last executing test programs: 33.23210496s ago: executing program 0 (id=54): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00160c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000700)={0x20, 0x12, 0x28, "63e9db3fdf499231e49e753be30b55cc32c6027c24dccbc118a821ad1eebadefda78f20f47826ed3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000980)=ANY=[@ANYBLOB="201028"], 0x0, 0x0, 0x0, 0x0, 0x0}) 32.519161722s ago: executing program 2 (id=56): unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 31.43887853s ago: executing program 2 (id=62): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 31.307431443s ago: executing program 2 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 31.03956027s ago: executing program 2 (id=65): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@usrquota}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc0000484) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 30.827069591s ago: executing program 2 (id=66): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) poll(&(0x7f0000000000)=[{r1, 0x400}], 0x1, 0xfdfe) 30.733741371s ago: executing program 0 (id=67): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='.\x02\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) unlink(&(0x7f0000000140)='./file1\x00') pwrite64(r0, &(0x7f0000000980)='2', 0x51, 0xe7c) 30.217458922s ago: executing program 2 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x108005}) 29.661514878s ago: executing program 32 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x108005}) 28.726636002s ago: executing program 0 (id=73): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x2, 0x0) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="b0b0", 0x2}], 0x1, 0x7) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0x18c6) 27.913677853s ago: executing program 0 (id=77): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 26.952747409s ago: executing program 0 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000380)=@x86={0xb, 0x3, 0x7, 0x0, 0xfffffffb, 0xf6, 0x4, 0x4, 0x0, 0xf9, 0x8, 0x3, 0x0, 0x8, 0x2, 0x40, 0x7, 0x12, 0x0, '\x00', 0x6, 0x9}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) 24.698384495s ago: executing program 0 (id=81): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x200a0c0, 0x0, 0xfe, 0x0, &(0x7f0000001a00)) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6000) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 24.356110579s ago: executing program 33 (id=81): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x200a0c0, 0x0, 0xfe, 0x0, &(0x7f0000001a00)) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6000) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 13.715376065s ago: executing program 1 (id=123): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001b00)=""/4112, 0x1010}], 0x1}, 0x11}], 0x400000000000045, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 13.287167329s ago: executing program 1 (id=125): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000001440)={[{@debug}, {@delalloc}, {@bh}, {@test_dummy_encryption}, {@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbcd, &(0x7f0000000740)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x54) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 12.381214949s ago: executing program 1 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x11, 0x0, 0x2}]}) 11.958131702s ago: executing program 1 (id=130): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x1010051, &(0x7f0000000240)={[{@debug}, {@inlinecrypt}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@resuid}]}, 0x1, 0x550, &(0x7f00000002c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') getxattr(0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000880)='./file2\x00', &(0x7f00000008c0)) 11.194546688s ago: executing program 1 (id=133): unshare(0x28000600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) 9.827156755s ago: executing program 3 (id=147): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 8.899022688s ago: executing program 3 (id=153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0xe, 0x10, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x8, 0x6, 0x8, 0x6, 0x8, 0x2, 'wg0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0xc1}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x200, 0xdc}}}, {{@arp={@private=0xa010100, @broadcast, 0x0, 0xffffffff, 0xb, 0xa, {@mac=@local, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x8, 0x8001, 0x41, 0x2, 0x3, 'bridge_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8c9, 0x10}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 8.603039958s ago: executing program 3 (id=154): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000be2d01000000", 0x1a}], 0x1) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 6.944379194s ago: executing program 3 (id=161): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.621676736s ago: executing program 1 (id=162): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x3, 0x1}}]}}]}}]}}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2) 5.974095702s ago: executing program 34 (id=162): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x3, 0x1}}]}}]}}]}}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) futex(&(0x7f0000000140)=0x1, 0x6, 0x6, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x2) 4.543113724s ago: executing program 3 (id=166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 4.38580841s ago: executing program 5 (id=167): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.605764048s ago: executing program 4 (id=169): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioprio_get$pid(0x3, 0x0) 2.856526244s ago: executing program 4 (id=170): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) 2.557498143s ago: executing program 5 (id=171): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010003, 0x0) 2.448268374s ago: executing program 5 (id=172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x88b5}, @void, @eth={@empty, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) 2.101228749s ago: executing program 4 (id=173): r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0x679a, 0x80, 0x6, 0x178}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.837049416s ago: executing program 4 (id=174): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 1.652895874s ago: executing program 3 (id=175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xf, {[@global=@item_012={0x2, 0x1, 0xe31d2cc890952081, '\x00\x00'}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "fbd881fa"}, @global=@item_012={0x1, 0x1, 0x7, "84"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x4, 0x7, 0x86, 0x4, 0x5, 0x1, 0x80000001, 0x7, 0x0, 0xf, 0x54}) 1.541996835s ago: executing program 4 (id=176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)=0xf) 1.374632172s ago: executing program 5 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, 0x0}], 0x1, 0x7d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 536.343256ms ago: executing program 5 (id=178): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8880, 0x49) lseek(r0, 0x104, 0x1) 257.701604ms ago: executing program 4 (id=179): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fadvise64(r0, 0xe0ffff, 0x9, 0x3) 0s ago: executing program 5 (id=180): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) socket$kcm(0x21, 0x2, 0x2) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 80.075976][ T5779] cgroup: Unknown subsys name 'net' [ 80.215474][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.690258][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.242142][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.250383][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.259607][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.268997][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.278459][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.286453][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.294055][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.302464][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.308927][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.310823][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.321687][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.326222][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.332640][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.339650][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.346448][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.352899][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.366998][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.368114][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.375667][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.382648][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.388995][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.397241][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.405062][ T5803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.417489][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.911398][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 83.945995][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 84.035343][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 84.085867][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 84.143918][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.152047][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.159605][ T5790] bridge_slave_0: entered allmulticast mode [ 84.166444][ T5790] bridge_slave_0: entered promiscuous mode [ 84.190342][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.197550][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.204901][ T5788] bridge_slave_0: entered allmulticast mode [ 84.212421][ T5788] bridge_slave_0: entered promiscuous mode [ 84.220306][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.227508][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.234816][ T5790] bridge_slave_1: entered allmulticast mode [ 84.242187][ T5790] bridge_slave_1: entered promiscuous mode [ 84.266488][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.273744][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.281779][ T5788] bridge_slave_1: entered allmulticast mode [ 84.289319][ T5788] bridge_slave_1: entered promiscuous mode [ 84.350324][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.376074][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.383575][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.390981][ T5791] bridge_slave_0: entered allmulticast mode [ 84.397715][ T5791] bridge_slave_0: entered promiscuous mode [ 84.418302][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.432628][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.456288][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.463601][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.471056][ T5791] bridge_slave_1: entered allmulticast mode [ 84.477787][ T5791] bridge_slave_1: entered promiscuous mode [ 84.497349][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.559910][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.582814][ T5790] team0: Port device team_slave_0 added [ 84.592720][ T5790] team0: Port device team_slave_1 added [ 84.599431][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.606572][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.614120][ T5789] bridge_slave_0: entered allmulticast mode [ 84.620858][ T5789] bridge_slave_0: entered promiscuous mode [ 84.630769][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.643156][ T5788] team0: Port device team_slave_0 added [ 84.652504][ T5788] team0: Port device team_slave_1 added [ 84.666982][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.674433][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.681735][ T5789] bridge_slave_1: entered allmulticast mode [ 84.689176][ T5789] bridge_slave_1: entered promiscuous mode [ 84.759428][ T5791] team0: Port device team_slave_0 added [ 84.780811][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.788096][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.814493][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.827549][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.834676][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.860782][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.873881][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.881033][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.907269][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.929132][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.942076][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.953418][ T5791] team0: Port device team_slave_1 added [ 84.971149][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.978201][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.004677][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.048854][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.056543][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.087859][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.100241][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.107209][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.133427][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.157383][ T5789] team0: Port device team_slave_0 added [ 85.195122][ T5789] team0: Port device team_slave_1 added [ 85.250000][ T5790] hsr_slave_0: entered promiscuous mode [ 85.256336][ T5790] hsr_slave_1: entered promiscuous mode [ 85.269622][ T5791] hsr_slave_0: entered promiscuous mode [ 85.276753][ T5791] hsr_slave_1: entered promiscuous mode [ 85.283284][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.292094][ T5791] Cannot create hsr debugfs directory [ 85.322531][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.329663][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.355867][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.381939][ T5788] hsr_slave_0: entered promiscuous mode [ 85.388695][ T5788] hsr_slave_1: entered promiscuous mode [ 85.394826][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.402427][ T5788] Cannot create hsr debugfs directory [ 85.408837][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.415805][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.442030][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.468993][ T5801] Bluetooth: hci0: command tx timeout [ 85.474743][ T5801] Bluetooth: hci1: command tx timeout [ 85.478183][ T5795] Bluetooth: hci3: command tx timeout [ 85.481911][ T5803] Bluetooth: hci2: command tx timeout [ 85.541289][ T5789] hsr_slave_0: entered promiscuous mode [ 85.547668][ T5789] hsr_slave_1: entered promiscuous mode [ 85.554729][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.562504][ T5789] Cannot create hsr debugfs directory [ 85.932377][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.943978][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.955694][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.967074][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.039484][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.057106][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.073796][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.095235][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.153885][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.167165][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.201666][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.213477][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.286118][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.296244][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.318977][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.329466][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.453046][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.475306][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.512708][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.534138][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.553110][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.584216][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.591651][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.602541][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.609830][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.625035][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.632165][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.653495][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.684873][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.692169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.704411][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.711615][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.747796][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.754989][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.771922][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.823311][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.844562][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.851746][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.884645][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.895693][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.934515][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.941736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.267098][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.366355][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.446035][ T5791] veth0_vlan: entered promiscuous mode [ 87.484004][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.494573][ T5791] veth1_vlan: entered promiscuous mode [ 87.532628][ T5790] veth0_vlan: entered promiscuous mode [ 87.548571][ T5803] Bluetooth: hci3: command tx timeout [ 87.548897][ T5795] Bluetooth: hci2: command tx timeout [ 87.554026][ T5803] Bluetooth: hci1: command tx timeout [ 87.554087][ T5803] Bluetooth: hci0: command tx timeout [ 87.599240][ T5790] veth1_vlan: entered promiscuous mode [ 87.607880][ T5789] veth0_vlan: entered promiscuous mode [ 87.620634][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.635351][ T5789] veth1_vlan: entered promiscuous mode [ 87.647504][ T5791] veth0_macvtap: entered promiscuous mode [ 87.658971][ T5791] veth1_macvtap: entered promiscuous mode [ 87.711051][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.724148][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.744777][ T5790] veth0_macvtap: entered promiscuous mode [ 87.764586][ T5790] veth1_macvtap: entered promiscuous mode [ 87.774185][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.783447][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.792857][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.801941][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.834076][ T5788] veth0_vlan: entered promiscuous mode [ 87.867063][ T5788] veth1_vlan: entered promiscuous mode [ 87.875936][ T5789] veth0_macvtap: entered promiscuous mode [ 87.891282][ T5789] veth1_macvtap: entered promiscuous mode [ 87.923152][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.934501][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.946062][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.964151][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.975357][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.986101][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.999797][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.011608][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.040363][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.050980][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.062960][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.099879][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.111464][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.121539][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.123295][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.135954][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.152053][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.163033][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.195580][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.205134][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.216305][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.225161][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.239066][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.247784][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.257048][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.266131][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.293607][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.307420][ T5788] veth0_macvtap: entered promiscuous mode [ 88.313333][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.358752][ T5788] veth1_macvtap: entered promiscuous mode [ 88.426073][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.443471][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.455076][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.466096][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.477613][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.488566][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.500407][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.539533][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.557114][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.568407][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.579041][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.590221][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.600743][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.612773][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.654289][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.663276][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.673266][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.683394][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.705314][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.729763][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.784196][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.795542][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.837389][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.855586][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.943247][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.955257][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.094233][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.113848][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.238528][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.246425][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.283112][ T5885] syz.3.6[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.638559][ T5795] Bluetooth: hci2: command tx timeout [ 89.644138][ T5795] Bluetooth: hci0: command tx timeout [ 89.644195][ T5801] Bluetooth: hci1: command tx timeout [ 89.651117][ T5795] Bluetooth: hci3: command tx timeout [ 89.756989][ T5900] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8'. [ 89.791476][ T2979] Bluetooth: hci4: Frame reassembly failed (-84) [ 89.801063][ T5895] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8'. [ 89.821534][ T2979] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 90.259246][ T5885] loop3: detected capacity change from 0 to 40427 [ 90.314851][ T5885] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 90.374336][ T5885] F2FS-fs (loop3): invalid crc value [ 90.407285][ T5885] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.477017][ T5916] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.556822][ T5916] loop1: detected capacity change from 0 to 64 [ 90.587378][ T5885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.611286][ T5916] MINIX-fs: bad superblock [ 90.756538][ T12] kworker/u4:1: attempt to access beyond end of device [ 90.756538][ T12] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.806572][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 90.928407][ T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 91.074280][ T5923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17'. [ 91.133389][ T23] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 91.152546][ T23] usb 2-1: config 0 has no interface number 0 [ 91.166060][ T23] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 63725, setting to 64 [ 91.199371][ T23] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 91.209099][ T23] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 91.217342][ T23] usb 2-1: Manufacturer: syz [ 91.245927][ T23] usb 2-1: config 0 descriptor?? [ 91.276745][ T5916] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.316436][ T23] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input5 [ 91.478287][ T5928] loop3: detected capacity change from 0 to 128 [ 91.600169][ T5928] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.702193][ T5928] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.712574][ T5803] Bluetooth: hci3: command tx timeout [ 91.720050][ T5803] Bluetooth: hci1: command tx timeout [ 91.725687][ T5803] Bluetooth: hci0: command tx timeout [ 91.731322][ T5803] Bluetooth: hci2: command tx timeout [ 91.788837][ T5801] Bluetooth: hci4: command 0x1003 tx timeout [ 91.796233][ T5795] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.054333][ T5857] usb 2-1: USB disconnect, device number 2 [ 92.143380][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.718910][ T5837] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.904276][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.967447][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.997741][ T5837] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.026826][ T5837] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.051512][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.088475][ T5837] usb 3-1: config 0 descriptor?? [ 93.488061][ T5857] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.608807][ T5837] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 93.667197][ T5837] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 93.681854][ T5967] loop3: detected capacity change from 0 to 128 [ 93.686162][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.720672][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.740683][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.770296][ T5857] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.770950][ T5967] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.796386][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.829248][ T5857] usb 1-1: config 0 descriptor?? [ 93.882839][ T5967] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.914572][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.956566][ T5844] usb 3-1: USB disconnect, device number 2 [ 94.201179][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.319200][ T5857] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 94.363012][ T5857] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 94.720959][ T5986] loop2: detected capacity change from 0 to 64 [ 94.734357][ T5844] usb 1-1: USB disconnect, device number 2 [ 94.743294][ T5986] ======================================================= [ 94.743294][ T5986] WARNING: The mand mount option has been deprecated and [ 94.743294][ T5986] and is ignored by this kernel. Remove the mand [ 94.743294][ T5986] option from the mount to silence this warning. [ 94.743294][ T5986] ======================================================= [ 94.778886][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.169086][ T5992] loop2: detected capacity change from 0 to 1024 [ 95.210279][ T5992] EXT4-fs: Ignoring removed orlov option [ 95.243122][ T5992] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 95.296635][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.709666][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.709780][ T5988] loop1: detected capacity change from 0 to 32768 [ 95.763141][ T5990] loop3: detected capacity change from 0 to 32768 [ 95.769865][ T5988] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.43 (5988) [ 95.908666][ T5990] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 95.923657][ T5988] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.958203][ T5988] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 95.967109][ T5988] BTRFS info (device loop1): enabling auto defrag [ 95.974039][ T5988] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 95.984067][ T5988] BTRFS info (device loop1): use zstd compression, level 3 [ 95.996090][ T5988] BTRFS info (device loop1): max_inline at 0 [ 96.008087][ T5988] BTRFS info (device loop1): force clearing of disk cache [ 96.017223][ T5988] BTRFS info (device loop1): turning on sync discard [ 96.027747][ T5988] BTRFS info (device loop1): turning off discard [ 96.046093][ T5988] BTRFS info (device loop1): disabling free space tree [ 96.263459][ T5988] BTRFS info (device loop1): enabling ssd optimizations [ 96.316323][ T5988] BTRFS info (device loop1): rebuilding free space tree [ 96.365690][ T5791] ocfs2: Unmounting device (7,3) on (node local) [ 96.474083][ T5988] BTRFS info (device loop1): disabling free space tree [ 96.492208][ T5988] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.585569][ T5988] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.788940][ T6020] netlink: 'syz.0.49': attribute type 10 has an invalid length. [ 96.820089][ T6020] syz_tun: entered promiscuous mode [ 96.857671][ T6020] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 96.952725][ T6001] loop2: detected capacity change from 0 to 40427 [ 96.997490][ T6001] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 97.008489][ T6001] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 97.090450][ T787] cfg80211: failed to load regulatory.db [ 97.159058][ T6001] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.213250][ T6027] loop0: detected capacity change from 0 to 512 [ 97.259759][ T6027] EXT4-fs: Ignoring removed bh option [ 97.292684][ T6027] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 97.365175][ T6001] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 97.380218][ T5789] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.388101][ T6001] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.424009][ T6027] EXT4-fs (loop0): 1 truncate cleaned up [ 97.430188][ T6001] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 97.444337][ T6001] syz.2.47: attempt to access beyond end of device [ 97.444337][ T6001] loop2: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 97.460261][ T6027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.469106][ T6001] syz.2.47: attempt to access beyond end of device [ 97.469106][ T6001] loop2: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 97.518085][ T28] audit: type=1800 audit(1763393458.685:2): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.47" name="/" dev="loop2" ino=8 res=0 errno=0 [ 97.675513][ T6022] loop3: detected capacity change from 0 to 32768 [ 97.771913][ T6022] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.48 (6022) [ 97.827112][ T5788] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 97.872980][ T6022] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.898359][ T5788] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 97.918103][ T6022] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 97.926954][ T6022] BTRFS info (device loop3): turning on flush-on-commit [ 97.951021][ T5788] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 97.973453][ T6022] BTRFS info (device loop3): max_inline at 0 [ 97.981726][ T6022] BTRFS info (device loop3): enabling disk space caching [ 98.012205][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.021447][ T6022] BTRFS info (device loop3): setting nodatasum [ 98.027647][ T6022] BTRFS info (device loop3): turning off barriers [ 98.061949][ T6022] BTRFS info (device loop3): disabling tree log [ 98.098054][ T6022] BTRFS info (device loop3): enabling ssd optimizations [ 98.105161][ T6022] BTRFS info (device loop3): force clearing of disk cache [ 98.154584][ T6022] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.167100][ T6022] BTRFS info (device loop3): use zstd compression, level 3 [ 98.180654][ T6022] BTRFS info (device loop3): max_inline at 0 [ 98.196090][ T6022] BTRFS info (device loop3): disk space caching is enabled [ 98.442081][ T6022] BTRFS info (device loop3): rebuilding free space tree [ 98.482079][ T6022] BTRFS info (device loop3): disabling free space tree [ 98.497432][ T6022] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.515220][ T6022] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.535857][ T6022] BTRFS info (device loop3): checking UUID tree [ 98.717999][ T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.743219][ T6058] loop2: detected capacity change from 0 to 512 [ 98.821537][ T6058] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.55: corrupted in-inode xattr: invalid ea_ino [ 98.838586][ T6058] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.55: couldn't read orphan inode 15 (err -117) [ 98.854422][ T6058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.938772][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 98.968687][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.009753][ T787] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 99.024399][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.034318][ T787] usb 1-1: Product: syz [ 99.035518][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.043094][ T787] usb 1-1: Manufacturer: syz [ 99.052937][ T787] usb 1-1: SerialNumber: syz [ 99.079003][ T787] usb 1-1: config 0 descriptor?? [ 99.400585][ T5791] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.510044][ T787] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 99.610165][ T5844] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.868413][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 99.881528][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.924953][ T5844] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.942691][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.956509][ T5844] usb 2-1: config 0 descriptor?? [ 100.187013][ T787] usb 1-1: USB disconnect, device number 3 [ 100.325236][ T6081] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 100.344317][ T6081] batman_adv: batadv0: Adding interface: gretap1 [ 100.351634][ T6081] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.379325][ T6081] batman_adv: batadv0: Interface activated: gretap1 [ 100.404197][ T5844] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 100.543008][ T6088] loop2: detected capacity change from 0 to 1024 [ 100.571318][ T6088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.640823][ T5844] usb 2-1: USB disconnect, device number 3 [ 100.787616][ T5790] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 100.829739][ T5790] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 101.197842][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.212634][ T2979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.245479][ T5790] syz-executor (5790) used greatest stack depth: 19976 bytes left [ 101.416145][ T6096] input: syz1 as /devices/virtual/input/input7 [ 101.432882][ T6092] loop0: detected capacity change from 0 to 32768 [ 101.449321][ T6096] input: failed to attach handler leds to device input7, error: -6 [ 101.453711][ T2979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.472539][ T6092] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.67 (6092) [ 101.540431][ T6092] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.580504][ T6092] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 101.618096][ T6092] BTRFS info (device loop0): enabling auto defrag [ 101.624624][ T6092] BTRFS info (device loop0): use no compression [ 101.652441][ T6092] BTRFS info (device loop0): force clearing of disk cache [ 101.668222][ T6092] BTRFS info (device loop0): max_inline at 4096 [ 101.675662][ T6092] BTRFS info (device loop0): disabling free space tree [ 101.722386][ T2979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.818503][ T6092] BTRFS info (device loop0): enabling ssd optimizations [ 101.825513][ T6092] BTRFS info (device loop0): auto enabling async discard [ 101.853150][ T2979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.866340][ T6092] BTRFS info (device loop0): rebuilding free space tree [ 101.893844][ T6094] loop3: detected capacity change from 0 to 32768 [ 101.922209][ T6094] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.68 (6094) [ 101.941340][ T6092] BTRFS info (device loop0): disabling free space tree [ 102.169891][ T6092] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.181318][ T6092] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.221066][ T6094] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 102.234341][ T6094] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 102.288081][ T6094] BTRFS info (device loop3): using free space tree [ 102.427509][ T6115] loop1: detected capacity change from 0 to 128 [ 102.543782][ T6115] FAT-fs (loop1): bogus number of reserved sectors [ 102.564152][ T6094] BTRFS info (device loop3): enabling ssd optimizations [ 102.581401][ T6115] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 102.602726][ T6094] BTRFS info (device loop3): auto enabling async discard [ 102.643719][ T6115] FAT-fs (loop1): Can't find a valid FAT filesystem [ 102.651210][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.662043][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.670630][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.688634][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.707251][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.714864][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.939097][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.234674][ T5791] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 103.813238][ T6162] loop0: detected capacity change from 0 to 1024 [ 103.949339][ T6162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.048275][ T6162] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.243659][ T6162] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 80: comm syz.0.77: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 104.263600][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.356099][ T6170] loop3: detected capacity change from 0 to 64 [ 104.407182][ T6170] hfs: unable to locate alternate MDB [ 104.438211][ T6170] hfs: continuing without an alternate MDB [ 104.517913][ C0] sched: RT throttling activated [ 104.538835][ T5788] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /16/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 104.631632][ T6159] loop1: detected capacity change from 0 to 131072 [ 104.674759][ T6159] F2FS-fs (loop1): invalid crc value [ 104.727458][ T6159] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.733788][ T5788] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 104.755260][ T5788] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 104.790598][ T5788] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 104.833730][ T5795] Bluetooth: hci0: command tx timeout [ 104.840383][ T6159] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 104.883691][ T5788] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 104.941823][ T5788] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 104.966715][ T5788] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 105.012073][ T28] audit: type=1800 audit(1763393466.215:3): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.76" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 105.059123][ T5788] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 105.140816][ T5788] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 105.361034][ T6132] chnl_net:caif_netlink_parms(): no params data found [ 105.573869][ T2979] batman_adv: batadv0: Interface deactivated: gretap1 [ 105.669677][ T2979] batman_adv: batadv0: Removing interface: gretap1 [ 106.149831][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.157163][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.186998][ T6132] bridge_slave_0: entered allmulticast mode [ 106.209479][ T6132] bridge_slave_0: entered promiscuous mode [ 106.241397][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.268370][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.275726][ T6132] bridge_slave_1: entered allmulticast mode [ 106.300585][ T6132] bridge_slave_1: entered promiscuous mode [ 106.307457][ T6180] loop3: detected capacity change from 0 to 32768 [ 106.431120][ T6180] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.585287][ T5912] bond0: (slave syz_tun): Releasing backup interface [ 106.656451][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.663875][ T6180] XFS (loop3): Ending clean mount [ 106.669887][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.693307][ T6180] XFS (loop3): Quotacheck needed: Please wait. [ 106.696065][ T5912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.726451][ T2979] hsr_slave_0: left promiscuous mode [ 106.740073][ T2979] hsr_slave_1: left promiscuous mode [ 106.757207][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.794148][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.805439][ T6180] XFS (loop3): Quotacheck: Done. [ 106.806101][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.819084][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.827807][ T2979] bridge_slave_1: left allmulticast mode [ 106.834182][ T2979] bridge_slave_1: left promiscuous mode [ 106.842668][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.879044][ T2979] bridge_slave_0: left allmulticast mode [ 106.884868][ T2979] bridge_slave_0: left promiscuous mode [ 106.890802][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.900109][ T5875] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.910347][ T5795] Bluetooth: hci0: command tx timeout [ 106.979808][ T2979] veth1_macvtap: left promiscuous mode [ 106.985907][ T2979] veth0_macvtap: left promiscuous mode [ 107.005553][ T2979] veth1_vlan: left promiscuous mode [ 107.016428][ T2979] veth0_vlan: left promiscuous mode [ 107.100187][ T5875] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.120241][ T5875] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 107.140877][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.163407][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 107.178904][ T5791] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.205707][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 107.233060][ T5875] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.242966][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.251445][ T5875] usb 2-1: Product: syz [ 107.255736][ T5875] usb 2-1: Manufacturer: syz [ 107.279829][ T5875] cdc_wdm 2-1:1.0: skipping garbage [ 107.285092][ T5875] cdc_wdm 2-1:1.0: skipping garbage [ 107.363207][ T5875] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 107.382208][ T5875] cdc_wdm 2-1:1.0: Unknown control protocol [ 107.787196][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.811602][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.827150][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.839176][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.847190][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 107.858015][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.038446][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 108.080856][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 108.134811][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.179796][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.339971][ T5837] usb 2-1: USB disconnect, device number 4 [ 108.662488][ T2979] bond0 (unregistering): Released all slaves [ 108.783003][ T6211] netlink: 9 bytes leftover after parsing attributes in process `syz.3.83'. [ 108.797480][ T6211] gretap0: entered promiscuous mode [ 108.838194][ T6214] netlink: 5 bytes leftover after parsing