last executing test programs: 58.483661488s ago: executing program 2 (id=72): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e001000"], 0xc) 57.637495493s ago: executing program 2 (id=74): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000003840)=0xd, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @loopback, 0x627bcafb}, 0x1c) 57.449501067s ago: executing program 2 (id=78): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(0x3) 57.27212715s ago: executing program 2 (id=81): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3800052, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x40001) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000000000)=""/162, 0xa2) 55.735535028s ago: executing program 2 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x50fd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r1}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 54.439516252s ago: executing program 2 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r3 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/56, 0x0, 0xeeef0000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000d40)={0x2, 0x0, [{0x80a4002, 0x1000, &(0x7f0000001600)=""/4096}, {0x4, 0x1000, &(0x7f0000002600)=""/4096}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000000000009e10000095d5bdc18a42d8c8d8470056360f9778cad16ccc46"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) r5 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x802, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 53.750115434s ago: executing program 32 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r3 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/56, 0x0, 0xeeef0000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000d40)={0x2, 0x0, [{0x80a4002, 0x1000, &(0x7f0000001600)=""/4096}, {0x4, 0x1000, &(0x7f0000002600)=""/4096}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000000000009e10000095d5bdc18a42d8c8d8470056360f9778cad16ccc46"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) r5 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x802, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 23.251166844s ago: executing program 4 (id=221): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000900e30f10000000000000630000000000000095000500000000001b43ccfe07518bc50f83f14bef53e269215a37527837969d244f43bf0d2bba71b506ee70787fc92eac38ceae2c5c"], 0x0, 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x810000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3, 0x534, &(0x7f0000000980)="$eJzs3e9u09YbwPHHpdWvvzChaZsQqgocyiYVqQQngaCIV55zkh5w7Mh2UPsKVTRFFSlMlElrX403bJO2i+DtLmKXsDtBu4RNtpOStvlTurZh1fcTgU/sJz7PsSI/dRLbAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHKrtl2wxDN+a0UN51bDoDFieW99t/ZNRvQrYiX/ZHZWrmSzrnz1YfHl5L8Fmc+ezctsMpmV3YuXP3/w5fRU7/UjEjoT2zu7z9c6nfarSScyIXXtmygwDaeulYkCVSmX7TvLtUjVjKej1SjWDeWG2omDUC26t1ShUikpnV8NWn696ni6N/P+7aJtl9XDfFM7YRT4dx7mI3fZeJ7x62lMsjiJuZ+8ER+ZWMXaaSi1sdlpl5RSF0clmQQVxo0kCSqOCyraxWKhUCwWyvcq9+7b9vShGfYBcihi8m9aTNYJ78GB45vq1n/xxIgvLVkRNfDhSlVCCaQxZHlXr/5/c0eP7Le//veq/JUPi+ckrf/XsmfXhtX/Ibmc3WNbdmRXnsuadKQjbXk18YzO9lEXLb4YiSQQIw1x0jmqO0dJRcpSFlueyLLUJBIlNTHiiZZIViWSWHT6jnIlFC2OxBJIKEoWxZVboqQgFalISZRoycuqBNISX+pSFSddy4Zsptu9NDTD/8teUGHEQPaCiiOCqP/4905+Jw4c09+9+j/czNllAwAAAAAAToOVfvpupYf5V9NWzXjannRaAAAAAADgBKXf/M8nk/Rr/qticfwPAAAAAMB5Y6Xn2FkikpPrWat3JhQfAgAAAAAAcE6k3/9fSya5pHVdLI7/AQAAAAA4b34ee439qPk/64+/JAxnrDfNla+tLSeJc7YuZK+7cHCNcW3OutRdSTopT3efuXre6l79cu8imO+zTyDebwzL47N0rmVZJ5CA/Co3spgb69l0vbckG22uZjyddwPvQUEc59JUrFfi719s/iDp8H/xG5cs2djstPNPX3bW01zeJGt5s9W9gOLQ6ygOyOV1er2F9JyLgVt+Jj0RI+vX+jHr1+4f/1T28qmPGP9bWchiFnLZNLd//LNJn4X8sNHnsiwKB0Y+cNQjs7iZxdxcvJlNBmRRHJpF0t1mp13sz+JY2+IIWZTGbYtSL4uZD91/TBYAMCkbY6qQdbjwH2MvN7S693o5ker+VhazmMW5dMc6PTdgj26P26PbR6nrI7L4febgPZCG1dik398OVNV3yQveDe038opWsgkvvN76Ti5v7+ze3txae9Z+1n5RLJbK9l3bvleUmXQY3Qm1BwAwwPh77IyNsO6OOar+Yu8nBXl5Ki+lI+uylJ5tkP7iYOBac30/Q1gac9Sa67vDy9KYo7pc341ejh5byuIO/TECAMB/08KYOnyU+r805rh7fy0ffXTcX8sBAMDp0OF7Kxf/ZIWhaT4pVCoFJ17WKgzcRyo01bpWxo916C47fl2rZhjEgRt4SeOxqepIRa1mMwhjVQtC1Qwis5Le+V11b/0e6Ybjx8aNmp52Iq3cwI8dN1ZVE7mq2frWM9GyDtMXR03tmppxndgEvoqCVujqvFKR1n2Bpqr92NRM0vRVMzQNJ1xVjwOv1dCqqiM3NM04yFbY68v4tSBspKvNT3pjAwDwidje2X2+1um0X51iY9JjBAAA+1GlAQAAAAAAAAAAAAAAAAAAAAD49J3F+X+Tb/yZ3UVAPpV8aNA4oYZ1Wmue9J4JwGn7JwAA///kP1AE") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 22.93172105s ago: executing program 4 (id=222): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') r1 = syz_open_procfs(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x68, r6, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @probe_request={{{}, {}, @device_b, @device_b, @from_mac}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x95ce, 0xe9}}, @val={0x72, 0x6}}}]}, 0x68}}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) r8 = open_tree(r0, &(0x7f0000000640)='\x00', 0x9901) add_key(&(0x7f0000001340)='logon\x00', &(0x7f0000001380)={'syz', 0x0}, &(0x7f00000013c0)="bd584b8001", 0x5, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) rmdir(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000400)={'ip_vti0\x00', r9, 0x10, 0x20, 0xfffffffb, 0x4, {{0x13, 0x4, 0x3, 0x24, 0x4c, 0x64, 0x0, 0xd4, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@cipso={0x86, 0x26, 0x1, [{0x2, 0x10, "9590d47620ec194d4cd4609f8c06"}, {0x7, 0x10, "8e3da2938a1871c9e1f0290b0f1a"}]}, @rr={0x7, 0xf, 0x2e, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x10005, 0x5, 0x80008, r8, 0x1, '\x00', r10, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0xa}, 0x50) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r11, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0xfe}, @raw32}], 0x1c) openat$cgroup_ro(r8, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) 21.952149908s ago: executing program 4 (id=227): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x7}}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x5, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x80, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0x3, 0x7, 0x40000, 0x1a, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x200, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xd, 0x7, 0x9, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x4, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x23, 0x7fff, 0x8, 0xffffffff, 0x1, 0x0, 0x0, 0x7f, 0x61f1, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7fc, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x2004, 0x401, 0x80000001, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x0, 0x1, 0x9, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc7, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb10, 0xbae3, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x200, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xfdff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x6, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x16], [0x10000010, 0x7, 0x7, 0x2, 0xa5e, 0xfe, 0xff, 0x8, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xda9, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffa, 0x40, 0x80000000, 0x4, 0xb, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x80000000, 0x6, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 21.000385065s ago: executing program 4 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001240)="$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") mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x111509e, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1195002, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 19.839968617s ago: executing program 4 (id=237): futex(&(0x7f0000000e40)=0x1, 0x0, 0x1, &(0x7f0000000e80)={0x0, 0x3938700}, 0x0, 0x1) 18.708804618s ago: executing program 4 (id=243): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") memfd_create(0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 18.112120048s ago: executing program 33 (id=243): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") memfd_create(0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.659887706s ago: executing program 3 (id=297): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x2008802, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x0, 0x14) getdents(r3, &(0x7f00000000c0)=""/127, 0x7f) getdents(r3, 0xfffffffffffffffd, 0x58) 5.047929178s ago: executing program 3 (id=300): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x68000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) 5.047774928s ago: executing program 0 (id=301): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x1004080, &(0x7f0000000700)=ANY=[@ANYBLOB="747970653dd88d17102c6e6c733d61736369692c00b65c5e80ee881a8017a99080db5f384bdecc38aad57f2265deb9bc09ceaa37a446dd9779c499df84c71ac5709884f5a46a6157a859efa0011b98ed9e0084e7f30840308a546dfc131f58f11e2885d3d93d1ea670d769ec2f0aa0c9e9bc2dce36eb80f93e9c66e51cd63047e63897ad645ff9e1c43c323948225427a038840483468e20afe97ee11df867f724292017e27da8ee18b36e12ec848a02f157f0c97084870848c3f5103ccfd56e4127491ea8e57c6de2a2684c421731b94b9a8eb0a73852ee4f6b71e76393bd", @ANYRES64, @ANYBLOB="ddfc36c1a86d80c396383ffcc197726f90603a191b0051c97237be8b92a4e2bee79ac5b0a630acc01ff6292ade8efe9a2912e4d50000000000000000ed89a1ed56983cea56d5a14532e0ca6acc7a0c89adaa25f5a6ab6af98d2a5615273b84368fe9a8162067e4931fc69722717bf6fa16ed2b3637b6a2d728ce8e1da3aaf1c1675d818a3346c6ec8521fb5e76a80770c3c036017ab72c5284bf759b76b729d4eaa7a132ebd7f6043c22b32b760e4ead606f0baeb6afd7bb34b340f3566dab462015df4d74fa69dc449b5c69697467bab588be80b7c96389f9bfca1637fdf08734b642fae514f1ab54d59f6cb21cce1855225aa983a2258f4382e523ccff2a60f0b6de6bc28327609020898dd44682f10307fbfb367653d8ad36594583809cdb4ac19c5d82", @ANYRESOCT], 0x4, 0x5d8, &(0x7f00000010c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 5.001606229s ago: executing program 1 (id=302): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') exit(0xd4) read$FUSE(r2, &(0x7f0000006300)={0x2020}, 0x2069) 4.794780463s ago: executing program 3 (id=303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 4.655832825s ago: executing program 0 (id=304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f00050000000300"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 3.608413814s ago: executing program 1 (id=305): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') r1 = syz_open_procfs(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x68, r6, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @probe_request={{{}, {}, @device_b, @device_b, @from_mac}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x95ce, 0xe9}}, @val={0x72, 0x6}}}]}, 0x68}}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) r8 = open_tree(r0, &(0x7f0000000640)='\x00', 0x9901) add_key(&(0x7f0000001340)='logon\x00', &(0x7f0000001380)={'syz', 0x0}, &(0x7f00000013c0)="bd584b8001", 0x5, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) rmdir(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000400)={'ip_vti0\x00', r9, 0x10, 0x20, 0xfffffffb, 0x4, {{0x13, 0x4, 0x3, 0x24, 0x4c, 0x64, 0x0, 0xd4, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@cipso={0x86, 0x26, 0x1, [{0x2, 0x10, "9590d47620ec194d4cd4609f8c06"}, {0x7, 0x10, "8e3da2938a1871c9e1f0290b0f1a"}]}, @rr={0x7, 0xf, 0x2e, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x10005, 0x5, 0x80008, r8, 0x1, '\x00', r10, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0xa}, 0x50) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0xfe}, @raw32}], 0x1c) mount_setattr(r8, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0xc0000, {r0}}, 0x20) 3.252342371s ago: executing program 3 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c050005000200000005000100"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 2.682570401s ago: executing program 0 (id=307): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x28) 