last executing test programs: 2m37.945979283s ago: executing program 2 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x18) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000840)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xaf3, &(0x7f0000002400)="$eJzs3V2IXFcBAOBzd3c2u2lrJjWxaxrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZnZnN7tz9+T44e+bcc+49587euXPn3nvuCcCGNbbwd35+pgjhwhsvH3n/gX9M35hysFWivvB3opSqhRCKmJ7IlvfeeDO+9sHzJ7rFRZhb+JvS4fErrXlvCyGcDbvCxVAPOy5ceumtuceOnTt6fvfbrx64vDJrDwAAG8s3Lh6Y3/7XP9+99epr9xwKm1rT0/F5PU2Yah73H4oH/un4fyx0potSKJvMyk3EMDbdWW68S7lyPbWs3ESP+iez+ms9ym0Ki9c/XprWbb1hLUvbcT0UY7MhhM2t9NjY7GzzN3lY+F0/WcyeOXX66Wcraiiw7P59bwhhVykcPt+ZXm3h4Cpow+ChVk43qm/P2gyHRlfX1UZT5es8otDYUvUeCKApv154k7P5mYVb01raxGD1X3l0rPv8sAxGvf0PVf9kxfUH9f/6nD0Oy2e9bk1pvdLn6PaYzq8j5PcvvfKHzvna8isdnVPz6xG1AdvZ6zrCWrm+0Kud4yNux1L1an++XaxXX4lxeh++2pF7b8fnJ/+frpX/MdDdh/n5f0EQVncIHenarSyrUfH+B1i98vvmGun6aJTf15fnb+qTP9Unf7pP/uY++bf1yYeN7Lc/+Gl4sWif78p/0w97PjydZ7sjxh8Zsj35+chh68/v+x3Wrdaf308Mq9nvjz9x8otPPXmpef9/0dr+r8ftPf3cqMfP1sVYIJ0vzM+rt+79r3fWM9aj3J1Ze+7oUn7h9bbOcsW29nJCaT9zUztmOufb0qvczs5y9azcdAxTWXvz45PN2Xzp+CPtV9P7NZGtby1bj8msHWm/sjXGeTtgKdL2mO7/b/cHaN7/n7bPmVArnj51+uQjMZ220z+N1zbdmL53xO0Glk+vz3/6/poJnf1/bm9Nr42V9wtb2tOL5n7h9bi8zulzrXpK00tfaul77tvj0wvlZ0987/RTK7DesJE9++PnvnP89OmT3/diyS++tjqaMcyL9LNltbRnBV+8EFd1tbRnmV7sWukqKtwpASOx54XmQcDDp757/JmTz5w8s2///n1zc/u/tG9+z8Jx/Z7y0X3Z2QpaCyyn9pd+1S0BAAAAAAAAAAAABvXDo0cuvfPmF95t9v9v9/9L/f/Tnb+p//9Psv7/eT/51A8+9QPc2iV/oUz2gNXJrFwtho9m7U2PAShit47t2Xwfi3FrHL/Y/z9Vlz/XNbXnrmx6rUcye5zATc9LmcyeQZKPF3hfjM/H+FcBKlRMd58c40Web118WNrW0/MpSl14G54PvHak/1v+/KLU/7vrc5269NdmbRlFj8Wq1xHo7p/r7fnfU4vl/6u94lW3U1gkTIy2vp9t3G2i0fMofdARbACWR9Xjf/49NOtN5z/P/PHrUzdCKnbl0c79Zf78UhjGX97pTK/28SdXuv583L5R11/1+o96/M/W+Hdx/5f2e733f9mIefWl1fufn19+t1Rt2DFo/fn6p+dAbxuu/qux/rQ2D4bB6m/8Mqs/vyA0oP9m9W8esP6b1n/n0ur/X6w/vW0P3T9o/c0WF2Od7ZjO1iNd/8vPGyfXsvVPz/ZcpP5vPtdt/Zc4UOP1WD9sZGtlnNlhZccRrYP2fuP/Dvv9f6vj/7Yam+3W8vswPh/TaUec7nPIxzsZtv3p/or0PbA9W37R5/vN+L9r25dj3O/zkMb/TdtjPX7ll9IL72VK17q8t+t1XwNr1Xvr7frfqgiXmz+Dljb/VPXtF5qh9I3Vu1xjfAnL3tR/uSMJjUZjZU9o9VFp5VT+/ld99bnq3yn3VVx/P/n4v/kxfD7+b56fj/+b5+fj/+b50/E/9H6P/Hz833x7zsf/zfPvypabjw880yf/413yi9DO39F9/tbP9rv7LH9nn/xP9Mnf3co/2FEi5d+z6Pztcr2Wf2ef/Pv75H8yhGuNRfI/1Wf+B/rkP1TKL48BnfI/nc1fZPnrXdr/9Hr/gPUr75/n8w8bR7r+0+vzv62dP1kuMtpWAivhldf2Hn7yN9+qN/v/T7bOh6TreIdiuhZ/G/0opvPr3qGUvpH3Zkz/Lcuv+nwT0JY/PyP//n+wTz6wdqX7vHy+YQMqprpPjnG/51b1Os5nbflMjD8b48/F+OEYz8Z4T4z3xnhuRO1jZRx+/XcHXizav/e3ZPmD3k+e9wfqeE5UCGHfgO3Jzw8Mez97/hy/Yd1q/UvsDgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZsYW/8/MzRQgX3nj5yBPHTu25MeVgq0R94e9EKVVrzRfCIzEej/Ev4otrHzx/ohxfj3ER5kIRitb08PiVVk23hRDOhl3hYqiHHRcuvfTW3GPHzh09v/vtVw9cXrl3AAAAANa//wcAAP//yHMF9A==") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$eJzs3e9rJGcdAPDvbHbz4y6aqH1RhdbDFu6KXnLp2TaI9E4Q3xWU6usz5PZCuE32yG7aSyiSwz9AENGCb/SVbwT/AEHuTyhCwb4XK8qhVwWLaEfmR+6SdKfZpNldm3w+8GSenXlmvt9ndzM7O/MkE8CZdSEirkfEWEQ8FxEz5fxaWWKnKFm79x6+sZyVJNL01b8lkZTzsmZJWTLny9Umi8l+U8Wks7V9e6nVam6Us+e7a3fmO1vbl1fXllaaK831q1cXXlx8afGFxSsn0s+sXy9/888//dGvvvXy777y+h9v/PXSD7J8p8vlu/04acVz0siei0fqEbExiGAjMFb2599poaLZxJDTAgCgQnaM/9mI+FJ+/D8TY/nRXLXxPfVk4NkBAAAAJyG9Nh3/SSLSI2oceQ0AAABgVGr5GNikNleOBZiOWm1urhjD+0Scq7Xane6Xb7U3128WY2Vno1G7tdpqXsnH1E5ERCPJHi88OqNQPH4+b5uVZN8Y4J/MTOXL55bbrZujOOEBAAAAZ9D5A9///zlTfP8HAAAATpnZcnpuxHkAAAAAgzM76gQAAACAgTvG9//xQeQBAAAADMS3X3klK+nu/a9vvra1ebv92uWbzc7tubXN5bnl9saduZV2e6WVTkSsHba9Vrt956uxvnl3vtvsdOc7W9s31tqb690bq/tugQ0AAAAM0We+eP+dJCJ2vjaVl9i9tj9WsYK/FYBTo9ZnuzT78e5gcwGGq+pjHjj96h+92DBfOMUaxSQZdR7A6By2A5isavHWscI5rgAAgBG4+Pn776TJh6//1x+fGwBOqX6v/wOnT8X1/3Rm2IkAQ1d5/f+QgQHAJ1/DCEA48w6//l/hrXzR9cMjpOmh2wIAAAZqOi9Jba68FjgdtffTQsxGI7m12mpeiYhPR8QfZhoT2eOFfM3EHw0AAAAAAAAAAAAAAAAAAAAAAAAAQJ/SNIn0GOrHWgsAAAAYhYjaX5LyPsAXZ56dPnh+YDx5P78V8Adpmr7+81d/dnep291YyOb/PZ8/HhHdN7P546M4fQEAAADssXuX//z7+/ONEWcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGn13sM3lnfLMOM++EZEzPaKX4/JfDoZjYg4948k6nvWSyJi7ATi79yLiCd7xU+ytGK2zOJg/FpETOVZDDz+U2ma9ox//mNHh7Ptfrb/ud7r968WF/Jp79//elGufdz41fu/2qP939jB+PVi//epPmN84e3fzO95+L3H1Ylieb33/mc3flKx/32mV7D6h2d9/7vb21W5pb+MuNjz8yfZF2u+u3ZnvrO1fXl1bWmludJcv3p14cXFlxZfWLwyf2u11Sx/9ozx46d++0FV/AcXIs6V8cd3cyo/WGaLydeTR6mM78vp2azSqNryY/99++7DzxXVva3zrT64F3Hpmd6v/5P5tOfz/4t/pbn8cyBbfrH8TEh2inpE+faNiKd//funK/t/b7KsHf31v3R413PPfeeHf+qzKQAwBJ2t7dtLrVZzY+CVN9M07a9xdlTa/5aTiJ2Di7IDuBPuxVREVCzaH2uqfFaj3y0/UZnqu1MRQ3p1jlq5dpTG6cSR3mzJzv9BB89wZTx/Q456zwQAAJy0x0f/o84EAAAAAAAAAAAAAAAAAAAAzq5h/F+xgzF3RtNVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICP9L8AAAD//6zP1vE=") ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40106e8c, &(0x7f0000000140)={0x8, 0xe252, 0x0, 0x0, 0x7, 0x102, 0x2401}) 2m36.197739486s ago: executing program 2 (id=152): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x4000}) ppoll(&(0x7f0000000480)=[{r2, 0xd4a5}], 0x1, 0x0, 0x0, 0x0) 2m34.644515792s ago: executing program 2 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x2020, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) chdir(&(0x7f0000000300)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 2m34.106455184s ago: executing program 2 (id=162): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000a00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@data_err_ignore}, {@norecovery}, {@nodiscard}]}, 0xfe, 0x49d, &(0x7f0000003300)="$eJzs3M9vFFUcAPDv7I/SotiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4t34XxhPejHqRROvejckxHCh6mXN7My2y7LbbumPpd3PJ5n2zczrvvedmTf75r3tBtC1BtMfScT9EfFHRPRnq7dnGMx+Ldy8Mv7PzSvjSVQqb/+dVPPdunllvJa19nf3ZSuVSr6+o0m5V9+LGJuenryYrw/Pnf9wePbS5Renzo+dnTw7eWH05MljRw/0nBg9vi5xpnHd2vfJzP69p9699ub46Wvv/5yUIos7GuJYL4PZ0W3qmfUurMN21aWrB3bRwV+X0s2uBDqpGBHp6SpX239/FKNvcV9/vP55Y/7eza4gsGEqlUplmbvyfAXYxpJYOU9vfqcAtpP8EaD6/FtbNrH70XE3XskegNK4F/Il21OKQpY4WG54vl1PgxFxev7fr9Mlmo9D9G1Q0QBAl/o+7f+80Kz/V4hHskRP+uOBfA5lICIejIjdEfFQROyJiIcjqnkfjYjHVll+4wzJnf2fwvW7Dq4Naf/v5Xxu6/b+X6GWZaCYr+2qxl9OzkxNTx7Jj8nhKO84M5VMjixTxg+v/f5lq331/b90Scuv9QXzelzvaxh1nxibG1tT0HVufBaxrxSxUI6G+JOoTeMkEbE3IvbdZRlTz5Va7ls5/mW0ftm2Vb6JeDY7//PREH9N0nJ+cuSlE6PHh3tjevLIcO2quNMvv119q2FTsZZYU/zrID3/O5te/4vxDyS9EbOXLp+rztfOrr6Mq39+0fKZsp3rv7Q0QH1qV3799yTvVDdUb06liI/H5uYujkT0JG8sbY98++jSq9XWa/nT+A8fat7+d8fSkXg8IvZHxIGIeCJ9KMzr/mREPBURh5aJ/6dXn/5g9fFvzlxpGv/ESuc/6s//6hPFcz9+t3L86T2u1fk/Vk0dzre0c/9rt4JrOXYAAACwVRSqn4FPCkNJKU8XCkND2Wf498TOwvTM7NzzZ2Y+ujCRfVZ+IMqF2khXf9146Eg+NjxQ99oDdfuP5uPGXxX7qutD4zPTEx2MG8jaebX9L94Lsvaf+qvY6doBGy6bRyt0uhpAB6zDPDqwRWn/0J2SZdt/eVPrAmw+7//QvZq1/09b5h76dkMrA2wq7//Qvdpo//PZr9a9AmBr8v4P3Uv7h67U8n/jCy13pbeLNXwbwMYk/su/z/Beqc/2T0ThnqjGlkskscq/KrX9ZRarSFT6s/afbtnRvJkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsC/8HAAD//1KB3Bk=") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 2m33.686488839s ago: executing program 2 (id=167): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3, 0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xe}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x40020000, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) readv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/95, 0x5f}, {&(0x7f0000002240)=""/7, 0x7}, {&(0x7f0000002280)=""/139, 0x8b}, {&(0x7f0000002340)=""/85, 0x55}], 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0xfff, 0x4d4a, 0x8, 0x5, 0xd, "2ab76ecca931142653228cba5c0e5c3fe430f1"}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r7, 0x0, 0x0, 0x2, 0x3000) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r9, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r9) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r3]) 2m27.89925511s ago: executing program 2 (id=172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m24.943216314s ago: executing program 32 (id=172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 13.755468727s ago: executing program 0 (id=556): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f0100008366937f01fc5a02d14e0102030122"], 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 9.684709466s ago: executing program 0 (id=570): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) 9.386087925s ago: executing program 4 (id=573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x48, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 8.573465872s ago: executing program 0 (id=577): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0x7, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x803, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x4, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff02, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40002019}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x7) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 8.552470948s ago: executing program 4 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file1\x00') getdents64(r0, &(0x7f0000000140)=""/165, 0xa5) 8.209255528s ago: executing program 4 (id=580): setfsgid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 7.944353183s ago: executing program 0 (id=582): pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") r0 = creat(&(0x7f0000001840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) mkdir(0x0, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000001800)={0x30, 0x5, 0x0, {0x0, 0x1, 0x6, 0x9}}, 0x30) 7.640804117s ago: executing program 3 (id=585): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 5.990219319s ago: executing program 4 (id=588): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000000)={0x0, 0x5, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.755969191s ago: executing program 6 (id=589): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 5.755716654s ago: executing program 3 (id=590): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc004) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000489422302fd17e5ffff0800040400b2e3e1000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 5.663480367s ago: executing program 0 (id=592): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000680)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 5.352506771s ago: executing program 6 (id=595): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 5.036173103s ago: executing program 3 (id=596): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0x4, 0x9, 0xa, 0x7, 0x2}, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.033530949s ago: executing program 1 (id=597): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200feff}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.860299964s ago: executing program 6 (id=598): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@fat=@debug}, {@uni_xlateno}, {@numtail}, {@utf8}, {@numtail}, {@fat=@check_normal}, {@uni_xlate}, {@numtail}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$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") syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000840)={[{@dmask}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x5}}, {@fmask={'fmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@dmask={'dmask', 0x3d, 0x401}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.774705464s ago: executing program 1 (id=599): syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x801) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x220) 4.699746793s ago: executing program 3 (id=600): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x9}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) readv(r0, &(0x7f00000023c0)=[{&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/95, 0x5f}, {&(0x7f0000002240)=""/7, 0x7}, {&(0x7f0000002280)=""/139, 0x8b}, {&(0x7f0000002340)=""/85, 0x55}], 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0xfff, 0x4d4a, 0x8, 0x5, 0xd, "2ab76ecca931142653228cba5c0e5c3fe430f1"}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r8, 0x0, 0x0, 0x2, 0x3000) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r10, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) 4.532536064s ago: executing program 4 (id=601): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x24040084) readv(r0, &(0x7f00000023c0)=[{&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/95, 0x5f}, {&(0x7f0000002240)=""/7, 0x7}, {&(0x7f0000002280)=""/139, 0x8b}, {&(0x7f0000002340)=""/85, 0x55}], 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0xfff, 0x4d4a, 0x8, 0x5, 0xd, "2ab76ecca931142653228cba5c0e5c3fe430f1"}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r8, 0x0, 0x0, 0x2, 0x3000) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r10, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) 4.525624288s ago: executing program 5 (id=602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}}, 0x20}}, 0x0) 4.443566293s ago: executing program 1 (id=603): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040084) readv(r0, &(0x7f00000023c0)=[{&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/95, 0x5f}, {&(0x7f0000002240)=""/7, 0x7}, {&(0x7f0000002280)=""/139, 0x8b}, {&(0x7f0000002340)=""/85, 0x55}], 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0x3000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(0xffffffffffffffff) 4.017182288s ago: executing program 5 (id=604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x5, 0x1, 0x3, 0xfffffff2, 0x4}]}}}}}}}, 0x0) 3.068580725s ago: executing program 6 (id=605): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) sendmsg$inet_sctp(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000014c0)="87", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x4048000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xb}, 0x8) 2.590891458s ago: executing program 3 (id=606): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x2cf2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pipe(&(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40) 2.408567376s ago: executing program 5 (id=607): syz_open_dev$sndctrl(&(0x7f0000000300), 0xfffffffc, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xca72, 0x10000, 0xfffffffe, 0x4e}, &(0x7f0000000840)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = syz_open_dev$media(&(0x7f0000000100), 0x1, 0x40580) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.25696204s ago: executing program 0 (id=608): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0xae3e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xb00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000000), 0x1, 0x0, 0x27}, 0x0) close(r4) r5 = syz_open_procfs(0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) exit(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40045304, &(0x7f00000003c0)={{}, {0x0, 0x3}, 0x0, 0x1}) 2.027127431s ago: executing program 4 (id=609): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.872759134s ago: executing program 1 (id=610): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) 1.695847376s ago: executing program 5 (id=611): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 817.922191ms ago: executing program 6 (id=612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x0, 0x8001}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 575.073403ms ago: executing program 5 (id=613): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 479.106225ms ago: executing program 1 (id=614): syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$packet(0x11, 0x3, 0x300) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 185.588505ms ago: executing program 6 (id=615): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x137, 0x137, 0x5, [@ptr={0x10, 0x0, 0x0, 0x2, 0x5}, @fwd={0xf}, @datasec={0x9, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x6, 0x9a}, {0x2, 0x8, 0x5}, {0x1, 0x8, 0xa4e}, {0x5, 0xfffffffd, 0x9}, {0x3, 0x4, 0x8}], "919840"}, @struct={0x6, 0x8, 0x0, 0x4, 0x1, 0xfff, [{0xf, 0x5, 0x8}, {0x2, 0x0, 0x4}, {0x1, 0x2, 0x8}, {0xb, 0x0, 0x9}, {0x4, 0x0, 0x2}, {0x10, 0x1, 0x3}, {0x3, 0x5, 0xe3b}, {0xe, 0x5, 0x8001}]}, @enum={0x6, 0x7, 0x0, 0x6, 0x4, [{0x8, 0x100}, {0x8, 0x7}, {0xc, 0x3}, {0xb, 0x100}, {0x8, 0x4}, {0x0, 0x3}, {0x7, 0x7fffffff}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x5}, @ptr={0x7, 0x0, 0x0, 0x2, 0x3}, @const={0x10, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30, 0x71, 0x2e]}}, &(0x7f0000000600)=""/145, 0x155, 0x91, 0x0, 0x3, 0x10000}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)="3f54aa20df3f9798e949f580993b14302cf7afde321976e311a4c68c57d90388c490dba85d7003bf82046959e46801000000000000009dd0ab147457109d094783b9358badecf5b8fc05a5ba4e2adab50e95fbb26c314a4886b3314e4a0ba84930e05981f677e230e75e9b3210d53c32f60000", &(0x7f0000000340), 0x7ff, r0}, 0x38) 185.091977ms ago: executing program 5 (id=616): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x9}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) readv(r0, &(0x7f00000023c0)=[{&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/95, 0x5f}, {&(0x7f0000002240)=""/7, 0x7}, {&(0x7f0000002280)=""/139, 0x8b}, {&(0x7f0000002340)=""/85, 0x55}], 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0xfff, 0x4d4a, 0x8, 0x5, 0xd, "2ab76ecca931142653228cba5c0e5c3fe430f1"}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r8, 0x0, 0x0, 0x2, 0x3000) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r10, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) 182.457425ms ago: executing program 3 (id=617): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000006}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804", 0x13}], 0x1, 0x0, 0x0, 0x5865}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 0s ago: executing program 1 (id=618): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x13100, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 83.501784][ T5606] cgroup: Unknown subsys name 'net' [ 83.616692][ T5606] cgroup: Unknown subsys name 'cpuset' [ 83.626229][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.310693][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.975232][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.983875][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.995294][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.006591][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.016717][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.017057][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.025203][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.038809][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.040708][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.047700][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.055518][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.060802][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.067950][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.077461][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.089484][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.091794][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.099751][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.105471][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.112378][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.120662][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.126317][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.139811][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.140733][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.148469][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.158176][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.162725][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.168213][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.176847][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.182749][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.198651][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.244326][ T5632] Bluetooth: hci5: command tx timeout [ 90.244425][ T5634] Bluetooth: hci0: command tx timeout [ 90.250726][ T5630] Bluetooth: hci2: command tx timeout [ 90.255875][ T5634] Bluetooth: hci3: command tx timeout [ 90.261715][ T4934] Bluetooth: hci1: command tx timeout [ 90.267371][ T5625] Bluetooth: hci4: command tx timeout [ 90.754246][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.762412][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.769631][ T5619] bridge_slave_0: entered allmulticast mode [ 90.777511][ T5619] bridge_slave_0: entered promiscuous mode [ 90.832618][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.839814][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.847104][ T5619] bridge_slave_1: entered allmulticast mode [ 90.854646][ T5619] bridge_slave_1: entered promiscuous mode [ 90.966024][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.973248][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.980392][ T5621] bridge_slave_0: entered allmulticast mode [ 90.988192][ T5621] bridge_slave_0: entered promiscuous mode [ 91.043402][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.050669][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.058140][ T5621] bridge_slave_1: entered allmulticast mode [ 91.065704][ T5621] bridge_slave_1: entered promiscuous mode [ 91.098779][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.106006][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.114541][ T5624] bridge_slave_0: entered allmulticast mode [ 91.122423][ T5624] bridge_slave_0: entered promiscuous mode [ 91.133701][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.184256][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.191597][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.198799][ T5624] bridge_slave_1: entered allmulticast mode [ 91.208787][ T9] cfg80211: failed to load regulatory.db [ 91.214452][ T5624] bridge_slave_1: entered promiscuous mode [ 91.234463][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.333769][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.363120][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.370453][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.377757][ T5622] bridge_slave_0: entered allmulticast mode [ 91.386691][ T5622] bridge_slave_0: entered promiscuous mode [ 91.396273][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.404320][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.411699][ T5622] bridge_slave_1: entered allmulticast mode [ 91.419741][ T5622] bridge_slave_1: entered promiscuous mode [ 91.433553][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.465288][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.482413][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.489581][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.498718][ T5620] bridge_slave_0: entered allmulticast mode [ 91.506622][ T5620] bridge_slave_0: entered promiscuous mode [ 91.530119][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.542308][ T5619] team0: Port device team_slave_0 added [ 91.590055][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.597449][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.605301][ T5620] bridge_slave_1: entered allmulticast mode [ 91.614325][ T5620] bridge_slave_1: entered promiscuous mode [ 91.649526][ T5619] team0: Port device team_slave_1 added [ 91.668655][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.676180][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.683619][ T5623] bridge_slave_0: entered allmulticast mode [ 91.691171][ T5623] bridge_slave_0: entered promiscuous mode [ 91.715184][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.752767][ T5621] team0: Port device team_slave_0 added [ 91.758545][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.767033][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.774448][ T5623] bridge_slave_1: entered allmulticast mode [ 91.782629][ T5623] bridge_slave_1: entered promiscuous mode [ 91.805524][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.817305][ T5624] team0: Port device team_slave_0 added [ 91.837599][ T5621] team0: Port device team_slave_1 added [ 91.859533][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.884623][ T5624] team0: Port device team_slave_1 added [ 91.891280][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.898531][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.924649][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.964867][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.000517][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.007723][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.033889][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.060745][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.084907][ T5622] team0: Port device team_slave_0 added [ 92.114488][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.121511][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.147720][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.161785][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.185464][ T5622] team0: Port device team_slave_1 added [ 92.192057][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.199091][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.225145][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.239545][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.248104][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.274493][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.300918][ T5620] team0: Port device team_slave_0 added [ 92.320065][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.327323][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.327424][ T5630] Bluetooth: hci2: command tx timeout [ 92.353492][ T4934] Bluetooth: hci1: command tx timeout [ 92.353537][ T4934] Bluetooth: hci5: command tx timeout [ 92.353583][ T4934] Bluetooth: hci3: command tx timeout [ 92.353615][ T4934] Bluetooth: hci4: command tx timeout [ 92.359006][ T5632] Bluetooth: hci0: command tx timeout [ 92.359295][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.436137][ T5620] team0: Port device team_slave_1 added [ 92.476446][ T5624] hsr_slave_0: entered promiscuous mode [ 92.483358][ T5624] hsr_slave_1: entered promiscuous mode [ 92.493931][ T5623] team0: Port device team_slave_0 added [ 92.513428][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.520480][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.546534][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.578762][ T5619] hsr_slave_0: entered promiscuous mode [ 92.585445][ T5619] hsr_slave_1: entered promiscuous mode [ 92.591894][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 92.597689][ T5619] Cannot create hsr debugfs directory [ 92.620245][ T5623] team0: Port device team_slave_1 added [ 92.639080][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.646674][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.672702][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.736612][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.743899][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.769882][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.810592][ T5621] hsr_slave_0: entered promiscuous mode [ 92.817165][ T5621] hsr_slave_1: entered promiscuous mode [ 92.823790][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 92.829532][ T5621] Cannot create hsr debugfs directory [ 92.860946][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.868286][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.894344][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.943913][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.950960][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.977015][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.989870][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.996936][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.023287][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.099077][ T5622] hsr_slave_0: entered promiscuous mode [ 93.105642][ T5622] hsr_slave_1: entered promiscuous mode [ 93.112100][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 93.117847][ T5622] Cannot create hsr debugfs directory [ 93.242081][ T5623] hsr_slave_0: entered promiscuous mode [ 93.248574][ T5623] hsr_slave_1: entered promiscuous mode [ 93.255474][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 93.261219][ T5623] Cannot create hsr debugfs directory [ 93.273237][ T5620] hsr_slave_0: entered promiscuous mode [ 93.280046][ T5620] hsr_slave_1: entered promiscuous mode [ 93.288174][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 93.293958][ T5620] Cannot create hsr debugfs directory [ 93.937492][ T5624] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.950808][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.959152][ T5624] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.968978][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.977035][ T5624] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.987807][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.018332][ T5624] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.029548][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.116766][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.129386][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.138033][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.150902][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.159175][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.170008][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.185095][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.196821][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.301862][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.314481][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.331258][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.343193][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.352727][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.364313][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.372445][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.383272][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.402260][ T4934] Bluetooth: hci4: command tx timeout [ 94.403082][ T50] Bluetooth: hci0: command tx timeout [ 94.407706][ T4934] Bluetooth: hci3: command tx timeout [ 94.413452][ T5632] Bluetooth: hci5: command tx timeout [ 94.418526][ T5634] Bluetooth: hci1: command tx timeout [ 94.432171][ T5630] Bluetooth: hci2: command tx timeout [ 94.552788][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.565335][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.574835][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.587596][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.596084][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.607050][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.615429][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.627482][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.667869][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.796585][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.813763][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.825249][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.833561][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.844646][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.864454][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.876253][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.908753][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.922498][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.933177][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.946736][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.954377][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.006140][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.013339][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.110201][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.124888][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.147187][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.157440][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.166460][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.178438][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.203288][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.214206][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.224854][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.239542][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.280261][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.287437][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.345696][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.352888][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.438520][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.485403][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.492631][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.543357][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.554945][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.562129][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.686570][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.724658][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.773167][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.780362][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.827474][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.857880][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.865086][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.944997][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.008267][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.087263][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.094509][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.168378][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.187129][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.194289][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.252853][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.260368][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.388230][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.395457][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.455661][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.483594][ T5630] Bluetooth: hci5: command tx timeout [ 96.483655][ T50] Bluetooth: hci2: command tx timeout [ 96.489065][ T4934] Bluetooth: hci3: command tx timeout [ 96.497392][ T5632] Bluetooth: hci0: command tx timeout [ 96.500647][ T5625] Bluetooth: hci1: command tx timeout [ 96.508264][ T50] Bluetooth: hci4: command tx timeout [ 97.420675][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.690930][ T5624] veth0_vlan: entered promiscuous mode [ 97.738490][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.782925][ T5624] veth1_vlan: entered promiscuous mode [ 97.981377][ T5624] veth0_macvtap: entered promiscuous mode [ 98.045330][ T5624] veth1_macvtap: entered promiscuous mode [ 98.060149][ T5621] veth0_vlan: entered promiscuous mode [ 98.103157][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.195185][ T5621] veth1_vlan: entered promiscuous mode [ 98.233214][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.282595][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.349056][ T93] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.376449][ T93] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.386279][ T93] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.408339][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.429415][ T93] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.496737][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.548927][ T5621] veth0_macvtap: entered promiscuous mode [ 98.602382][ T5621] veth1_macvtap: entered promiscuous mode [ 98.624375][ T5622] veth0_vlan: entered promiscuous mode [ 98.663396][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.683037][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.683681][ T5619] veth0_vlan: entered promiscuous mode [ 98.733200][ T5619] veth1_vlan: entered promiscuous mode [ 98.748519][ T5623] veth0_vlan: entered promiscuous mode [ 98.756536][ T5622] veth1_vlan: entered promiscuous mode [ 98.779440][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.814090][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.823999][ T5623] veth1_vlan: entered promiscuous mode [ 98.824650][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.851013][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.897653][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.909749][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.934604][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.961811][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.995838][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.008127][ T5622] veth0_macvtap: entered promiscuous mode [ 99.044365][ T5620] veth0_vlan: entered promiscuous mode [ 99.075395][ T5622] veth1_macvtap: entered promiscuous mode [ 99.144695][ T5623] veth0_macvtap: entered promiscuous mode [ 99.156329][ T5619] veth0_macvtap: entered promiscuous mode [ 99.176639][ T5859] syz.5.6 uses obsolete (PF_INET,SOCK_PACKET) [ 99.208292][ T5619] veth1_macvtap: entered promiscuous mode [ 99.218307][ T5623] veth1_macvtap: entered promiscuous mode [ 99.228083][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.234998][ T5620] veth1_vlan: entered promiscuous mode [ 99.239628][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.300172][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.336814][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.356884][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.384351][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.442002][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.473626][ T5620] veth0_macvtap: entered promiscuous mode [ 99.509966][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.544428][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.563627][ T93] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.585139][ T93] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.617769][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.655899][ T93] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.677267][ T93] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.706529][ T5620] veth1_macvtap: entered promiscuous mode [ 99.747007][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.763232][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.786301][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.796180][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.840530][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.865702][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.930264][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.956146][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.982243][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.986250][ T5869] netlink: 'syz.5.9': attribute type 5 has an invalid length. [ 99.998729][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.098666][ T93] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.110620][ T5869] netlink: 'syz.5.9': attribute type 5 has an invalid length. [ 100.111219][ T93] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.145421][ T651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.154029][ T651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.195581][ T93] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.218268][ T93] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.223760][ T5869] Zero length message leads to an empty skb [ 100.268119][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.291526][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.395589][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.418822][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.496052][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.531511][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.575322][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.587216][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.753503][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.780737][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.972497][ T5813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.994835][ T5813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.133724][ T651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.164340][ T651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.442889][ T5749] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.675366][ T5749] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 102.649391][ T5749] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 102.665124][ T5749] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.674438][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.682523][ T5749] usb 5-1: Product: syz [ 102.686695][ T5749] usb 5-1: Manufacturer: syz [ 102.691294][ T5749] usb 5-1: SerialNumber: syz [ 102.811438][ T5890] loop3: detected capacity change from 0 to 131072 [ 102.903485][ T5890] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 102.912308][ T5890] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 102.913527][ T5892] loop5: detected capacity change from 0 to 131072 [ 102.928163][ T5892] ======================================================= [ 102.928163][ T5892] WARNING: The mand mount option has been deprecated and [ 102.928163][ T5892] and is ignored by this kernel. Remove the mand [ 102.928163][ T5892] option from the mount to silence this warning. [ 102.928163][ T5892] ======================================================= [ 102.974779][ T5892] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 102.981545][ T5892] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 102.989462][ T5890] F2FS-fs (loop3): invalid crc value [ 103.006640][ T5892] F2FS-fs (loop5): invalid crc value [ 103.128030][ T5890] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 103.162011][ T5890] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 103.169249][ T5890] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 103.270084][ T5892] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 103.294121][ T5890] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 103.314771][ T5892] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 103.321945][ T5892] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 103.330411][ T30] audit: type=1800 audit(1783394359.307:2): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file2" dev="loop3" ino=8 res=0 errno=0 [ 103.375436][ T5756] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.552176][ T5756] usb 2-1: Using ep0 maxpacket: 8 [ 103.631016][ T5756] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 103.675225][ T5756] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.714239][ T5756] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.757505][ T5756] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.819697][ T5756] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.856401][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.193033][ T5756] usb 2-1: GET_CAPABILITIES returned 0 [ 104.206546][ T5749] cdc_ncm 5-1:1.0: bind() failure [ 104.227947][ T5756] usbtmc 2-1:16.0: can't read capabilities [ 104.358662][ T5749] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 104.417886][ T5749] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 104.465595][ T5749] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 104.508851][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 104.542426][ T29] usb 2-1: USB disconnect, device number 2 [ 104.572931][ T5749] usb 5-1: USB disconnect, device number 2 [ 104.727423][ T5916] loop5: detected capacity change from 0 to 128 [ 104.878592][ T5918] loop0: detected capacity change from 0 to 1024 [ 104.920875][ T5918] EXT4-fs: inline encryption not supported [ 105.084326][ T5918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.473984][ T30] audit: type=1326 audit(1783394361.467:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.5.23" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec199de59 code=0x0 [ 105.592531][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.670445][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.771489][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 105.811434][ T29] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 105.867368][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.909967][ T29] usb 5-1: Product: syz [ 105.934983][ T29] usb 5-1: Manufacturer: syz [ 105.960983][ T29] usb 5-1: SerialNumber: syz [ 106.033642][ T29] usb 5-1: config 0 descriptor?? [ 106.211453][ T5907] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.332541][ T29] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 003 [ 106.374529][ T5907] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.393497][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.436137][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.465020][ T5907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.516357][ T5907] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.552783][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.584187][ T5907] usb 4-1: Product: syz [ 106.613700][ T5907] usb 4-1: Manufacturer: syz [ 106.675064][ T5907] cdc_wdm 4-1:1.0: skipping garbage [ 106.700097][ T5907] cdc_wdm 4-1:1.0: skipping garbage [ 106.755648][ T5907] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 106.769736][ T5907] cdc_wdm 4-1:1.0: Unknown control protocol [ 107.007936][ T5923] i2c i2c-1: failure reading status [ 107.026975][ T5351] usb 5-1: USB disconnect, device number 3 [ 107.029234][ T5756] usb 4-1: USB disconnect, device number 2 [ 107.071447][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.254034][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.296356][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.332923][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.374411][ T29] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 107.392985][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.410730][ T29] usb 3-1: Product: syz [ 107.420724][ T29] usb 3-1: Manufacturer: syz [ 107.431272][ T29] usb 3-1: SerialNumber: syz [ 107.474921][ T29] usb 3-1: selecting invalid altsetting 1 [ 107.503657][ T29] usb 3-1: unit 6 not found! [ 107.581523][ T5756] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.758261][ T5756] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.802196][ T5756] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.838379][ T5756] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.877009][ T5756] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.907492][ T5756] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.937111][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.956935][ T5756] usb 4-1: Product: syz [ 107.971475][ T5756] usb 4-1: Manufacturer: syz [ 108.012033][ T5756] cdc_wdm 4-1:1.0: skipping garbage [ 108.027513][ T5756] cdc_wdm 4-1:1.0: skipping garbage [ 108.048787][ T5756] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 108.071652][ T5756] cdc_wdm 4-1:1.0: Unknown control protocol [ 108.629435][ T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.673369][ T29] usb 3-1: USB disconnect, device number 2 [ 108.830757][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.502835][ T5988] lo speed is unknown, defaulting to 1000 [ 109.509542][ T5988] lo speed is unknown, defaulting to 1000 [ 109.529648][ T5988] lo speed is unknown, defaulting to 1000 [ 109.550436][ T5988] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 109.565343][ T5988] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 109.582396][ T5988] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 109.613197][ T5988] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.772955][ T5988] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 109.971060][ T5989] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 110.068026][ T5988] lo speed is unknown, defaulting to 1000 [ 110.076953][ T5988] lo speed is unknown, defaulting to 1000 [ 110.085346][ T5988] lo speed is unknown, defaulting to 1000 [ 110.094075][ T5988] lo speed is unknown, defaulting to 1000 [ 110.102110][ T5988] lo speed is unknown, defaulting to 1000 [ 110.109425][ T5988] lo speed is unknown, defaulting to 1000 [ 110.283061][ T5769] usb 4-1: USB disconnect, device number 3 [ 110.564438][ T5994] siw: device registration error -23 [ 110.653787][ T6000] netlink: 'syz.1.49': attribute type 5 has an invalid length. [ 110.788341][ T6005] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 110.833064][ T5351] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.922164][ T6000] netlink: 'syz.1.49': attribute type 5 has an invalid length. [ 111.221519][ T6010] loop3: detected capacity change from 0 to 32768 [ 111.246634][ T6010] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.52 (6010) [ 111.279689][ T6010] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.290016][ T6010] BTRFS info (device loop3): using sha256 checksum algorithm [ 111.297595][ T6010] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 111.332119][ T5351] usb 5-1: Using ep0 maxpacket: 8 [ 111.349831][ T5351] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 111.405970][ T6010] BTRFS info (device loop3): rebuilding free space tree [ 111.422159][ T5351] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 111.461866][ T6010] BTRFS info (device loop3): disabling free space tree [ 111.469774][ T6010] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.480035][ T6010] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.507429][ T6010] BTRFS info (device loop3): enabling ssd optimizations [ 111.514511][ T6010] BTRFS info (device loop3): turning on async discard [ 111.521308][ T6010] BTRFS info (device loop3): enabling disk space caching [ 111.530217][ T6010] BTRFS info (device loop3): force clearing of disk cache [ 111.541738][ T5351] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.555283][ T5351] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.570381][ T5351] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.579828][ T5351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.667195][ T6028] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 111.804624][ T6028] batman_adv: batadv0: Adding interface: geneve2 [ 111.830064][ T6028] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 111.844665][ T5351] usb 5-1: GET_CAPABILITIES returned 0 [ 111.864390][ T5351] usbtmc 5-1:16.0: can't read capabilities [ 112.137545][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 112.205597][ T29] usb 5-1: USB disconnect, device number 4 [ 113.031833][ T6049] siw: device registration error -23 [ 113.051972][ T6049] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 113.809111][ T5623] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.510182][ T6064] process 'syz.5.66' launched './file0' with NULL argv: empty string added [ 115.650945][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 116.589116][ T6098] warning: `syz.0.