5/pAgVKcQoyuqtcJpfZZXFXuxSXwV2MIwC4GOd0uVxul8flddZldzl+E5NzrqAr5Aq7Is67oq6Yu/F3cWlXxpV15dxtrry73VX4XVzN3e2qu3tcDXevq+ru+k1c093narmHXW33iKvjGrq6rrGr5x529d0jroFr6Bq5xq6le8K1ck+61u4p18Y9/bt4oVvk1ri1bp1b7/a4T91Z96M74r5x59xPrqvr5vq6l10/94rr7151A9zA38XD3ZtuhBvpRrnRbowb+7t4spviprppbrp7181wM38XL3AfuNkuzc1xc908N/+X+OKa0tyHbrH7yC1xS90yt9ytcCvdKrf6/651udvoNrnNbrf7xG1129x2t8PtdLt+iS9ex173mdvnPneH3dfugPvCHXRH3SH31S/xxes76r51x9x37rg74U66790p94M77c78cv0Xr/1797O74IIDRlas2XDE6Tg9p3AGzshXcSbOzFn4ak7wNZyVr+VsfB1n5xyck3Nxbs7DedkysWPmmPNxfk7y9VyAb+CCXIgLcxH2XJSL8Y1cnG/iEnwzl+RbuBTfyqW5DJflcnwbl+fbuQJX5Ep8B1cOgatwVb6Lq/HdXJ3v4Rp8L9fk+7gW38+1+QGuww9yXX6I6/HDXJ8f4QbckBtxY27Cj3JTfoybcXNuwY9zS36CW/GT3Jqf4jb8NLflZ7gdP8vt+TnuwM9zR+7EnfkF7sIvclfuxqncnXvwS9yTe3Fv7sN9+WXux69wf36VB/BAHsSv8WB+nYfwGzyUh/FwfpNH8EgexaN5DI/lcfwWj+e3eQK/wxN5Ek/mKTyVp/F0fpdn8Eyexe/xbH6f5/BcnsfzeQF/wAt5Eafxh7yYP+IlvJSX8XJewSt5Fa/mNbyW1/F63sAbeRNv5i38MW/lbbydd/BO3sW7+RPew5/yXv6M9/HnvJ//wgf4Cz7IX/Ih/ooP89d8hL/ho/wtH+Pv+Dif4JP8PZ/iH/g0n+Gz/COf45/4PP/MFzgwxBirWMcmjuJ0cfo4Jc4QZ4yvijPFmeMs8dVxIr4mzhpfG2eLr4uzxzninHGuOHecJ84b25hiF3Mcx/ni/HEyvj4uEN8QF4wLxYXjIrGPi8bF4hvj4vFNcYn45rhkfEtcKr41Lh2XiR++t1x8W1w+vj2uEFeMK8V3xJXjO+MqcdX4rrhafHdcPb4nrhHfG5eI74trxffHteMH4jrxg3Hd+KG4XvxwXD9+JG4QN4wbxY3jJvGjcdP4sbhZ3DxuET8et4yfiFvFT8at46fiNvHTf3g8Ne4e94hfil+KQ7hHz0vOTy5IfpBcmFyUTEt+mFyc/Ci5JLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ORlC1fTg0SuvvfGRT+fT+xSfwWf0V/lMPrPP4q/2CX+Nz+qv9dn8dT67z+Fz+lw+t8/j83rryTufAIB8Pr9P+ut9AX+DL+gL+cK+iPe+qC/mG/smvolv6h/zzXxz38I/7h/3T/gn/JP+Sf+Ub+Of9m39M76df9a398/55/zzvqPv5Dv7F3wX/6Lv6rv5VJ/qe/gevqfv6Xv73r6v7+v7+X6+v+/vB/gBfpAf5Af7wX6IH+KH+qF+uB/uR/gRfpQf5cf4MX6cH+fH+/F+gp/gJ/qJfrKf7Kf6qX66n+5n+Bl+lp/lZxec7ef4OX6en+cX+AV+oV/o03yaX+wX+yV+iV/ml/kVfoVf5Vf5NX6NX+fX+Q1+g9/kN/ktfovf6rf67X673+l3+t1+t9/j9/i9fq/f5/f5/X6/P+AP+IP+S3/If+UP+6/9Ef+NP+q/9cf8d/64P+FP+u/9Kf+DP+3P+LP+R3/O/+TP+5/9BR/8uMRbifGJtxMTEu8kJiYmJSYnpiSmJqYlpifeTcxIzEzMSryXmJ14PzEnMTcxLzE/sSDxQWJhYlEiLfFhYnHio8SSxNLEssTyxIrEykQIebbGIV/IH5Lh+lAg3BAKhkKhcCgSfCgaioUbQ/FwUygRbg4lwy2hVLg1lA5lQtnwSGgQGoZGoXFoEh4NTcNjoVloHlqEx0PL8ERoFZ4MrcNToU14OrQNz4R24dnQPjwXOoTnQ8fQKXQOL4Qu4cXQNXQLqaF76BFeCj1Dr9A79Al9w8uhX3gl9A+vhgFhYBgUXguDw+thSHgjDA3DwvDwZhgRRoZRYXQYE8aGceGtMD68HSaEd8LEMClMDlPC1DAtTA/vhhlhZpgV3guzw/thTpgb5oX5YUH4ICwMi0Ja+DAsDh+FJWFpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy3h47A1bAvbw46wM+wKu8MnYU/4NOwNn4V94fOwP/wlHAhfhIPhy3AofBUOh6/DkfBNOBq+DcfCd+F4OBFOhu/DqfBDOB3OhLPhx3Au/BTOh5/DBfmdNSGEEEKIv4v+g+Pd/5P/SwcA6td5DwDIvC3Xob8dS8W/1tyQ/a9xL5W75cWnmKe6dXjwb6Ny5dTU1F/PX6Ihyj8XABK/rf+3eCm0gCegNTSH4v/p+nqpTuf4D+onbwHI+B9yUuBSfKn+Tf9F/UcfH76wVHw2639Tfy5AwfyXcjLApfhS/RL/Rf0cTf9g/Rm+GAfQ7D/kZIJL8aX6xeAxeBpa/+ZMIYQQQgghhBDir3qpsu3+6Pn54vN5bnMpJz1civ/o+VwIIYQQQgghhBCX37OdOj/5aOvWzdv9fRP8dV/gH8uSiUz+JycaAP4XLOPfa3K535mEEEIIIYQQf7ZLN/2XeyVCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIcSV61/x58Qu9zUKIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQl9v/CQAA///YqzWi") 8.9872133s ago: executing program 5 (id=412): unshare(0x60480) r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfefa}, 0x1d, [0x8000, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x0, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x89, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x2b, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.83400763s ago: executing program 1 (id=413): r0 = socket(0x1e, 0x4, 0xfffffff7) sendmmsg(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001e00010d"], 0x28}}, 0x0) 8.676259418s ago: executing program 6 (id=414): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) gettid() syz_open_dev$loop(0x0, 0x0, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900"], 0x110}}, 0x4008004) 8.420290804s ago: executing program 5 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232c10aa938b72ab8372d81039832b8db0049d90491ceaebfd26d4eef23248000000f8", 0x3a}], 0x1) 7.737223654s ago: executing program 3 (id=416): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f0000000080)) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x5, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0xfffffffd, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x7ff, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x1, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7ffc, 0x401, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x3fc, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x7, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0xfa, 0x7, 0x0, 0xb757, 0x5, 0x65, 0x996, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 7.495062701s ago: executing program 0 (id=417): syz_usb_connect(0x6, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c040) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x105040) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x0) fanotify_mark(0xffffffffffffffff, 0x501, 0x40001032, r3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x82, 0x18, 0xa1, 0x20, 0x56c, 0x8100, 0xf20, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9, 0xe0, 0x8, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xe0, 0xc9, 0x72, 0x10}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 7.326565042s ago: executing program 5 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_secret(0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 6.206044894s ago: executing program 3 (id=419): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x40800) fanotify_mark(r2, 0x261, 0x4800003e, r1, 0x0) 4.242699744s ago: executing program 5 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) 4.12956342s ago: executing program 0 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x50, 0x0, &(0x7f0000000000)=0xff5f) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYRES64=0x0], 0x2, 0x1a2, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0xc1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.58886444s ago: executing program 3 (id=422): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80240, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000040)) 3.564675926s ago: executing program 5 (id=423): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0xfffffffffffffffe, 0x3, 0xb, 0x0, 0xde}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 1.846006915s ago: executing program 0 (id=424): add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0), 0x80) syz_open_dev$sndmidi(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000000701010000000000000000020000000c000640000000000000000008000540000000020c00034000000000000000010900010073"], 0x40}, 0x1, 0x0, 0x0, 0x20000885}, 0x4) 931.312542ms ago: executing program 5 (id=425): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x2]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 777.223377ms ago: executing program 3 (id=426): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0xffff0000, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 0s ago: executing program 1 (id=427): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 96.382987][ T5821] cgroup: Unknown subsys name 'net' [ 96.516902][ T5821] cgroup: Unknown subsys name 'cpuset' [ 96.530374][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 98.249537][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 101.313170][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.321029][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.328935][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.337030][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.342557][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.351612][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.354656][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.366815][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.374714][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.382289][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.390504][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.393782][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.405498][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.406054][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.421100][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.421201][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.428696][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.435979][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.449878][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.450238][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.457449][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.471750][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.473453][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.487376][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.495246][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.505815][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.513767][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.522657][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.531038][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.531623][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.562209][ T47] cfg80211: failed to load regulatory.db [ 102.405558][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 102.615807][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 102.647018][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 102.736815][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 102.766765][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 102.924812][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 102.973969][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.981228][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.988589][ T5837] bridge_slave_0: entered allmulticast mode [ 102.997067][ T5837] bridge_slave_0: entered promiscuous mode [ 103.131221][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.138394][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.146217][ T5837] bridge_slave_1: entered allmulticast mode [ 103.154454][ T5837] bridge_slave_1: entered promiscuous mode [ 103.256337][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.264091][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.271491][ T5838] bridge_slave_0: entered allmulticast mode [ 103.279072][ T5838] bridge_slave_0: entered promiscuous mode [ 103.288736][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.296046][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.303837][ T5838] bridge_slave_1: entered allmulticast mode [ 103.312574][ T5838] bridge_slave_1: entered promiscuous mode [ 103.476910][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.503097][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.510338][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.517482][ T5833] bridge_slave_0: entered allmulticast mode [ 103.526366][ T5833] bridge_slave_0: entered promiscuous mode [ 103.534003][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.541214][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.548364][ T5834] bridge_slave_0: entered allmulticast mode [ 103.556158][ T5834] bridge_slave_0: entered promiscuous mode [ 103.564553][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.571865][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.579060][ T5835] bridge_slave_0: entered allmulticast mode [ 103.585480][ T5855] Bluetooth: hci3: command tx timeout [ 103.587604][ T5835] bridge_slave_0: entered promiscuous mode [ 103.591706][ T5145] Bluetooth: hci4: command tx timeout [ 103.596812][ T5858] Bluetooth: hci1: command tx timeout [ 103.608349][ T5851] Bluetooth: hci0: command tx timeout [ 103.611381][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.620999][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.628141][ T5835] bridge_slave_1: entered allmulticast mode [ 103.636963][ T5835] bridge_slave_1: entered promiscuous mode [ 103.647517][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.659568][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.660737][ T5858] Bluetooth: hci5: command tx timeout [ 103.674330][ T5851] Bluetooth: hci2: command tx timeout [ 103.695364][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.702708][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.709861][ T5833] bridge_slave_1: entered allmulticast mode [ 103.717624][ T5833] bridge_slave_1: entered promiscuous mode [ 103.724661][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.732176][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.739375][ T5834] bridge_slave_1: entered allmulticast mode [ 103.753449][ T5834] bridge_slave_1: entered promiscuous mode [ 103.779131][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.879706][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.912802][ T5837] team0: Port device team_slave_0 added [ 103.992870][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.009958][ T5837] team0: Port device team_slave_1 added [ 104.019152][ T5838] team0: Port device team_slave_0 added [ 104.029475][ T5838] team0: Port device team_slave_1 added [ 104.036073][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.043433][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.050912][ T5836] bridge_slave_0: entered allmulticast mode [ 104.058475][ T5836] bridge_slave_0: entered promiscuous mode [ 104.069295][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.082038][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.158296][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.166100][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.177994][ T5836] bridge_slave_1: entered allmulticast mode [ 104.185859][ T5836] bridge_slave_1: entered promiscuous mode [ 104.213249][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.225385][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.267084][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.274444][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.300833][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.367697][ T5835] team0: Port device team_slave_0 added [ 104.374901][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.383184][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.410259][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.422481][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.429435][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.460182][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.484414][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.500024][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.545169][ T5835] team0: Port device team_slave_1 added [ 104.563277][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.570605][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.598049][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.648515][ T5833] team0: Port device team_slave_0 added [ 104.657807][ T5833] team0: Port device team_slave_1 added [ 104.666941][ T5834] team0: Port device team_slave_0 added [ 104.676531][ T5834] team0: Port device team_slave_1 added [ 104.839501][ T5838] hsr_slave_0: entered promiscuous mode [ 104.846553][ T5838] hsr_slave_1: entered promiscuous mode [ 104.864880][ T5836] team0: Port device team_slave_0 added [ 104.874564][ T5836] team0: Port device team_slave_1 added [ 104.912388][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.919346][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.945722][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.957988][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.966135][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.992129][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.004937][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.011944][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.037895][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.115908][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.124249][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.150318][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.162800][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.169796][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.195929][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.266991][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.274027][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.301198][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.349591][ T5835] hsr_slave_0: entered promiscuous mode [ 105.356757][ T5835] hsr_slave_1: entered promiscuous mode [ 105.363324][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.372291][ T5835] Cannot create hsr debugfs directory [ 105.384394][ T5837] hsr_slave_0: entered promiscuous mode [ 105.391427][ T5837] hsr_slave_1: entered promiscuous mode [ 105.397836][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.405441][ T5837] Cannot create hsr debugfs directory [ 105.411954][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.418894][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.444959][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.458200][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.465327][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.491312][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.572404][ T5834] hsr_slave_0: entered promiscuous mode [ 105.578951][ T5834] hsr_slave_1: entered promiscuous mode [ 105.585936][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.593660][ T5834] Cannot create hsr debugfs directory [ 105.632970][ T5833] hsr_slave_0: entered promiscuous mode [ 105.639738][ T5833] hsr_slave_1: entered promiscuous mode [ 105.646311][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.653945][ T5833] Cannot create hsr debugfs directory [ 105.660387][ T5858] Bluetooth: hci0: command tx timeout [ 105.660457][ T5851] Bluetooth: hci4: command tx timeout [ 105.660473][ T5145] Bluetooth: hci1: command tx timeout [ 105.665858][ T5851] Bluetooth: hci3: command tx timeout [ 105.740220][ T5858] Bluetooth: hci2: command tx timeout [ 105.745735][ T5851] Bluetooth: hci5: command tx timeout [ 105.853581][ T5836] hsr_slave_0: entered promiscuous mode [ 105.860301][ T5836] hsr_slave_1: entered promiscuous mode [ 105.866650][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.874318][ T5836] Cannot create hsr debugfs directory [ 106.565959][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.580847][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.615353][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.644228][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.696515][ T5833] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.715079][ T5833] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.726656][ T5833] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.740402][ T5833] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.844989][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.870884][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.905341][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.953026][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.017720][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.055513][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.087041][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.129520][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.190501][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.211760][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.246796][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.258351][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.278520][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.382298][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.405025][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.429515][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.436807][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.455105][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.469945][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.486115][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.499660][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.572769][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.579925][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.639363][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.706946][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.714153][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.740567][ T5858] Bluetooth: hci0: command tx timeout [ 107.741028][ T5855] Bluetooth: hci4: command tx timeout [ 107.746053][ T5851] Bluetooth: hci3: command tx timeout [ 107.753581][ T5145] Bluetooth: hci1: command tx timeout [ 107.769576][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.776844][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.820242][ T5145] Bluetooth: hci5: command tx timeout [ 107.820981][ T5851] Bluetooth: hci2: command tx timeout [ 107.828480][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.946498][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.961655][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.986862][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.994069][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.074653][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.094347][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.136887][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.154371][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.161601][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.214569][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.221761][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.295921][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.303281][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.351098][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.379148][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.436365][ T5015] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.443570][ T5015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.458071][ T5015] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.465262][ T5015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.488683][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.556627][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.563911][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.575262][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.582450][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.675620][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.968940][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.447446][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.495691][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.809850][ T5833] veth0_vlan: entered promiscuous mode [ 109.822119][ T5851] Bluetooth: hci1: command tx timeout [ 109.822144][ T5145] Bluetooth: hci4: command tx timeout [ 109.827524][ T5851] Bluetooth: hci3: command tx timeout [ 109.832965][ T5855] Bluetooth: hci0: command tx timeout [ 109.842530][ T5835] veth0_vlan: entered promiscuous mode [ 109.865641][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.878188][ T5837] veth0_vlan: entered promiscuous mode [ 109.892291][ T5835] veth1_vlan: entered promiscuous mode [ 109.900952][ T5851] Bluetooth: hci2: command tx timeout [ 109.901587][ T5145] Bluetooth: hci5: command tx timeout [ 109.922545][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.936371][ T5837] veth1_vlan: entered promiscuous mode [ 109.964877][ T5833] veth1_vlan: entered promiscuous mode [ 110.063764][ T5833] veth0_macvtap: entered promiscuous mode [ 110.076172][ T5833] veth1_macvtap: entered promiscuous mode [ 110.085007][ T5835] veth0_macvtap: entered promiscuous mode [ 110.114383][ T5835] veth1_macvtap: entered promiscuous mode [ 110.180851][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.195386][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.205456][ T5838] veth0_vlan: entered promiscuous mode [ 110.221049][ T5837] veth0_macvtap: entered promiscuous mode [ 110.233863][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.244672][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.257506][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.272759][ T5833] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.283802][ T5833] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.293735][ T5833] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.308919][ T5833] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.325430][ T5837] veth1_macvtap: entered promiscuous mode [ 110.347632][ T5838] veth1_vlan: entered promiscuous mode [ 110.357664][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.368665][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.382200][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.393934][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.405940][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.415412][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.424668][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.446073][ T5834] veth0_vlan: entered promiscuous mode [ 110.508882][ T5834] veth1_vlan: entered promiscuous mode [ 110.529523][ T5836] veth0_vlan: entered promiscuous mode [ 110.616325][ T5838] veth0_macvtap: entered promiscuous mode [ 110.635047][ T5836] veth1_vlan: entered promiscuous mode [ 110.656030][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.666932][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.680603][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.691436][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.704737][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.718585][ T5838] veth1_macvtap: entered promiscuous mode [ 110.769543][ T5834] veth0_macvtap: entered promiscuous mode [ 110.793582][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.804780][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.815251][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.826140][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.838601][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.853214][ T5834] veth1_macvtap: entered promiscuous mode [ 110.915552][ T3971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.916026][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.933449][ T3971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.944841][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.958635][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.967634][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.991432][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.002388][ T5836] veth0_macvtap: entered promiscuous mode [ 