last executing test programs: 2m36.433069895s ago: executing program 4 (id=54): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x9048e1, 0x0, 0x0, 0x0, 0x0) 2m36.136200464s ago: executing program 4 (id=56): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000000)=""/177, 0xb1) 2m35.769853009s ago: executing program 4 (id=57): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000a40)='\xb9\x9b\xf2:\a\xac\xc9=itch\x000\xeb\x89\x02\xb8\x86u8\x8b1\xcc\xb1\xb7\xd0\xd58z\xf4\x13\x8bn\x1f\xfa\xdb\xd8\xbd\xf2\xc6\x84N\x8e\xa8\xc3\xb5m\x96\x8d\xcf\x89O\xde\tw{\xf5\xfb\xa4?\xc8\x02\x00\x00\x00s\xb0=\xc0\xb9\xc4\xa1&\x19\xb6\xd4\x1d\xb4\xa3W\x8f@t\xa0X\x1e\t\x92B\xa2\x91\x04\x94>]hb\x90\xd1\xee\x83\xd7pD\xfc\xd1 }\xdd\xab\x1fj\xf0\xd6K:\xe2\'\xfb-cv\x89\xd0\x87\x82=\xcd\xaa\xad_\xdd\xa2\xb2^\x14\xff2P\r$\x8d\xb6w\xcfS+\xe8b:\x18\xc3\b\xb3\xc0\x1b\xaa\x94\x9e\xf4\n\x1b\x11.\xc4FU\xff\x14\xbc\x82\xce\xb5\x03\xc5', 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m34.544692756s ago: executing program 4 (id=60): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8], 0x1, 0x21f, &(0x7f0000000940)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m34.156570394s ago: executing program 4 (id=64): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000700)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000800), 0x8001) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180), 0x0) r5 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r5}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) 2m33.949259541s ago: executing program 0 (id=66): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x16a) fallocate(r1, 0x20, 0x0, 0x8000) 2m32.581471111s ago: executing program 0 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) 2m30.477322195s ago: executing program 0 (id=75): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) readlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)=""/177, 0xb1) keyctl$setperm(0x5, 0x0, 0x52b242d) keyctl$get_keyring_id(0x0, 0x0, 0x5) 2m29.660696481s ago: executing program 0 (id=78): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0xd5, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64], 0x18, 0x2ed, &(0x7f0000000a80)="$eJzs3L9PE2EYwPGnPyhtCZTBaDQxvNFFlwtUZ6UxkBibSJAafyQmB1y16dmSuwZTY0QnV+Mf4UAY2UiUf4DFTRcXNxYTTWQwnun1jkI5QKC0CN9PQu7hnve5vm9byPM2HKv33j4t5m0tr1ckHFcSEhFZE+mXsPhC3jHsxjHZ6JVc7vnx+fyd+w9uZbLZkXGlRjMTV9JKqb6BD89eJLxhS92y0v9o9Xv628rplbOrfyaeFGxVsFWpXFG6mix/reiTpqGmC3ZRU2rMNHTbUIWSbVj1fLmez5vlmZmq0kvTvckZy7BtpZeqqmhUVaWsKlZVRR7rhZLSNE31JgW7yc2Pj+uZfRZPtXgyOCSWldEjIpLYksnNd2RCAACgo5r7/7CoVvb/CxeWKz13F/u8/n8pFtT/X/1Sv9am/j8uIoH9v//4gf2/vrf+f2tHdLIcqP/H0TAQ23Iq1AhrSSujJ72fX9frhwuDbkD/DwAAAAAAAAAAAAAAAAAAAADA/2DNcVKO46T8o//VLSJxEfG/DyiNiMj1DkwZLXSA1x/HQOPGvWifiPlmNjebqx+9AcsiYoohg5KS3+77wVOL/TuPVE2/fDTnvPq52VzEzWTyUnDrhyTVJc31jjN6MzsypOo213dJcmN9WlJyKrg+HVgfk0sXN9RrkpJPU1IWU6bdeTTqXw4pdeN2tqk+4Y4DAAAAAOA40NS6wP27pm2Xr9ev76+bPx+INPbXg4H786ici3Z27QAAAAAAnBR29XlRN03D2iFIyO5j9h9ED+nK/gr/tcr/W4bDW+kOgf/gm1Jx72TLn5bQHp6WbYKw7KdqoLYaddBV+B8bNaV+Oo7jBjI23P5X0A3OvHv/q3UXvLYYD15pC4LIzm+Arrb9AgIAAADQNo2m3z8z3NkJAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABwArXjv6N1eo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUfE3AAD//7ndB6A=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x4001c1f42, 0x62) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a8", 0x1}], 0x1, 0xe7c, 0x0, 0x2) 2m29.040127447s ago: executing program 0 (id=80): socket(0x8000000010, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_vlan\x00', 0x10) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x8, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x8}}}}}}, 0x0) 2m28.590629629s ago: executing program 4 (id=81): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, 0x0, 0x4041) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(0xffffffffffffffff) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x100) pwrite64(r3, &(0x7f0000000080)="db", 0x1, 0xe75) socket$inet(0x10, 0x3, 0x0) 2m28.087881937s ago: executing program 0 (id=85): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000000)={[{@auto_da_alloc}, {@minixdf}]}, 0x1, 0x569, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x189000, 0x82) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 2m25.641714294s ago: executing program 32 (id=85): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000000)={[{@auto_da_alloc}, {@minixdf}]}, 0x1, 0x569, &(0x7f0000000480)="$eJzs3d1rm9UfAPDvkzZ7//3WwRgqIgUvnMyla+vLBC/mtQ4Gej9D+6yMpsto0rHWgduFu5bhnQPxXrz2UvwHvPBvGOhgyCiCeBN50idZ2iZtuqUvms8HnnK+z0vPOXlyTs7JSUgAQ2s8+1OIeDkivkoiTkZEkh8bjfzg+Np5q0/vzGRbEo3GJ38kzfOyuPW/Wtcdz4OXIuLnLyPOFTbnW1temS9XKuliHk/UF25O1JZXzl9fKM+lc+mNqenpi+9MT73/3rsDq+ubV7KCjOTRqQdJXIoTedRZjxdwtzMYj/H8MSnGpQ0nTg4gs4Mk6br3hz0vBzszkrfzYmR9wMkYyVs98N/3RUQ0gCGV7Lj9/1rcnZIAe6s1DmjN7Qc0D/7XePLh2gRoc/1H194biSPNudGx1WTdzCib744NIP8sjx9/f/gg22Jw70MAbOvuvYi4MDq6uf9L8v7v+V3o45yNeej/YO/8lI1/3uo2/im0xz/RZfxzvEvbfR7bt//C4wFk01M2/vug6/i3vWg1NpJH/2uO+YrJteuVNOvb/h8RZ6N4OIu3Ws+5uPqo0etY5/gv27L8W2PBvByPRw+vv2a2XC+/SJ07PbkX8UrX8W/Svv/J2v1ft8STPR5X+szjTPrwtV7Htq//7mp8F/FG1/v/rLrJ1uuTE83nw0TrWbHZn/fP/NIr//2uf3b/j21d/7Gkc722tvM8vj3ydxrt9eT11tU/+n/+H0o+baYP5ftul+v1xcmIQ8nH7f2F1v6pZ9e24tb5Wf3Pvr51/5d06f+ORsRnfdb//unvX+117CDc/9mu9789u91w/3eeePTR59/0yr+//u/tZupsvqef/q/fAr7IYwcAAAAAAAAHTSEiTkRSKLXThUKptPb5jtNxrFCp1urnrlWXbsxG87uyY1EstFa6T3Z8HmIyXzFsxVMb4umIOBURX48cbcalmWpldr8rDwAAAAAAAAAAAAAAAAAAAAfE8R7f/8/8NrLfpQN2nZ/8huG1bfsfxC89AQeS138YXto/DK++2n9x98sB7D2v/zC8tH8YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAADdeXy5WxrrD69M5PFs7eWl+art87PprX50sLSTGmmunizNFetzlXS0kx1Ybv/V6lWb05OxdLtiXpaq0/UlleuLlSXbtSvXl8oz6VXU78iBgAAAAAAAAAAAAAAAAAAAJvVllfmy5VKuigxxIm/Go3G814+ut+Fl9iVxH73TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzD8BAAD//1hdMq0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x189000, 0x82) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 2m13.419630288s ago: executing program 33 (id=81): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, 0x0, 0x4041) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(0xffffffffffffffff) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x100) pwrite64(r3, &(0x7f0000000080)="db", 0x1, 0xe75) socket$inet(0x10, 0x3, 0x0) 1m7.053396182s ago: executing program 6 (id=326): r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) fsopen(&(0x7f00000001c0)='v7\x00', 0x1) timer_create(0xfffffffffffffff8, 0x0, &(0x7f0000000100)=0x0) timer_delete(r2) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40010703, 0x0, 0x0) 1m5.767472146s ago: executing program 6 (id=329): creat(&(0x7f0000000000)='./file0\x00', 0x175) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000140), 0x45, 0x7b6, &(0x7f0000001140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 1m4.103425546s ago: executing program 6 (id=334): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m2.596781709s ago: executing program 6 (id=341): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 1m0.197222691s ago: executing program 6 (id=350): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") open(&(0x7f0000000080)='./bus\x00', 0x147c7c, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb351) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x9000}], 0x1, 0x7000, 0x7, 0x1e) 55.632242882s ago: executing program 6 (id=361): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0xfe, 0x177, &(0x7f0000000680)="$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") listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 54.755686837s ago: executing program 34 (id=361): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0xfe, 0x177, &(0x7f0000000680)="$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") listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15.559708493s ago: executing program 5 (id=492): getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00x\x00'/14], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x3, 0x0, &(0x7f0000000e80)="b80000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x11, &(0x7f0000000780)={[], [{@euid_eq={'euid', 0x3d, r0}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x619, &(0x7f0000000140)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x25, 0x0, 0x0, 0xfffffffa, 0x60000000, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r7, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 14.227404555s ago: executing program 5 (id=495): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000700)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000800), 0x8001) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r5 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r5}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="55b60000030000000000000080abd9be6e287ad8c5167c85ba504a4436fc2835596c87d6217244ff57b57d281e31dd873d48f8bf745a4413b69fd67519099134a980033c2c0d0234cb89933da666c163b19b3555fbfa9a46fc6fbd4a49", @ANYRES16=r6, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendto$inet(r3, &(0x7f00000000c0)="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", 0x4e0, 0x6000000000000000, 0x0, 0x0) 12.332598381s ago: executing program 2 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000a40)='\xb9\x9b\xf2:\a\xac\xc9=itch\x000\xeb\x89\x02\xb8\x86u8\x8b1\xcc\xb1\xb7\xd0\xd58z\xf4\x13\x8bn\x1f\xfa\xdb\xd8\xbd\xf2\xc6\x84N\x8e\xa8\xc3\xb5m\x96\x8d\xcf\x89O\xde\tw{\xf5\xfb\xa4?\xc8\x02\x00\x00\x00s\xb0=\xc0\xb9\xc4\xa1&\x19\xb6\xd4\x1d\xb4\xa3W\x8f@t\xa0X\x1e\t\x92B\xa2\x91\x04\x94>]hb\x90\xd1\xee\x83\xd7pD\xfc\xd1 }\xdd\xab\x1fj\xf0\xd6K:\xe2\'\xfb-cv\x89\xd0\x87\x82=\xcd\xaa\xad_\xdd\xa2\xb2^\x14\xff2P\r$\x8d\xb6w\xcfS+\xe8b:\x18\xc3\b\xb3\xc0\x1b\xaa\x94\x9e\xf4\n\x1b\x11.\xc4FU\xff\x14\xbc\x82\xce\xb5\x03\xc5', 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11.146216888s ago: executing program 2 (id=508): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 10.802334747s ago: executing program 3 (id=511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$vcs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, 0x0, 0x20000, 0x42) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file1/file0\x00', 0x8100, &(0x7f0000006100)={0x83, 0x2}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 10.748767783s ago: executing program 2 (id=512): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x1000}, 0x8) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 8.744252951s ago: executing program 3 (id=515): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3", @ANYRES8=r0], 0x0}, 0x0) r1 = gettid() r2 = getpid() kcmp(r1, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000002000010309867c9011f6cb9b0200"], 0x24}}, 0x0) socket$inet6(0x10, 0x3, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000002000000e27f000001"], 0x50) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 8.496606188s ago: executing program 5 (id=518): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000700)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000800), 0x8001) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180), 0x0) r5 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r5}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendto$inet(r3, &(0x7f00000000c0)="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", 0x249, 0x6000000000000000, 0x0, 0x0) 8.168288415s ago: executing program 8 (id=521): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f00000015c0)=""/196) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8014) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$igmp(0x2, 0x3, 0x2) getrlimit(0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") openat$hwrng(0xffffffffffffff9c, 0x0, 0x44100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 7.084549988s ago: executing program 7 (id=522): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x2) 6.952178178s ago: executing program 3 (id=524): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 6.81582228s ago: executing program 7 (id=525): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 6.672980075s ago: executing program 8 (id=526): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@grpid}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19cd0ea, 0x0, 0xfc, 0x0, &(0x7f00000004c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 6.559958878s ago: executing program 3 (id=527): socket$nl_xfrm(0x10, 0x3, 0x6) rename(&(0x7f0000000000)='./file2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 6.528968736s ago: executing program 2 (id=528): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x101000) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) r1 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f0000000080)='\x00', 0x1, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0xfffffffffffffc17, 0x141, 0x0, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x80042, 0xc3, 0x11}, 0x18) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f00009f2000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10, r4, 0xe5642000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) 6.424895236s ago: executing program 7 (id=529): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xbdd8}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x22e, &(0x7f0000000480)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "d2bd83", 0x1f8, 0x3c, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh={0x2f, 0x0, 0x4, 0x0, 0x2, 0x70, 0x7}, @hopopts={0x2f, 0x3b, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x6, 0x0, [0x8, 0x4, 0x706d, 0xfffffffffffffffb]}}, @generic={0x9, 0x199, "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"}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x9}]}, @fragment={0x2b, 0x0, 0x4, 0x0, 0x0, 0x3, 0x68}]}}}}}, 0x0) 5.443277192s ago: executing program 3 (id=530): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000700)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000800), 0x8001) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r5 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r5}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="55b60000030000000000000080abd9be6e287ad8c5167c85ba504a4436fc2835596c87d6217244ff57b57d281e31dd873d48f8bf745a4413b69fd67519099134a980033c2c0d0234cb89933da666c163b19b3555fbfa9a46fc6fbd4a49", @ANYRES16=r6, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendto$inet(r3, &(0x7f00000000c0)="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", 0x4e0, 0x6000000000000000, 0x0, 0x0) 5.22790934s ago: executing program 2 (id=531): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0c"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x6000, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)={0x148, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3b}}}}, [@NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3909868dbfe9f3d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e91abcd900ea7068"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a73ffeb26083590078b8404a64b8d8983621130122b8c830"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1f1feaed1707b684f196918d86d1696a"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5f250f4a0ac5d875"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffff7d}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="86eda96d48f7ab532f4ab437b6ac495d0362cc01b87e98c7aed4251bbfead413"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xce}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7e88bd288f3d66da1ee0cd754e2528c19c3ceebba5a9f600"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="03bd7e03cd74b32def81fca4c0c39ccb"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bfb51950e3565883130bb3ad7950fca866464bdd12fa8b8d69017457c3da415a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffadcf}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6e3564a14ba9c5f61c1ec42fdd3eac5586d5cfd42f92092c6cd264967a5b522c"}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000800}, 0x400c011) socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) 4.983396322s ago: executing program 1 (id=532): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = epoll_create1(0x80000) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000002c0)=0x25) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 4.774834613s ago: executing program 7 (id=533): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@random="0f68f1e7312e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000a00)={@local, @random="2fd7d8197ae3", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x17, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x800}, {"056f56"}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.517737739s ago: executing program 1 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000a40)='\xb9\x9b\xf2:\a\xac\xc9=itch\x000\xeb\x89\x02\xb8\x86u8\x8b1\xcc\xb1\xb7\xd0\xd58z\xf4\x13\x8bn\x1f\xfa\xdb\xd8\xbd\xf2\xc6\x84N\x8e\xa8\xc3\xb5m\x96\x8d\xcf\x89O\xde\tw{\xf5\xfb\xa4?