2.21189024s ago: executing program 0 (id=308): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000006780)={0xcc, 0x6, 0x9, 0x1000, 0xffffffffffffffff, 0x8, 0x8, 0x9}, 0x0, 0x0, &(0x7f0000006840), 0x0) 2.159110771s ago: executing program 1 (id=309): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@mcast1, @empty, @mcast1, 0x3, 0x0, 0x0, 0x500}) 2.030763433s ago: executing program 5 (id=244): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) close_range(r0, 0xffffffffffffffff, 0x0) 1.891921386s ago: executing program 0 (id=310): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x2c020400) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 1.864174826s ago: executing program 1 (id=311): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x10, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x1, 0x0, 0x29, 0x0, @private=0xa010101, @rand_addr=0x3}}}}) 1.6853191s ago: executing program 3 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) 1.6358854s ago: executing program 1 (id=313): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000001c00)={0x0, &(0x7f0000000180)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {0x0, 0x300}], 0x2) 1.14841545s ago: executing program 0 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r2, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 876.241325ms ago: executing program 5 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="09000000180001000000200000000000021400000000000a0000000005001b0002000000"], 0x24}}, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30001000000900020073797a310000000014000380080001400000000008040000000000004800000016160101000b008000000000010000000900020073797a3100000000090001ad8e3abd2d9dbbfd001c000380180003801400010070676d36726567310000000000000000140000001000010000000000000000000000000a33dff2cf"], 0xd0}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x42}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket(0x400000000010, 0x80000, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x81&\xf5\t\x00\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xa9J3\x18\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V\x01\x00\x00\x00\x00\x00\x00\x00\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOe+\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\x99I\x9a9+r\x91\x06\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx', 0x3) sendfile(r5, r6, &(0x7f00000001c0), 0x8) fcntl$addseals(r6, 0x409, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000001900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6062d308001406fffc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 807.730736ms ago: executing program 3 (id=316): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000000000008000000eec0215a84d63317efcbf60beee07936e9"], 0x40}, 0x0) 0s ago: executing program 1 (id=317): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000280)={[{@nouser_xattr}, {@resuid}, {@data_ordered}, {@init_itable}], [{@hash}, {@uid_gt}, {@fsname={'fsname', 0x3d, '*'}}]}, 0xfc, 0x4b3, &(0x7f0000000600)="$eJzs3M9vFFUcAPDvbn8DhfoDlR9qVYgEldLyQw5eMJp40MRED+jJWgqpXcTQmgghFo3BoyHx4M14NPEv8KQXo55MvOrdkBDSC6gkrpnZmf5YdttdukuB/XyShfdm3s57b9686Zv32gmgYw0n/xQiNkXEH0m4mEYXlLNESbrr8+cn/p4/P1GIcvmNq4V037X58xN52vx7m7LInmJE8bNC7KiR78zZc9PjpdLkmSw+Mnvqg5GZs+eemzo1fnLy5OT7Y0eOHDww+vzhsUMtqedgUtbtH5/eue2Vty69NnHs0ru/fNedl7WqHq0yHMPLzuVSu1ud2TobXBIudDf8tWJbCkPDuiIiaa6etP9via5YbLwt8fKn61o4oK3K5XJ5c/3dF8rAPawQ610CYH3kP+ivzQ9Ef5ueg+9kV45WHoCSel/PPpU93QsPpz1Vz7et1J/Nmxy78M/XkZ7/vo46/wDA7fdDMv55tjL+yT+VPUPx0JJ0m9P54GRrxH0RcX9EPBARD0bE1og07cMR8UiT+Q9XxW8efxYvR8S5vbdUu9Ul478XsrWt5eO/bPT3X3moK4sNxkAMRU+hb6o0uT87J3uip+/EVGlydIU8fnzp9y/q7RvOxn75J8k/Hwtm5bjc3bf8O8fHZ8fXVutFVz5J5wDnbq7/4spVEtoWEdtv4fjJuHlq77c76+1fvf4raHydqa7yNxFPV9r/QqxQ/+r1yYFs3+GxQyP9UZrcP3Iiuypu9utvF1+vl/+a6t8CSftvqHn9L9R/qLB0vXam+Twu/vl53WeaJq7/t/MtyfXfW3gzDfdGDE5XNs+eGY3oLbyab099ND47e2Zs8Wh5PP1/NOLKpq0RT9Xu/8k9LrnGkvrviIjkIn40Ih6LiMezsj8REU9Geoha5q5HxM8v7nov3/BOE/W/HYujSfsfX9b+sUr7Nx/omv7p+3r5N9b+B9PQnmxLI/e/Rgu4lnMHAAAAd4ti+jvwheK+hXCxuG9fxMZ0bndDsXR6ZvaZE6c//Pd45Xflh6KnmM90VeaDewr5/OfQkvhYVfxANm/8ZddAGt+QrX0D62fj0v6fTjhW+n/ir651LhzQfi1YRwPuUvo/dC79HzqX/g+dq9H+X25zOYDbr1b/n1sWq/rzBit3cM8w/ofOpf9D59L/oXPp/9CR1vJ3/VWBo9lrSlZMvPvY1V0tyOvuCMw1fXr7Y6U0vXdIvdJAFNNAee4Wvp6/0Gatxbgx0MRxbrTvbORvy1g9cU9W8zuhBWsECtmLP6bHSzVvF1/1tf2OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Fr/BwAA//88bNLu") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@end]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x5, 0x100, @val=0x80}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 72.946083][ T5776] cgroup: Unknown subsys name 'net' [ 73.116067][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.593874][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.117847][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.128290][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.148395][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.156740][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.164641][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.172147][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.181113][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.191637][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.236185][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.259216][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.269064][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.274265][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.277378][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.283485][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.292182][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.304549][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.312619][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.320120][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.328674][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.328792][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.348341][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.355994][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.363393][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.370676][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.802706][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 76.858051][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 76.906051][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 77.056782][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 77.085986][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.094162][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.102083][ T5786] bridge_slave_0: entered allmulticast mode [ 77.110083][ T5786] bridge_slave_0: entered promiscuous mode [ 77.141646][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.148948][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.156073][ T5795] bridge_slave_0: entered allmulticast mode [ 77.163225][ T5795] bridge_slave_0: entered promiscuous mode [ 77.171839][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.179133][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.186289][ T5786] bridge_slave_1: entered allmulticast mode [ 77.193810][ T5786] bridge_slave_1: entered promiscuous mode [ 77.223255][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.230663][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.238158][ T5795] bridge_slave_1: entered allmulticast mode [ 77.244949][ T5795] bridge_slave_1: entered promiscuous mode [ 77.277882][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.285077][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.292308][ T5793] bridge_slave_0: entered allmulticast mode [ 77.299122][ T5793] bridge_slave_0: entered promiscuous mode [ 77.335636][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.342877][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.350804][ T5793] bridge_slave_1: entered allmulticast mode [ 77.357662][ T5793] bridge_slave_1: entered promiscuous mode [ 77.380157][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.392361][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.404700][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.417265][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.493599][ T5786] team0: Port device team_slave_0 added [ 77.513272][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.520806][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.527956][ T5789] bridge_slave_0: entered allmulticast mode [ 77.535875][ T5789] bridge_slave_0: entered promiscuous mode [ 77.545815][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.567677][ T5786] team0: Port device team_slave_1 added [ 77.574068][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.581641][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.589198][ T5789] bridge_slave_1: entered allmulticast mode [ 77.596060][ T5789] bridge_slave_1: entered promiscuous mode [ 77.604201][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.626476][ T5795] team0: Port device team_slave_0 added [ 77.635426][ T5795] team0: Port device team_slave_1 added [ 77.696893][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.704124][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.730759][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.744696][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.751720][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.778005][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.801995][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.813871][ T5793] team0: Port device team_slave_0 added [ 77.846287][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.870161][ T5793] team0: Port device team_slave_1 added [ 77.876527][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.883625][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.909910][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.922430][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.929589][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.955943][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.031659][ T5789] team0: Port device team_slave_0 added [ 78.038589][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.045557][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.075298][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.087969][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.095330][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.121488][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.136901][ T5786] hsr_slave_0: entered promiscuous mode [ 78.143599][ T5786] hsr_slave_1: entered promiscuous mode [ 78.164118][ T5789] team0: Port device team_slave_1 added [ 78.230450][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.237430][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.263772][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.269791][ T5791] Bluetooth: hci0: command tx timeout [ 78.277280][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.286858][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.312982][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.348486][ T5791] Bluetooth: hci1: command tx timeout [ 78.373027][ T5793] hsr_slave_0: entered promiscuous mode [ 78.380725][ T5793] hsr_slave_1: entered promiscuous mode [ 78.386839][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.395434][ T5793] Cannot create hsr debugfs directory [ 78.406149][ T5795] hsr_slave_0: entered promiscuous mode [ 78.413061][ T5795] hsr_slave_1: entered promiscuous mode [ 78.419764][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.427341][ T5795] Cannot create hsr debugfs directory [ 78.432911][ T5791] Bluetooth: hci3: command tx timeout [ 78.432931][ T5792] Bluetooth: hci2: command tx timeout [ 78.561768][ T5789] hsr_slave_0: entered promiscuous mode [ 78.568275][ T5789] hsr_slave_1: entered promiscuous mode [ 78.574364][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.582360][ T5789] Cannot create hsr debugfs directory [ 78.856624][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.870429][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.883732][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.896543][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.975759][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.004179][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.014514][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.024765][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.115835][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.144408][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.156528][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.167580][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.247724][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.256813][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.278923][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.304661][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.315563][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.341125][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.367440][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.374763][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.400800][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.407890][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.477153][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.526616][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.585309][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.595508][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.602681][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.612587][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.619760][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.703743][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.754999][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.783901][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.791100][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.851465][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.858678][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.904803][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.934150][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.941321][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.983028][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.990288][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.014553][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.064650][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.155359][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.240854][ T5786] veth0_vlan: entered promiscuous mode [ 80.283370][ T5786] veth1_vlan: entered promiscuous mode [ 80.340227][ T5795] veth0_vlan: entered promiscuous mode [ 80.351146][ T5791] Bluetooth: hci0: command tx timeout [ 80.383486][ T5795] veth1_vlan: entered promiscuous mode [ 80.416771][ T5786] veth0_macvtap: entered promiscuous mode [ 80.430951][ T5791] Bluetooth: hci1: command tx timeout [ 80.465112][ T5786] veth1_macvtap: entered promiscuous mode [ 80.489997][ T5795] veth0_macvtap: entered promiscuous mode [ 80.513095][ T5791] Bluetooth: hci3: command tx timeout [ 80.519276][ T5791] Bluetooth: hci2: command tx timeout [ 80.529353][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.550272][ T5795] veth1_macvtap: entered promiscuous mode [ 80.571757][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.583005][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.595883][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.614676][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.634172][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.643529][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.654331][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.665457][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.685985][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.697984][ T5795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.707072][ T5795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.716698][ T5795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.725681][ T5795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.740739][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.750962][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.760174][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.769495][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.957381][ T5793] veth0_vlan: entered promiscuous mode [ 81.003532][ T5789] veth0_vlan: entered promiscuous mode [ 81.014577][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.021567][ T5793] veth1_vlan: entered promiscuous mode [ 81.024455][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.045733][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.062906][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.072703][ T5789] veth1_vlan: entered promiscuous mode [ 81.152907][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.161799][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.187044][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.192616][ T5793] veth0_macvtap: entered promiscuous mode [ 81.198317][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.208018][ T5789] veth0_macvtap: entered promiscuous mode [ 81.251777][ T5793] veth1_macvtap: entered promiscuous mode [ 81.280287][ T5789] veth1_macvtap: entered promiscuous mode [ 81.301654][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.316283][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.326402][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.337298][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.349517][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.372568][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.386496][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.397208][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.412662][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.425228][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.481343][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.502144][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.518134][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.526878][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.551281][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.563031][ T5870] syz.2.3[5870]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.586675][ T5870] loop2: detected capacity change from 0 to 1024 [ 81.603069][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.632005][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.645665][ T5872] loop1: detected capacity change from 0 to 512 [ 81.652717][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.663290][ T5872] ======================================================= [ 81.663290][ T5872] WARNING: The mand mount option has been deprecated and [ 81.663290][ T5872] and is ignored by this kernel. Remove the mand [ 81.663290][ T5872] option from the mount to silence this warning. [ 81.663290][ T5872] ======================================================= [ 81.699019][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.728676][ T5872] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.728936][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.764370][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.807784][ T5872] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 81.836541][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.882519][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.918391][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.936465][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.974974][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.991000][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.003752][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.082540][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.103702][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.123375][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.134367][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.306765][ T5879] loop2: detected capacity change from 0 to 2048 [ 82.333695][ T5883] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.370834][ T5879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.426659][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.428661][ T5791] Bluetooth: hci0: command tx timeout [ 82.475825][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.500596][ T28] audit: type=1800 audit(1759527265.766:2): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5" name="file2" dev="loop2" ino=1416 res=0 errno=0 [ 82.508603][ T5791] Bluetooth: hci1: command tx timeout [ 82.556919][ T5885] loop1: detected capacity change from 0 to 512 [ 82.588338][ T5791] Bluetooth: hci2: command tx timeout [ 82.598309][ T5791] Bluetooth: hci3: command tx timeout [ 82.604892][ T5885] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.656610][ T5885] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.700947][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.704821][ T5885] EXT4-fs (loop1): 1 truncate cleaned up [ 82.745519][ T5885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.750481][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.799522][ T5889] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.852011][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.861697][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.895599][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.925765][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.931455][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.117584][ T5894] loop0: detected capacity change from 0 to 512 [ 83.139506][ T5894] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.461938][ T5894] EXT4-fs (loop0): 1 truncate cleaned up [ 83.856934][ T5894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.518516][ T5791] Bluetooth: hci0: command tx timeout [ 84.588357][ T5791] Bluetooth: hci1: command tx timeout [ 84.669539][ T5791] Bluetooth: hci3: command tx timeout [ 84.675115][ T5792] Bluetooth: hci2: command tx timeout [ 85.652869][ T5919] mmap: syz.3.12 (5919) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.835476][ T27] cfg80211: failed to load regulatory.db [ 87.515300][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.888032][ T5950] loop2: detected capacity change from 0 to 128 [ 87.906786][ T5948] loop1: detected capacity change from 0 to 1024 [ 87.975525][ T5948] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.20: bad orphan inode 32767 [ 88.101395][ T5948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.244554][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.264199][ T5959] loop3: detected capacity change from 0 to 512 [ 88.289798][ T5959] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.535391][ T5959] EXT4-fs (loop3): 1 truncate cleaned up [ 88.542726][ T5959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.264551][ T5971] loop1: detected capacity change from 0 to 128 [ 89.927947][ T5971] EXT4-fs (loop1): Test dummy encryption mode enabled [ 90.283145][ T5971] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.318236][ T5971] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.625212][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.680762][ T5971] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 