111.011181][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.049475][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.064734][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.074638][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.085180][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.095119][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.106668][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.118030][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.135413][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.146360][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.157171][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.167706][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.180824][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.191360][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.201304][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.211922][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.224054][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.254047][ T5836] veth1_macvtap: entered promiscuous mode [ 111.265268][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.276735][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.288157][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.298716][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.311812][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.322412][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.334504][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.345777][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.357125][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.367166][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.377787][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.387708][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.398311][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.408304][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.418837][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.435975][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.448710][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.457848][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.466830][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.475599][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.513343][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.522302][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.531832][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.543914][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.566352][ T791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.575510][ T791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.617539][ T791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.628259][ T791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.658166][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.677899][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.687773][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.698348][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.708222][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.718814][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.728767][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.739525][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.749823][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.760425][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.773591][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.841319][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.854854][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.872487][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.900796][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.917077][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.927572][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.937790][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.948277][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.958141][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.968798][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.981730][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.023277][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.027244][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.060480][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.069209][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.079773][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.152363][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.175584][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.286479][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.333611][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.921754][ T5946] loop1: detected capacity change from 0 to 32768 [ 112.958528][ T5946] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2 (5946) [ 112.959488][ T5015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.979267][ T5015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.994546][ T5946] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 113.009007][ T5946] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 113.021376][ T5946] BTRFS info (device loop1): using free-space-tree [ 113.139511][ T5946] BTRFS info (device loop1): rebuilding free space tree [ 113.175960][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.196575][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.229346][ T5946] BTRFS info (device loop1): balance: start -susage=12582912,drange=65536..8,limit=10376293541461622786,limit=2..2415919104 [ 113.249070][ T5946] BTRFS info (device loop1): relocating block group 1048576 flags system [ 113.331802][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.342584][ T5946] BTRFS info (device loop1): balance: ended with status: 0 [ 113.360386][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.792096][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.793198][ T5974] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1'. [ 113.847820][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.853034][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.153543][ T5974] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1'. [ 114.167095][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.231362][ T5835] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 114.396826][ T5978] syz.5.8: attempt to access beyond end of device [ 114.396826][ T5978] loop5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 114.415562][ T5978] MINIX-fs: unable to read superblock [ 114.727633][ T5015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.837768][ T5015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.900432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.299373][ T5987] loop3: detected capacity change from 0 to 2048 [ 116.480596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.860851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 117.093119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 117.101923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.329451][ T5997] loop0: detected capacity change from 0 to 512 [ 118.500756][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 119.398837][ T5997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.469164][ T5997] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.480498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.030280][ T30] audit: type=1800 audit(1743688408.600:2): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 121.600684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.610904][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.903724][ T6031] netlink: 76 bytes leftover after parsing attributes in process `syz.4.20'. [ 122.024296][ T6031] netlink: 76 bytes leftover after parsing attributes in process `syz.4.20'. [ 124.374219][ T6050] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 124.380890][ T6050] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.496994][ T6050] vhci_hcd vhci_hcd.0: Device attached [ 124.599147][ T6050] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 124.614052][ T6053] loop2: detected capacity change from 0 to 2048 [ 124.680600][ T6054] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 124.687248][ T6054] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.878045][ T6050] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 124.884705][ T6050] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 124.913824][ T6050] vhci_hcd vhci_hcd.0: Device attached [ 124.920580][ T47] vhci_hcd: vhci_device speed not set [ 125.661033][ T47] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 125.677460][ T6064] syz.3.26: attempt to access beyond end of device [ 125.677460][ T6064] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 125.690236][ T6064] MINIX-fs: unable to read superblock [ 125.722602][ T6054] vhci_hcd vhci_hcd.0: Device attached [ 125.837657][ T6050] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 125.844313][ T6050] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 125.901219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.042650][ T6050] vhci_hcd vhci_hcd.0: Device attached [ 126.049934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 126.053349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.109692][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27'. [ 126.892465][ T6050] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 126.924920][ T6050] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 126.956055][ T6072] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(20) [ 126.962697][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.976921][ T6050] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.063148][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 128.154752][ T6074] vhci_hcd: connection closed [ 128.184297][ T6059] vhci_hcd: connection closed [ 128.185318][ T6057] vhci_hcd: connection reset by peer [ 128.189363][ T6066] vhci_hcd: connection closed [ 128.195945][ T6051] vhci_hcd: stop threads [ 128.200218][ T6073] vhci_hcd: connection closed [ 128.223950][ T6051] vhci_hcd: release socket [ 128.278775][ T6051] vhci_hcd: disconnect device [ 128.442073][ T6091] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 128.473642][ T6091] CIFS: Unable to determine destination address [ 128.538370][ T6051] vhci_hcd: stop threads [ 128.543520][ T6051] vhci_hcd: release socket [ 128.602726][ T6051] vhci_hcd: disconnect device [ 128.734563][ T6051] vhci_hcd: stop threads [ 128.856879][ T6051] vhci_hcd: release socket [ 128.867246][ T6051] vhci_hcd: disconnect device [ 128.884060][ T6051] vhci_hcd: stop threads [ 128.888336][ T6051] vhci_hcd: release socket [ 128.913310][ T6092] loop4: detected capacity change from 0 to 512 [ 129.150222][ T6051] vhci_hcd: disconnect device [ 129.180961][ T6051] vhci_hcd: stop threads [ 129.201511][ T6051] vhci_hcd: release socket [ 129.227529][ T6051] vhci_hcd: disconnect device [ 129.269618][ T6092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.298867][ T6092] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.390759][ T30] audit: type=1800 audit(1743688418.000:3): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.32" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 129.599790][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.912963][ T47] vhci_hcd: vhci_device speed not set [ 132.585239][ T6123] wg1 speed is unknown, defaulting to 1000 [ 132.592254][ T6123] wg1 speed is unknown, defaulting to 1000 [ 132.600045][ T6123] wg1 speed is unknown, defaulting to 1000 [ 132.607045][ T6127] loop1: detected capacity change from 0 to 2048 [ 132.611840][ T6123] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.630867][ T6123] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 132.727627][ T6123] wg1 speed is unknown, defaulting to 1000 [ 133.009544][ T6123] wg1 speed is unknown, defaulting to 1000 [ 133.018084][ T6123] wg1 speed is unknown, defaulting to 1000 [ 133.025896][ T6123] wg1 speed is unknown, defaulting to 1000 [ 133.035014][ T6123] wg1 speed is unknown, defaulting to 1000 [ 133.042668][ T6123] wg1 speed is unknown, defaulting to 1000 [ 135.279735][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 135.280165][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 135.280535][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 135.281226][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 135.281542][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 135.281856][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 135.282163][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 135.282430][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 135.282744][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 135.283077][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 137.276928][ T6163] loop0: detected capacity change from 0 to 1024 [ 137.652071][ T6163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.744214][ T6176] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 139.515945][ T6184] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.312787][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.955412][ T6187] __nla_validate_parse: 44 callbacks suppressed [ 140.955432][ T6187] netlink: 76 bytes leftover after parsing attributes in process `syz.5.57'. [ 140.970769][ T6187] netlink: 76 bytes leftover after parsing attributes in process `syz.5.57'. [ 142.172197][ T6198] loop0: detected capacity change from 0 to 1024 [ 142.185727][ T6198] ======================================================= [ 142.185727][ T6198] WARNING: The mand mount option has been deprecated