\xc8\x02\x00\x00\x00s\xb0=\xc0\xb9\xc4\xa1&\x19\xb6\xd4\x1d\xb4\xa3W\x8f@t\xa0X\x1e\t\x92B\xa2\x91\x04\x94>]hb\x90\xd1\xee\x83\xd7pD\xfc\xd1 }\xdd\xab\x1fj\xf0\xd6K:\xe2\'\xfb-cv\x89\xd0\x87\x82=\xcd\xaa\xad_\xdd\xa2\xb2^\x14\xff2P\r$\x8d\xb6w\xcfS+\xe8b:\x18\xc3\b\xb3\xc0\x1b\xaa\x94\x9e\xf4\n\x1b\x11.\xc4FU\xff\x14\xbc\x82\xce\xb5\x03\xc5', 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.280363957s ago: executing program 8 (id=535): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) creat(&(0x7f0000000080)='./bus\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.238137446s ago: executing program 1 (id=536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002a80)=@newtaction={0x70, 0x13, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x19, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffd}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xd, 0x4, 0x6, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xd10a43cb}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x20094) 2.103692733s ago: executing program 7 (id=537): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x175) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000140), 0x45, 0x7b6, &(0x7f0000001140)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x14, 0x0, &(0x7f0000000880)="3d25ab324119c4cbd0017085080092624cf43f7b", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.724426112s ago: executing program 5 (id=538): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f00000015c0)=""/196) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8014) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$igmp(0x2, 0x3, 0x2) getrlimit(0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") openat$hwrng(0xffffffffffffff9c, 0x0, 0x44100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 1.704529039s ago: executing program 1 (id=539): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1.285957474s ago: executing program 8 (id=540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) lsetxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000040)=@random={'btrfs.', 'clear_refs\x00'}, 0x0, 0x0) 1.152651986s ago: executing program 1 (id=541): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 998.552212ms ago: executing program 8 (id=542): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 882.441784ms ago: executing program 5 (id=543): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x101000) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) r1 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f0000000080)='\x00', 0x1, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0xfffffffffffffc17, 0x141, 0x0, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x80042, 0xc3, 0x11}, 0x18) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f00009f2000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10, r4, 0xe5642000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) 755.952711ms ago: executing program 1 (id=544): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000140), 0x45, 0x7b6, &(0x7f0000001140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 525.740162ms ago: executing program 7 (id=545): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) landlock_restrict_self(r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 415.931115ms ago: executing program 5 (id=546): r0 = socket(0x10, 0x3, 0xc) r1 = socket(0x11, 0x3, 0x0) setgroups(0x0, 0x0) setsockopt(r0, 0xf, 0x7, &(0x7f0000000000)="d3ad58475d571eb0c7970940c6d324fdde0a", 0x12) pipe2$watch_queue(0x0, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10003, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getresuid(0x0, 0xfffffffffffffffc, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000080)={[{@noinit_itable}, {@block_validity}, {@quota}, {@nombcache}]}, 0x1, 0x4e1, &(0x7f0000001400)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x4, 0xcec0, 0x1, 0x7}) ioctl$SIOCGETSGCNT(r3, 0x89e1, &(0x7f0000000700)={@private=0xa010100, @rand_addr=0x64010102}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec773000) read$alg(r1, &(0x7f0000000100)=""/220, 0xdc) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 406.016323ms ago: executing program 8 (id=547): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r3, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r3, &(0x7f00000008c0)}, 0x20) 233.761179ms ago: executing program 3 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f00000007c0)="06") 0s ago: executing program 2 (id=549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000a40)='\xb9\x9b\xf2:\a\xac\xc9=itch\x000\xeb\x89\x02\xb8\x86u8\x8b1\xcc\xb1\xb7\xd0\xd58z\xf4\x13\x8bn\x1f\xfa\xdb\xd8\xbd\xf2\xc6\x84N\x8e\xa8\xc3\xb5m\x96\x8d\xcf\x89O\xde\tw{\xf5\xfb\xa4?\xc8\x02\x00\x00\x00s\xb0=\xc0\xb9\xc4\xa1&\x19\xb6\xd4\x1d\xb4\xa3W\x8f@t\xa0X\x1e\t\x92B\xa2\x91\x04\x94>]hb\x90\xd1\xee\x83\xd7pD\xfc\xd1 }\xdd\xab\x1fj\xf0\xd6K:\xe2\'\xfb-cv\x89\xd0\x87\x82=\xcd\xaa\xad_\xdd\xa2\xb2^\x14\xff2P\r$\x8d\xb6w\xcfS+\xe8b:\x18\xc3\b\xb3\xc0\x1b\xaa\x94\x9e\xf4\n\x1b\x11.\xc4FU\xff\x14\xbc\x82\xce\xb5\x03\xc5', 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 91.936826][ T5809] cgroup: Unknown subsys name 'net' [ 92.116026][ T5809] cgroup: Unknown subsys name 'cpuset' [ 92.126591][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.736075][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.659008][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.670151][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.681320][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.692183][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.694571][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.699851][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.708147][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.721431][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.731371][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.739616][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.747246][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.755111][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.764680][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.772369][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.781477][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.790373][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.798407][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.807416][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.815150][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.822081][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.822594][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.838022][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.851408][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.862787][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.870322][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.870503][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.892102][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.900696][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.911679][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.932269][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.567901][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 98.899885][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 98.911885][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 98.949557][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 99.016023][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.024016][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.033983][ T5826] bridge_slave_0: entered allmulticast mode [ 99.041912][ T5826] bridge_slave_0: entered promiscuous mode [ 99.110520][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.118199][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.125553][ T5826] bridge_slave_1: entered allmulticast mode [ 99.133117][ T5826] bridge_slave_1: entered promiscuous mode [ 99.196709][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 99.356887][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.412833][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.515105][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.522420][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.529703][ T5822] bridge_slave_0: entered allmulticast mode [ 99.537483][ T5822] bridge_slave_0: entered promiscuous mode [ 99.545090][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.553505][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.560709][ T5834] bridge_slave_0: entered allmulticast mode [ 99.569107][ T5834] bridge_slave_0: entered promiscuous mode [ 99.577132][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 99.616461][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.623787][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.631283][ T5833] bridge_slave_0: entered allmulticast mode [ 99.638910][ T5833] bridge_slave_0: entered promiscuous mode [ 99.647638][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.655327][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.662776][ T5822] bridge_slave_1: entered allmulticast mode [ 99.670383][ T5822] bridge_slave_1: entered promiscuous mode [ 99.678524][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.686644][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.695178][ T5834] bridge_slave_1: entered allmulticast mode [ 99.703287][ T5834] bridge_slave_1: entered promiscuous mode [ 99.735063][ T5826] team0: Port device team_slave_0 added [ 99.740921][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.748211][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.755509][ T5833] bridge_slave_1: entered allmulticast mode [ 99.763109][ T5833] bridge_slave_1: entered promiscuous mode [ 99.802029][ T5825] Bluetooth: hci0: command tx timeout [ 99.815850][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.823491][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.830695][ T5827] bridge_slave_0: entered allmulticast mode [ 99.838952][ T5827] bridge_slave_0: entered promiscuous mode [ 99.849353][ T5826] team0: Port device team_slave_1 added [ 99.881264][ T5825] Bluetooth: hci1: command tx timeout [ 99.910848][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.918225][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.925481][ T5827] bridge_slave_1: entered allmulticast mode [ 99.933029][ T5827] bridge_slave_1: entered promiscuous mode [ 99.961505][ T52] Bluetooth: hci2: command tx timeout [ 99.967365][ T5835] Bluetooth: hci4: command tx timeout [ 99.968663][ T5825] Bluetooth: hci3: command tx timeout [ 99.973433][ T52] Bluetooth: hci5: command tx timeout [ 99.988106][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.000127][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.047127][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.059091][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.071555][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.104194][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.111504][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.138275][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.153542][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.206894][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.217755][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.225644][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.252282][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.325428][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.361373][ T5822] team0: Port device team_slave_0 added [ 100.369360][ T5834] team0: Port device team_slave_0 added [ 100.406865][ T5833] team0: Port device team_slave_0 added [ 100.415286][ T5822] team0: Port device team_slave_1 added [ 100.423646][ T5834] team0: Port device team_slave_1 added [ 100.429553][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.437000][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.444598][ T5836] bridge_slave_0: entered allmulticast mode [ 100.452795][ T5836] bridge_slave_0: entered promiscuous mode [ 100.483539][ T5833] team0: Port device team_slave_1 added [ 100.519143][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.526584][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.534370][ T5836] bridge_slave_1: entered allmulticast mode [ 100.542559][ T5836] bridge_slave_1: entered promiscuous mode [ 100.552320][ T5827] team0: Port device team_slave_0 added [ 100.645015][ T5827] team0: Port device team_slave_1 added [ 100.688891][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.696365][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.722646][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.736525][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.743556][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.769707][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.813775][ T5826] hsr_slave_0: entered promiscuous mode [ 100.820772][ T5826] hsr_slave_1: entered promiscuous mode [ 100.828722][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.835917][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.868140][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.883079][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.890213][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.916464][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.928667][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.936428][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.962655][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.977025][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.004091][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.011173][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.037569][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.068176][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.078579][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.085819][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.112525][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.184949][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.195259][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.222894][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.338706][ T5836] team0: Port device team_slave_0 added [ 101.397184][ T5836] team0: Port device team_slave_1 added [ 101.423555][ T5822] hsr_slave_0: entered promiscuous mode [ 101.430257][ T5822] hsr_slave_1: entered promiscuous mode [ 101.436940][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 101.442783][ T5822] Cannot create hsr debugfs directory [ 101.460732][ T5834] hsr_slave_0: entered promiscuous mode [ 101.467422][ T5834] hsr_slave_1: entered promiscuous mode [ 101.473961][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 101.479694][ T5834] Cannot create hsr debugfs directory [ 101.491855][ T5833] hsr_slave_0: entered promiscuous mode [ 101.498405][ T5833] hsr_slave_1: entered promiscuous mode [ 101.505592][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 101.511379][ T5833] Cannot create hsr debugfs directory [ 101.553689][ T5827] hsr_slave_0: entered promiscuous mode [ 101.560513][ T5827] hsr_slave_1: entered promiscuous mode [ 101.567526][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 101.573788][ T5827] Cannot create hsr debugfs directory [ 101.619892][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.628367][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.655057][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.719302][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.726468][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.753059][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.881145][ T52] Bluetooth: hci0: command tx timeout [ 101.961456][ T52] Bluetooth: hci1: command tx timeout [ 102.041223][ T52] Bluetooth: hci5: command tx timeout [ 102.042804][ T5825] Bluetooth: hci4: command tx timeout [ 102.046759][ T5829] Bluetooth: hci3: command tx timeout [ 102.052241][ T5835] Bluetooth: hci2: command tx timeout [ 102.118914][ T5836] hsr_slave_0: entered promiscuous mode [ 102.125966][ T5836] hsr_slave_1: entered promiscuous mode [ 102.133109][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 