91.497843][ T6005] loop0: detected capacity change from 0 to 512 [ 91.510912][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.518251][ T6005] ext4: Unknown parameter 'nouser_xattr' [ 91.644408][ T6011] loop1: detected capacity change from 0 to 128 [ 91.847033][ T6016] loop3: detected capacity change from 0 to 1024 [ 91.878582][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.092605][ T5881] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 92.118154][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.164902][ T3062] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.538575][ T3062] usb 1-1: Using ep0 maxpacket: 32 [ 92.765321][ T3062] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 92.792391][ T6023] loop1: detected capacity change from 0 to 512 [ 92.798928][ T3062] usb 1-1: config 0 has no interface number 0 [ 92.805053][ T3062] usb 1-1: config 0 interface 184 has no altsetting 0 [ 92.830311][ T6023] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.857342][ T3062] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 92.886672][ T5881] usb 3-1: config 0 descriptor?? [ 92.891726][ T3062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.901085][ T3062] usb 1-1: Product: syz [ 92.905293][ T3062] usb 1-1: Manufacturer: syz [ 92.912090][ T3062] usb 1-1: SerialNumber: syz [ 92.913148][ T6023] EXT4-fs (loop1): 1 truncate cleaned up [ 92.926014][ T6023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.939690][ T3062] usb 1-1: config 0 descriptor?? [ 92.950392][ T3062] smsc75xx v1.0.0 [ 92.950578][ T5881] usb 3-1: NDI device with a latency value of 1 [ 93.075211][ T6027] loop3: detected capacity change from 0 to 128 [ 93.089747][ T6027] ext4: Unknown parameter 'nouser_xattr' [ 93.162128][ T5881] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 93.221247][ T5881] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 93.249472][ T5881] usb 3-1: USB disconnect, device number 2 [ 93.272252][ T5881] ftdi_sio 3-1:0.0: device disconnected [ 93.556498][ T3062] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 93.578227][ T3062] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 93.627939][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.477757][ T3062] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 94.493857][ T3062] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 94.503990][ T3062] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 94.518985][ T3062] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 94.532192][ T3062] usb 1-1: USB disconnect, device number 2 [ 94.685378][ T6049] loop2: detected capacity change from 0 to 512 [ 94.719385][ T6049] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 94.760296][ T6049] syz.2.50 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.817691][ T6048] loop3: detected capacity change from 0 to 8192 [ 95.326925][ T6064] loop1: detected capacity change from 0 to 16 [ 95.458701][ T6064] erofs: (device loop1): mounted with root inode @ nid 36. [ 95.592546][ T5791] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 95.613624][ T6064] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 95.871777][ T28] audit: type=1800 audit(1759527279.136:3): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 96.416417][ T6064] syz.1.56 (6064) used greatest stack depth: 20048 bytes left [ 96.676029][ T6090] loop1: detected capacity change from 0 to 128 [ 96.676283][ T6089] loop3: detected capacity change from 0 to 512 [ 96.726847][ T6090] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 96.764957][ T6089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.779963][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 96.808323][ T6090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.846932][ T6089] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.128668][ T6089] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 97.919425][ T1000] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 97.969719][ T1000] EXT4-fs (loop3): This should not happen!! Data will be lost [ 97.969719][ T1000] [ 97.995755][ T1000] EXT4-fs (loop3): Total free blocks count 0 [ 98.016897][ T1000] EXT4-fs (loop3): Free/Dirty block details [ 98.028753][ T1000] EXT4-fs (loop3): free_blocks=65280 [ 98.038207][ T1000] EXT4-fs (loop3): dirty_blocks=1 [ 98.044015][ T1000] EXT4-fs (loop3): Block reservation details [ 98.056744][ T1000] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 98.095173][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.213938][ T6118] loop1: detected capacity change from 0 to 164 [ 98.483840][ T6125] loop2: detected capacity change from 0 to 256 [ 98.589988][ T6125] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.811616][ T6125] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 99.242289][ T6125] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 99.677775][ T6139] loop0: detected capacity change from 0 to 128 [ 99.704483][ T6138] loop3: detected capacity change from 0 to 8 [ 100.524071][ T6145] loop3: detected capacity change from 0 to 512 [ 100.533569][ T6145] EXT4-fs: Ignoring removed oldalloc option [ 100.540674][ T6145] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.592086][ T6145] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 100.621795][ T6145] EXT4-fs (loop3): 1 truncate cleaned up [ 100.624685][ T6147] loop1: detected capacity change from 0 to 1024 [ 100.667509][ T6145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.806367][ T6147] hfsplus: request for non-existent node 16777216 in B*Tree [ 100.828484][ T6147] hfsplus: request for non-existent node 16777216 in B*Tree [ 100.846651][ T6028] udevd[6028]: incorrect ext4 checksum on /dev/loop3 [ 100.851914][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.962907][ T6154] loop0: detected capacity change from 0 to 2048 [ 100.989922][ T58] hfsplus: request for non-existent node 16777216 in B*Tree [ 101.013953][ T6156] loop3: detected capacity change from 0 to 512 [ 101.016072][ T58] hfsplus: request for non-existent node 16777216 in B*Tree [ 101.049085][ T6156] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.100980][ T6154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.143813][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.167601][ T6156] EXT4-fs (loop3): 1 truncate cleaned up [ 101.199304][ T6160] loop1: detected capacity change from 0 to 1024 [ 101.221740][ T6156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.401135][ T6160] hfsplus: walked past end of dir [ 101.487870][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.533910][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.614488][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.791086][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.844406][ T6167] loop3: detected capacity change from 0 to 16 [ 103.088080][ C0] sched: RT throttling activated [ 103.089570][ T6167] erofs: (device loop3): mounted with root inode @ nid 36. [ 103.109062][ T28] audit: type=1800 audit(1759527286.386:4): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.101" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 103.467573][ T6177] loop3: detected capacity change from 0 to 512 [ 103.489189][ T6179] loop0: detected capacity change from 0 to 128 [ 103.521711][ T6177] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.104: corrupted in-inode xattr: invalid ea_ino [ 103.564879][ T6177] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.104: couldn't read orphan inode 15 (err -117) [ 103.656965][ T6177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.685676][ T6175] loop1: detected capacity change from 0 to 8192 [ 103.696315][ T6179] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.742766][ T6179] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.754272][ T6175] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.774277][ T6177] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.104: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 103.969791][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.975411][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.989389][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.997887][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.009245][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.023824][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.032646][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 104.051341][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.525056][ T6201] loop3: detected capacity change from 0 to 1024 [ 104.549406][ T6201] hfsplus: unable to parse mount options [ 104.957909][ T6215] loop3: detected capacity change from 0 to 128 [ 104.985607][ T6215] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 105.022247][ T6215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.199059][ T5792] Bluetooth: hci3: command tx timeout [ 106.587886][ T6227] loop3: detected capacity change from 0 to 512 [ 106.608848][ T6227] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.740519][ T6227] EXT4-fs (loop3): 1 truncate cleaned up [ 106.766047][ T6227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.821955][ T28] audit: type=1800 audit(1759527290.096:5): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.113" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 107.083643][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.175112][ T6258] loop1: detected capacity change from 0 to 128 [ 108.229737][ T6258] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.291412][ T5792] Bluetooth: hci3: command tx timeout [ 108.329872][ T6189] chnl_net:caif_netlink_parms(): no params data found [ 108.359493][ T6258] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.562944][ T6270] loop0: detected capacity change from 0 to 256 [ 108.639663][ T6270] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 108.750116][ T48] hsr_slave_0: left promiscuous mode [ 108.910477][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.945256][ T48] hsr_slave_1: left promiscuous mode [ 109.013473][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.195014][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.401961][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.453196][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.520643][ T48] bridge_slave_1: left allmulticast mode [ 109.546386][ T48] bridge_slave_1: left promiscuous mode [ 109.569738][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.607609][ T48] bridge_slave_0: left allmulticast mode [ 109.618188][ T48] bridge_slave_0: left promiscuous mode [ 109.623991][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.644517][ T6281] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 109.764087][ T48] veth1_macvtap: left promiscuous mode [ 109.793692][ T48] veth0_macvtap: left promiscuous mode [ 109.804569][ T48] veth1_vlan: left promiscuous mode [ 109.830895][ T48] veth0_vlan: left promiscuous mode [ 110.245243][ T6302] loop3: detected capacity change from 0 to 512 [ 110.257509][ T6302] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.281137][ T6302] EXT4-fs (loop3): 1 truncate cleaned up [ 110.301042][ T6302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.348310][ T5792] Bluetooth: hci3: command tx timeout [ 110.571888][ T48] team0 (unregistering): Port device team_slave_1 removed [ 110.608674][ T48] team0 (unregistering): Port device team_slave_0 removed [ 110.646005][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.690087][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.028286][ T48] bond0 (unregistering): Released all slaves [ 111.299412][ T6313] netlink: 'syz.1.130': attribute type 32 has an invalid length. [ 