and [ 142.185727][ T6198] and is ignored by this kernel. Remove the mand [ 142.185727][ T6198] option from the mount to silence this warning. [ 142.185727][ T6198] ======================================================= [ 142.257323][ T6196] loop5: detected capacity change from 0 to 512 [ 142.334576][ T6196] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 142.336231][ T6200] input: syz0 as /devices/virtual/input/input5 [ 142.348118][ T6198] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.405362][ T6198] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:482: comm syz.0.56: Invalid block bitmap block 0 in block_group 0 [ 142.420216][ T6196] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.430900][ T6198] Quota error (device loop0): write_blk: dquota write failed [ 142.438443][ T6198] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 142.448769][ T6198] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.56: Failed to acquire dquot type 0 [ 142.465470][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.479610][ T6198] EXT4-fs error (device loop0): ext4_free_blocks:6588: comm syz.0.56: Freeing blocks not in datazone - block = 0, count = 4096 [ 142.508652][ T6198] EXT4-fs error (device loop0): ext4_read_inode_bitmap:138: comm syz.0.56: Invalid inode bitmap blk 0 in block_group 0 [ 142.521749][ T1140] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 142.531122][ T6198] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 142.539990][ T6198] EXT4-fs (loop0): 1 orphan inode deleted [ 142.546588][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.555063][ T6198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.580663][ T6196] EXT4-fs (loop5): 1 truncate cleaned up [ 142.588520][ T6196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.650385][ T1140] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 143.549526][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.745263][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.113722][ T6220] Zero length message leads to an empty skb [ 147.527261][ T5823] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 147.566609][ T6239] loop4: detected capacity change from 0 to 1024 [ 147.750886][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 147.783572][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.842538][ T6245] ptrace attach of "./syz-executor exec"[5837] was attempted by ""[6245] [ 147.911125][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.516569][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.560725][ T6242] loop1: detected capacity change from 0 to 4096 [ 148.590515][ T5823] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 148.600926][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.610588][ T30] audit: type=1800 audit(1743688437.210:4): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.74" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 148.919367][ T5823] usb 6-1: config 0 descriptor?? [ 149.003948][ T6248] syz.4.74: attempt to access beyond end of device [ 149.003948][ T6248] loop4: rw=34817, sector=58, nr_sectors = 2502 limit=1024 [ 149.630480][ T5823] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 149.648769][ T6253] Bluetooth: MGMT ver 1.23 [ 150.284451][ T5823] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0001/input/input6 [ 150.532558][ T5823] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 150.642183][ T5823] usb 6-1: USB disconnect, device number 2 [ 151.046250][ T6267] loop3: detected capacity change from 0 to 128 [ 152.233632][ T6281] loop4: detected capacity change from 0 to 1024 [ 152.290337][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 153.349484][ T6292] loop5: detected capacity change from 0 to 4096 [ 155.450803][ T5838] hfsplus: bad catalog entry type [ 155.507044][ T6292] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 156.875165][ T6292] ntfs3(loop5): Failed to read $AttrDef (-4). [ 157.301090][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 159.038404][ T6307] loop3: detected capacity change from 0 to 512 [ 159.071369][ T6307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.110528][ T6307] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.156722][ T30] audit: type=1800 audit(1743688447.760:5): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.93" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 159.274436][ T6314] loop2: detected capacity change from 0 to 512 [ 159.319812][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.372875][ T12] hfsplus: b-tree write err: -5, ino 4 [ 159.560838][ T6314] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=4 [ 159.591867][ T6314] EXT4-fs warning (device loop2): ext4_enable_quotas:7166: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 159.723288][ T6314] EXT4-fs (loop2): mount failed [ 161.281401][ T6052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.602223][ T6052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.824603][ T6052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.524325][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 162.729416][ T6052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.168740][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.103'. [ 164.031106][ T6342] loop5: detected capacity change from 0 to 16 [ 164.116837][ T6342] erofs (device loop5): mounted with root inode @ nid 36. [ 165.680707][ T6052] bridge_slave_1: left allmulticast mode [ 165.686548][ T6052] bridge_slave_1: left promiscuous mode [ 165.747608][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.100584][ T6052] bridge_slave_0: left allmulticast mode [ 166.106299][ T6052] bridge_slave_0: left promiscuous mode [ 166.228266][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.891519][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.940636][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.948991][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.957225][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.975918][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.061510][ T5145] Bluetooth: hci5: command tx timeout [ 172.155103][ T5145] Bluetooth: hci5: command tx timeout [ 174.097747][ T6052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.231038][ T5145] Bluetooth: hci5: command tx timeout [ 174.404988][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.418703][ T6052] bond0 (unregistering): Released all slaves [ 174.986409][ T6392] bond0: entered promiscuous mode [ 174.992382][ T6392] bond_slave_0: entered promiscuous mode [ 175.025452][ T6392] bond_slave_1: entered promiscuous mode [ 175.065943][ T6392] batadv0: entered promiscuous mode [ 175.093305][ T6392] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 175.138776][ T6392] bond0: left promiscuous mode [ 175.163066][ T6392] bond_slave_0: left promiscuous mode [ 175.185715][ T6392] bond_slave_1: left promiscuous mode [ 175.280429][ T6392] batadv0: left promiscuous mode [ 175.409866][ T6417] IPVS: Unknown mcast interface: pim6reg [ 176.300424][ T5145] Bluetooth: hci5: command tx timeout [ 177.440211][ T5899] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 177.630819][ T6437] loop1: detected capacity change from 0 to 1024 [ 177.648161][ T5899] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 177.717211][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.729207][ T6373] wg1 speed is unknown, defaulting to 1000 [ 177.758501][ T5899] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 177.832415][ T6437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.845680][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.943094][ T6445] loop2: detected capacity change from 0 to 16 [ 177.951775][ T6445] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 177.981886][ T5899] usb 4-1: config 0 descriptor?? [ 178.061117][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 178.658221][ T6447] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 178.962654][ T6431] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.227449][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.102231][ T5899] uclogic 0003:28BD:0078.0002: interface is invalid, ignoring [ 181.967498][ T6464] loop3: detected capacity change from 0 to 32768 [ 183.041004][ T5823] usb 4-1: USB disconnect, device number 2 [ 183.285180][ T6462] netlink: 'syz.0.139': attribute type 3 has an invalid length. [ 183.294208][ T6462] netlink: 'syz.0.139': attribute type 3 has an invalid length. [ 183.587441][ T6474] loop2: detected capacity change from 0 to 256 [ 183.743754][ T6052] hsr_slave_0: left promiscuous mode [ 183.751787][ T30] audit: type=1326 audit(1743688472.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6475 comm="syz.3.142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac98f8d169 code=0x0 [ 184.004956][ T6052] hsr_slave_1: left promiscuous mode [ 184.250291][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.293548][ T6474] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 184.495888][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.877955][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.914426][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.089421][ T6052] veth1_macvtap: left promiscuous mode [ 185.117670][ T6052] veth0_macvtap: left promiscuous mode [ 185.134554][ T6052] veth1_vlan: left promiscuous mode [ 185.154874][ T6052] veth0_vlan: left promiscuous mode [ 186.685347][ T6503] loop3: detected capacity change from 0 to 1024 [ 187.206298][ T6503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.567587][ T6512] loop5: detected capacity change from 0 to 128 [ 187.578043][ T6512] EXT4-fs: Ignoring removed nobh option [ 187.895870][ T6513] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 188.085189][ T6512] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.101658][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.103817][ T6512] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.420209][ T5941] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 188.980481][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 189.018668][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.082871][ T5941] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 189.146881][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.279939][ T5833] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.286913][ T5941] usb 3-1: config 0 descriptor?? [ 189.726124][ T5941] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 189.734399][ T5941] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 189.809164][ T5941] hid-steam 0003:28DE:1102.0003: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 189.926671][ T5941] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' connected [ 189.983685][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.003863][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.060583][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 190.956496][ T5941] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0003/input/input7 [ 190.997038][ T5941] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 191.004511][ T5941] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 191.045027][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 191.113721][ T6052] team0 (unregistering): Port device team_slave_0 removed [ 191.191951][ T5941] hid-steam 0003:28DE:1102.0004: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 191.238977][ T5941] usb 3-1: USB disconnect, device number 2 [ 191.427246][ T5941] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' disconnected [ 194.681300][ T6553] netlink: 'syz.0.163': attribute type 4 has an invalid length. [ 194.922242][ T5899] wg1 speed is unknown, defaulting to 1000 [ 194.930261][ T5941] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 195.020987][ T6558] loop1: detected capacity change from 0 to 512 [ 195.134226][ T5941] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 195.143539][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.156664][ T5941] usb 3-1: config 0 descriptor?? [ 195.177410][ T5941] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 195.185275][ T6558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.189528][ T5941] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 195.239346][ T6567] syz.3.166 uses obsolete (PF_INET,SOCK_PACKET) [ 195.251196][ T6561] loop5: detected capacity change from 0 to 1024 [ 195.255385][ T6558] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.264311][ T47] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.287902][ T6561] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.315509][ T30] audit: type=1800 audit(1743688483.920:7): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.164" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 195.322958][ T6561] EXT4-fs: Mount option(s) incompatible with ext2 [ 195.396716][ T47] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.441322][ T6556] tipc: Started in network mode [ 195.458277][ T6556] tipc: Node identity ac14140f, cluster identity 4711 [ 195.490928][ T6556] tipc: New replicast peer: 255.255.255.255 [ 195.497733][ T6556] tipc: Enabled bearer , priority 10 [ 196.036570][ T6576] loop2: detected capacity change from 0 to 1024 [ 196.678058][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.744006][ T24] tipc: Node number set to 2886997007 [ 196.939427][ T6373] chnl_net:caif_netlink_parms(): no params data found [ 197.326954][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 