102.138845][ T5836] Cannot create hsr debugfs directory [ 102.487699][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.512882][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.546093][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.563610][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.639869][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.663769][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.677185][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.705678][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.794345][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.813562][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.829126][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.864766][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.955771][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.980885][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.999704][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.027833][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.060910][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.142612][ T5822] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.173169][ T5822] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.184938][ T5822] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.196754][ T5822] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.226643][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.252654][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.287404][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.294897][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.363797][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.376138][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.383566][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.395672][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.418506][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.448257][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.455582][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.475520][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.497009][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.519568][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.527200][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.567176][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.707167][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.787396][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.794887][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.845787][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.853024][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.904821][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.967849][ T5835] Bluetooth: hci0: command tx timeout [ 104.010844][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.029922][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.041368][ T5835] Bluetooth: hci1: command tx timeout [ 104.054595][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.061810][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.100158][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.107459][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.122389][ T5825] Bluetooth: hci5: command tx timeout [ 104.123941][ T52] Bluetooth: hci4: command tx timeout [ 104.127989][ T5835] Bluetooth: hci3: command tx timeout [ 104.134914][ T5829] Bluetooth: hci2: command tx timeout [ 104.206174][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.232953][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.280451][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.287696][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.324371][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.331690][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.388260][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.463995][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.525269][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.588457][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.595676][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.624637][ T774] cfg80211: failed to load regulatory.db [ 104.675272][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.682499][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.887170][ T5833] veth0_vlan: entered promiscuous mode [ 104.907383][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.965695][ T5826] veth0_vlan: entered promiscuous mode [ 104.990439][ T5833] veth1_vlan: entered promiscuous mode [ 105.014192][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.051370][ T5826] veth1_vlan: entered promiscuous mode [ 105.227662][ T5834] veth0_vlan: entered promiscuous mode [ 105.257245][ T5833] veth0_macvtap: entered promiscuous mode [ 105.276195][ T5826] veth0_macvtap: entered promiscuous mode [ 105.287845][ T5834] veth1_vlan: entered promiscuous mode [ 105.313050][ T5833] veth1_macvtap: entered promiscuous mode [ 105.331869][ T5826] veth1_macvtap: entered promiscuous mode [ 105.376400][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.386130][ T5827] veth0_vlan: entered promiscuous mode [ 105.426038][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.444794][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.457318][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.492818][ T5827] veth1_vlan: entered promiscuous mode [ 105.505858][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.526870][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.577911][ T5834] veth0_macvtap: entered promiscuous mode [ 105.595549][ T3509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.613083][ T5834] veth1_macvtap: entered promiscuous mode [ 105.630209][ T3509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.667511][ T3509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.686830][ T3509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.714089][ T3509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.756311][ T3509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.769469][ T3509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.789297][ T3509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.820621][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.875757][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.888744][ T5836] veth0_vlan: entered promiscuous mode [ 105.896223][ T5827] veth0_macvtap: entered promiscuous mode [ 105.948935][ T5827] veth1_macvtap: entered promiscuous mode [ 105.974375][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.006343][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.017285][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.022518][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.040198][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.043342][ T5836] veth1_vlan: entered promiscuous mode [ 106.053208][ T5829] Bluetooth: hci0: command tx timeout [ 106.080283][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.113484][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.121815][ T5829] Bluetooth: hci1: command tx timeout [ 106.130548][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.142876][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.186694][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.201171][ T5829] Bluetooth: hci2: command tx timeout [ 106.202260][ T5835] Bluetooth: hci4: command tx timeout [ 106.206648][ T52] Bluetooth: hci3: command tx timeout [ 106.212127][ T5835] Bluetooth: hci5: command tx timeout [ 106.248688][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.257727][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.275530][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.293552][ T5822] veth0_vlan: entered promiscuous mode [ 106.322674][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.353367][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.363441][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.380504][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.389981][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.407423][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.445276][ T5822] veth1_vlan: entered promiscuous mode [ 106.508833][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.522060][ T5836] veth0_macvtap: entered promiscuous mode [ 106.560556][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.708447][ T5836] veth1_macvtap: entered promiscuous mode [ 106.733732][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.757204][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.807303][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.847995][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.023080][ T3474] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.054554][ T3474] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.087560][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.109484][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.166275][ T3474] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.209453][ T3474] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.279379][ T5822] veth0_macvtap: entered promiscuous mode [ 107.341232][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.346626][ T5822] veth1_macvtap: entered promiscuous mode [ 107.373480][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.418370][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.443317][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.463223][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.478438][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.537863][ T3650] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.574963][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.591110][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.621999][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.632387][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.643975][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.761869][ T5980] loop4: detected capacity change from 0 to 8 [ 107.870533][ T5980] SQUASHFS error: Failed to read block 0x2d7: -5 [ 107.906362][ T5980] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 108.179898][ T5986] loop1: detected capacity change from 0 to 512 [ 108.300857][ T5988] loop0: detected capacity change from 0 to 128 [ 108.333357][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.405067][ T5986] FAT-fs (loop1): Directory bread(block 199916) failed [ 108.460181][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.495190][ T5986] FAT-fs (loop1): Directory bread(block 199917) failed [ 109.047767][ T5986] FAT-fs (loop1): Directory bread(block 199918) failed [ 109.055072][ T5986] FAT-fs (loop1): Directory bread(block 199919) failed [ 109.064150][ T5986] FAT-fs (loop1): Directory bread(block 199920) failed [ 109.071119][ T5986] FAT-fs (loop1): Directory bread(block 199921) failed [ 109.078042][ T5986] FAT-fs (loop1): Directory bread(block 199922) failed [ 109.085466][ T5986] FAT-fs (loop1): Directory bread(block 199923) failed [ 109.117784][ T5993] 9p: Bad value for 'rfdno' [ 109.189151][ T5988] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.264261][ T5988] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.368396][ T5986] FAT-fs (loop1): Directory bread(block 199916) failed [ 109.410065][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.418015][ T5986] FAT-fs (loop1): Directory bread(block 199917) failed [ 109.518196][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.883264][ T5827] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.922650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.933092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 110.026874][ T774] IPVS: starting estimator thread 0... [ 110.141776][ T6014] IPVS: using max 25 ests per chain, 60000 per kthread [ 110.155184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.257603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.292751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.337608][ T6013] loop5: detected capacity change from 0 to 2048 [ 110.413534][ T6016] loop1: detected capacity change from 0 to 1024 [ 110.535467][ T5908] IPVS: starting estimator thread 0... [ 110.557904][ T6022] loop0: detected capacity change from 0 to 512 [ 110.565949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 110.574580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.586776][ T6013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.647714][ T6022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 110.762078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.772055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 110.782756][ T6021] IPVS: using max 25 ests per chain, 60000 per kthread [ 110.791767][ T6022] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.922649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 110.980305][ T6022] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 111.100575][ T6022] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 111.149913][ T50] hfsplus: b-tree write err: -5, ino 4 [ 111.180611][ T6022] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.16: Failed to acquire dquot type 0 [ 111.222369][ T6027] netlink: 56 bytes leftover after parsing attributes in process `syz.2.17'. [ 111.506933][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.022056][ T5922] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.241899][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 112.264810][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.352724][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 112.500188][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.779733][ T5922] usb 3-1: config 0 descriptor?? [ 113.334457][ T5922] hid (null): global environment stack underflow [ 113.410448][ T5922] logitech-djreceiver 0003:046D:C531.0001: global environment stack underflow [ 113.643213][ T5922] logitech-djreceiver 0003:046D:C531.0001: item 0 4 1 11 parsing failed [ 113.658435][ T5922] logitech-djreceiver 0003:046D:C531.0001: logi_dj_probe: parse failed [ 113.662994][ T6089] loop1: detected capacity change from 0 to 1024 [ 113.667286][ T5922] logitech-djreceiver 0003:046D:C531.0001: probe with driver logitech-djreceiver failed with error -22 [ 113.853361][ T6089] ======================================================= [ 113.853361][ T6089] WARNING: The mand mount option has been deprecated and [ 113.853361][ T6089] and is ignored by this kernel. Remove the mand [ 113.853361][ T6089] option from the mount to silence this warning. [ 113.853361][ T6089] ======================================================= [ 114.392443][ T5922] usb 3-1: USB disconnect, device number 2 [ 114.413236][ T6089] ext4: Unknown parameter 'noacl' [ 114.931080][ T5922] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.965444][ T6107] loop5: detected capacity change from 0 to 2048 [ 115.027592][ T6107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 115.103011][ T5922] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 115.155519][ T5922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.210922][ T5922] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.838086][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.929938][ T5922] usb 2-1: SerialNumber: syz [ 116.003980][ T6107] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.234747][ T6107] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 116.289544][ T6089] loop1: detected capacity change from 0 to 512 [ 116.316679][ T6107] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.316679][ T6107] [ 116.361084][ T6107] EXT4-fs (loop5): Total free blocks count 0 [ 116.371687][ T6107] EXT4-fs (loop5): Free/Dirty block details [ 116.372606][ T6089] ext4: Unknown parameter 'noacl' [ 116.377673][ T6107] EXT4-fs (loop5): free_blocks=2415919104 [ 116.377719][ T6107] EXT4-fs (loop5): dirty_blocks=48 [ 116.439373][ T5922] usb 2-1: invalid UAC_HEADER (v1) [ 116.472848][ T6107] EXT4-fs (loop5): Block reservation details [ 116.479170][ T6107] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 116.575587][ T5922] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 116.642298][ T5922] usb 2-1: USB disconnect, device number 2 [ 116.745574][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.789402][ T6136] loop2: detected capacity change from 0 to 128 [ 116.798745][ T6136] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.846097][ T6136] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.876356][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 