111.319839][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.371573][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.474660][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.482781][ T6189] bridge_slave_0: entered allmulticast mode [ 111.721360][ T6189] bridge_slave_0: entered promiscuous mode [ 111.911539][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.043300][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.134590][ T6189] bridge_slave_1: entered allmulticast mode [ 112.150945][ T6189] bridge_slave_1: entered promiscuous mode [ 113.015267][ T6332] loop3: detected capacity change from 0 to 1024 [ 113.032631][ T5792] Bluetooth: hci3: command tx timeout [ 113.671017][ T6189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.730971][ T6189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.913818][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 114.028841][ T6189] team0: Port device team_slave_0 added [ 114.047620][ T6189] team0: Port device team_slave_1 added [ 114.181152][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.184962][ T6349] loop3: detected capacity change from 0 to 512 [ 114.205032][ T6349] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 114.213650][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.271140][ T6351] loop0: detected capacity change from 0 to 1024 [ 114.272780][ T6349] EXT4-fs (loop3): 1 truncate cleaned up [ 114.285589][ T6189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.313165][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.329512][ T6349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.351692][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.427396][ T6189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.528964][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.628165][ T6360] loop0: detected capacity change from 0 to 512 [ 114.643264][ T6360] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.704724][ T6189] hsr_slave_0: entered promiscuous mode [ 114.730386][ T6360] EXT4-fs (loop0): 1 truncate cleaned up [ 114.751653][ T6360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.765507][ T6189] hsr_slave_1: entered promiscuous mode [ 114.776918][ T6189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.784594][ T6189] Cannot create hsr debugfs directory [ 114.853815][ T6365] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.051769][ T6374] loop3: detected capacity change from 0 to 128 [ 115.085656][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.106542][ T6374] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.139080][ T6374] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.239334][ T8] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 115.466039][ T5789] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.667333][ T6189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.997469][ T6189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.266559][ T6189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.346586][ T6189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.486613][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 116.499931][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 116.507803][ T8] usb 2-1: can't read configurations, error -71 [ 117.256785][ T6189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.306527][ T6189] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.362583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.369768][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.407295][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.414539][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.448878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.457728][ T6411] loop1: detected capacity change from 0 to 512 [ 117.513038][ T6411] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.574457][ T6411] EXT4-fs (loop1): 1 truncate cleaned up [ 117.589323][ T6411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.688549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.710200][ T6189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.760326][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.127071][ T6429] devpts: called with bogus options [ 118.238303][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.312857][ T6435] loop0: detected capacity change from 0 to 128 [ 118.358354][ T6435] FAT-fs (loop0): Directory bread(block 32) failed [ 118.374079][ T6435] FAT-fs (loop0): Directory bread(block 33) failed [ 118.382941][ T6435] FAT-fs (loop0): Directory bread(block 34) failed [ 118.408612][ T6435] FAT-fs (loop0): Directory bread(block 35) failed [ 118.425322][ T6435] FAT-fs (loop0): Directory bread(block 36) failed [ 118.438680][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 118.457144][ T6189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.464844][ T6435] FAT-fs (loop0): Directory bread(block 37) failed [ 118.478874][ T5881] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 118.487092][ T5881] usb 2-1: config 0 has no interface number 0 [ 118.493734][ T6435] FAT-fs (loop0): Directory bread(block 38) failed [ 118.512422][ T6435] FAT-fs (loop0): Directory bread(block 39) failed [ 118.530574][ T5881] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 118.551246][ T6435] FAT-fs (loop0): Directory bread(block 40) failed [ 118.563815][ T5881] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 118.588398][ T6435] FAT-fs (loop0): Directory bread(block 41) failed [ 118.608087][ T5881] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 118.655383][ T5881] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 118.696948][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.727167][ T5881] usb 2-1: Product: syz [ 118.747479][ T5881] usb 2-1: Manufacturer: syz [ 118.762154][ T5881] usb 2-1: SerialNumber: syz [ 118.804109][ T5881] usb 2-1: config 0 descriptor?? [ 118.823547][ T6422] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.923223][ T6422] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.386054][ T6189] veth0_vlan: entered promiscuous mode [ 119.414118][ T6189] veth1_vlan: entered promiscuous mode [ 119.503123][ T6189] veth0_macvtap: entered promiscuous mode [ 119.563170][ T6189] veth1_macvtap: entered promiscuous mode [ 119.612376][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.648126][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.669215][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.684289][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.695947][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.715998][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.755037][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.808616][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.839289][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.849282][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.860445][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.871183][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.881711][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.893412][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.290502][ T6189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.433639][ T6189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.573956][ T6189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.582793][ T6189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.991344][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.090729][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.385627][ T3062] usb 2-1: USB disconnect, device number 4 [ 121.740284][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.794566][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.852301][ T6482] loop1: detected capacity change from 0 to 2048 [ 122.078755][ T5824] kernel write not supported for file /snd/seq (pid: 5824 comm: kworker/1:4) [ 122.218806][ T6496] loop4: detected capacity change from 0 to 2048 [ 122.258486][ T6496] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.369889][ T6502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.171'. [ 122.514814][ T6509] loop1: detected capacity change from 0 to 1024 [ 122.521775][ T6503] loop0: detected capacity change from 0 to 1024 [ 122.557993][ T28] audit: type=1800 audit(1759527305.826:6): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.170" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 122.603410][ T6494] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 266240 lbcount: 270336 extent 129+234496 [ 123.652779][ T3062] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 123.708749][ T58] hfsplus: b-tree write err: -5, ino 4 [ 123.774889][ T6525] loop4: detected capacity change from 0 to 512 [ 123.903663][ T6527] loop3: detected capacity change from 0 to 1024 [ 123.920004][ T6525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.945864][ T6524] loop1: detected capacity change from 0 to 4096 [ 124.101933][ T6525] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.120217][ T6524] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 124.260955][ T28] audit: type=1326 audit(1759527307.526:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe6f8eec9 code=0x7ffc0000 [ 124.849644][ T28] audit: type=1326 audit(1759527307.526:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe6f8eec9 code=0x7ffc0000 [ 124.936404][ T28] audit: type=1326 audit(1759527307.536:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fefe6f8eec9 code=0x7ffc0000 [ 124.958693][ T28] audit: type=1326 audit(1759527307.536:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe6f8eec9 code=0x7ffc0000 [ 124.981004][ T28] audit: type=1326 audit(1759527307.536:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe6f8eec9 code=0x7ffc0000 [ 125.008161][ T28] audit: type=1800 audit(1759527307.706:12): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.177" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 125.053892][ T48] hfsplus: b-tree write err: -5, ino 4 [ 125.373191][ T6189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.135717][ T6543] loop0: detected capacity change from 0 to 256 [ 127.216946][ T6556] loop4: detected capacity change from 0 to 256 [ 127.228248][ T5792] Bluetooth: hci3: command 0x0405 tx timeout [ 127.248440][ T6543] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.275774][ T6556] exfat: Deprecated parameter 'namecase' [ 127.534935][ T6556] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 127.973169][ T6560] loop3: detected capacity change from 0 to 1024 [ 128.025587][ T6563] loop1: detected capacity change from 0 to 512 [ 128.074549][ T6563] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.132863][ T6566] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 128.152980][ T6566] pim6reg0: ignored: set checksum disabled [ 128.173798][ T6563] EXT4-fs (loop1): 1 truncate cleaned up [ 128.219634][ T6563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.342147][ T3444] hfsplus: b-tree write err: -5, ino 3 [ 128.541209][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.723865][ T6585] loop4: detected capacity change from 0 to 512 [ 128.744681][ T6585] EXT4-fs: Ignoring removed nobh option [ 128.759683][ T6587] netlink: 176 bytes leftover after parsing attributes in process `syz.1.190'. [ 128.800165][ T6585] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.924188][ T6585] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.191: iget: bad i_size value: 38620345925642 [ 129.009761][ T6600] loop0: detected capacity change from 0 to 128 [ 129.026369][ T6585] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.191: couldn't read orphan inode 15 (err -117) [ 129.055665][ T6585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.123936][ T6600] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 129.170269][ T6602] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.191: bg 0: block 5: invalid block bitmap [ 129.182177][ T6600] FAT-fs (loop0): Filesystem has been set read-only [ 129.240755][ T6602] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 352 with error 28 [ 129.287806][ T6602] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.287806][ T6602] [ 129.308610][ T6606] loop1: detected capacity change from 0 to 512 [ 129.321354][ T6602] EXT4-fs (loop4): Total free blocks count 0 [ 129.337928][ T6602] EXT4-fs (loop4): Free/Dirty block details [ 129.354931][ T6606] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.371339][ T6602] EXT4-fs (loop4): free_blocks=0 [ 129.386262][ T6602] EXT4-fs (loop4): dirty_blocks=356 [ 129.394893][ T6602] EXT4-fs (loop4): Block reservation details [ 129.409221][ T6606] EXT4-fs (loop1): 1 truncate cleaned up [ 129.416149][ T6606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.433224][ T6602] EXT4-fs (loop4): i_reserved_data_blocks=356 [ 129.669298][ T6189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.710329][ T6621] loop0: detected capacity change from 0 to 512 [ 129.744383][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.842065][ T6621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.919760][ T6621] ext4 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.931153][ T6629] loop3: detected capacity change from 0 to 512 [ 130.033823][ T6629] EXT4-fs (loop3): 1 truncate cleaned up [ 130.088417][ T6634] loop1: detected capacity change from 0 to 2048 [ 130.098938][ T6629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.155378][ T6634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.308554][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.367736][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.378624][ T3062] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.502504][ T6645] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.600695][ T3062] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 130.623982][ T3062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 130.649297][ T3062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 130.680088][ T3062] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.698602][ T3062] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.713098][ T3062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.726544][ T3062] usb 5-1: config 0 descriptor?? [ 130.733060][ T6639] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.850810][ T786] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 131.040776][ T786] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 131.049773][ T786] usb 4-1: config 0 has no interface number 0 [ 131.055917][ T786] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 131.066550][ T786] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 131.076484][ T786] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 131.087317][ T786] usb 4-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 131.098214][ T786] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 131.107263][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.119574][ T786] usb 4-1: config 0 descriptor?? [ 131.126299][ T6647] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 131.168045][ T786] hub 4-1:0.3: bad descriptor, ignoring hub [ 131.176530][ T786] hub: probe of 4-1:0.3 failed with error -5 [ 131.182069][ T3062] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 131.196438][ T786] sierra 4-1:0.3: Sierra USB modem converter detected [ 131.215579][ T3062] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 131.246300][ T3062] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 131.408396][ T786] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 131.454483][ T8] usb 5-1: USB disconnect, device number 2 [ 131.481037][ T786] usb 4-1: USB disconnect, device number 2 [ 131.523365][ T786] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 131.545135][ T786] sierra 4-1:0.3: device disconnected [ 131.562994][ T6667] loop0: detected capacity change from 0 to 512 [ 131.598791][ T6667] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.634677][ T6667] EXT4-fs (loop0): 1 truncate cleaned up [ 131.651576][ T6667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.743762][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.843907][ T6675] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 131.850758][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 131.861098][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 131.878559][ T6676] vhci_hcd: connection closed [ 131.880283][ T3444] vhci_hcd: stop threads [ 131.894878][ T3444] vhci_hcd: release socket [ 131.900999][ T3444] vhci_hcd: disconnect device [ 132.326364][ T6692] loop4: detected capacity change from 0 to 164 [ 132.353287][ T6692] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 132.924784][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.954764][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271129][ T6700] loop4: detected capacity change from 0 to 512 [ 133.282577][ T6700] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.320385][ T6706] loop1: detected capacity change from 0 to 512 [ 133.329089][ T6706] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.347805][ T6700] EXT4-fs (loop4): 1 truncate cleaned up [ 133.355428][ T6700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.393294][ T6706] EXT4-fs (loop1): 1 truncate cleaned up [ 133.429406][ T6706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.539577][ T6189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.293489][ T6715] input: syz0 as /devices/virtual/input/input8 [ 134.332382][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.669353][ T6723] loop4: detected capacity change from 0 to 2048 [ 134.681992][ T6723] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 134.692757][ T6727] loop0: detected capacity change from 0 to 1024 [ 134.889774][ T6723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.628032][ T6189] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 135.637170][ T6189] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 135.701567][ T6736] loop3: detected capacity change from 0 to 1024 [ 135.816959][ T6737] loop1: detected capacity change from 0 to 512 [ 135.870984][ T6737] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.935237][ T6737] EXT4-fs (loop1): 1 truncate cleaned up [ 135.973665][ T6737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.164380][ T6750] loop3: detected capacity change from 0 to 1024 [ 136.176456][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.283279][ T6750] hfsplus: xattr searching failed [ 136.339843][ T6755] process 'syz.3.239' launched './file0' with NULL argv: empty string added [ 136.371995][ T6755] hfsplus: xattr searching failed [ 136.421314][ T6756] loop1: detected capacity change from 0 to 1024 [ 136.435125][ T6755] hfsplus: xattr searching failed [ 136.771270][ T6763] loop3: detected capacity change from 0 to 1024 [ 136.807123][ T3444] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.836521][ T6763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.882183][ T6763] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.022502][ T6763] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: comm syz.3.242: lblock 0 mapped to illegal pblock 0 (length 6) [ 137.060696][ T3444] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.091686][ T6763] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 137.121776][ T6763] EXT4-fs (loop3): This should not happen!! Data will be lost [ 137.121776][ T6763] [ 137.198407][ T6760] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: comm syz.3.242: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.215313][ T3444] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.259611][ T6760] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: comm syz.3.242: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.312251][ T3444] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.341643][ T6760] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: comm syz.3.242: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.391545][ T6771] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: comm syz.3.242: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.445593][ T6778] loop0: detected capacity change from 0 to 512 [ 137.459622][ T6760] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: comm syz.3.242: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.502357][ T6778] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.524441][ T6780] kernel profiling enabled (shift: 6) [ 137.533718][ T6771] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: comm syz.3.242: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.560642][ T6778] EXT4-fs (loop0): 1 truncate cleaned up [ 137.579194][ T6760] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: comm syz.3.242: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.599046][ T6778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.662310][ T6783] loop1: detected capacity change from 0 to 16 [ 137.688943][ T6783] erofs: (device loop1): mounted with root inode @ nid 36. [ 137.696318][ T6760] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: comm syz.3.242: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.758790][ T6771] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: comm syz.3.242: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.772558][ T6778] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #2: block 13: comm syz.0.245: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 137.910643][ T6783] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 138.008907][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.031229][ T5792] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 138.043060][ T6783] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 138.155923][ T28] audit: type=1800 audit(1759527321.406:13): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.246" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 138.184961][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 138.240870][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.240870][ T12] [ 138.263830][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.277412][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.282803][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.295248][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.310357][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.324992][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.351056][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.603372][ T6804] loop1: detected capacity change from 0 to 512 [ 138.617231][ T6801] loop3: detected capacity change from 0 to 512 [ 138.659847][ T6801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.723005][ T6801] EXT4-fs (loop3): 1 truncate cleaned up [ 138.735316][ T6804] EXT4-fs (loop1): orphan cleanup on readonly fs [ 138.791224][ T6801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.846977][ T6804] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.250: bg 0: block 248: padding at end of block bitmap is not set [ 138.929681][ T6804] Quota error (device loop1): write_blk: dquota write failed [ 138.958210][ T6804] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 138.965938][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.972039][ T6804] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.250: Failed to acquire dquot type 1 [ 139.022783][ T6804] EXT4-fs (loop1): 1 truncate cleaned up [ 139.100334][ T6804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.218851][ T6804] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.250: deleted inode referenced: 12 [ 139.396553][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.545076][ T6826] loop1: detected capacity change from 0 to 256 [ 139.608484][ T6826] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 140.035508][ T6835] loop0: detected capacity change from 0 to 512 [ 140.052613][ T6835] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.253: dx entry: limit 1024 != root limit 124 [ 140.064974][ T6835] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.253: Corrupt directory, running e2fsck is recommended [ 140.089899][ T6835] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 140.099348][ T6835] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.253: corrupted in-inode xattr: invalid ea_ino [ 140.128417][ T6835] EXT4-fs (loop0): Remounting filesystem read-only [ 140.136431][ T6835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.278433][ T6789] chnl_net:caif_netlink_parms(): no params data found [ 140.343410][ T6850] loop3: detected capacity change from 0 to 512 [ 140.373121][ T6850] EXT4-fs (loop3): Test dummy encryption mode enabled [ 140.392638][ T6850] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.425378][ T6850] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.257: bad orphan inode 131083 [ 140.436453][ T5791] Bluetooth: hci3: command tx timeout [ 140.450993][ T6850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.584213][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.649033][ T6835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.788701][ T3444] hsr_slave_0: left promiscuous mode [ 140.801730][ T6860] loop0: detected capacity change from 0 to 512 [ 140.808173][ T3444] hsr_slave_1: left promiscuous mode [ 140.813829][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.822210][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.833958][ T6860] EXT4-fs (loop0): Test dummy encryption mode enabled [ 140.847246][ T6860] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.866381][ T3444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.883207][ T6862] loop3: detected capacity change from 0 to 1024 [ 140.890012][ T3444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.910674][ T6860] EXT4-fs (loop0): 1 truncate cleaned up [ 140.917682][ T6860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.939128][ T3444] bridge_slave_1: left allmulticast mode [ 140.967622][ T3444] bridge_slave_1: left promiscuous mode [ 141.000415][ T3444] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.012329][ T3444] bridge_slave_0: left allmulticast mode [ 141.021637][ T3444] bridge_slave_0: left promiscuous mode [ 141.045189][ T3444] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.099163][ T3508] hfsplus: b-tree write err: -5, ino 4 [ 141.169905][ T3444] veth1_macvtap: left promiscuous mode [ 141.183377][ T3444] veth0_macvtap: left promiscuous mode [ 141.205191][ T3444] veth1_vlan: left promiscuous mode [ 141.232183][ T3444] veth0_vlan: left promiscuous mode [ 141.383563][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.489862][ T6879] loop1: detected capacity change from 0 to 512 [ 141.530579][ T6879] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.584393][ T6879] EXT4-fs (loop1): 1 truncate cleaned up [ 141.615958][ T6879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.775009][ T28] audit: type=1326 audit(1759527325.046:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27318eec9 code=0x7ffc0000 [ 141.860721][ T28] audit: type=1326 audit(1759527325.046:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd27318eec9 code=0x7ffc0000 [ 141.956856][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.958267][ T28] audit: type=1326 audit(1759527325.046:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27318eec9 code=0x7ffc0000 [ 142.020779][ T28] audit: type=1326 audit(1759527325.046:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27318eec9 code=0x7ffc0000 [ 142.020825][ T28] audit: type=1326 audit(1759527325.046:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd27318eec9 code=0x7ffc0000 [ 142.020866][ T28] audit: type=1326 audit(1759527325.046:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27318eec9 code=0x7ffc0000 [ 142.021654][ T28] audit: type=1326 audit(1759527325.046:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fd27318eec9 code=0x7ffc0000 [ 142.509069][ T5791] Bluetooth: hci3: command tx timeout [ 142.650949][ T6912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.275'. [ 142.660941][ T968] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 142.773863][ T3444] team0 (unregistering): Port device team_slave_1 removed [ 142.811223][ T3444] team0 (unregistering): Port device team_slave_0 removed [ 142.848161][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 142.855203][ T3444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.860011][ T968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 142.890850][ T968] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 142.905614][ T968] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 142.916452][ T968] usb 1-1: config 4 has no interface number 0 [ 142.925773][ T3444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.932818][ T968] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 142.944431][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.955636][ T968] usb 1-1: Product: syz [ 142.962410][ T968] usb 1-1: Manufacturer: syz [ 142.967078][ T968] usb 1-1: SerialNumber: syz [ 143.225990][ T968] usb 1-1: USB disconnect, device number 3 [ 143.546254][ T3444] bond0 (unregistering): Released all slaves [ 143.807321][ T6917] loop0: detected capacity change from 0 to 1024 [ 143.867261][ T6917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.911803][ T6789] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.945765][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.954755][ T6789] bridge_slave_0: entered allmulticast mode [ 143.962319][ T6789] bridge_slave_0: entered promiscuous mode [ 143.971181][ T6789] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.979632][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.987251][ T6789] bridge_slave_1: entered allmulticast mode [ 143.988251][ T6921] input: syz1 as /devices/virtual/input/input9 [ 143.995123][ T6789] bridge_slave_1: entered promiscuous mode [ 144.087494][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.154798][ T6789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.183255][ T6789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.211481][ T6921] loop3: detected capacity change from 0 to 1024 [ 144.276558][ T6921] hfsplus: bad catalog folder entry [ 144.358597][ T6789] team0: Port device team_slave_0 added [ 144.386511][ T6789] team0: Port device team_slave_1 added [ 144.592283][ T5791] Bluetooth: hci3: command tx timeout [ 144.631600][ T6789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.679562][ T6789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.928273][ T968] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.135451][ T6789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.308320][ T968] usb 2-1: Using ep0 maxpacket: 8 [ 145.327644][ T968] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 145.364911][ T968] usb 2-1: config 0 has no interface number 0 [ 145.409765][ T6789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.443235][ T6789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.451115][ T968] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 145.469685][ T6789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.587693][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.605569][ T6950] loop3: detected capacity change from 0 to 256 [ 145.641273][ T968] usb 2-1: Product: syz [ 145.646526][ T968] usb 2-1: Manufacturer: syz [ 145.665791][ T968] usb 2-1: SerialNumber: syz [ 145.674997][ T6789] hsr_slave_0: entered promiscuous mode [ 145.689542][ T968] usb 2-1: config 0 descriptor?? [ 145.700112][ T6950] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 145.715904][ T6789] hsr_slave_1: entered promiscuous mode [ 145.742877][ T6789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.761703][ T6789] Cannot create hsr debugfs directory [ 145.918257][ T968] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 145.926982][ T6948] loop0: detected capacity change from 0 to 8192 [ 145.938995][ T968] usb 2-1: No valid video chain found. [ 146.011917][ T6948] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 146.048136][ T6948] UDF-fs: Scanning with blocksize 512 failed [ 146.071900][ T6948] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 146.092033][ T6948] UDF-fs: Scanning with blocksize 1024 failed [ 146.121731][ T9] usb 2-1: USB disconnect, device number 5 [ 146.129126][ T6948] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 146.136891][ T6948] UDF-fs: Scanning with blocksize 2048 failed [ 146.175303][ T6948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.455095][ T6959] loop3: detected capacity change from 0 to 512 [ 146.467722][ T6789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.515812][ T6789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.533386][ T6959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 146.750601][ T5791] Bluetooth: hci3: command tx timeout [ 146.895087][ T6959] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.114454][ T6789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.152638][ T6789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 147.168348][ T6967] loop1: detected capacity change from 0 to 128 [ 147.195650][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 147.489273][ T6789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.543536][ T6789] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.603758][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.610973][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.652004][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 147.652044][ T28] audit: type=1326 audit(1759527330.916:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd27318eec9 code=0x0 [ 147.731630][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.738910][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.777095][ T6990] loop0: detected capacity change from 0 to 256 [ 147.824592][ T6990] exFAT-fs (loop0): error, The cluster chain has a loop [ 147.834490][ T6990] exFAT-fs (loop0): failed to count the number of clusters in root [ 147.849843][ T6990] exFAT-fs (loop0): failed to recognize exfat type [ 148.074807][ T7001] loop0: detected capacity change from 0 to 128 [ 148.108455][ T7001] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 148.143373][ T7001] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.288541][ T786] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.362785][ T6789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.490366][ T786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.511169][ T786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.550443][ T786] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.568123][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.576227][ T786] usb 4-1: SerialNumber: syz [ 148.806829][ T786] usb 4-1: 0:2 : does not exist [ 149.311901][ T786] usb 4-1: USB disconnect, device number 3 [ 149.623073][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.912310][ T7028] loop1: detected capacity change from 0 to 512 [ 149.944370][ T7028] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.000242][ T7028] EXT4-fs (loop1): 1 truncate cleaned up [ 150.007382][ T7028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.076911][ T6789] veth0_vlan: entered promiscuous mode [ 150.089640][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.176112][ T6789] veth1_vlan: entered promiscuous mode [ 150.302120][ T6789] veth0_macvtap: entered promiscuous mode [ 150.335149][ T6789] veth1_macvtap: entered promiscuous mode [ 150.412141][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.463705][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.487604][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.506486][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.526226][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.552356][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.557819][ T7052] loop0: detected capacity change from 0 to 1024 [ 150.571913][ T6789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.602876][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.639340][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.665287][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.708266][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.733054][ T6789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.751153][ T6789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.767350][ T6789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.028565][ T6789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.263382][ T6789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.455120][ T6789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.593966][ T6789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.831948][ T7071] loop1: detected capacity change from 0 to 512 [ 152.885593][ T7071] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.904093][ T7080] loop0: detected capacity change from 0 to 512 [ 152.941913][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.973146][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.984104][ T7071] EXT4-fs (loop1): 1 truncate cleaned up [ 152.998186][ T7080] EXT4-fs (loop0): Test dummy encryption mode enabled [ 153.004993][ T7080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.027062][ T7071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.027905][ T7080] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.307: bad orphan inode 131083 [ 153.063049][ T7080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.104730][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.166040][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.243335][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.309156][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.628019][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 260.635109][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5786/1:b..l P7119/1:b..l [ 260.644627][ C0] rcu: (detected by 0, t=10502 jiffies, g=18553, q=435 ncpus=2) [ 260.652430][ C0] task:syz.3.316 state:R running task stack:27144 pid:7119 ppid:5789 flags:0x00004000 [ 260.664124][ C0] Call Trace: [ 260.667453][ C0] [ 260.670451][ C0] __schedule+0x14d2/0x44d0 [ 260.675012][ C0] ? mark_lock+0x94/0x320 [ 260.679389][ C0] ? asan.module_dtor+0x20/0x20 [ 260.684292][ C0] ? preempt_schedule+0xab/0xc0 [ 260.689176][ C0] preempt_schedule_common+0x82/0xc0 [ 260.694488][ C0] preempt_schedule+0xab/0xc0 [ 260.699201][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 260.704869][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 260.709928][ C0] preempt_schedule_thunk+0x1a/0x30 [ 260.715173][ C0] _raw_spin_unlock+0x3a/0x40 [ 260.719877][ C0] unmap_page_range+0x236f/0x2fe0 [ 260.724968][ C0] ? copy_page_range+0x3600/0x3600 [ 260.730117][ C0] ? unmap_single_vma+0x1b0/0x2a0 [ 260.735182][ C0] unmap_vmas+0x25e/0x3a0 [ 260.739555][ C0] ? unmap_page_range+0x2fe0/0x2fe0 [ 260.744792][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 260.749868][ C0] exit_mmap+0x200/0xb50 [ 260.754146][ C0] ? exit_mm_release+0x1a/0x30 [ 260.758948][ C0] ? vm_brk+0x30/0x30 [ 260.762991][ C0] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 260.768681][ C0] ? uprobe_clear_state+0x278/0x290 [ 260.773988][ C0] ? mm_update_next_owner+0x562/0x6c0 [ 260.779402][ C0] __mmput+0x118/0x3c0 [ 260.783497][ C0] exit_mm+0x1da/0x2c0 [ 260.787594][ C0] ? do_exit+0x23c0/0x23c0 [ 260.792050][ C0] ? taskstats_exit+0x35e/0x9e0 [ 260.796939][ C0] do_exit+0x88e/0x23c0 [ 260.801127][ C0] ? put_task_struct+0xc0/0xc0 [ 260.805921][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 260.811923][ C0] ? get_signal+0x1068/0x1400 [ 260.816639][ C0] ? lock_chain_count+0x20/0x20 [ 260.821519][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 260.826570][ C0] do_group_exit+0x21b/0x2d0 [ 260.831211][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 260.836445][ C0] get_signal+0x12fc/0x1400 [ 260.841001][ C0] arch_do_signal_or_restart+0x96/0x780 [ 260.846589][ C0] ? fput+0x154/0x1a0 [ 260.850598][ C0] ? get_sigframe_size+0x20/0x20 [ 260.855580][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 260.861080][ C0] exit_to_user_mode_loop+0x70/0x110 [ 260.866395][ C0] exit_to_user_mode_prepare+0xf6/0x180 [ 260.871965][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 260.877455][ C0] do_syscall_64+0x61/0xb0 [ 260.881898][ C0] ? clear_bhb_loop+0x40/0x90 [ 260.886596][ C0] ? clear_bhb_loop+0x40/0x90 [ 260.891293][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.897210][ C0] RIP: 0033:0x7fdb9ef8eec9 [ 260.901655][ C0] RSP: 002b:00007fdb9ff0a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 260.910096][ C0] RAX: fffffffffffffe00 RBX: 00007fdb9f1e5fa8 RCX: 00007fdb9ef8eec9 [ 260.918095][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb9f1e5fa8 [ 260.926090][ C0] RBP: 00007fdb9f1e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 260.934082][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.942089][ C0] R13: 00007fdb9f1e6038 R14: 00007ffd89265580 R15: 00007ffd89265668 [ 260.950105][ C0] [ 260.953159][ C0] task:syz-executor state:R running task stack:20880 pid:5786 ppid:5783 flags:0x00004002 [ 260.963971][ C0] Call Trace: [ 260.967282][ C0] [ 260.970240][ C0] __schedule+0x14d2/0x44d0 [ 260.974791][ C0] ? mark_lock+0x1/0x320 [ 260.979062][ C0] ? __lock_acquire+0x1260/0x7c80 [ 260.984107][ C0] ? asan.module_dtor+0x20/0x20 [ 260.988991][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 260.995022][ C0] ? preempt_schedule_irq+0xaa/0x140 [ 261.000363][ C0] preempt_schedule_irq+0xb5/0x140 [ 261.005537][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 261.011293][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 261.017128][ C0] irqentry_exit+0x67/0x70 [ 261.021570][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 261.027586][ C0] RIP: 0010:lock_acquire+0x1f2/0x410 [ 261.032906][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 261.052546][ C0] RSP: 0018:ffffc90003cf7ca0 EFLAGS: 00000206 [ 261.058644][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 391810c7539d3f00 [ 261.066647][ C0] RDX: 0000000000000000 RSI: ffffffff8aaace60 RDI: ffffffff8afc63c0 [ 261.074632][ C0] RBP: ffffc90003cf7db0 R08: dffffc0000000000 R09: 1ffffffff21b4ea0 [ 261.082624][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ea1 R12: 1ffff9200079efa0 [ 261.090622][ C0] R13: ffffffff8cd2ff20 R14: 0000000000000246 R15: dffffc0000000000 [ 261.098652][ C0] ? read_lock_is_recursive+0x20/0x20 [ 261.104062][ C0] ? rcu_read_unlock+0x8c/0xa0 [ 261.108855][ C0] inet6_create+0xa4/0x11d0 [ 261.113388][ C0] ? inet6_create+0x83/0x11d0 [ 261.118099][ C0] ? inet6_create+0x83/0x11d0 [ 261.122824][ C0] __sock_create+0x4a6/0x940 [ 261.127451][ C0] __sys_socket+0xd7/0x1a0 [ 261.131900][ C0] __x64_sys_socket+0x7a/0x90 [ 261.136611][ C0] do_syscall_64+0x55/0xb0 [ 261.141047][ C0] ? clear_bhb_loop+0x40/0x90 [ 261.145743][ C0] ? clear_bhb_loop+0x40/0x90 [ 261.150450][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.156378][ C0] RIP: 0033:0x7fd273190de7 [ 261.160822][ C0] RSP: 002b:00007fff9f7d0788 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 261.169271][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd273190de7 [ 261.177265][ C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 261.185250][ C0] RBP: 00007fff9f7d0ebc R08: 00007fff9f7d07ac R09: 0079746972756365 [ 261.193238][ C0] R10: 00007fff9f7d0810 R11: 0000000000000206 R12: 00007fd2733b2ca0 [ 261.201225][ C0] R13: 00000000000927c0 R14: 0000000000025de8 R15: 00007fd2733b4e60 [ 261.209233][ C0] [ 261.212293][ C0] rcu: rcu_preempt kthread starved for 10408 jiffies! g18553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 261.223508][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 261.233511][ C0] rcu: RCU grace-period kthread stack dump: [ 261.239417][ C0] task:rcu_preempt state:R running task stack:27752 pid:17 ppid:2 flags:0x00004000 [ 261.250237][ C0] Call Trace: [ 261.253535][ C0] [ 261.256484][ C0] __schedule+0x14d2/0x44d0 [ 261.261040][ C0] ? asan.module_dtor+0x20/0x20 [ 261.265926][ C0] ? enqueue_timer+0x225/0x530 [ 261.270712][ C0] ? __mod_timer+0x984/0xdb0 [ 261.275344][ C0] schedule+0xbd/0x170 [ 261.279446][ C0] schedule_timeout+0x160/0x280 [ 261.284323][ C0] ? console_conditional_schedule+0x40/0x40 [ 261.290238][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 261.296168][ C0] ? update_process_times+0x1b0/0x1b0 [ 261.301584][ C0] ? prepare_to_swait_event+0x339/0x360 [ 261.307157][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 261.312051][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 261.318232][ C0] ? rcu_gp_init+0x1510/0x1510 [ 261.323023][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 261.327908][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.333124][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 261.338358][ C0] rcu_gp_kthread+0x99/0x380 [ 261.342985][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 261.348134][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 261.353108][ C0] ? __kthread_parkme+0x162/0x1c0 [ 261.358174][ C0] kthread+0x2fa/0x390 [ 261.362272][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 261.367434][ C0] ? kthread_blkcg+0xd0/0xd0 [ 261.372048][ C0] ret_from_fork+0x48/0x80 [ 261.376481][ C0] ? kthread_blkcg+0xd0/0xd0 [ 261.381089][ C0] ret_from_fork_asm+0x11/0x20 [ 261.385886][ C0] [ 261.388918][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 261.395268][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 261.402307][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.412377][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 261.418143][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 93 c8 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 261.437781][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 261.443876][ C0] RAX: 400cac1d2fa8cd00 RBX: ffffffff816185ab RCX: 400cac1d2fa8cd00 [ 261.451865][ C0] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc63c0 [ 261.459853][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 261.467844][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a82e8 [ 261.475839][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 261.483844][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 261.492800][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.499409][ C0] CR2: 00007fd2733b12f8 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 261.507411][ C0] Call Trace: [ 261.510706][ C0] [ 261.513659][ C0] default_idle+0x13/0x20 [ 261.518011][ C0] default_idle_call+0x6c/0xa0 [ 261.522834][ C0] do_idle+0x1eb/0x510 [ 261.526934][ C0] ? asan.module_dtor+0x20/0x20 [ 261.531811][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 261.537029][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 261.542951][ C0] ? _raw_spin_unlock+0x40/0x40 [ 261.547832][ C0] cpu_startup_entry+0x43/0x60 [ 261.552615][ C0] rest_init+0x2e2/0x300 [ 261.556876][ C0] ? time_init+0x40/0x40 [ 261.561137][ C0] arch_call_rest_init+0xe/0x10 [ 261.566008][ C0] start_kernel+0x459/0x4e0 [ 261.570548][ C0] x86_64_start_reservations+0x2a/0x30 [ 261.576038][ C0] x86_64_start_kernel+0x60/0x60 [ 261.581004][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 261.587123][ C0]