attributes in process `syz.3.83'. [ 108.854159][ T6214] 0ªî{X¹¦: renamed from gretap0 [ 108.865083][ T6214] 0ªî{X¹¦: left promiscuous mode [ 108.873228][ T6214] 0ªî{X¹¦: entered allmulticast mode [ 108.893701][ T6214] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 108.992128][ T5795] Bluetooth: hci0: command tx timeout [ 109.034474][ T6132] team0: Port device team_slave_0 added [ 109.101536][ T6132] team0: Port device team_slave_1 added [ 109.225190][ T6226] loop1: detected capacity change from 0 to 1024 [ 109.228068][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.261831][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.321118][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.368677][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.396286][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.448028][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.621059][ T6233] loop3: detected capacity change from 0 to 4096 [ 109.714056][ T6233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.805360][ T6132] hsr_slave_0: entered promiscuous mode [ 109.828123][ T6132] hsr_slave_1: entered promiscuous mode [ 109.841391][ T28] audit: type=1400 audit(1763393471.045:4): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6231 comm="syz.3.87" [ 109.953546][ T5795] Bluetooth: hci2: command tx timeout [ 110.065738][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.258302][ T6247] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.301095][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.357977][ T6212] chnl_net:caif_netlink_parms(): no params data found [ 110.472487][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.639434][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.907799][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.068260][ T5795] Bluetooth: hci0: command tx timeout [ 111.248924][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.256810][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.305629][ T6212] bridge_slave_0: entered allmulticast mode [ 111.322225][ T6212] bridge_slave_0: entered promiscuous mode [ 111.402047][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.418164][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.430133][ T6212] bridge_slave_1: entered allmulticast mode [ 111.449195][ T6212] bridge_slave_1: entered promiscuous mode [ 111.461796][ T6282] netlink: 76 bytes leftover after parsing attributes in process `syz.1.97'. [ 111.567792][ T6132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.603015][ T6132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.628423][ T6132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.694234][ T6212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.724874][ T6132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.756243][ T6212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.947161][ T6212] team0: Port device team_slave_0 added [ 111.972847][ T6212] team0: Port device team_slave_1 added [ 112.028052][ T5795] Bluetooth: hci2: command tx timeout [ 112.099637][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.106639][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.233758][ T6212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.270498][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.277495][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.367945][ T6212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.717251][ T6212] hsr_slave_0: entered promiscuous mode [ 112.734174][ T6212] hsr_slave_1: entered promiscuous mode [ 112.741468][ T6212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.750842][ T6212] Cannot create hsr debugfs directory [ 113.135151][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.319692][ T6324] loop3: detected capacity change from 0 to 32768 [ 113.324877][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.376859][ T6324] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.550758][ T6324] XFS (loop3): Ending clean mount [ 113.579907][ T6324] XFS (loop3): Quotacheck needed: Please wait. [ 113.648315][ T6324] XFS (loop3): Quotacheck: Done. [ 113.728866][ T6324] XFS (loop3): syz.3.105 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 113.752534][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.759859][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.823355][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.830600][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.848158][ T5791] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.051085][ T6212] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.078528][ T5857] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.108553][ T5795] Bluetooth: hci2: command tx timeout [ 114.118327][ T6212] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.233806][ T6212] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.253163][ T6212] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.290117][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.326995][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.347359][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.388019][ T5857] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.399851][ T12] hsr_slave_0: left promiscuous mode [ 114.405913][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.414113][ T12] hsr_slave_1: left promiscuous mode [ 114.421398][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.435573][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.438842][ T5857] usb 2-1: config 0 descriptor?? [ 114.452856][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.462936][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.476541][ T12] bridge_slave_1: left allmulticast mode [ 114.485636][ T12] bridge_slave_1: left promiscuous mode [ 114.495520][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.516167][ T12] bridge_slave_0: left allmulticast mode [ 114.525633][ T12] bridge_slave_0: left promiscuous mode [ 114.534930][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.601399][ T12] veth1_macvtap: left promiscuous mode [ 114.607118][ T12] veth0_macvtap: left promiscuous mode [ 114.638457][ T12] veth1_vlan: left promiscuous mode [ 114.644715][ T12] veth0_vlan: left promiscuous mode [ 114.915118][ T5857] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 114.926862][ T5857] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 114.953825][ T5857] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 115.244611][ T5857] usb 2-1: USB disconnect, device number 5 [ 115.328771][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.380822][ T12] team0 (unregistering): Port device team_slave_0 removed [ 115.425944][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.475875][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.044056][ T12] bond0 (unregistering): Released all slaves [ 116.188248][ T5795] Bluetooth: hci2: command tx timeout [ 116.452866][ T6212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.535889][ T6212] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.590839][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.598035][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.650058][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.657274][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.811018][ T6212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.832313][ T6388] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 116.912811][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.440808][ T6409] loop1: detected capacity change from 0 to 2048 [ 117.456019][ T6212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.541934][ T6409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.877996][ T6132] veth0_vlan: entered promiscuous mode [ 117.955067][ T6132] veth1_vlan: entered promiscuous mode [ 118.054161][ T6132] veth0_macvtap: entered promiscuous mode [ 118.091755][ T6132] veth1_macvtap: entered promiscuous mode [ 118.146933][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.217861][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.227805][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.283593][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.328400][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.390724][ T6433] loop1: detected capacity change from 0 to 4096 [ 118.413745][ T6433] EXT4-fs: Ignoring removed bh option [ 118.434792][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.456519][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.505028][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.536952][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.591727][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.654307][ T6132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.695485][ T6132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.705797][ T6132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.716336][ T6132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.742663][ T6433] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.756999][ T6212] veth0_vlan: entered promiscuous mode [ 118.779698][ T6433] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003] [ 118.801759][ T6433] System zones: 0-5 [ 118.811960][ T6447] block nbd3: not configured, cannot reconfigure [ 118.850689][ T6433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.893117][ T6212] veth1_vlan: entered promiscuous mode [ 119.057095][ T6212] veth0_macvtap: entered promiscuous mode [ 119.114207][ T6212] veth1_macvtap: entered promiscuous mode [ 119.144663][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.194756][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.204217][ T6453] syz.3.128 uses obsolete (PF_INET,SOCK_PACKET) [ 119.231349][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.263030][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.288699][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.310020][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.330126][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.350635][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.364705][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.390941][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.517038][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.528950][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.539438][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.583307][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.597753][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.613217][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.642847][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.651591][ T6464] loop1: detected capacity change from 0 to 512 [ 119.666089][ T6464] EXT4-fs: inline encryption not supported [ 119.676772][ T6212] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.689775][ T6212] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.699286][ T6212] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.708469][ T6212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.732771][ T6464] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 119.756278][ T6464] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002] [ 119.771176][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.786406][ T6464] EXT4-fs (loop1): orphan cleanup on readonly fs [ 119.802337][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.814887][ T6464] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 119.836498][ T6464] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 119.890872][ T6464] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 119.905808][ T6464] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.130: bg 0: block 40: padding at end of block bitmap is not set [ 119.925164][ T6468] loop3: detected capacity change from 0 to 256 [ 119.927612][ T6464] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 119.950305][ T6464] EXT4-fs (loop1): 1 truncate cleaned up [ 119.959867][ T6464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.038796][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.087683][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.198215][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.206910][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.237085][ T6464] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.130: bad symlink. [ 122.452766][ T6535] sctp: [Deprecated]: syz.5.151 (pid 6535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.452766][ T6535] Use struct sctp_sack_info instead [ 123.308359][ T5857] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.533227][ T5857] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.551417][ T5857] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.564929][ T5857] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.578136][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.600689][ T5857] usb 4-1: SerialNumber: syz [ 123.833761][ T1133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.860764][ T5857] usb 4-1: 0:2 : does not exist [ 124.008017][ T5857] usb 4-1: USB disconnect, device number 2 [ 124.093192][ T1133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.134406][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.322851][ T1133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.480470][ T1133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.520560][ T6561] loop4: detected capacity change from 0 to 32768 [ 124.716319][ T6561] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.765294][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.003642][ T6561] XFS (loop4): Ending clean mount [ 125.040821][ T6561] XFS (loop4): Quotacheck needed: Please wait. [ 125.102469][ T5844] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.145188][ T6561] XFS (loop4): Quotacheck: Done. [ 125.318218][ T5844] usb 4-1: Using ep0 maxpacket: 8 [ 125.343633][ T5844] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 125.372099][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.388946][ T6561] XFS (loop4): User initiated shutdown received. [ 125.406558][ T5844] usb 4-1: Product: syz [ 125.419978][ T6561] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 125.438060][ T5844] usb 4-1: Manufacturer: syz [ 125.442707][ T5844] usb 4-1: SerialNumber: syz [ 125.459618][ T6561] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 125.470187][ T5844] usb 4-1: config 0 descriptor?? [ 125.488652][ T6577] loop5: detected capacity change from 0 to 32768 [ 125.497297][ T5844] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 125.597539][ T6577] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.614685][ T6132] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.044376][ T6577] XFS (loop5): Ending clean mount [ 126.086939][ T6577] XFS (loop5): Quotacheck needed: Please wait. [ 126.238802][ T6577] XFS (loop5): Quotacheck: Done. [ 126.270555][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.282206][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.291366][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.301309][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.311953][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 126.321519][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.360203][ T5844] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 126.367780][ T5844] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 126.387757][ T5844] usb 4-1: USB disconnect, device number 3 [ 126.525977][ T6620] XFS (loop5): User initiated shutdown received. [ 126.532705][ T6620] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 126.546475][ T6620] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 126.634725][ T6212] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.031207][ T1133] hsr_slave_0: left promiscuous mode [ 127.087242][ T1133] hsr_slave_1: left promiscuous mode [ 127.098943][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.111253][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.132567][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.140769][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.161743][ T1133] bridge_slave_1: left allmulticast mode [ 127.173214][ T1133] bridge_slave_1: left promiscuous mode [ 127.191002][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.212475][ T1133] bridge_slave_0: left allmulticast mode [ 127.218276][ T1133] bridge_slave_0: left promiscuous mode [ 127.224583][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.277919][ T1133] veth1_macvtap: left promiscuous mode [ 127.285951][ T1133] veth0_macvtap: left promiscuous mode [ 127.294785][ T1133] veth1_vlan: left promiscuous mode [ 127.320570][ T1133] veth0_vlan: left promiscuous mode [ 127.458079][ T5875] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 127.664080][ T5875] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 127.679955][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.712938][ T5875] usb 6-1: config 0 descriptor?? [ 127.720750][ T5875] cp210x 6-1:0.0: cp210x converter detected [ 128.144317][ T5875] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 128.165045][ T5875] usb 6-1: cp210x converter now attached to ttyUSB0 [ 128.394999][ T5844] usb 6-1: USB disconnect, device number 2 [ 128.431960][ T5795] Bluetooth: hci1: command tx timeout [ 128.434193][ T5844] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.492759][ T5844] cp210x 6-1:0.0: device disconnected [ 128.559355][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 128.670175][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 128.734173][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.796211][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.684273][ T1133] bond0 (unregistering): Released all slaves [ 130.032637][ T6614] chnl_net:caif_netlink_parms(): no params data found [ 130.220150][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.333722][ T6614] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.335032][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.335212][ T6614] bridge_slave_0: entered allmulticast mode [ 130.346251][ T6614] bridge_slave_0: entered promiscuous mode [ 130.351786][ T6614] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.352025][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.352206][ T6614] bridge_slave_1: entered allmulticast mode [ 130.353558][ T6614] bridge_slave_1: entered promiscuous mode [ 130.420992][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.421025][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.421047][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.421088][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.421110][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.425400][ T27] usb 4-1: config 0 descriptor?? [ 130.484290][ T6614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.504260][ T6614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.526810][ T5795] Bluetooth: hci1: command tx timeout [ 130.573870][ T6614] team0: Port device team_slave_0 added [ 130.619712][ T6614] team0: Port device team_slave_1 added [ 130.719850][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.719867][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.719887][ T6614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.721917][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.721931][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.721951][ T6614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.860927][ T27] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 130.872306][ T6614] hsr_slave_0: entered promiscuous mode [ 130.877176][ T6614] hsr_slave_1: entered promiscuous mode [ 130.895571][ T27] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 130.912424][ T6614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.912525][ T6614] Cannot create hsr debugfs directory [ 131.103230][ T6686] loop5: detected capacity change from 0 to 512 [ 131.113262][ T6686] EXT4-fs: Ignoring removed bh option [ 131.127151][ T6686] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 131.180744][ T27] usb 4-1: USB disconnect, device number 4 [ 131.235282][ T6686] EXT4-fs (loop5): 1 truncate cleaned up [ 131.268935][ T6686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.295629][ T6692] loop4: detected capacity change from 0 to 16 [ 131.323197][ T6692] erofs: (device loop4): mounted with root inode @ nid 36. [ 131.425583][ T6692] syz.4.179: attempt to access beyond end of device [ 131.425583][ T6692] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 131.528516][ T6692] syz.4.179: attempt to access beyond end of device [ 131.528516][ T6692] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 131.550999][ T6212] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 131.576184][ T6212] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 131.589159][ T6692] syz.4.179: attempt to access beyond end of device [ 131.589159][ T6692] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 131.606431][ T6212] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 131.650736][ T6212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.694685][ T6614] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 131.707600][ T6132] BUG: Bad page state in process syz-executor pfn:560f5 [ 131.715411][ T6132] page:ffffea0001583d40 refcount:0 mapcount:0 mapping:ffff88805f1c07c8 index:0x2 pfn:0x560f5 [ 131.725947][ T6132] aops:z_erofs_cache_aops ino:0 [ 131.730925][ T6132] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 131.739033][ T6132] page_type: 0xffffffff() [ 131.743409][ T6132] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805f1c07c8 [ 131.752144][ T6132] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 131.760830][ T6132] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 131.768226][ T6132] page_owner tracks the page as allocated SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 131.774406][ T6132] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6692, tgid 6691 (syz.4.179), ts 131425205833, free_ts 130441432905 [ 131.797171][ T6132] post_alloc_hook+0x1cd/0x210 [ 131.802926][ T6132] get_page_from_freelist+0x195c/0x19f0 [ 131.808593][ T6132] __alloc_pages+0x1e3/0x460 [ 131.813208][ T6132] z_erofs_do_read_page+0x20c0/0x3680 [ 131.818696][ T6132] z_erofs_pcluster_readmore+0x2cf/0x450 [ 131.824371][ T6132] z_erofs_read_folio+0x208/0x540 [ 131.829534][ T6132] filemap_read_folio+0x167/0x760 [ 131.834678][ T6132] do_read_cache_folio+0x470/0x7e0 [ 131.839879][ T6132] erofs_bread+0x16f/0x630 [ 131.844412][ T6132] erofs_namei+0x28c/0xf00 [ 131.848972][ T6132] erofs_lookup+0x135/0x310 [ 131.853515][ T6132] lookup_one_qstr_excl+0x112/0x250 [ 131.858795][ T6132] filename_create+0x222/0x460 [ 131.863590][ T6132] do_symlinkat+0xbd/0x3f0 [ 131.868166][ T6132] __x64_sys_symlinkat+0x99/0xb0 [ 131.873135][ T6132] do_syscall_64+0x55/0xb0 [ 131.877585][ T6132] page last free stack trace: [ 131.882889][ T6132] free_unref_page_prepare+0x7ce/0x8e0 [ 131.888589][ T6132] free_unref_page+0x32/0x2e0 [ 131.893309][ T6132] __unfreeze_partials+0x1cf/0x210 [ 131.898518][ T6132] put_cpu_partial+0x17c/0x250 [ 131.903317][ T6132] __slab_free+0x31d/0x410 [ 131.907759][ T6132] qlist_free_all+0x75/0xe0 [ 131.912362][ T6132] kasan_quarantine_reduce+0x143/0x160 [ 131.918579][ T6132] __kasan_slab_alloc+0x22/0x80 [ 131.923477][ T6132] slab_post_alloc_hook+0x6e/0x4d0 [ 131.928678][ T6132] kmem_cache_alloc+0x11e/0x2e0 [ 131.933553][ T6132] __kernfs_new_node+0xd8/0x7e0 [ 131.938483][ T6132] kernfs_new_node+0x14c/0x260 [ 131.943266][ T6132] kernfs_create_dir_ns+0x44/0x120 [ 131.948529][ T6132] sysfs_create_dir_ns+0x124/0x280 [ 131.953666][ T6132] kobject_add_internal+0x6b8/0xc70 [ 131.958905][ T6132] kobject_init_and_add+0x126/0x190 [ 131.964200][ T6132] Modules linked in: [ 131.968171][ T6132] CPU: 0 PID: 6132 Comm: syz-executor Not tainted syzkaller #0 [ 131.975727][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.985801][ T6132] Call Trace: [ 131.989183][ T6132] [ 131.992214][ T6132] dump_stack_lvl+0x16c/0x230 [ 131.996993][ T6132] ? show_regs_print_info+0x20/0x20 [ 132.002233][ T6132] ? swiotlb_print_info+0x70/0x70 [ 132.007294][ T6132] bad_page+0x14b/0x170 [ 132.011480][ T6132] free_unref_page_prepare+0x887/0x8e0 [ 132.017076][ T6132] free_unref_page+0x32/0x2e0 [ 132.021824][ T6132] ? __folio_put+0xef/0x210 [ 132.026348][ T6132] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 132.032783][ T6132] erofs_shrink_workstation+0x118/0x290 [ 132.038350][ T6132] ? erofs_shrinker_unregister+0x170/0x170 [ 132.044161][ T6132] ? io_schedule+0xd0/0xd0 [ 132.048663][ T6132] ? kobject_put+0x43c/0x470 [ 132.053249][ T6132] erofs_shrinker_unregister+0x5d/0x170 [ 132.058805][ T6132] erofs_put_super+0x4e/0x150 [ 132.063483][ T6132] ? erofs_free_inode+0xb0/0xb0 [ 132.068325][ T6132] generic_shutdown_super+0x134/0x2b0 [ 132.073695][ T6132] kill_block_super+0x44/0x90 [ 132.078374][ T6132] erofs_kill_sb+0x4c/0x140 [ 132.082872][ T6132] deactivate_locked_super+0x97/0x100 [ 132.088254][ T6132] cleanup_mnt+0x429/0x4c0 [ 132.092766][ T6132] task_work_run+0x1ce/0x250 [ 132.097355][ T6132] ? task_work_cancel+0x240/0x240 [ 132.102377][ T6132] ? exit_to_user_mode_loop+0x3b/0x110 [ 132.107838][ T6132] exit_to_user_mode_loop+0xe6/0x110 [ 132.113126][ T6132] exit_to_user_mode_prepare+0xf6/0x180 [ 132.118705][ T6132] syscall_exit_to_user_mode+0x1a/0x50 [ 132.124173][ T6132] do_syscall_64+0x61/0xb0 [ 132.128671][ T6132] ? clear_bhb_loop+0x40/0x90 [ 132.133357][ T6132] ? clear_bhb_loop+0x40/0x90 [ 132.138028][ T6132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.143912][ T6132] RIP: 0033:0x7fe08f9909f7 [ 132.148416][ T6132] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 132.168058][ T6132] RSP: 002b:00007ffcc337e958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 132.176466][ T6132] RAX: 0000000000000000 RBX: 00007fe08fa11d7d RCX: 00007fe08f9909f7 [ 132.184427][ T6132] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc337ea10 [ 132.192393][ T6132] RBP: 00007ffcc337ea10 R08: 0000000000000000 R09: 0000000000000000 [ 132.200370][ T6132] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc337faa0 [ 132.208422][ T6132] R13: 00007fe08fa11d7d R14: 0000000000020224 R15: 00007ffcc337fae0 [ 132.216411][ T6132] [ 132.220600][ T6132] Disabling lock debugging due to kernel taint [ 132.588069][ T5795] Bluetooth: hci1: command tx timeout [ 134.669577][ T5795] Bluetooth: hci1: command tx timeout [ 138.033035][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.040812][ T1292] ieee802154 phy1 wpan1: encryption failed: -22