117.259110][ T5814] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.298563][ T1982] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.494964][ T110] IPVS: starting estimator thread 0... [ 117.591312][ T6146] IPVS: using max 32 ests per chain, 76800 per kthread [ 117.611439][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 117.645325][ T5814] usb 1-1: config index 0 descriptor too short (expected 292, got 36) [ 117.664896][ T5814] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 117.694696][ T5814] usb 1-1: config 0 has no interface number 0 [ 117.721072][ T5814] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 117.767565][ T5814] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.833793][ T5814] usb 1-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 117.868213][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.888418][ T5814] usb 1-1: Product: syz [ 117.896893][ T5814] usb 1-1: Manufacturer: syz [ 117.908813][ T5814] usb 1-1: SerialNumber: syz [ 117.928303][ T5814] usb 1-1: config 0 descriptor?? [ 117.958087][ T6139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.005513][ T6152] loop2: detected capacity change from 0 to 512 [ 118.109220][ T6152] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.138446][ T6152] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.271564][ T6152] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.335936][ T6152] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.46: bad orphan inode 131083 [ 118.413475][ T6152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.680521][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.016572][ T6165] syz.4.51 uses obsolete (PF_INET,SOCK_PACKET) [ 119.039693][ T6166] netlink: 'syz.2.49': attribute type 4 has an invalid length. [ 119.375115][ T6169] binder: 6168:6169 ioctl c018620c 200000000000 returned -1 [ 119.965507][ T5922] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.049299][ T110] usb 1-1: USB disconnect, device number 2 [ 120.150071][ T5922] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 120.196524][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.226818][ T5922] usb 4-1: Product: syz [ 120.246197][ T5922] usb 4-1: Manufacturer: syz [ 120.465019][ T5922] usb 4-1: SerialNumber: syz [ 121.531528][ T6189] 9p: Bad value for 'rfdno' [ 121.587985][ T6195] loop0: detected capacity change from 0 to 256 [ 121.620208][ T6195] exfat: Invalid uid '0x00000000ffffffff' [ 121.911782][ T6201] loop5: detected capacity change from 0 to 256 [ 121.937704][ T6201] exfat: Invalid uid '0x00000000ffffffff' [ 122.025089][ T6207] netlink: 'syz.4.64': attribute type 4 has an invalid length. [ 122.065034][ T5922] rtl8150 4-1:1.0: couldn't reset the device [ 122.091672][ T5922] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 122.122726][ T30] IPVS: starting estimator thread 0... [ 122.187687][ T6210] loop0: detected capacity change from 0 to 1024 [ 122.223699][ T6210] EXT4-fs: Ignoring removed nobh option [ 122.276668][ T5922] usb 4-1: USB disconnect, device number 2 [ 122.282701][ T6209] IPVS: using max 24 ests per chain, 57600 per kthread [ 122.298612][ T6210] EXT4-fs: Ignoring removed bh option [ 122.437840][ T6210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.468216][ T6215] capability: warning: `syz.5.67' uses deprecated v2 capabilities in a way that may be insecure [ 122.612188][ T6217] loop3: detected capacity change from 0 to 512 [ 122.631589][ T6210] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.66: Allocating blocks 385-513 which overlap fs metadata [ 122.698189][ T6217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.746773][ T6217] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.008145][ T6220] loop2: detected capacity change from 0 to 32768 [ 123.021249][ T6220] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.69 (6220) [ 123.042695][ T6210] EXT4-fs (loop0): pa ffff888078e8abc8: logic 16, phys. 129, len 24 [ 123.050861][ T6210] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 123.070379][ T6220] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.080852][ T6220] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 123.152801][ T6222] loop5: detected capacity change from 0 to 1024 [ 123.215274][ T6230] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.68: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 123.233043][ T6230] EXT4-fs error (device loop3) in ext4_free_inode:361: Filesystem failed CRC [ 123.317143][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.345685][ T6220] BTRFS info (device loop2): enabling ssd optimizations [ 123.352909][ T6220] BTRFS info (device loop2): turning on async discard [ 123.359812][ T6220] BTRFS info (device loop2): enabling free space tree [ 123.988959][ T5833] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.227233][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.806184][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 125.331858][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 126.086216][ T6259] loop3: detected capacity change from 0 to 1024 [ 126.136018][ T6259] EXT4-fs: Ignoring removed bh option [ 126.253477][ T6259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.309399][ T6266] loop0: detected capacity change from 0 to 1024 [ 126.481746][ T6266] loop0: detected capacity change from 1024 to 0 [ 126.488464][ C0] I/O error, dev loop0, sector 32 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 126.694419][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.776849][ T5827] hfsplus: bad catalog entry type [ 127.012095][ T6271] loop3: detected capacity change from 0 to 128 [ 127.096189][ T6271] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.174410][ T6271] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.409721][ T152] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 127.452382][ T152] hfsplus: bad catalog file entry [ 127.457631][ T152] hfsplus: b-tree write err: -5, ino 3 [ 127.466261][ T6074] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.646308][ T6069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.736754][ T6289] loop1: detected capacity change from 0 to 2048 [ 129.805233][ T6069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.824325][ T6289] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.006480][ T6069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.213336][ T6069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.296421][ T6298] loop3: detected capacity change from 0 to 256 [ 130.415311][ T6298] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 130.561265][ T774] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.283048][ T6308] loop5: detected capacity change from 0 to 8 [ 131.321859][ T774] usb 3-1: Using ep0 maxpacket: 32 [ 131.363421][ T774] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 131.396911][ T6308] SQUASHFS error: Unable to read inode 0xa7 [ 131.445036][ T774] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 131.493289][ T774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.503506][ T6069] bridge_slave_1: left allmulticast mode [ 131.509303][ T6069] bridge_slave_1: left promiscuous mode [ 131.528042][ T774] usb 3-1: Product: syz [ 131.538236][ T774] usb 3-1: Manufacturer: syz [ 131.562843][ T774] usb 3-1: SerialNumber: syz [ 131.567358][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.579855][ T774] usb 3-1: config 0 descriptor?? [ 131.602420][ T6299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.613153][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.622899][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.633070][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.644762][ T774] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.666211][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.676272][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.740535][ T6069] bridge_slave_0: left allmulticast mode [ 131.781240][ T6069] bridge_slave_0: left promiscuous mode [ 131.787308][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.822452][ T6314] netlink: 'syz.1.93': attribute type 4 has an invalid length. [ 132.817916][ T30] usb 3-1: USB disconnect, device number 3 [ 133.722351][ T52] Bluetooth: hci2: command tx timeout [ 135.324732][ T5923] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.501173][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 135.525802][ T5923] usb 3-1: config 5 has an invalid interface number: 50 but max is 0 [ 135.575214][ T5923] usb 3-1: config 5 has no interface number 0 [ 135.636015][ T5923] usb 3-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=e3.d6 [ 135.681260][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.681764][ T31] audit: type=1326 audit(1766172493.724:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.3.100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6256d8f749 code=0x0 [ 135.803323][ T52] Bluetooth: hci2: command tx timeout [ 135.954385][ T5923] usb 3-1: string descriptor 0 read error: -71 [ 136.040805][ T5923] usb 3-1: USB disconnect, device number 4 [ 136.362448][ T6069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.378778][ T6069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.396089][ T6069] bond0 (unregistering): Released all slaves [ 138.321322][ T52] Bluetooth: hci2: command tx timeout [ 138.548880][ T6366] loop5: detected capacity change from 0 to 2048 [ 138.588780][ T6366] udf: Bad value for 'volume' [ 140.361747][ T52] Bluetooth: hci2: command tx timeout [ 140.452036][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.529855][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.161947][ T6069] hsr_slave_0: left promiscuous mode [ 142.202343][ T6069] hsr_slave_1: left promiscuous mode [ 142.242968][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.271309][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.297747][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.341019][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.451051][ T6069] veth1_macvtap: left promiscuous mode [ 142.457059][ T6069] veth0_macvtap: left promiscuous mode [ 142.471265][ T5936] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 142.490777][ T6069] veth1_vlan: left promiscuous mode [ 142.516549][ T6069] veth0_vlan: left promiscuous mode [ 142.663603][ T5936] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.701112][ T5936] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 142.741020][ T5936] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 142.787617][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.841092][ T5829] Bluetooth: hci2: command 0x0405 tx timeout [ 143.555336][ T5936] usb 6-1: config 0 descriptor?? [ 144.033807][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.070672][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.081079][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.110901][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.125974][ T6415] netlink: 'syz.3.114': attribute type 4 has an invalid length. [ 144.146638][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.212474][ T5936] Bluetooth: Can't get version to change to load ram patch err [ 144.220216][ T5936] Bluetooth: Loading sysconfig file failed [ 144.226472][ T5936] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 144.244596][ T5936] usb 6-1: USB disconnect, device number 2 [ 145.877109][ T6430] netlink: 'syz.5.118': attribute type 1 has an invalid length. [ 145.914197][ T6433] loop1: detected capacity change from 0 to 1024 [ 145.922124][ T6433] EXT4-fs: Ignoring removed orlov option [ 146.096149][ T6433] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 146.109941][ T5900] IPVS: starting estimator thread 0... [ 146.203196][ T5829] Bluetooth: hci6: command tx timeout [ 146.223795][ T6436] IPVS: using max 33 ests per chain, 79200 per kthread [ 146.309867][ T6433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.584177][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.030275][ T6443] loop1: detected capacity change from 0 to 512 [ 147.169589][ T6443] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.272745][ T6069] team0 (unregistering): Port device team_slave_1 removed [ 147.280352][ T6443] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.121: inode has both inline data and extents flags [ 147.370557][ T6443] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.121: couldn't read orphan inode 15 (err -117) [ 147.422996][ T6443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.488601][ T6069] team0 (unregistering): Port device team_slave_0 removed [ 147.558440][ T6443] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.121: inode has both inline data and extents flags [ 147.589408][ T6443] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.121: inode has both inline data and extents flags [ 147.680593][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.911154][ T6447] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 148.281035][ T5829] Bluetooth: hci6: command tx timeout [ 148.423240][ T6447] @0Ù: renamed from bond_slave_1 (while UP) [ 148.573075][ T6449] loop5: detected capacity change from 0 to 512 [ 148.650577][ T6449] EXT4-fs (loop5): 1 truncate cleaned up [ 148.683767][ T6310] chnl_net:caif_netlink_parms(): no params data found [ 148.706293][ T6449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.818613][ T5829] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 148.955815][ T6454] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.024194][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.184498][ T6464] loop5: detected capacity change from 0 to 512 [ 150.221903][ T6464] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.127: corrupted in-inode xattr: invalid ea_ino [ 150.286297][ T6464] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.127: couldn't read orphan inode 15 (err -117) [ 150.441110][ T5829] Bluetooth: hci6: command tx timeout [ 150.452474][ T6464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.584019][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.629038][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.657366][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.681868][ T6310] bridge_slave_0: entered allmulticast mode [ 150.697541][ T6310] bridge_slave_0: entered promiscuous mode [ 150.851373][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.862643][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.870067][ T6310] bridge_slave_1: entered allmulticast mode [ 150.923525][ T6310] bridge_slave_1: entered promiscuous mode [ 151.169147][ T6484] loop3: detected capacity change from 0 to 512 [ 151.344965][ T6484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.393215][ T6310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.441262][ T6484] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.464447][ T6310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.581189][ T6484] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:335: inode #15: comm syz.3.131: verity file corrupted; can't find descriptor [ 151.708728][ T6310] team0: Port device team_slave_0 added [ 151.715407][ T6484] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 152.594153][ T5829] Bluetooth: hci6: command tx timeout [ 152.719449][ T6310] team0: Port device team_slave_1 added [ 152.849882][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.891620][ T6502] netlink: 'syz.5.134': attribute type 1 has an invalid length. [ 153.111313][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.118843][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.154287][ T6310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.311112][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.344097][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.353621][ T6510] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 153.370606][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.554925][ T6513] loop2: detected capacity change from 0 to 128 [ 153.595044][ T6513] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 153.643304][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.671047][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.711035][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.751055][ T30] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.769509][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.817723][ T30] usb 4-1: config 0 descriptor?? [ 153.835411][ T6310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.902696][ T6510] @0Ù: renamed from bond_slave_1 (while UP) [ 153.993755][ T6412] chnl_net:caif_netlink_parms(): no params