198.093136][ T5899] usb 3-1: USB disconnect, device number 3 [ 199.826512][ T6619] syz.3.174: attempt to access beyond end of device [ 199.826512][ T6619] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 199.864234][ T6619] MINIX-fs: unable to read superblock [ 200.009393][ T30] audit: type=1800 audit(1743688488.560:8): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.176" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 200.255501][ T1201] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 200.425874][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.572741][ T1201] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 201.327794][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.358589][ T1201] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.369095][ T6373] bridge_slave_0: entered allmulticast mode [ 201.377263][ T6373] bridge_slave_0: entered promiscuous mode [ 201.390100][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.400046][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.427500][ T1201] usb 3-1: config 0 descriptor?? [ 201.431773][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.463519][ T1201] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 201.471769][ T6373] bridge_slave_1: entered allmulticast mode [ 201.473986][ T6373] bridge_slave_1: entered promiscuous mode [ 201.832721][ T6627] loop3: detected capacity change from 0 to 512 [ 201.915845][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.946716][ T6627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.967020][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.036267][ T6627] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.120821][ T30] audit: type=1800 audit(1743688490.730:9): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.178" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 203.242627][ T6373] team0: Port device team_slave_0 added [ 203.318515][ T6373] team0: Port device team_slave_1 added [ 203.361773][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.414053][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 203.758875][ T5842] usb 3-1: USB disconnect, device number 4 [ 204.470759][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.477216][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.537829][ T6657] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 204.553949][ T6657] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 205.253686][ T6661] loop2: detected capacity change from 0 to 2048 [ 205.282082][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.306949][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.467526][ T6661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.505155][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.558674][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.566719][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.650157][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.379772][ T5836] UDF-fs: warning (device loop2): udf_evict_inode: Inode 1415 (mode 100755) has inode size 17247293248 different from extent length 17247293440. Filesystem need not be standards compliant. [ 207.453133][ T6373] hsr_slave_0: entered promiscuous mode [ 207.491211][ T6373] hsr_slave_1: entered promiscuous mode [ 207.498015][ T6682] loop0: detected capacity change from 0 to 1024 [ 207.650869][ T6687] loop3: detected capacity change from 0 to 512 [ 207.802784][ T6687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.115862][ T6687] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.477429][ T30] audit: type=1800 audit(1743688497.080:10): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.193" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 208.555905][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.583903][ T30] audit: type=1800 audit(1743688497.080:11): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.193" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 208.641348][ T6038] hfsplus: b-tree write err: -5, ino 4 [ 208.970271][ T5842] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 210.393351][ T6706] loop3: detected capacity change from 0 to 32768 [ 210.408433][ T6706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.196 (6706) [ 210.426862][ T6706] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.437039][ T6706] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 210.445900][ T6706] BTRFS info (device loop3): disk space caching is enabled [ 210.453267][ T6706] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 210.501108][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 210.537937][ T5842] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.612406][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.639624][ T5842] usb 6-1: config 0 descriptor?? [ 210.655725][ T6706] BTRFS info (device loop3): rebuilding free space tree [ 210.670611][ T5842] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 210.696129][ T6706] BTRFS info (device loop3): disabling free space tree [ 210.705139][ T6706] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.715009][ T6706] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 211.195866][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 211.362290][ T30] audit: type=1800 audit(1743688499.950:12): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.196" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 212.141269][ T6373] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 212.216088][ T5834] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.253070][ T6373] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 212.295811][ T6373] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 212.430330][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 212.581331][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 212.621247][ T6373] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 213.353471][ T5842] usb 6-1: USB disconnect, device number 3 [ 213.505711][ T1201] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 213.519057][ T5899] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.531899][ T5899] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.541758][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 213.551495][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.658450][ T5899] hub 1-1:4.0: USB hub found [ 213.720162][ T1201] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 213.728535][ T1201] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 213.780313][ T1201] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.803408][ T6754] loop2: detected capacity change from 0 to 1024 [ 213.831668][ T1201] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 213.862384][ T5899] hub 1-1:4.0: 2 ports detected [ 213.879235][ T1201] usb 2-1: config 0 has no interface number 0 [ 213.914249][ T1201] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 213.954203][ T6754] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 213.970920][ T1201] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 214.020177][ T1201] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.080139][ T1201] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.224986][ T1201] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 214.290799][ T5899] hub 1-1:4.0: set hub depth failed [ 215.215746][ T1201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.241601][ T5899] usb 1-1: USB disconnect, device number 2 [ 215.268192][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.462598][ T1201] usb 2-1: config 0 descriptor?? [ 215.913893][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.984416][ T6770] loop3: detected capacity change from 0 to 764 [ 216.002308][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.009492][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.027988][ T1201] usb 2-1: can't set config #0, error -71 [ 216.038049][ T6765] hfsplus: cannot replace xattr [ 216.070971][ T1201] usb 2-1: USB disconnect, device number 2 [ 216.109271][ T6770] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 216.130329][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.137526][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.281850][ T6771] Symlink component flag not implemented [ 216.287959][ T6771] Symlink component flag not implemented [ 216.305256][ T6771] Symlink component flag not implemented (128) [ 216.311599][ T6771] Symlink component flag not implemented (122) [ 216.871361][ T6775] loop1: detected capacity change from 0 to 16 [ 216.878589][ T6775] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 218.847827][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 220.349505][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 220.413556][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.599943][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.860761][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 220.939244][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 221.015102][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.076279][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.142587][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.193711][ T9] usb 2-1: config 0 descriptor?? [ 221.203438][ T6808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.325398][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 222.341057][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 222.411212][ T9] usb 2-1: USB disconnect, device number 3 [ 222.584269][ T6842] loop3: detected capacity change from 0 to 16 [ 222.651315][ T6842] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 223.087142][ T30] audit: type=1326 audit(1743688511.630:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.5.227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfea38d169 code=0x0 [ 224.553809][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 224.680500][ T6865] syz.1.231: attempt to access beyond end of device [ 224.680500][ T6865] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 224.694892][ T6865] MINIX-fs: unable to read superblock [ 226.212393][ T6872] process 'syz.3.229' launched '/dev/fd/6' with NULL argv: empty string added [ 226.608517][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 226.614697][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 226.620815][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 226.626860][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 226.632953][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 228.531328][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.542125][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.563128][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.591640][ T6887] loop5: detected capacity change from 0 to 32768 [ 228.604677][ T6887] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.237 (6887) [ 228.868796][ T6898] loop1: detected capacity change from 0 to 32768 [ 228.890020][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.901089][ T6887] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 228.911376][ T6887] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 228.921327][ T6887] BTRFS info (device loop5): using free-space-tree [ 228.931125][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.132692][ T6899] wg1 speed is unknown, defaulting to 1000 [ 229.287106][ T6898] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 229.304020][ T6898] bcachefs (loop1): initializing new filesystem [ 229.328687][ T6898] bcachefs (loop1): going read-write [ 229.381523][ T6887] BTRFS info (device loop5): rebuilding free space tree [ 229.416281][ T6898] bcachefs (loop1): marking superblocks [ 229.440341][ T6898] bcachefs (loop1): initializing freespace [ 229.448009][ T6898] bcachefs (loop1): done initializing freespace [ 229.458318][ T6898] bcachefs (loop1): reading snapshots table [ 229.464299][ T6898] bcachefs (loop1): reading snapshots done [ 229.535218][ T6887] BTRFS info (device loop5): balance: start -susage=12582912,drange=65536..8,limit=10376293541461622786,limit=2..2415919104 [ 229.552575][ T6887] BTRFS info (device loop5): relocating block group 1048576 flags system [ 229.602118][ T6898] bcachefs (loop1): done starting filesystem [ 229.607937][ T6887] BTRFS info (device loop5): balance: ended with status: 0 [ 229.949890][ T6932] loop2: detected capacity change from 0 to 16 [ 230.048154][ T6932] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 230.333110][ T6898] syz.1.240 (6898) used greatest stack depth: 15816 bytes left [ 230.400749][ T5833] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 230.918736][ T5835] bcachefs (loop1): shutting down [ 230.958108][ T5835] bcachefs (loop1): going read-only [ 230.992914][ T5835] bcachefs (loop1): finished waiting for writes to stop [ 231.021842][ T5855] Bluetooth: hci5: command tx timeout [ 231.072854][ T5835] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 231.532014][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'. [ 231.583455][ T6899] chnl_net:caif_netlink_parms(): no params data found [ 231.590553][ T5835] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 231.623062][ T5835] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 231.652262][ T5835] bcachefs (loop1): marking filesystem clean [ 231.863116][ T5835] bcachefs (loop1): shutdown complete [ 232.383710][ T6964] loop2: detected capacity change from 0 to 128 [ 232.430262][ T6964] EXT4-fs (loop2): Test dummy encryption mode enabled [ 232.494824][ T6899] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.501818][ T6964] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.525382][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.532860][ T6899] bridge_slave_0: entered allmulticast mode [ 232.540383][ T1201] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 232.545536][ T6964] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.566681][ T6899] bridge_slave_0: entered promiscuous mode [ 232.575765][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 232.584856][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 232.593734][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 232.605067][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 232.613930][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 232.623006][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 232.631988][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 232.640855][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 232.649678][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 232.664678][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.672161][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.679469][ T6899] bridge_slave_1: entered allmulticast mode [ 232.688349][ T6899] bridge_slave_1: entered promiscuous mode [ 232.815738][ T1201] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.833672][ T6970] syz.0.248: attempt to access beyond end of device [ 232.833672][ T6970] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 232.853692][ T6970] MINIX-fs: unable to read superblock [ 232.929934][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 233.039644][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.062323][ T1201] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.100305][ T5851] Bluetooth: hci5: command tx timeout [ 233.395610][ T1201] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.399054][ T5836] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.408991][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.528097][ T1201] usb 6-1: config 0 descriptor?? [ 233.553542][ T6958] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 233.671829][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.273098][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.498840][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 234.521228][ T1201] usbhid 6-1:0.0: can't add hid device: -71 [ 234.532016][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.541824][ T1201] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 234.554297][ T6978] loop0: detected capacity change from 0 to 1024 [ 234.574353][ T6978] ext2: Bad value for 'commit' [ 234.586421][ T1201] usb 6-1: USB disconnect, device number 4 [ 234.656968][ T6899] team0: Port device team_slave_0 added [ 234.696382][ T6899] team0: Port device team_slave_1 added [ 234.971989][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.979097][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.005928][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.082184][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.118572][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.206469][ T5851] Bluetooth: hci5: command tx timeout [ 235.594917][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.646393][ T6994] loop2: detected capacity change from 0 to 16 [ 236.664976][ T6994] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 236.719976][ T6899] hsr_slave_0: entered promiscuous mode [ 236.781654][ T6899] hsr_slave_1: entered promiscuous mode [ 236.788324][ T6899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.825242][ T6899] Cannot create hsr debugfs directory [ 237.343294][ T5851] Bluetooth: hci5: command tx timeout [ 239.686077][ T7014] __nla_validate_parse: 45 callbacks suppressed [ 239.686104][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 239.702758][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 239.711609][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 239.720513][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 239.729684][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 239.738542][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 239.754984][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 239.765643][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 239.775223][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 239.784070][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 241.361436][ T7028] syz.3.263: attempt to access beyond end of device [ 241.361436][ T7028] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 241.379393][ T7028] MINIX-fs: unable to read superblock [ 241.910488][ T7026] loop5: detected capacity change from 0 to 1024 [ 242.052336][ T7026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.081316][ T7026] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.380649][ T5941] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 242.580021][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.639915][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 242.652508][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.664149][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.677563][ T5941] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.765869][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.858373][ T5941] usb 4-1: config 0 descriptor?? [ 242.948979][ T7045] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.983019][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.007291][ T7060] loop1: detected capacity change from 0 to 2048 [ 243.076353][ T7060] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 243.159980][ T7063] loop0: detected capacity change from 0 to 1024 [ 243.243498][ T7064] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.256598][ T7060] syz.1.273: attempt to access beyond end of device [ 243.256598][ T7060] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 243.649760][ T30] audit: type=1800 audit(1743688531.890:14): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.271" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 244.322960][ T5941] usbhid 4-1:0.0: can't add hid device: -71 [ 244.329039][ T5941] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 244.361603][ T5941] usb 4-1: USB disconnect, device number 3 [ 244.573198][ T7071] syz.0.271: attempt to access beyond end of device [ 244.573198][ T7071] loop0: rw=34817, sector=58, nr_sectors = 2502 limit=1024 [ 246.652968][ T6899] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 246.771124][ T6899] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 246.831883][ T6899] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 246.879021][ T6899] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 247.007560][ T7091] usb usb8: usbfs: process 7091 (syz.3.280) did not claim interface 0 before use [ 247.046254][ T5941] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 247.259724][ T5941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.304635][ T5941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 247.353769][ T5941] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 247.403726][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.453599][ T5941] usb 6-1: config 0 descriptor?? [ 247.463149][ T6899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.580858][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.612575][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.619793][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.694919][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.702190][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.019658][ T5941] Bluetooth: Can't get version to change to load ram patch err [ 248.188261][ T5941] Bluetooth: Loading patch file failed [ 248.362802][ T5941] ath3k 6-1:0.0: probe with driver ath3k failed with error -32 [ 248.661991][ T5941] usb 6-1: USB disconnect, device number 5 [ 249.035582][ T7116] loop0: detected capacity change from 0 to 1024 [ 249.080172][ T7116] hfsplus: Unknown parameter '0x0000000000000000' [ 249.337287][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 249.781547][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.532853][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 250.604735][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 250.690347][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.715903][ T6899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.786113][ T7134] loop0: detected capacity change from 0 to 512 [ 250.794781][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.856221][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.877889][ T7134] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 250.918872][ T24] usb 6-1: config 0 descriptor?? [ 250.958061][ T7119] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 250.967583][ T7134] EXT4-fs (loop0): 1 truncate cleaned up [ 251.028865][ T7134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.148695][ T7142] loop2: detected capacity change from 0 to 512 [ 251.323569][ T7148] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.291: Logical block already allocated [ 251.421180][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 251.428900][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 251.547605][ T24] usb 6-1: USB disconnect, device number 6 [ 251.641427][ T7142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 251.717501][ T7142] System zones: 0-2, 18-18, 34-34 [ 252.024475][ T7142] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.293: bg 0: block 248: padding at end of block bitmap is not set [ 252.146178][ T7142] Quota error (device loop2): write_blk: dquota write failed [ 252.192733][ T7142] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 252.224257][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.237993][ T7142] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.293: Failed to acquire dquot type 1 [ 252.315611][ T7142] EXT4-fs (loop2): 1 truncate cleaned up [ 252.333985][ T7152] loop1: detected capacity change from 0 to 2048 [ 252.348648][ T7142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.423231][ T7142] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.523523][ T7152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.547801][ T7142] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.293: deleted inode referenced: 12 [ 253.409174][ T7172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.856344][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.260417][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 254.340396][ T7168] loop0: detected capacity change from 0 to 512 [ 254.349334][ T6899] veth0_vlan: entered promiscuous mode [ 254.417824][ T7168] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 254.452950][ T6899] veth1_vlan: entered promiscuous mode [ 254.470220][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 254.490188][ T7168] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 254.491755][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.498226][ T7168] System zones: [ 254.535245][ T24] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 254.570207][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.601771][ T7168] 1-12 [ 254.604822][ T7168] EXT4-fs (loop0): orphan cleanup on readonly fs [ 254.612316][ T7168] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.299: invalid indirect mapped block 12 (level 1) [ 254.631635][ T7168] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.299: invalid indirect mapped block 2 (level 2) [ 254.665593][ T7168] EXT4-fs (loop0): 1 truncate cleaned up [ 254.673883][ T24] usb 4-1: config 0 descriptor?? [ 254.691840][ T6899] veth0_macvtap: entered promiscuous mode [ 254.692274][ T7182] loop2: detected capacity change from 0 to 512 [ 254.745110][ T6899] veth1_macvtap: entered promiscuous mode [ 254.770858][ T7168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 254.818411][ T7182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.871619][ T7182] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.897500][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.908654][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.919481][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.932365][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.943139][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.954035][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.029609][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.085686][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.116277][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.160147][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.191251][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.295314][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.400021][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.440772][ T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 255.448057][ T24] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 255.456488][ T24] hid-steam 0003:28DE:1102.0007: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 255.471330][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.481840][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.491773][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.502453][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.512364][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.523126][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.534702][ T24] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' connected [ 255.555238][ T6899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.259635][ T7199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.304605][ T7199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.470415][ T24] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0007/input/input10 [ 256.482460][ T6899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.522140][ T6899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.552730][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.582680][ T24] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 256.590018][ T24] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 256.633617][ T6899] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.656912][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 256.659600][ T24] hid-steam 0003:28DE:1102.0008: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 256.676616][ T6899] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.704656][ T7205] loop5: detected capacity change from 0 to 16 [ 256.745316][ T6899] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.750926][ T7205] erofs (device loop5): mounted with root inode @ nid 36. [ 256.790335][ T6899] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.939827][ T24] usb 4-1: USB disconnect, device number 4 [ 257.282840][ T7212] erofs (device loop5): read error -117 @ 8200 of nid 36 [ 258.858025][ T24] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' disconnected [ 259.135137][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.186700][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.301236][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 259.688437][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.976192][ T7220] wg1 speed is unknown, defaulting to 1000 [ 260.024555][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 260.122604][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.171308][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.211278][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.241985][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.297380][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.348165][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.361485][ T7233] __nla_validate_parse: 44 callbacks suppressed [ 260.361508][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 260.422954][ T24] usb 4-1: config 0 descriptor?? [ 260.443169][ T7217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 260.926056][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 260.950251][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 260.996192][ T24] usb 4-1: USB disconnect, device number 5 [ 263.097702][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.6.320'. [ 264.033370][ T7267] Falling back ldisc for ttyS3. [ 265.361355][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.369808][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.567009][ T7294] loop6: detected capacity change from 0 to 128 [ 265.649405][ T7293] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 266.770235][ T5823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 267.090589][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.249186][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 267.391832][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 267.462480][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.540024][ T5823] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.578551][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.617923][ T5823] usb 4-1: config 0 descriptor?? [ 267.669340][ T7317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.862238][ T7339] loop5: detected capacity change from 0 to 1024 [ 267.938578][ T7339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.117732][ T5823] usbhid 4-1:0.0: can't add hid device: -71 [ 268.124343][ T5823] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 268.249610][ T5823] usb 4-1: USB disconnect, device number 6 [ 268.354719][ T7348] netlink: 76 bytes leftover after parsing attributes in process `syz.6.342'. [ 268.369873][ T7348] netlink: 76 bytes leftover after parsing attributes in process `syz.6.342'. [ 268.888641][ T7307] loop1: detected capacity change from 0 to 32768 [ 268.949541][ T7307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.330 (7307) [ 269.044822][ T7307] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 269.098082][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.100196][ T7307] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 269.139522][ T7307] BTRFS info (device loop1): disk space caching is enabled [ 269.150803][ T7359] loop2: detected capacity change from 0 to 256 [ 269.195454][ T7361] loop6: detected capacity change from 0 to 256 [ 269.206162][ T7307] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 269.221573][ T7359] exfat: Deprecated parameter 'namecase' [ 269.227284][ T7359] exfat: Deprecated parameter 'namecase' [ 269.252846][ T7307] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 269.254647][ T7307] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 269.856597][ T7307] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 269.901741][ T7307] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 269.923142][ T7359] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 269.978134][ T7307] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 269.978550][ T7307] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 270.021991][ T7307] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 270.117419][ T7307] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 270.200467][ T7307] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 270.473283][ T7307] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 270.748219][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 270.803186][ T7307] BTRFS error (device loop1): open_ctree failed: -12 [ 271.067820][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 271.077156][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 271.086023][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 271.094853][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 271.105324][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 271.114934][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 271.123765][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 272.775575][ T7397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.732476][ T7400] __nla_validate_parse: 47 callbacks suppressed [ 273.732503][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 274.470572][ T5855] Bluetooth: hci5: link tx timeout [ 274.476222][ T5855] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 274.585068][ T7417] loop2: detected capacity change from 0 to 256 [ 275.071056][ T7417] FAT-fs (loop2): Directory bread(block 64) failed [ 275.078361][ T7417] FAT-fs (loop2): Directory bread(block 65) failed [ 275.086328][ T7417] FAT-fs (loop2): Directory bread(block 66) failed [ 275.093273][ T7417] FAT-fs (loop2): Directory bread(block 67) failed [ 275.102822][ T7417] FAT-fs (loop2): Directory bread(block 68) failed [ 275.109689][ T7417] FAT-fs (loop2): Directory bread(block 69) failed [ 275.117104][ T7417] FAT-fs (loop2): Directory bread(block 70) failed [ 275.123973][ T7417] FAT-fs (loop2): Directory bread(block 71) failed [ 275.131488][ T7417] FAT-fs (loop2): Directory bread(block 72) failed [ 275.138367][ T7417] FAT-fs (loop2): Directory bread(block 73) failed [ 276.109477][ T7426] loop3: detected capacity change from 0 to 8 [ 276.280243][ T5851] Bluetooth: hci5: link tx timeout [ 276.285460][ T5851] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.645046][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 277.279854][ T7437] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 277.289547][ T7437] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 277.754138][ T7435] netlink: 76 bytes leftover after parsing attributes in process `syz.0.360'. [ 277.859824][ T7435] netlink: 76 bytes leftover after parsing attributes in process `syz.0.360'. [ 278.006496][ T7441] syz_tun: entered allmulticast mode [ 278.014164][ T7440] syz_tun: left allmulticast mode [ 278.456624][ T7446] xt_cgroup: invalid path, errno=-2 [ 279.716306][ T7459] syz.2.367: attempt to access beyond end of device [ 279.716306][ T7459] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 279.730155][ T7459] MINIX-fs: unable to read superblock [ 280.060641][ T5823] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 280.770164][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 280.868294][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.966336][ T30] audit: type=1326 audit(1743688569.560:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.6.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0f8d169 code=0x7ffc0000 [ 281.037023][ T5823] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 281.086463][ T30] audit: type=1326 audit(1743688569.560:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.6.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c0f29359 code=0x7ffc0000 [ 281.088460][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.395693][ T30] audit: type=1326 audit(1743688569.560:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.6.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0f8d169 code=0x7ffc0000 [ 281.811281][ T5823] usb 6-1: config 0 descriptor?? [ 281.843591][ T5823] usb 6-1: can't set config #0, error -71 [ 281.891834][ T30] audit: type=1326 audit(1743688569.560:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.6.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c0f29359 code=0x7ffc0000 [ 281.900450][ T5823] usb 6-1: USB disconnect, device number 7 [ 282.122656][ T30] audit: type=1326 audit(1743688569.560:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.6.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0f8d169 code=0x7ffc0000 [ 282.186289][ T7478] fuse: Bad value for 'fd' [ 282.654104][ T30] audit: type=1326 audit(1743688569.560:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.6.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c0f29359 code=0x7ffc0000 [ 282.655252][ T7476] loop0: detected capacity change from 0 to 512 [ 282.840288][ T30] audit: type=1326 audit(1743688569.560:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.6.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0f8d169 code=0x7ffc0000 [ 282.915556][ T7476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.282292][ T7483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.112813][ T7476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.248674][ T7476] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.250151][ T30] audit: type=1326 audit(1743688569.560:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.6.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0c0f29359 code=0x7ffc0000 [ 284.310131][ T30] audit: type=1326 audit(1743688569.560:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.6.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0f8d169 code=0x7ffc0000 [ 284.370152][ T30] audit: type=1326 audit(1743688569.560:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.6.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c0f8d169 code=0x7ffc0000 [ 284.464131][ T7486] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 286.049968][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.840669][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 290.030133][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 290.047916][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.069787][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 290.098596][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.201072][ T9] usb 4-1: config 0 descriptor?? [ 290.681856][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'. [ 290.728022][ T9] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 290.778063][ T9] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 291.241265][ T9] hid-steam 0003:28DE:1102.0009: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 291.302573][ T7569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.340927][ T7569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.355473][ T9] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' connected [ 291.394025][ T9] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0009/input/input13 [ 291.416474][ T7577] loop2: detected capacity change from 0 to 8 [ 291.520504][ T1201] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 291.550742][ T7580] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 291.559623][ T7580] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 291.632650][ T9] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 291.640032][ T9] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 291.713448][ T7579] netlink: 'syz.6.401': attribute type 3 has an invalid length. [ 291.776683][ T9] hid-steam 0003:28DE:1102.000A: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 291.844159][ T1201] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.916992][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 291.962609][ T9] usb 4-1: USB disconnect, device number 7 [ 292.015177][ T1201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 292.117659][ T1201] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.173826][ T1201] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.195269][ T9] hid-steam 0003:28DE:1102.0009: Steam Controller 'XXXXXXXXXX' disconnected [ 292.233188][ T1201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.302206][ T1201] usb 6-1: config 0 descriptor?? [ 292.309092][ T7570] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 292.488678][ T7591] loop1: detected capacity change from 0 to 2048 [ 292.635686][ T7591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.966748][ T1201] usbhid 6-1:0.0: can't add hid device: -71 [ 292.986530][ T1201] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 292.998465][ T7606] loop3: detected capacity change from 0 to 512 [ 293.012461][ T7609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.072917][ T7606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.096173][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.106034][ T1201] usb 6-1: USB disconnect, device number 8 [ 293.146545][ T7606] EXT4-fs (loop3): 1 truncate cleaned up [ 293.158603][ T7606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.244126][ T7606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.300155][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 293.429420][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.524614][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 293.555171][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 294.000962][ T9] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 294.213522][ T9] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 294.252185][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 294.306400][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 294.338543][ T7624] loop3: detected capacity change from 0 to 256 [ 294.361594][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.404020][ T9] usb 1-1: Product: syz [ 294.408253][ T9] usb 1-1: Manufacturer: syz [ 294.439608][ T9] usb 1-1: SerialNumber: syz [ 294.446187][ T7624] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.478141][ T7624] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 294.499539][ T7608] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.665653][ T7624] exFAT-fs (loop3): Invalid exboot-signature(sector = 3): 0x00000000 [ 294.722823][ T7624] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0xd919aafb) [ 294.820417][ T7624] exFAT-fs (loop3): invalid boot region [ 294.846774][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 294.855946][ T7624] exFAT-fs (loop3): failed to recognize exfat type [ 294.904869][ T9] appletouch 1-1:1.0: Failed to read mode from device. [ 295.006908][ T9] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 295.021725][ T7634] netlink: 76 bytes leftover after parsing attributes in process `syz.6.414'. [ 295.056544][ T9] usb 1-1: USB disconnect, device number 3 [ 295.240542][ T7634] netlink: 76 bytes leftover after parsing attributes in process `syz.6.414'. [ 296.629470][ T7645] input: syz1 as /devices/virtual/input/input15 [ 296.913664][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 297.100340][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 298.601877][ T7653] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 298.610878][ T7653] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 298.650457][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.712697][ T9] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 298.805039][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.869021][ T9] usb 1-1: config 0 descriptor?? [ 298.901136][ T9] usb 1-1: can't set config #0, error -71 [ 298.933412][ T9] usb 1-1: USB disconnect, device number 4 [ 299.987041][ T7663] loop0: detected capacity change from 0 to 8 [ 302.341075][ T7675] loop5: detected capacity change from 0 to 1024 [ 302.348565][ T7675] EXT4-fs: Ignoring removed bh option [ 303.139695][ T7675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.344833][ T7675] loop5: detected capacity change from 1024 to 64 [ 303.390547][ T7675] [ 303.392918][ T7675] ====================================================== [ 303.399968][ T7675] WARNING: possible circular locking dependency detected [ 303.407044][ T7675] 6.14.0-syzkaller-12508-g92b71befc349 #0 Not tainted [ 303.413840][ T7675] ------------------------------------------------------ [ 303.420875][ T7675] syz.5.425/7675 is trying to acquire lock: [ 303.426784][ T7675] ffffffff90696628 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 303.436631][ T7675] [ 303.436631][ T7675] but task is already holding lock: [ 303.444049][ T7675] ffff888025a1cea8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 303.455396][ T7675] [ 303.455396][ T7675] which lock already depends on the new lock. [ 303.455396][ T7675] [ 303.465846][ T7675] [ 303.465846][ T7675] the existing dependency chain (in reverse order) is: [ 303.474965][ T7675] [ 303.474965][ T7675] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 303.483649][ T7675] blk_alloc_queue+0x619/0x760 [ 303.489008][ T7675] blk_mq_alloc_queue+0x179/0x290 [ 303.494597][ T7675] __blk_mq_alloc_disk+0x29/0x120 [ 303.500184][ T7675] loop_add+0x496/0xb70 [ 303.504886][ T7675] loop_init+0x164/0x270 [ 303.509702][ T7675] do_one_initcall+0x123/0x6e0 [ 303.515043][ T7675] kernel_init_freeable+0x5c2/0x900 [ 303.520790][ T7675] kernel_init+0x1c/0x2b0 [ 303.525685][ T7675] ret_from_fork+0x48/0x80 [ 303.530656][ T7675] ret_from_fork_asm+0x1a/0x30 [ 303.536004][ T7675] [ 303.536004][ T7675] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 303.543272][ T7675] fs_reclaim_acquire+0x102/0x150 [ 303.548861][ T7675] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 303.555248][ T7675] __alloc_skb+0x2b2/0x380 [ 303.560227][ T7675] alloc_uevent_skb+0x7d/0x210 [ 303.565568][ T7675] kobject_uevent_env+0xca4/0x1870 [ 303.571248][ T7675] kobject_synth_uevent+0x7d4/0x8a0 [ 303.577015][ T7675] bus_uevent_store+0x3d/0x90 [ 303.582248][ T7675] bus_attr_store+0x74/0xb0 [ 303.587303][ T7675] sysfs_kf_write+0xf2/0x150 [ 303.592457][ T7675] kernfs_fop_write_iter+0x354/0x510 [ 303.598328][ T7675] vfs_write+0x5bd/0x1180 [ 303.603248][ T7675] ksys_write+0x12a/0x240 [ 303.608156][ T7675] do_syscall_64+0xcd/0x260 [ 303.613319][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.619778][ T7675] [ 303.619778][ T7675] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 303.627659][ T7675] __lock_acquire+0x1173/0x1ba0 [ 303.633093][ T7675] lock_acquire+0x179/0x350 [ 303.638180][ T7675] __mutex_lock+0x199/0xb90 [ 303.643253][ T7675] kobject_uevent_env+0xb36/0x1870 [ 303.648969][ T7675] set_capacity_and_notify+0x1ca/0x240 [ 303.655006][ T7675] loop_set_status+0x94a/0xb90 [ 303.660330][ T7675] lo_ioctl+0x729/0x26d0 [ 303.665163][ T7675] blkdev_ioctl+0x277/0x6d0 [ 303.670240][ T7675] __x64_sys_ioctl+0x193/0x200 [ 303.675594][ T7675] do_syscall_64+0xcd/0x260 [ 303.680661][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.687126][ T7675] [ 303.687126][ T7675] other info that might help us debug this: [ 303.687126][ T7675] [ 303.697369][ T7675] Chain exists of: [ 303.697369][ T7675] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 303.697369][ T7675] [ 303.711188][ T7675] Possible unsafe locking scenario: [ 303.711188][ T7675] [ 303.718657][ T7675] CPU0 CPU1 [ 303.724037][ T7675] ---- ---- [ 303.729416][ T7675] lock(&q->q_usage_counter(io)#22); [ 303.734843][ T7675] lock(fs_reclaim); [ 303.741376][ T7675] lock(&q->q_usage_counter(io)#22); [ 303.749408][ T7675] lock(uevent_sock_mutex); [ 303.754038][ T7675] [ 303.754038][ T7675] *** DEADLOCK *** [ 303.754038][ T7675] [ 303.762192][ T7675] 3 locks held by syz.5.425/7675: [ 303.767262][ T7675] #0: ffff888025af3368 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2a/0xb90 [ 303.776761][ T7675] #1: ffff888025a1cea8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 303.788552][ T7675] #2: ffff888025a1cee0 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 303.800628][ T7675] [ 303.800628][ T7675] stack backtrace: [ 303.806538][ T7675] CPU: 1 UID: 0 PID: 7675 Comm: syz.5.425 Not tainted 6.14.0-syzkaller-12508-g92b71befc349 #0 PREEMPT(full) [ 303.806586][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.806609][ T7675] Call Trace: [ 303.806619][ T7675] [ 303.806632][ T7675] dump_stack_lvl+0x116/0x1f0 [ 303.806684][ T7675] print_circular_bug+0x275/0x350 [ 303.806749][ T7675] check_noncircular+0x14c/0x170 [ 303.806819][ T7675] __lock_acquire+0x1173/0x1ba0 [ 303.806865][ T7675] lock_acquire+0x179/0x350 [ 303.806899][ T7675] ? kobject_uevent_env+0xb36/0x1870 [ 303.806962][ T7675] ? __pfx___might_resched+0x10/0x10 [ 303.807034][ T7675] __mutex_lock+0x199/0xb90 [ 303.807082][ T7675] ? kobject_uevent_env+0xb36/0x1870 [ 303.807140][ T7675] ? rcu_is_watching+0x12/0xc0 [ 303.807191][ T7675] ? kobject_uevent_env+0xb36/0x1870 [ 303.807253][ T7675] ? __pfx___mutex_lock+0x10/0x10 [ 303.807310][ T7675] ? __asan_memcpy+0x3c/0x60 [ 303.807361][ T7675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.807408][ T7675] ? kobject_get_path+0x8e/0x2a0 [ 303.807463][ T7675] ? kobject_uevent_env+0xb36/0x1870 [ 303.807520][ T7675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.807566][ T7675] kobject_uevent_env+0xb36/0x1870 [ 303.807637][ T7675] set_capacity_and_notify+0x1ca/0x240 [ 303.807724][ T7675] ? __pfx_set_capacity_and_notify+0x10/0x10 [ 303.807789][ T7675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.807836][ T7675] ? __asan_memcpy+0x3c/0x60 [ 303.807890][ T7675] loop_set_status+0x94a/0xb90 [ 303.807940][ T7675] lo_ioctl+0x729/0x26d0 [ 303.807988][ T7675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.808035][ T7675] ? kasan_save_stack+0x42/0x60 [ 303.808095][ T7675] ? kasan_save_stack+0x33/0x60 [ 303.808151][ T7675] ? kasan_save_track+0x14/0x30 [ 303.808207][ T7675] ? kasan_save_free_info+0x3b/0x60 [ 303.808253][ T7675] ? __kasan_slab_free+0x51/0x70 [ 303.808313][ T7675] ? kfree+0x2b6/0x4d0 [ 303.808360][ T7675] ? tomoyo_path_number_perm+0x470/0x580 [ 303.808403][ T7675] ? security_file_ioctl+0x9b/0x240 [ 303.808446][ T7675] ? __x64_sys_ioctl+0xb7/0x200 [ 303.808493][ T7675] ? do_syscall_64+0xcd/0x260 [ 303.808541][ T7675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.808588][ T7675] ? __pfx_lo_ioctl+0x10/0x10 [ 303.808666][ T7675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.808713][ T7675] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 303.808756][ T7675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.808804][ T7675] ? blkdev_common_ioctl+0x1dd/0x2250 [ 303.808863][ T7675] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 303.808906][ T7675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.808953][ T7675] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 303.809000][ T7675] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 303.809065][ T7675] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 303.809114][ T7675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.809179][ T7675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.809226][ T7675] ? find_held_lock+0x2b/0x80 [ 303.809277][ T7675] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.809327][ T7675] ? __pfx_lo_ioctl+0x10/0x10 [ 303.809369][ T7675] blkdev_ioctl+0x277/0x6d0 [ 303.809429][ T7675] ? __pfx_blkdev_ioctl+0x10/0x10 [ 303.809487][ T7675] ? __entry_text_end+0x1020c5/0x1020c9 [ 303.809539][ T7675] ? __pfx_blkdev_ioctl+0x10/0x10 [ 303.809601][ T7675] __x64_sys_ioctl+0x193/0x200 [ 303.809651][ T7675] do_syscall_64+0xcd/0x260 [ 303.809705][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.809744][ T7675] RIP: 0033:0x7fcfea38d169 [ 303.809772][ T7675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.809812][ T7675] RSP: 002b:00007fcfeb21f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.809849][ T7675] RAX: ffffffffffffffda RBX: 00007fcfea5a5fa0 RCX: 00007fcfea38d169 [ 303.809875][ T7675] RDX: 0000200000000a00 RSI: 0000000000004c04 RDI: 0000000000000005 [ 303.809900][ T7675] RBP: 00007fcfea40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 303.809924][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.809948][ T7675] R13: 0000000000000000 R14: 00007fcfea5a5fa0 R15: 00007ffe6913de68 [ 303.809992][ T7675] [ 304.580715][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 304.580741][ T30] audit: type=1800 audit(1743688593.180:82): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.425" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 304.722368][ T5833] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 304.753576][ T5833] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 304.770657][ T5833] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 304.784598][ T5833] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 304.799599][ T5833] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 304.815020][ T5833] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 304.864306][ T5833] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 304.878590][ T5833] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 304.906552][ T5833] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 304.930554][ T5833] EXT4-fs warning (device loop5): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 305.291458][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.336778][ T7679] kmmpd-loop5: attempt to access beyond end of device [ 305.336778][ T7679] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 305.356735][ T7679] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 306.654876][ T7677] Set syz1 is full, maxelem 65536 reached