data found [ 154.299669][ T30] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xe [ 154.361416][ T30] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 154.433468][ T30] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 154.586871][ T30] usb 4-1: USB disconnect, device number 3 [ 154.653970][ T6310] hsr_slave_0: entered promiscuous mode [ 154.664677][ T6529] fido_id[6529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 154.683986][ T6533] loop1: detected capacity change from 0 to 1024 [ 154.706919][ T6310] hsr_slave_1: entered promiscuous mode [ 154.722186][ T6310] debugfs: 'hsr0' already exists in 'hsr' [ 154.738415][ T6310] Cannot create hsr debugfs directory [ 154.769885][ T6533] hfsplus: invalid length 32517 has been corrected to 255 [ 154.880015][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 155.097329][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.151376][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.172186][ T6412] bridge_slave_0: entered allmulticast mode [ 155.180344][ T6412] bridge_slave_0: entered promiscuous mode [ 155.190583][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.198514][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.206311][ T6412] bridge_slave_1: entered allmulticast mode [ 155.215896][ T6412] bridge_slave_1: entered promiscuous mode [ 156.243956][ T6412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.328606][ T6412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.343418][ T6544] loop1: detected capacity change from 0 to 128 [ 156.526071][ T31] audit: type=1800 audit(1766172514.584:3): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.146" name="bus" dev="loop1" ino=1048619 res=0 errno=0 [ 156.604945][ T6544] Trying to write to read-only block-device loop1 [ 156.641517][ T6544] syz.1.146: attempt to access beyond end of device [ 156.641517][ T6544] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 156.663237][ T6412] team0: Port device team_slave_0 added [ 156.672619][ T5893] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 156.705792][ T6544] syz.1.146: attempt to access beyond end of device [ 156.705792][ T6544] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 156.731828][ T6412] team0: Port device team_slave_1 added [ 156.784835][ T6544] syz.1.146: attempt to access beyond end of device [ 156.784835][ T6544] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 156.837153][ T6544] syz.1.146: attempt to access beyond end of device [ 156.837153][ T6544] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 156.855414][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.888649][ T5893] usb 4-1: config 0 has no interfaces? [ 156.911688][ T5893] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 156.931156][ T6544] syz.1.146: attempt to access beyond end of device [ 156.931156][ T6544] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 156.948073][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.981215][ T6544] syz.1.146: attempt to access beyond end of device [ 156.981215][ T6544] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 157.000909][ T5893] usb 4-1: config 0 descriptor?? [ 157.012311][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.049882][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.081493][ T6544] syz.1.146: attempt to access beyond end of device [ 157.081493][ T6544] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 157.108802][ T6412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.129846][ T6544] syz.1.146: attempt to access beyond end of device [ 157.129846][ T6544] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 157.133817][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.190247][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.211540][ T6544] syz.1.146: attempt to access beyond end of device [ 157.211540][ T6544] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 157.279393][ T6544] syz.1.146: attempt to access beyond end of device [ 157.279393][ T6544] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 157.287181][ T6412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.435619][ T5836] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 157.481118][ T5836] FAT-fs (loop1): Filesystem has been set read-only [ 157.814990][ T6412] hsr_slave_0: entered promiscuous mode [ 157.852869][ T6412] hsr_slave_1: entered promiscuous mode [ 157.872108][ T6412] debugfs: 'hsr0' already exists in 'hsr' [ 157.903118][ T6412] Cannot create hsr debugfs directory [ 158.145547][ T6565] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.332755][ T6565] loop5: detected capacity change from 0 to 1024 [ 158.343628][ T6565] EXT4-fs: Ignoring removed orlov option [ 159.090124][ T6565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.194469][ T6565] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.153: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 159.233224][ T6565] EXT4-fs (loop5): Remounting filesystem read-only [ 159.862648][ T9] usb 4-1: USB disconnect, device number 4 [ 160.826153][ T6588] loop3: detected capacity change from 0 to 512 [ 160.855449][ T6588] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent [ 160.933620][ T6310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.091234][ T6310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.485861][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.936189][ T6310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.985289][ T6601] loop5: detected capacity change from 0 to 128 [ 162.043466][ T6310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.067259][ T6603] loop3: detected capacity change from 0 to 1024 [ 162.136180][ T6603] EXT4-fs: Ignoring removed orlov option [ 162.202185][ T6603] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 162.227955][ T31] audit: type=1800 audit(1766172520.284:4): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.159" name="bus" dev="loop5" ino=1048629 res=0 errno=0 [ 162.275784][ T6601] Trying to write to read-only block-device loop5 [ 162.313646][ T6603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.321333][ T6601] bio_check_eod: 26 callbacks suppressed [ 162.321371][ T6601] syz.5.159: attempt to access beyond end of device [ 162.321371][ T6601] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 162.641428][ T6601] syz.5.159: attempt to access beyond end of device [ 162.641428][ T6601] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 163.445028][ T6601] syz.5.159: attempt to access beyond end of device [ 163.445028][ T6601] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 163.951433][ T6601] syz.5.159: attempt to access beyond end of device [ 163.951433][ T6601] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 163.965810][ T6601] syz.5.159: attempt to access beyond end of device [ 163.965810][ T6601] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 163.979851][ T6601] syz.5.159: attempt to access beyond end of device [ 163.979851][ T6601] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 164.108537][ T60] kworker/u8:4: attempt to access beyond end of device [ 164.108537][ T60] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 164.173165][ T60] kworker/u8:4: attempt to access beyond end of device [ 164.173165][ T60] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 164.201254][ T60] kworker/u8:4: attempt to access beyond end of device [ 164.201254][ T60] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 164.249371][ T60] kworker/u8:4: attempt to access beyond end of device [ 164.249371][ T60] loop5: rw=1, sector=305, nr_sectors = 8 limit=128 [ 165.441967][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.495465][ T5822] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 165.541059][ T5814] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.575089][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.591693][ T5822] FAT-fs (loop5): Filesystem has been set read-only [ 165.623230][ T6310] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.669580][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.676853][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.691074][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 165.713807][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.751797][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.800300][ T5814] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.845939][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.853155][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.878154][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.920207][ T5814] usb 3-1: config 0 descriptor?? [ 166.018205][ T6412] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 166.033510][ T5814] hub 3-1:0.0: USB hub found [ 166.187295][ T6412] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 166.209934][ T5814] hub 3-1:0.0: 1 port detected [ 166.260485][ T6412] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 166.328224][ T6412] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 166.847888][ T5814] hub 3-1:0.0: activate --> -90 [ 166.981747][ T6412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.129465][ T6412] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.179075][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.186475][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.249511][ T5923] usb 3-1: USB disconnect, device number 5 [ 167.250891][ T5814] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 167.274750][ T5814] usb 3-1-port1: connect-debounce failed [ 167.347277][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.354930][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.398397][ T6412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.408928][ T6412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.441151][ T5923] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.714058][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.771297][ T5923] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 168.804350][ T6694] loop2: detected capacity change from 0 to 512 [ 168.832376][ T5923] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 168.860772][ T6694] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.872732][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.885601][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.939183][ T6694] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 168.941591][ T5923] usb 2-1: config 0 descriptor?? [ 169.058651][ T6694] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.177: attempt to clear invalid blocks 2 len 1 [ 169.181593][ T6694] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 169.202468][ T6694] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.177: invalid indirect mapped block 1819239214 (level 0) [ 169.328650][ T6694] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.177: invalid indirect mapped block 1819239214 (level 1) [ 169.481707][ T6694] EXT4-fs (loop2): 1 truncate cleaned up [ 169.512958][ T6694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.624735][ T5923] Bluetooth: Can't get version to change to load ram patch err [ 169.658156][ T5923] Bluetooth: Loading sysconfig file failed [ 169.708758][ T5923] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 169.735573][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.771539][ T5923] usb 2-1: USB disconnect, device number 3 [ 169.790660][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.418591][ T6730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.183'. [ 171.518890][ T6310] veth0_vlan: entered promiscuous mode [ 171.580480][ T6310] veth1_vlan: entered promiscuous mode [ 171.609893][ T6732] loop1: detected capacity change from 0 to 2048 [ 171.636722][ T6732] EXT4-fs: Ignoring removed i_version option [ 171.792100][ T6310] veth0_macvtap: entered promiscuous mode [ 171.830214][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 171.858604][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.978195][ T6739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.062832][ T6310] veth1_macvtap: entered promiscuous mode [ 172.215096][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.263368][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.386719][ T6412] veth0_vlan: entered promiscuous mode [ 172.429882][ T6746] loop5: detected capacity change from 0 to 1024 [ 173.149584][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.299041][ T6079] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.330238][ T6079] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.396922][ T6079] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.462696][ T6412] veth1_vlan: entered promiscuous mode [ 173.683829][ T5900] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 174.541011][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 174.548264][ T5900] usb 6-1: config 0 has an invalid interface number: 37 but max is 0 [ 174.556858][ T5900] usb 6-1: config 0 has no interface number 0 [ 174.603638][ T5900] usb 6-1: New USB device found, idVendor=0424, idProduct=274e, bcdDevice=cd.b2 [ 174.656144][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.689482][ T5900] usb 6-1: Product: syz [ 174.701812][ T5900] usb 6-1: Manufacturer: syz [ 174.728716][ T5900] usb 6-1: SerialNumber: syz [ 174.756689][ T5900] usb 6-1: config 0 descriptor?? [ 174.968113][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.986243][ T6412] veth0_macvtap: entered promiscuous mode [ 175.018612][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.045372][ T30] usb 6-1: USB disconnect, device number 3 [ 175.093435][ T6412] veth1_macvtap: entered promiscuous mode [ 175.129360][ T6776] loop3: detected capacity change from 0 to 128 [ 175.209226][ T6776] bio_check_eod: 9 callbacks suppressed [ 175.209247][ T6776] syz.3.198: attempt to access beyond end of device [ 175.209247][ T6776] loop3: rw=8390659, sector=104, nr_sectors = 937 limit=128 [ 175.264692][ T6072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.292727][ T6072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.318097][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.393898][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.498398][ T5995] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.546313][ T5995] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.586589][ T5995] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.685633][ T5995] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.546973][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.601024][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.715719][ T6800] loop3: detected capacity change from 0 to 8192 [ 178.817080][ T6814] netlink: 'syz.5.209': attribute type 1 has an invalid length. [ 178.996851][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.063117][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.199013][ T6819] loop6: detected capacity change from 0 to 128 [ 179.785643][ T6839] loop7: detected capacity change from 0 to 128 [ 179.931719][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 180.638326][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 180.692340][ T9] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 180.757902][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.829831][ T9] usb 3-1: Product: syz [ 180.875831][ T9] usb 3-1: Manufacturer: syz [ 180.914808][ T9] usb 3-1: SerialNumber: syz [ 180.945357][ T9] usb 3-1: config 0 descriptor?? [ 181.002918][ T9] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 181.056284][ T6860] loop1: detected capacity change from 0 to 1024 [ 182.186026][ T6867] loop6: detected capacity change from 0 to 1024 [ 182.488345][ T6834] loop2: detected capacity change from 0 to 8192 [ 182.951940][ T6834] udf: Unknown parameter '' [ 183.509636][ T110] usb 3-1: USB disconnect, device number 6 [ 183.578518][ T6079] hfsplus: b-tree write err: -5, ino 4 [ 183.591118][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 183.782004][ T5936] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.784867][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 183.845377][ T5893] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 183.892091][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.926392][ T6897] loop7: detected capacity change from 0 to 128 [ 183.951306][ T5893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.972854][ T6897] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.992145][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 183.999039][ T5893] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.015695][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.028845][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.071316][ T110] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.077856][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 184.100675][ T5893] usb 6-1: Product: syz [ 184.106430][ T5893] usb 6-1: Manufacturer: syz [ 184.141436][ T5893] usb 6-1: SerialNumber: syz [ 184.151295][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.226680][ T5936] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.257425][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.261117][ T110] usb 3-1: Using ep0 maxpacket: 16 [ 184.309532][ T5936] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 184.340014][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.381495][ T110] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 184.381529][ T5936] usb 2-1: config 0 descriptor?? [ 184.431176][ T110] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 184.462408][ T6886] loop5: detected capacity change from 0 to 512 [ 184.491520][ T110] usb 3-1: Product: syz [ 184.495795][ T110] usb 3-1: Manufacturer: syz [ 184.534357][ T110] usb 3-1: SerialNumber: syz [ 184.562474][ T110] usb 3-1: config 0 descriptor?? [ 184.568088][ T6905] netlink: 160 bytes leftover after parsing attributes in process `syz.7.233'. [ 184.651496][ T6905] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 184.716747][ T5936] usb 2-1: USB disconnect, device number 4 [ 185.499948][ T5893] usb 6-1: 0:2 : does not exist [ 186.437196][ T5893] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 186.936277][ T6922] loop6: detected capacity change from 0 to 256 [ 187.601195][ T6922] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 187.616613][ T110] usb 3-1: USB disconnect, device number 7 [ 187.676673][ T5893] usb 6-1: USB disconnect, device number 4 [ 187.965613][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 188.100111][ T6930] loop7: detected capacity change from 0 to 1024 [ 188.109963][ T6931] input: syz1 as /devices/virtual/input/input7 [ 188.144086][ T6933] Zero length message leads to an empty skb [ 188.342539][ T6937] loop6: detected capacity change from 0 to 2048 [ 188.482525][ T6937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.551078][ T110] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 188.700729][ T6937] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.240: bg 0: block 234: padding at end of block bitmap is not set [ 188.721072][ T110] usb 6-1: device descriptor read/64, error -71 [ 188.833876][ T6952] loop3: detected capacity change from 0 to 2048 [ 188.833965][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.862943][ T6937] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 117 [ 188.929476][ T6952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.979168][ T6937] EXT4-fs (loop6): This should not happen!! Data will be lost [ 188.979168][ T6937] [ 189.000681][ T6957] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 189.016416][ T5893] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 189.025077][ T110] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 189.027068][ T31] audit: type=1800 audit(1766172547.084:5): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.246" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 189.143182][ T6957] EXT4-fs (loop6): This should not happen!! Data will be lost [ 189.143182][ T6957] [ 189.159066][ T6959] loop1: detected capacity change from 0 to 1024 [ 189.203296][ T6957] EXT4-fs (loop6): Total free blocks count 0 [ 189.243089][ T6957] EXT4-fs (loop6): Free/Dirty block details [ 189.294995][ T6957] EXT4-fs (loop6): free_blocks=0 [ 189.300020][ T6957] EXT4-fs (loop6): dirty_blocks=16 [ 189.351066][ T5893] usb 8-1: Using ep0 maxpacket: 16 [ 189.361538][ T5893] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 189.370247][ T5893] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.391048][ T110] usb 6-1: device descriptor read/64, error -71 [ 189.397858][ T6957] EXT4-fs (loop6): Block reservation details [ 189.892017][ T6951] EXT4-fs: error -4 creating inode table initialization thread [ 190.081372][ T110] usb usb6-port1: attempt power cycle [ 190.088032][ T5893] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.141483][ T5893] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.150572][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.211118][ T5893] usb 8-1: Product: syz [ 190.234323][ T5893] usb 8-1: Manufacturer: syz [ 190.239028][ T5893] usb 8-1: SerialNumber: syz [ 190.431284][ T110] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 190.491959][ T110] usb 6-1: device descriptor read/8, error -71 [ 190.625761][ T6982] loop2: detected capacity change from 0 to 16 [ 190.723643][ T6982] erofs (device loop2): mounted with root inode @ nid 36. [ 190.742580][ T110] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 190.763367][ T5893] usb 8-1: 0:2 : does not exist [ 190.773582][ T110] usb 6-1: device descriptor read/8, error -71 [ 190.825005][ T6982] syz.2.253: attempt to access beyond end of device [ 190.825005][ T6982] loop2: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 190.921649][ T110] usb usb6-port1: unable to enumerate USB device [ 190.985545][ T6982] syz.2.253: attempt to access beyond end of device [ 190.985545][ T6982] loop2: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 191.033504][ T31] audit: type=1800 audit(1766172549.094:6): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.253" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 191.069924][ T6995] loop1: detected capacity change from 0 to 1024 [ 191.162622][ C1] raw-gadget.1 gadget.7: ignoring, device is not running [ 191.172871][ C1] raw-gadget.1 gadget.7: ignoring, device is not running [ 191.180468][ C1] raw-gadget.1 gadget.7: ignoring, device is not running [ 191.188685][ C1] raw-gadget.1 gadget.7: ignoring, device is not running [ 191.196497][ C1] raw-gadget.1 gadget.7: ignoring, device is not running [ 191.201049][ T5921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 191.204340][ C1] raw-gadget.1 gadget.7: ignoring, device is not running [ 191.301424][ T5893] usb 8-1: USB disconnect, device number 2 [ 191.418608][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.492733][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 191.513125][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.548061][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.603308][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.652571][ T5921] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.728171][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.853014][ T5921] usb 4-1: config 0 descriptor?? [ 192.716586][ T5921] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 192.803324][ T5921] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 193.784489][ T5921] microsoft 0003:045E:07DA.0003: unknown main item tag 0x4 [ 193.993236][ T5921] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input8 [ 194.057499][ T7028] loop7: detected capacity change from 0 to 512 [ 194.205919][ T5921] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 194.236201][ T7028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.248765][ T5921] usb 4-1: USB disconnect, device number 5 [ 194.267900][ T7032] loop6: detected capacity change from 0 to 1024 [ 194.441324][ T7028] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.461077][ T6082] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 194.469740][ T7032] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.266: lblock 2 mapped to illegal pblock 2 (length 1) [ 194.651219][ T6082] usb 2-1: Using ep0 maxpacket: 16 [ 194.702030][ T7032] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 195.286483][ T31] audit: type=1800 audit(1766172553.344:7): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.264" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 195.313712][ T6082] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 195.323788][ T6082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.371457][ T7032] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.266: lblock 0 mapped to illegal pblock 48 (length 1) [ 195.451649][ T6082] usb 2-1: config 0 descriptor?? [ 195.528241][ T7032] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 195.584431][ T7032] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.266: Failed to acquire dquot type 0 [ 195.630258][ T6412] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.670146][ T7032] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 195.745604][ T7051] fido_id[7051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 195.789602][ T7055] loop3: detected capacity change from 0 to 2048 [ 195.816860][ T7032] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.266: mark_inode_dirty error [ 195.853842][ T7055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.885123][ T7032] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 195.908294][ T7032] EXT4-fs (loop6): 1 orphan inode deleted [ 195.926623][ T6081] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.942747][ T6929] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 195.972118][ T6081] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 195.986707][ T7032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.018588][ T6081] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 0 [ 196.022807][ T7061] netlink: 'syz.7.272': attribute type 16 has an invalid length. [ 196.091458][ T7061] netlink: 'syz.7.272': attribute type 17 has an invalid length. [ 196.111308][ T6929] usb 6-1: Using ep0 maxpacket: 16 [ 196.116563][ T5893] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 196.128888][ T6929] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.167661][ T6310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.178181][ T6929] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.181520][ T6929] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.222287][ T3650] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 196.265047][ T6929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.286874][ T3650] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 196.310231][ T6929] usb 6-1: Product: syz [ 196.317919][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 196.335521][ T3650] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 196.358020][ T6929] usb 6-1: Manufacturer: syz [ 196.366006][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 196.383854][ T6929] usb 6-1: SerialNumber: syz [ 196.410736][ T6310] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 196.415567][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.484712][ T5893] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.516693][ T6310] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 196.559642][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.568377][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.616800][ T6310] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 196.860040][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.896318][ T6929] usb 6-1: cannot find UAC_HEADER [ 196.918655][ T5893] usb 3-1: config 0 descriptor?? [ 197.336454][ T7059] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 197.415834][ T6929] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 197.464468][ T6929] usb 6-1: USB disconnect, device number 9 [ 197.528366][ T6082] pegasus 2-1:0.0: can't locate MII phy, using default [ 197.603135][ T6962] udevd[6962]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.724107][ T7077] loop3: detected capacity change from 0 to 512 [ 197.804634][ T7077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.842305][ T7077] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.848011][ T5893] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 197.876389][ T7077] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.276: corrupted inode contents [ 197.922101][ T7080] EXT4-fs (loop3): shut down requested (2) [ 198.005707][ T5893] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 198.079993][ T7083] loop5: detected capacity change from 0 to 512 [ 198.099642][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.126017][ T6282] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 198.145858][ T7083] EXT4-fs: Ignoring removed oldalloc option [ 198.147068][ T5893] usb 3-1: USB disconnect, device number 8 [ 198.159219][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.256747][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.344944][ T7087] loop1: detected capacity change from 0 to 128 [ 198.351315][ T7084] fido_id[7084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 198.911612][ C0] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 198.961716][ T7087] loop1: detected capacity change from 128 to 0 [ 199.666970][ T7100] loop3: detected capacity change from 0 to 2048 [ 199.931836][ T7100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.691748][ T6082] pegasus 2-1:0.0: eth5, D-Link DSB-650TX, 1a:5e:c0:45:df:38 [ 200.691775][ T37] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.749974][ T7100] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.281: bg 0: block 234: padding at end of block bitmap is not set [ 200.771233][ T37] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.795530][ T37] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.821399][ T37] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.855169][ T7100] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 18 with error 28 [ 200.892621][ T7107] netlink: 148 bytes leftover after parsing attributes in process `syz.1.284'. [ 200.912995][ T6082] usb 2-1: USB disconnect, device number 5 [ 200.926862][ T7100] EXT4-fs (loop3): This should not happen!! Data will be lost [ 200.926862][ T7100] [ 200.947138][ T7107] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 200.981770][ T7100] EXT4-fs (loop3): Total free blocks count 0 [ 200.989442][ T7100] EXT4-fs (loop3): Free/Dirty block details [ 201.031521][ T7100] EXT4-fs (loop3): free_blocks=0 [ 201.060291][ T7100] EXT4-fs (loop3): dirty_blocks=32 [ 201.107024][ T7100] EXT4-fs (loop3): Block reservation details [ 201.136564][ T7100] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 201.147209][ T7124] netlink: 104 bytes leftover after parsing attributes in process `syz.5.288'. [ 201.239570][ T7128] netlink: 108 bytes leftover after parsing attributes in process `syz.7.291'. [ 201.806412][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.887425][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.894621][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.226208][ T7140] netlink: 'syz.7.294': attribute type 1 has an invalid length. [ 202.587915][ T7155] loop3: detected capacity change from 0 to 256 [ 202.649438][ T7155] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 202.752345][ T7155] exFAT-fs (loop3): error, in sector 160, dentry 12 should be unused, but 0x85 [ 202.801144][ T7155] exFAT-fs (loop3): Filesystem has been set read-only [ 205.068814][ T7181] loop3: detected capacity change from 0 to 1024 [ 206.385683][ T7199] netlink: 'syz.6.312': attribute type 1 has an invalid length. [ 206.401309][ T7201] loop5: detected capacity change from 0 to 512 [ 206.532179][ T7201] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 206.606937][ T7207] loop2: detected capacity change from 0 to 8 [ 206.687387][ T7201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.012705][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.238591][ T7215] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 208.823653][ T7050] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 209.011650][ T7050] usb 4-1: Using ep0 maxpacket: 16 [ 209.647062][ T7050] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 209.663766][ T7050] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.727794][ T7050] usb 4-1: config 0 has no interfaces? [ 209.753359][ T7050] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.856156][ T7050] usb 4-1: config 0 has no interfaces? [ 209.894194][ T7050] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.960808][ T7050] usb 4-1: config 0 has no interfaces? [ 209.987953][ T7050] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.039930][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.328'. [ 210.050969][ T7050] usb 4-1: config 0 has no interfaces? [ 210.093341][ T7050] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.757839][ T7050] usb 4-1: config 0 has no interfaces? [ 210.765419][ T7050] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.776607][ T7050] usb 4-1: config 0 has no interfaces? [ 210.783751][ T7050] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.794449][ T7050] usb 4-1: config 0 has no interfaces? [ 210.845847][ T7050] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.909684][ T7050] usb 4-1: config 0 has no interfaces? [ 211.024788][ T7050] usb 4-1: string descriptor 0 read error: -71 [ 211.057479][ T7050] usb 4-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 211.083715][ T7253] loop6: detected capacity change from 0 to 2048 [ 211.104760][ T7050] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.175714][ T7257] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 211.220509][ T7255] loop5: detected capacity change from 0 to 2048 [ 211.239931][ T7050] r8152-cfgselector 4-1: Unknown version 0x0000 [ 211.253179][ T7050] r8152-cfgselector 4-1: config 0 descriptor?? [ 211.261954][ T7050] r8152-cfgselector 4-1: can't set config #0, error -71 [ 211.271326][ T7050] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 211.347456][ T7253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.749087][ T6072] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 234: padding at end of block bitmap is not set [ 211.820143][ T6072] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 162 with error 28 [ 211.868461][ T6072] EXT4-fs (loop6): This should not happen!! Data will be lost [ 211.868461][ T6072] [ 211.897761][ T6072] EXT4-fs (loop6): Total free blocks count 0 [ 211.913203][ T6072] EXT4-fs (loop6): Free/Dirty block details [ 211.925815][ T6072] EXT4-fs (loop6): free_blocks=0 [ 211.936493][ T6072] EXT4-fs (loop6): dirty_blocks=176 [ 211.956541][ T6072] EXT4-fs (loop6): Block reservation details [ 211.984883][ T6072] EXT4-fs (loop6): i_reserved_data_blocks=11 [ 212.001868][ T7050] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 212.034813][ T6310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.214299][ T7050] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 212.255490][ T7050] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.269553][ T7270] loop5: detected capacity change from 0 to 1024 [ 212.313134][ T7050] usb 8-1: Product: syz [ 212.322863][ T7050] usb 8-1: Manufacturer: syz [ 212.327510][ T7050] usb 8-1: SerialNumber: syz [ 213.071908][ T7050] usb 8-1: config 0 descriptor?? [ 213.081420][ T7050] ch341 8-1:0.0: ch341-uart converter detected [ 213.105375][ T7275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.337'. [ 213.158443][ T7275] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 213.340440][ T7283] loop5: detected capacity change from 0 to 512 [ 213.381896][ T7283] EXT4-fs: Ignoring removed oldalloc option [ 213.443692][ T7287] netlink: 52 bytes leftover after parsing attributes in process `syz.1.342'. [ 213.473944][ T7289] loop3: detected capacity change from 0 to 128 [ 213.494175][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.503598][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.560298][ T7289] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.675179][ T7289] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.758871][ T7285] loop6: detected capacity change from 0 to 8192 [ 213.987522][ T7285] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.223890][ T7050] ch341-uart ttyUSB0: break control not supported, using simulated break [ 214.713695][ T7050] usb 8-1: ch341-uart converter now attached to ttyUSB0 [ 214.876025][ T7264] loop7: detected capacity change from 0 to 1024 [ 214.902741][ T7264] EXT4-fs (loop7): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 214.969402][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.026216][ T7303] loop6: detected capacity change from 8192 to 0 [ 215.041313][ C0] I/O error, dev loop6, sector 1 op 0x1:(WRITE) flags 0x800000 phys_seg 1 prio class 2 [ 215.051149][ C0] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 215.064907][ T7285] FAT-fs (loop6): FAT read failed (blocknr 1) [ 215.111847][ T7285] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 215.202734][ T7264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.544472][ T7311] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 215.570113][ T30] usb 8-1: USB disconnect, device number 3 [ 215.613166][ T30] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 215.708329][ T6412] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.719229][ T6310] FAT-fs (loop6): Directory bread(block 65) failed [ 215.738011][ T30] ch341 8-1:0.0: device disconnected [ 215.748878][ T6310] FAT-fs (loop6): Directory bread(block 66) failed [ 215.805800][ T6310] FAT-fs (loop6): Directory bread(block 67) failed [ 215.896166][ T7310] loop3: detected capacity change from 0 to 2048 [ 215.937270][ T6310] FAT-fs (loop6): Directory bread(block 68) failed [ 216.000815][ T6310] FAT-fs (loop6): Directory bread(block 69) failed [ 216.075509][ T6310] FAT-fs (loop6): Directory bread(block 70) failed [ 216.146921][ T7310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.153080][ T6310] FAT-fs (loop6): Directory bread(block 71) failed [ 218.444554][ T6079] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 218.510255][ T6079] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:21: bg 0: block 234: padding at end of block bitmap is not set [ 218.521396][ T6310] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 218.593523][ T6079] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 212 with error 28 [ 218.612989][ T6310] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 218.654521][ T6079] EXT4-fs (loop3): This should not happen!! Data will be lost [ 218.654521][ T6079] [ 218.690998][ T6310] FAT-fs (loop6): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 218.722602][ T6079] EXT4-fs (loop3): Total free blocks count 0 [ 218.728660][ T6079] EXT4-fs (loop3): Free/Dirty block details [ 218.832105][ T6079] EXT4-fs (loop3): free_blocks=0 [ 218.838348][ T6079] EXT4-fs (loop3): dirty_blocks=224 [ 218.867583][ T6079] EXT4-fs (loop3): Block reservation details [ 218.905822][ T6079] EXT4-fs (loop3): i_reserved_data_blocks=14 [ 218.963480][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.099478][ T7337] loop3: detected capacity change from 0 to 512 [ 220.153761][ T7337] EXT4-fs: Ignoring removed oldalloc option [ 220.223339][ T7337] EXT4-fs (loop3): 1 truncate cleaned up [ 220.230813][ T7337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.502049][ T5995] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.641070][ T7050] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 220.742739][ T5995] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.851482][ T7050] usb 8-1: Using ep0 maxpacket: 16 [ 220.883782][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.914095][ T5995] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.941772][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.955118][ T7050] usb 8-1: unable to get BOS descriptor or descriptor too short [ 220.982693][ T7050] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 221.008234][ T7050] usb 8-1: can't read configurations, error -71 [ 221.129050][ T5995] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.193241][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.146155][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.156712][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.176844][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.187034][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.195150][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.212099][ T5995] bridge_slave_1: left allmulticast mode [ 222.235583][ T5995] bridge_slave_1: left promiscuous mode [ 222.277305][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.388272][ T5995] bridge_slave_0: left allmulticast mode [ 222.394314][ T5995] bridge_slave_0: left promiscuous mode [ 222.400626][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.537521][ T7363] loop7: detected capacity change from 0 to 2048 [ 223.405780][ T7363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.523291][ T6412] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.071040][ T6185] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 224.104398][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.117803][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.132535][ T5995] bond0 (unregistering): Released all slaves [ 224.169686][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.177090][ T7386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.186079][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.193337][ T7386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.236789][ T7386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.256189][ T6185] usb 6-1: Using ep0 maxpacket: 16 [ 224.288999][ T5839] Bluetooth: hci2: command tx timeout [ 224.315036][ T6185] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 224.326596][ T6185] usb 6-1: config 0 has no interface number 0 [ 224.335495][ T6185] usb 6-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 224.348498][ T6185] usb 6-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 224.381481][ T6185] usb 6-1: config 0 interface 48 has no altsetting 0 [ 224.396707][ T6185] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 224.411160][ T6185] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 224.436715][ T6185] usb 6-1: Product: syz [ 224.454045][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 224.460717][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 224.465049][ T5143] Bluetooth: hci4: command 0x0406 tx timeout [ 224.470962][ T6185] usb 6-1: Manufacturer: syz [ 224.480313][ T6185] usb 6-1: SerialNumber: syz [ 224.531133][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 224.555839][ T6185] usb 6-1: config 0 descriptor?? [ 225.651416][ T6185] usb 6-1: USB disconnect, device number 10 [ 225.914698][ T7410] loop5: detected capacity change from 0 to 2048 [ 226.388210][ T5829] Bluetooth: hci2: command tx timeout [ 226.654225][ T7416] loop7: detected capacity change from 0 to 256 [ 226.715079][ T7416] FAT-fs (loop7): bogus logical sector size 2303 [ 226.779598][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.48/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.802097][ T7416] FAT-fs (loop7): Can't find a valid FAT filesystem [ 227.313497][ T7433] loop7: detected capacity change from 0 to 512 [ 227.344583][ T7433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.392305][ T7433] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 227.426119][ T7433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 227.524161][ T7433] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 227.558234][ T7433] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 227.623008][ T7433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 227.670388][ T5995] hsr_slave_0: left promiscuous mode [ 227.705024][ T5995] hsr_slave_1: left promiscuous mode [ 227.748460][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.782592][ T7433] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.390: dx entry: limit 65535 != root limit 120 [ 227.801909][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.811172][ T7433] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.390: Corrupt directory, running e2fsck is recommended [ 227.852414][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.469520][ T5829] Bluetooth: hci2: command tx timeout [ 228.470419][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.640453][ T6412] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.755567][ T5995] veth1_macvtap: left promiscuous mode [ 228.780759][ T5995] veth0_macvtap: left promiscuous mode [ 228.821381][ T5995] veth1_vlan: left promiscuous mode [ 228.826777][ T5995] veth0_vlan: left promiscuous mode [ 230.521369][ T5829] Bluetooth: hci2: command tx timeout [ 230.573707][ T7472] netlink: 'syz.7.399': attribute type 4 has an invalid length. [ 231.558618][ T7473] loop3: detected capacity change from 0 to 2048 [ 231.683580][ T7479] fuse: Bad value for 'fd' [ 231.699621][ T7473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.007661][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.716733][ T7503] loop3: detected capacity change from 0 to 512 [ 233.754180][ T7503] EXT4-fs: Invalid want_extra_isize 32769 [ 233.878381][ T7500] loop3: detected capacity change from 0 to 1024 [ 233.899087][ T7500] hfsplus: Unknown parameter 'ÿÿÿÿ0xffffffffffffffff' [ 234.123211][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 234.279155][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 234.696600][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 236.657634][ T7525] process 'syz.3.417' launched './file0' with NULL argv: empty string added [ 240.917477][ T7569] loop5: detected capacity change from 0 to 2048 [ 240.934720][ T7358] chnl_net:caif_netlink_parms(): no params data found [ 242.090443][ T7584] Invalid option length (0) for dns_resolver key [ 242.569204][ T7591] netlink: 'syz.2.430': attribute type 4 has an invalid length. [ 243.085294][ T7601] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 243.386219][ T7596] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 243.412688][ T7603] netlink: 'syz.3.432': attribute type 4 has an invalid length. [ 243.518153][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.587425][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.856480][ T7358] bridge_slave_0: entered allmulticast mode [ 243.885286][ T7358] bridge_slave_0: entered promiscuous mode [ 243.956544][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.986288][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.022392][ T7358] bridge_slave_1: entered allmulticast mode [ 244.386835][ T7358] bridge_slave_1: entered promiscuous mode [ 244.912219][ T7358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.729857][ T7358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.095141][ T7624] loop5: detected capacity change from 0 to 2048 [ 246.224113][ T7358] team0: Port device team_slave_0 added [ 246.282716][ T7358] team0: Port device team_slave_1 added [ 246.647596][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.831036][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.954516][ T7358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.049679][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.164556][ T7642] netlink: 'syz.7.446': attribute type 1 has an invalid length. [ 247.266874][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.331230][ T7358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.332154][ T5900] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 249.031086][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 249.068294][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.110165][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.127137][ T7358] hsr_slave_0: entered promiscuous mode [ 249.137235][ T7653] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 249.142156][ T5900] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.172578][ T7358] hsr_slave_1: entered promiscuous mode [ 249.380972][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.422235][ T7358] debugfs: 'hsr0' already exists in 'hsr' [ 249.504788][ T7358] Cannot create hsr debugfs directory [ 250.102340][ T5900] usb 6-1: config 0 descriptor?? [ 250.246962][ T5900] usb 6-1: can't set config #0, error -71 [ 250.300083][ T5900] usb 6-1: USB disconnect, device number 11 [ 250.495366][ T7667] loop5: detected capacity change from 0 to 2048 [ 250.543048][ T7667] EXT4-fs: inline encryption not supported [ 251.166302][ T5900] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 251.684598][ T5900] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.734105][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.520755][ T7691] netlink: 'syz.1.459': attribute type 4 has an invalid length. [ 252.562916][ T5900] usb 6-1: config 0 descriptor?? [ 252.654338][ T5900] cp210x 6-1:0.0: cp210x converter detected [ 252.806603][ T7693] loop7: detected capacity change from 0 to 2048 [ 252.889556][ T7693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.682613][ T7358] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 254.763245][ T7358] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 255.023661][ T7358] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 255.778969][ T5900] usb 6-1: cp210x converter now attached to ttyUSB0 [ 255.863209][ T5900] usb 6-1: USB disconnect, device number 12 [ 255.926958][ T7358] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 255.940476][ T5900] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.981177][ T7721] netlink: 'syz.7.466': attribute type 4 has an invalid length. [ 256.051643][ T5900] cp210x 6-1:0.0: device disconnected [ 256.245944][ T7720] bridge1: entered promiscuous mode [ 257.191603][ T7358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.222733][ T7358] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.943472][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.950620][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.197357][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.204607][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.608919][ T5936] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 258.822353][ T5936] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 258.861110][ T5936] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.929581][ T5936] usb 6-1: config 0 has no interface number 0 [ 258.961436][ T5936] usb 6-1: config 0 interface 2 has no altsetting 0 [ 259.013946][ T5936] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 259.059865][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.083315][ T5936] usb 6-1: Product: syz [ 259.087530][ T5936] usb 6-1: Manufacturer: syz [ 259.151106][ T5936] usb 6-1: SerialNumber: syz [ 259.191611][ T5936] usb 6-1: config 0 descriptor?? [ 259.307258][ T7777] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 259.437148][ T7358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.452411][ T5936] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 259.567400][ T5936] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 259.644268][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.664430][ T5936] usb 6-1: USB disconnect, device number 13 [ 260.453229][ T7808] netlink: 'syz.2.489': attribute type 4 has an invalid length. [ 260.542473][ T7805] loop5: detected capacity change from 0 to 1024 [ 260.560305][ T7805] ext4: Unknown parameter 'euid' [ 261.969282][ T7358] veth0_vlan: entered promiscuous mode [ 262.054005][ T7824] netlink: 'syz.5.495': attribute type 4 has an invalid length. [ 262.306141][ T7358] veth1_vlan: entered promiscuous mode [ 262.359397][ T7831] loop7: detected capacity change from 0 to 256 [ 262.428196][ T7831] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 262.575940][ T7358] veth0_macvtap: entered promiscuous mode [ 262.648796][ T7358] veth1_macvtap: entered promiscuous mode [ 262.889241][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.972657][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.048114][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.087907][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.119541][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.176093][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.327261][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.341136][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.543131][ T1982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.602519][ T1982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.896113][ T6073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.694199][ T6073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.916440][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.980965][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.172139][ T5900] IPVS: starting estimator thread 0... [ 267.241858][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.515'. [ 267.271050][ T7882] IPVS: using max 28 ests per chain, 67200 per kthread [ 267.655073][ T7893] netlink: 'syz.5.518': attribute type 4 has an invalid length. [ 269.327562][ T7916] loop8: detected capacity change from 0 to 512 [ 269.402476][ T7916] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 269.654612][ T7916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 270.441149][ T7916] System zones: 1-12 [ 270.510778][ T7916] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.526: corrupted in-inode xattr: e_value size too large [ 270.535322][ T5829] Bluetooth: hci6: command 0x0406 tx timeout [ 270.577038][ T7916] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.526: couldn't read orphan inode 15 (err -117) [ 270.683106][ T7916] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.740658][ T7935] netlink: 'syz.3.530': attribute type 4 has an invalid length. [ 270.991636][ T7916] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.526: Unrecognised inode hash code 4 [ 271.081990][ T7916] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.526: Corrupt directory, running e2fsck is recommended [ 271.105352][ T7916] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.526: Unrecognised inode hash code 4 [ 271.219511][ T7916] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.526: Corrupt directory, running e2fsck is recommended [ 273.612585][ T7358] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.980571][ T7963] loop8: detected capacity change from 0 to 128 [ 274.101689][ T7963] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 274.180956][ T7963] FAT-fs (loop8): Filesystem has been set read-only [ 274.206041][ T7962] loop7: detected capacity change from 0 to 2048 [ 274.231842][ T7963] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 54) [ 274.415006][ T7962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.572620][ T7962] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.537: bg 0: block 234: padding at end of block bitmap is not set [ 274.665069][ T7962] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 70 with error 28 [ 274.775567][ T7962] EXT4-fs (loop7): This should not happen!! Data will be lost [ 274.775567][ T7962] [ 274.837122][ T7962] EXT4-fs (loop7): Total free blocks count 0 [ 274.887682][ T7962] EXT4-fs (loop7): Free/Dirty block details [ 274.923574][ T7962] EXT4-fs (loop7): free_blocks=0 [ 274.953470][ T7962] EXT4-fs (loop7): dirty_blocks=80 [ 274.958922][ T7962] EXT4-fs (loop7): Block reservation details [ 275.071412][ T7962] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 275.354116][ T6412] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.767311][ T8009] netlink: 'syz.5.546': attribute type 1 has an invalid length. [ 276.778354][ T32] INFO: task syz.4.81:6272 blocked for more than 143 seconds. [ 277.499946][ T32] Not tainted syzkaller #0 [ 277.561171][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.570040][ T32] task:syz.4.81 state:D stack:25752 pid:6272 tgid:6272 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 277.640970][ T32] Call Trace: [ 277.644308][ T32] [ 277.661046][ T32] __schedule+0x14bc/0x5000 [ 277.665771][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.693300][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.709543][ T32] ? __pfx___schedule+0x10/0x10 [ 277.714848][ T32] ? schedule+0x91/0x360 [ 277.719201][ T32] schedule+0x165/0x360 [ 277.761117][ T32] schedule_preempt_disabled+0x13/0x30 [ 277.788439][ T32] __mutex_lock+0x7e6/0x1350 [ 277.811318][ T32] ? __mutex_lock+0x5bb/0x1350 [ 277.816263][ T32] ? ima_file_free+0x16c/0x460 [ 277.857003][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 277.906672][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.912820][ T32] ? locks_remove_file+0x344/0xea0 [ 278.660991][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.666756][ T32] ima_file_free+0x16c/0x460 [ 278.674490][ T32] ? __virt_addr_valid+0x1c8/0x5c0 [ 278.679671][ T32] ? __pfx_ima_file_free+0x10/0x10 [ 278.685097][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.690918][ T32] ? __pfx___might_resched+0x10/0x10 [ 278.696253][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.702050][ T32] security_file_release+0x93/0x150 [ 278.709856][ T32] __fput+0x3b3/0xa70 [ 278.714007][ T32] task_work_run+0x1d4/0x260 [ 278.718669][ T32] ? __pfx_task_work_run+0x10/0x10 [ 278.730934][ T32] ? __se_sys_close_range+0x4ed/0x650 [ 278.736629][ T32] ? exit_to_user_mode_loop+0x55/0x4f0 [ 278.748520][ T32] exit_to_user_mode_loop+0xff/0x4f0 [ 278.760978][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.766777][ T32] ? rcu_is_watching+0x15/0xb0 [ 278.790984][ T32] do_syscall_64+0x2d0/0xf80 [ 278.795653][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 278.805960][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.830944][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.836954][ T32] RIP: 0033:0x7fe769b8f749 [ 278.856909][ T32] RSP: 002b:00007ffd9c120568 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 278.880966][ T32] RAX: 0000000000000000 RBX: 00007fe769de7da0 RCX: 00007fe769b8f749 [ 278.889035][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 278.912612][ T32] RBP: 00007fe769de7da0 R08: 0000000000000110 R09: 0000000f9c12085f [ 278.920704][ T32] R10: 00007fe769de7cb0 R11: 0000000000000246 R12: 000000000001f6be [ 278.950936][ T32] R13: 00007fe769de6090 R14: ffffffffffffffff R15: 00007ffd9c120680 [ 278.959457][ T32] [ 278.962712][ T32] [ 278.962712][ T32] Showing all locks held in the system: [ 279.000992][ T32] 1 lock held by khungtaskd/32: [ 279.010986][ T32] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 279.081111][ T32] 2 locks held by getty/5583: [ 279.085870][ T32] #0: ffff88802fd4c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 279.106824][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 279.150949][ T32] 3 locks held by udevd/5907: [ 279.155713][ T32] 2 locks held by kworker/u8:21/6079: [ 279.170949][ T32] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 279.191322][ T32] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 279.200327][ T32] 1 lock held by syz.4.81/6272: [ 279.241004][ T32] #0: ffff88807a99fb08 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_file_free+0x16c/0x460 [ 279.261017][ T32] 1 lock held by syz.4.81/6274: [ 279.265951][ T32] 3 locks held by kworker/0:10/7050: [ 279.280980][ T32] 1 lock held by rm/8023: [ 279.285500][ T32] [ 279.287840][ T32] ============================================= [ 279.287840][ T32] [ 279.310964][ T32] NMI backtrace for cpu 1 [ 279.310990][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 279.311017][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.311032][ T32] Call Trace: [ 279.311041][ T32] [ 279.311051][ T32] dump_stack_lvl+0x189/0x250 [ 279.311091][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.311122][ T32] ? __pfx__printk+0x10/0x10 [ 279.311172][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 279.311212][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 279.311255][ T32] ? __pfx__printk+0x10/0x10 [ 279.311292][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.311324][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 279.311367][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 279.311404][ T32] sys_info+0x135/0x170 [ 279.311432][ T32] watchdog+0xf95/0xfe0 [ 279.311473][ T32] ? watchdog+0x20a/0xfe0 [ 279.311516][ T32] kthread+0x711/0x8a0 [ 279.311552][ T32] ? __pfx_watchdog+0x10/0x10 [ 279.311585][ T32] ? __pfx_kthread+0x10/0x10 [ 279.311614][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.311645][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.311683][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.311710][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 279.311733][ T32] ? __pfx_kthread+0x10/0x10 [ 279.311767][ T32] ret_from_fork+0x599/0xb30 [ 279.311794][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 279.311830][ T32] ? __switch_to_asm+0x39/0x70 [ 279.311862][ T32] ? __switch_to_asm+0x33/0x70 [ 279.311893][ T32] ? __pfx_kthread+0x10/0x10 [ 279.311926][ T32] ret_from_fork_asm+0x1a/0x30 [ 279.311977][ T32] [ 279.311986][ T32] Sending NMI from CPU 1 to CPUs 0: [ 279.485482][ C0] NMI backtrace for cpu 0 [ 279.485503][ C0] CPU: 0 UID: 0 PID: 7050 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 279.485528][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.485543][ C0] Workqueue: events_power_efficient gc_worker [ 279.485578][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 279.485609][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 bc 72 80 00 48 c7 c3 d8 e6 7f 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 69 14 d7 10 74 11 83 e0 04 c1 e8 02 5b [ 279.485627][ C0] RSP: 0018:ffffc90003f7f760 EFLAGS: 00000016 [ 279.485646][ C0] RAX: 0000000000000000 RBX: ffff8880b86336d8 RCX: db06a68dfbe06f00 [ 279.485661][ C0] RDX: 0000000000000000 RSI: ffffffff8bc08340 RDI: ffffffff8bc08300 [ 279.485677][ C0] RBP: ffffffff8984c2a8 R08: 0000000000000001 R09: 0000000000000000 [ 279.485691][ C0] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: 0000000000000002 [ 279.485706][ C0] R13: ffffffff8f82c6f8 R14: ffffffff8d9b2dd0 R15: dffffc0000000000 [ 279.485725][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 279.485742][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.485757][ C0] CR2: 000055a2efe02950 CR3: 00000000772de000 CR4: 0000000000350ef0 [ 279.485774][ C0] Call Trace: [ 279.485782][ C0] [ 279.485793][ C0] lock_acquire+0x5f/0x340 [ 279.485821][ C0] ? gc_worker+0x308/0x1380 [ 279.485847][ C0] seqcount_lockdep_reader_access+0x10b/0x1c0 [ 279.485868][ C0] ? gc_worker+0x308/0x1380 [ 279.485891][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 279.485915][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.485947][ C0] gc_worker+0x308/0x1380 [ 279.485977][ C0] ? gc_worker+0x264/0x1380 [ 279.486013][ C0] ? __pfx_gc_worker+0x10/0x10 [ 279.486035][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.486062][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.486096][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 279.486119][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 279.486142][ C0] process_scheduled_works+0xad1/0x1770 [ 279.486185][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.486212][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.486243][ C0] worker_thread+0x8a0/0xda0 [ 279.486268][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 279.486309][ C0] ? __kthread_parkme+0x7b/0x200 [ 279.486340][ C0] kthread+0x711/0x8a0 [ 279.486370][ C0] ? __pfx_worker_thread+0x10/0x10 [ 279.486393][ C0] ? __pfx_kthread+0x10/0x10 [ 279.486419][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.486446][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.486483][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.486507][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 279.486529][ C0] ? __pfx_kthread+0x10/0x10 [ 279.486558][ C0] ret_from_fork+0x599/0xb30 [ 279.486580][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 279.486609][ C0] ? __switch_to_asm+0x39/0x70 [ 279.486637][ C0] ? __switch_to_asm+0x33/0x70 [ 279.486665][ C0] ? __pfx_kthread+0x10/0x10 [ 279.486693][ C0] ret_from_fork_asm+0x1a/0x30 [ 279.486734][ C0] [ 279.800658][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 279.807508][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 279.816618][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.826768][ T32] Call Trace: [ 279.830069][ T32] [ 279.833000][ T32] dump_stack_lvl+0x99/0x250 [ 279.837779][ T32] ? __asan_memcpy+0x40/0x70 [ 279.842806][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.848005][ T32] ? __pfx__printk+0x10/0x10 [ 279.852797][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.858496][ T32] vpanic+0x237/0x6d0 [ 279.862493][ T32] ? __pfx_vpanic+0x10/0x10 [ 279.867003][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.872642][ T32] ? preempt_schedule_common+0x83/0xd0 [ 279.878200][ T32] panic+0xb9/0xc0 [ 279.882102][ T32] ? __pfx_panic+0x10/0x10 [ 279.886633][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.892337][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 279.897724][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.903360][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 279.909535][ T32] watchdog+0xfdf/0xfe0 [ 279.913706][ T32] ? watchdog+0x20a/0xfe0 [ 279.918055][ T32] kthread+0x711/0x8a0 [ 279.922132][ T32] ? __pfx_watchdog+0x10/0x10 [ 279.926820][ T32] ? __pfx_kthread+0x10/0x10 [ 279.931586][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.937251][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.942479][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.948117][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 279.953311][ T32] ? __pfx_kthread+0x10/0x10 [ 279.957905][ T32] ret_from_fork+0x599/0xb30 [ 279.962492][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 279.967878][ T32] ? __switch_to_asm+0x39/0x70 [ 279.972908][ T32] ? __switch_to_asm+0x33/0x70 [ 279.977679][ T32] ? __pfx_kthread+0x10/0x10 [ 279.982407][ T32] ret_from_fork_asm+0x1a/0x30 [ 279.987197][ T32] [ 279.990551][ T32] Kernel Offset: disabled [ 279.994893][ T32] Rebooting in 86400 seconds..