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.315395][ T6121] netlink: 'syz.4.83': attribute type 5 has an invalid length. [ 117.657225][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.678100][ T6121] netlink: 'syz.4.83': attribute type 5 has an invalid length. [ 117.708659][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.755613][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.790126][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.840621][ T6124] batman_adv: batadv0: Removing interface: geneve2 [ 118.931945][ T5749] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.141899][ T5749] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 119.192404][ T5749] usb 2-1: config 0 has no interface number 0 [ 119.250395][ T5749] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.329197][ T5749] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 119.378744][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.423599][ T5749] usb 2-1: Product: syz [ 119.448006][ T5749] usb 2-1: Manufacturer: syz [ 119.472793][ T5749] usb 2-1: SerialNumber: syz [ 119.522934][ T5749] usb 2-1: config 0 descriptor?? [ 119.536067][ T6162] xt_hashlimit: size too large, truncated to 1048576 [ 119.592539][ T5749] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 119.968796][ T5749] usb 2-1: USB disconnect, device number 3 [ 119.991371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.001388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 120.047746][ T5749] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 120.291366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 120.351370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 121.191362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.261364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.801360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 122.129638][ T29] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 122.267786][ T6186] netlink: 'syz.2.101': attribute type 4 has an invalid length. [ 122.339745][ T6187] netlink: 'syz.2.101': attribute type 4 has an invalid length. [ 122.387725][ T29] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 122.459197][ T29] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 122.548455][ T29] usb 5-1: config 150 has no interface number 0 [ 122.637137][ T29] usb 5-1: config 150 interface 204 has no altsetting 0 [ 122.725898][ T29] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 122.800876][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.873290][ T29] usb 5-1: Product: syz [ 122.905634][ T29] usb 5-1: Manufacturer: syz [ 122.948732][ T29] usb 5-1: SerialNumber: syz [ 123.463462][ T29] xr_serial 5-1:150.204: skipping garbage [ 123.510027][ T29] xr_serial 5-1:150.204: xr_serial converter detected [ 124.179076][ T6203] netlink: 'syz.3.105': attribute type 5 has an invalid length. [ 125.891357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 125.989364][ T29] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 126.130142][ T29] usb 5-1: USB disconnect, device number 5 [ 126.302018][ T6216] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 126.479623][ T29] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 126.503148][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.511919][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.599781][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.632912][ T29] xr_serial 5-1:150.204: device disconnected [ 126.674527][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.800107][ T6203] netlink: 'syz.3.105': attribute type 5 has an invalid length. [ 128.441642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #46!!! [ 128.651356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 132.173265][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.181160][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.334824][ T5769] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.570224][ T5769] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 133.601735][ T5769] usb 4-1: config 0 has no interface number 0 [ 133.644515][ T5769] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.777386][ T5769] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 133.810650][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.862892][ T5769] usb 4-1: Product: syz [ 133.867088][ T5769] usb 4-1: Manufacturer: syz [ 133.902521][ T5769] usb 4-1: SerialNumber: syz [ 133.912646][ T5769] usb 4-1: config 0 descriptor?? [ 133.985679][ T5769] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 134.193876][ T6259] netlink: 'syz.0.121': attribute type 4 has an invalid length. [ 134.289207][ T5769] usb 4-1: USB disconnect, device number 4 [ 134.354661][ T5769] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 135.073780][ T6264] loop5: detected capacity change from 0 to 32768 [ 135.126857][ T6264] (syz.5.122,6264,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.143264][ T6264] (syz.5.122,6264,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.217172][ T6264] JBD2: Ignoring recovery information on journal [ 135.402345][ T6264] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 135.418130][ T5769] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.664312][ T5769] usb 5-1: Using ep0 maxpacket: 16 [ 135.793054][ T5769] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 135.842468][ T5769] usb 5-1: config 1 has no interface number 0 [ 135.938734][ T5769] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 136.079962][ T5769] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 136.183949][ T5624] ocfs2: Unmounting device (7,5) on (node local) [ 136.201094][ T5769] usb 5-1: config 1 interface 105 has no altsetting 0 [ 136.321815][ T6280] loop3: detected capacity change from 0 to 2048 [ 136.333577][ T5769] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 136.375466][ T5769] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 136.442337][ T5769] usb 5-1: Product: syz [ 136.446533][ T5769] usb 5-1: Manufacturer: syz [ 136.504791][ T5769] usb 5-1: SerialNumber: syz [ 136.555496][ T6280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.596123][ T6284] loop5: detected capacity change from 0 to 128 [ 136.658423][ T6266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 136.721737][ T6284] EXT4-fs: Ignoring removed bh option [ 136.745178][ T6266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 136.812401][ T6284] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.985990][ T6284] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.112326][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.224300][ T6284] EXT4-fs (loop5): shut down requested (0) [ 137.255924][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.345737][ T6266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.388824][ T6266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.475355][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 137.528044][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.599322][ T11] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 137.632656][ T11] usb 1-1: can't read configurations, error -71 [ 137.679986][ T5624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.869858][ T5769] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 138.160876][ T5769] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 138.387418][ T5769] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 22:d1:96:24:99:79 [ 138.459637][ T6303] Bluetooth: MGMT ver 1.23 [ 138.487573][ T5769] usb 5-1: USB disconnect, device number 6 [ 138.561653][ T5769] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 138.861804][ T5769] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 138.946920][ T5769] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 139.006668][ T5769] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 139.066922][ T6318] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 139.893811][ T6330] netlink: 'syz.1.145': attribute type 4 has an invalid length. [ 141.178637][ T6332] loop0: detected capacity change from 0 to 40427 [ 141.202725][ T6332] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 141.211771][ T6332] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 141.474713][ T6332] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 141.508880][ T6332] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 141.517146][ T6332] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.121161][ T6369] overlayfs: failed to clone upperpath [ 144.589893][ T6381] netlink: 'syz.4.163': attribute type 10 has an invalid length. [ 144.647763][ T6381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.163'. [ 144.717241][ T6381] bridge0: port 3(dummy0) entered blocking state [ 144.783623][ T6381] bridge0: port 3(dummy0) entered disabled state [ 144.797899][ T6381] dummy0: entered allmulticast mode [ 144.862984][ T6381] dummy0: entered promiscuous mode [ 145.686671][ T6389] siw: device registration error -23 [ 145.839888][ T6390] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 146.244824][ T6381] bridge0: port 3(dummy0) entered blocking state [ 146.255289][ T6381] bridge0: port 3(dummy0) entered forwarding state [ 150.844054][ T5992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.059378][ T5992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.312768][ T5992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.480675][ T5992] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.996123][ T6423] evm: overlay not supported [ 154.956924][ T5992] bridge_slave_1: left allmulticast mode [ 155.052583][ T5992] bridge_slave_1: left promiscuous mode [ 155.154598][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.169649][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.179866][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.202261][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.309612][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.320229][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.499888][ T6437] netlink: 44 bytes leftover after parsing attributes in process `syz.0.181'. [ 155.524125][ T5992] bridge_slave_0: left allmulticast mode [ 155.608802][ T5992] bridge_slave_0: left promiscuous mode [ 155.680684][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.715417][ T6444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.181'. [ 156.543498][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.187'. [ 156.600807][ T6456] lapbether: lapb_data_request error - 4 [ 156.865380][ T6461] loop3: detected capacity change from 0 to 256 [ 156.916048][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.956058][ T6461] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.005630][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.038683][ T5992] bond0 (unregistering): Released all slaves [ 157.116750][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.128539][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.451524][ T5632] Bluetooth: hci3: command tx timeout [ 157.885348][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 158.540722][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 159.556060][ T5632] Bluetooth: hci3: command tx timeout [ 159.863838][ T6499] siw: device registration error -23 [ 160.010747][ T6500] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 160.337929][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 161.016561][ T5992] hsr_slave_0: left promiscuous mode [ 161.104573][ T5992] hsr_slave_1: left promiscuous mode [ 161.306840][ T5992] veth1_macvtap: left promiscuous mode [ 161.353403][ T5992] veth0_macvtap: left promiscuous mode [ 161.404562][ T5769] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.417789][ T5992] veth1_vlan: left promiscuous mode [ 161.451405][ T5992] veth0_vlan: left promiscuous mode [ 161.615406][ T5632] Bluetooth: hci3: command tx timeout [ 161.626847][ T5769] usb 4-1: Using ep0 maxpacket: 8 [ 161.635014][ T11] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.696505][ T5769] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 161.710286][ T5769] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.744842][ T5769] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.784330][ T5769] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.822920][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 161.848109][ T5769] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.883500][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.919321][ T11] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.941955][ T5769] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.001680][ T5769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.016127][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.072213][ T11] usb 2-1: config 0 descriptor?? [ 162.407151][ T5769] usb 4-1: GET_CAPABILITIES returned 0 [ 162.427713][ T5769] usbtmc 4-1:16.0: can't read capabilities [ 162.439889][ T11] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 162.674827][ T11] usb 4-1: USB disconnect, device number 5 [ 162.718539][ T5626] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.977053][ T5626] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.007602][ T5626] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.041174][ T5626] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.131189][ T11] usb 2-1: USB disconnect, device number 4 [ 163.149934][ T5626] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 163.166408][ T5626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 163.213886][ T5626] usb 5-1: Product: syz [ 163.235025][ T5626] usb 5-1: Manufacturer: syz [ 163.297787][ T5626] usb 5-1: SerialNumber: syz [ 163.652334][ T5626] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 163.691655][ T5632] Bluetooth: hci3: command tx timeout [ 164.002171][ T5626] usb 5-1: USB disconnect, device number 7 [ 164.176903][ T5626] usblp0: removed [ 164.917613][ T6549] loop1: detected capacity change from 0 to 32768 [ 164.930131][ T6549] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.210 (6549) [ 164.981019][ T6549] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.992358][ T6549] BTRFS info (device loop1): using crc32c checksum algorithm [ 165.570855][ T6559] siw: device registration error -23 [ 165.628977][ T6228] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 165.648459][ T6566] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 165.688416][ T6549] BTRFS warning (device loop1): couldn't read tree root [ 165.701074][ T6549] BTRFS warning (device loop1): try to load backup roots slot 1 [ 165.742236][ T93] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 165.805054][ T6549] BTRFS warning (device loop1): couldn't read tree root [ 165.817337][ T6549] BTRFS warning (device loop1): try to load backup roots slot 2 [ 165.832197][ T6228] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 165.880826][ T6549] BTRFS warning (device loop1): couldn't read tree root [ 165.887818][ T6549] BTRFS warning (device loop1): try to load backup roots slot 3 [ 165.967156][ T6549] BTRFS info (device loop1): checking UUID tree [ 165.977041][ T6549] BTRFS info (device loop1): setting nodatasum [ 165.983220][ T6549] BTRFS info (device loop1): enabling ssd optimizations [ 165.996087][ T6549] BTRFS info (device loop1): turning on flush-on-commit [ 166.003044][ T6549] BTRFS info (device loop1): turning on async discard [ 166.015441][ T6549] BTRFS info (device loop1): enabling free space tree [ 166.022233][ T6549] BTRFS info (device loop1): trying to use backup root at mount time [ 166.038583][ T6549] BTRFS info (device loop1): max_inline set to 0 [ 166.486261][ T5992] team0 (unregistering): Port device team_slave_1 removed [ 166.604424][ T5620] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.896368][ T5992] team0 (unregistering): Port device team_slave_0 removed [ 168.005271][ T6588] loop4: detected capacity change from 0 to 40427 [ 168.041743][ T6588] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 168.054187][ T6588] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 168.287046][ T6588] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 168.313776][ T6588] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 168.324152][ T6588] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.123956][ T6588] syz.4.218: attempt to access beyond end of device [ 169.123956][ T6588] loop4: rw=2049, sector=45096, nr_sectors = 2064 limit=40427 [ 169.167817][ T6588] syz.4.218: attempt to access beyond end of device [ 169.167817][ T6588] loop4: rw=2049, sector=47160, nr_sectors = 2048 limit=40427 [ 169.211474][ T6588] syz.4.218: attempt to access beyond end of device [ 169.211474][ T6588] loop4: rw=2049, sector=49208, nr_sectors = 2048 limit=40427 [ 169.253702][ T6588] syz.4.218: attempt to access beyond end of device [ 169.253702][ T6588] loop4: rw=2049, sector=51256, nr_sectors = 1992 limit=40427 [ 169.275214][ T6588] syz.4.218: attempt to access beyond end of device [ 169.275214][ T6588] loop4: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 169.317771][ T6588] syz.4.218: attempt to access beyond end of device [ 169.317771][ T6588] loop4: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 169.360044][ T6588] syz.4.218: attempt to access beyond end of device [ 169.360044][ T6588] loop4: rw=2049, sector=59392, nr_sectors = 2048 limit=40427 [ 169.404254][ T6588] syz.4.218: attempt to access beyond end of device [ 169.404254][ T6588] loop4: rw=2049, sector=61440, nr_sectors = 2048 limit=40427 [ 169.446822][ T6588] syz.4.218: attempt to access beyond end of device [ 169.446822][ T6588] loop4: rw=2049, sector=63488, nr_sectors = 2048 limit=40427 [ 169.488797][ T6588] syz.4.218: attempt to access beyond end of device [ 169.488797][ T6588] loop4: rw=2049, sector=65536, nr_sectors = 2048 limit=40427 [ 173.450402][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 173.450450][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 173.450472][ T5619] Call Trace: [ 173.450483][ T5619] [ 173.450497][ T5619] dump_stack_lvl+0x100/0x190 [ 173.450544][ T5619] f2fs_stop_checkpoint+0x5e6/0xb30 [ 173.450598][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.450644][ T5619] ? errseq_set+0xe3/0x150 [ 173.450693][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.450745][ T5619] f2fs_write_end_bio+0xf53/0x1340 [ 173.450807][ T5619] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 173.450862][ T5619] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 173.450924][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.450974][ T5619] ? percpu_ref_put_many.constprop.0+0x52/0x2a0 [ 173.451043][ T5619] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 173.451099][ T5619] bio_endio+0x778/0x8e0 [ 173.451164][ T5619] submit_bio_noacct+0x64c/0x1ff0 [ 173.451227][ T5619] f2fs_submit_write_bio+0x133/0x330 [ 173.451282][ T5619] __submit_merged_bio+0x330/0x7b0 [ 173.451342][ T5619] ? rcu_is_watching+0x12/0xc0 [ 173.451398][ T5619] __submit_merged_write_cond+0x3fe/0x510 [ 173.451466][ T5619] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 173.451537][ T5619] ? __pfx___might_resched+0x10/0x10 [ 173.451573][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.451617][ T5619] ? folio_clear_dirty_for_io+0x178/0x960 [ 173.451679][ T5619] f2fs_sync_node_pages+0x13c6/0x1690 [ 173.451752][ T5619] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 173.451850][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.451900][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.451952][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.451996][ T5619] ? up_write+0x2e5/0x5c0 [ 173.452044][ T5619] block_operations+0x932/0xfc0 [ 173.452096][ T5619] ? __pfx_block_operations+0x10/0x10 [ 173.452191][ T5619] ? ktime_get+0x23e/0x320 [ 173.452228][ T5619] ? ktime_get+0x24d/0x320 [ 173.452265][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.452309][ T5619] ? rcu_is_watching+0x12/0xc0 [ 173.452364][ T5619] f2fs_write_checkpoint+0x58b/0x53d0 [ 173.452407][ T5619] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.452460][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.452504][ T5619] ? _raw_spin_unlock_irq+0x2e/0x50 [ 173.452553][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.452596][ T5619] ? __wait_for_common+0x1f3/0x4c0 [ 173.452652][ T5619] ? __pfx_schedule_timeout+0x10/0x10 [ 173.452706][ T5619] ? __pfx___wait_for_common+0x10/0x10 [ 173.452764][ T5619] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 173.452805][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.452859][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.452903][ T5619] ? rcu_is_watching+0x12/0xc0 [ 173.452954][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.452997][ T5619] ? kthread_stop+0x280/0x630 [ 173.453054][ T5619] kill_f2fs_super+0x3f1/0x4a0 [ 173.453094][ T5619] ? __pfx_kill_f2fs_super+0x10/0x10 [ 173.453154][ T5619] ? lockdep_hardirqs_on+0x78/0x100 [ 173.453210][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.453254][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.453314][ T5619] deactivate_locked_super+0xc1/0x1b0 [ 173.453356][ T5619] deactivate_super+0xe7/0x110 [ 173.453395][ T5619] cleanup_mnt+0x21f/0x450 [ 173.453445][ T5619] task_work_run+0x150/0x240 [ 173.453505][ T5619] ? __pfx_task_work_run+0x10/0x10 [ 173.453567][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.453620][ T5619] exit_to_user_mode_loop+0x1d8/0x6f0 [ 173.453659][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 173.453703][ T5619] ? rcu_is_watching+0x12/0xc0 [ 173.453777][ T5619] do_syscall_64+0x666/0x870 [ 173.453842][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.453880][ T5619] RIP: 0033:0x7f5935f9f097 [ 173.453908][ T5619] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 173.453947][ T5619] RSP: 002b:00007ffda8bb5538 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 173.453981][ T5619] RAX: 0000000000000000 RBX: 00007f59360332ca RCX: 00007f5935f9f097 [ 173.454004][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda8bb55f0 [ 173.454026][ T5619] RBP: 00007ffda8bb55f0 R08: 00007ffda8bb65f0 R09: 00000000ffffffff [ 173.454049][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda8bb6680 [ 173.454071][ T5619] R13: 00007f59360332ca R14: 0000000000029b3f R15: 00007ffda8bb66c0 [ 173.454121][ T5619] [ 174.009383][ T5619] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 174.256344][ T6607] fuse: Bad value for 'fd' [ 175.461608][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 175.484016][ T6433] lo speed is unknown, defaulting to 1000 [ 175.760819][ T6619] netlink: 'syz.0.226': attribute type 4 has an invalid length. [ 175.813516][ T6620] netlink: 'syz.0.226': attribute type 4 has an invalid length. [ 176.516240][ T6633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 177.105517][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.215766][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.243029][ T6433] bridge_slave_0: entered allmulticast mode [ 177.637832][ T50] Bluetooth: hci6: command 0x1003 tx timeout [ 177.651847][ T5632] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 177.686817][ T6433] bridge_slave_0: entered promiscuous mode [ 177.734764][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.741985][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.749182][ T6433] bridge_slave_1: entered allmulticast mode [ 177.757340][ T6433] bridge_slave_1: entered promiscuous mode [ 177.807439][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.820227][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.023780][ T6630] loop0: detected capacity change from 0 to 32768 [ 178.041059][ T6433] team0: Port device team_slave_0 added [ 178.090603][ T6630] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.227 (6630) [ 178.125564][ T6433] team0: Port device team_slave_1 added [ 178.205116][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.214232][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.226504][ T6630] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.240147][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.242585][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.242608][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.242656][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.554163][ T6666] loop1: detected capacity change from 0 to 1024 [ 178.566468][ T6630] BTRFS info (device loop0): using crc32c checksum algorithm [ 178.679457][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 178.857843][ T6433] hsr_slave_0: entered promiscuous mode [ 178.876717][ T6666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.915950][ T6433] hsr_slave_1: entered promiscuous mode [ 178.933265][ T30] audit: type=1800 audit(1783394434.917:4): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.232" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 178.999508][ T6433] debugfs: 'hsr0' already exists in 'hsr' [ 179.005257][ T6433] Cannot create hsr debugfs directory [ 179.431746][ T6630] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 179.453937][ T6630] BTRFS error (device loop0): open_ctree failed: -12 [ 179.821567][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.074254][ T6433] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.199883][ T6433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.212601][ T6433] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.224834][ T11] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 182.353159][ T6433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.361190][ T6433] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.435359][ T6433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.473510][ T6433] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.475528][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 182.572159][ T11] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 182.580350][ T11] usb 5-1: config 0 has no interface number 0 [ 182.620768][ T6433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.631698][ T11] usb 5-1: config 0 interface 184 has no altsetting 0 [ 182.834726][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.861193][ T11] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 182.870268][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.912725][ T11] usb 5-1: Product: syz [ 182.917071][ T11] usb 5-1: Manufacturer: syz [ 182.921967][ T11] usb 5-1: SerialNumber: syz [ 182.936922][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.964359][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.975629][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.022304][ T11] usb 5-1: config 0 descriptor?? [ 183.049466][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.060275][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.153283][ T6433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.170049][ T6433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.402508][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 183.757028][ T6754] overlayfs: failed to clone upperpath [ 183.830119][ T6752] team0 (unregistering): Port device team_slave_0 removed [ 183.874103][ T6752] team0 (unregistering): Port device team_slave_1 removed [ 184.431060][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.733975][ T11] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 184.742321][ T6775] loop0: detected capacity change from 0 to 512 [ 184.753083][ T6775] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 184.777440][ T11] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 184.822194][ T11] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 184.837907][ T6775] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.851646][ T11] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 184.861312][ T11] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 184.880714][ T6775] EXT4-fs (loop0): 1 truncate cleaned up [ 184.888525][ T6775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.935518][ T11] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 185.041726][ T5632] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 185.089458][ T11] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 185.153072][ T11] usb 5-1: USB disconnect, device number 8 [ 185.573254][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.686020][ T30] audit: type=1800 audit(1783394441.657:5): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.258" name="file1" dev="tmpfs" ino=344 res=0 errno=0 [ 185.751013][ T6433] veth0_vlan: entered promiscuous mode [ 185.766711][ T6433] veth1_vlan: entered promiscuous mode [ 185.800517][ T6433] veth0_macvtap: entered promiscuous mode [ 185.810862][ T6433] veth1_macvtap: entered promiscuous mode [ 186.002435][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.367677][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.255059][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.303829][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.347393][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.356137][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.952586][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.962171][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.154782][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.162633][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.182622][ T6822] Illegal XDP return value 743357952 on prog (id 37) dev syz_tun, expect packet loss! [ 189.852257][ T5993] Bluetooth: hci6: Frame reassembly failed (-84) [ 190.949743][ T5635] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 191.879312][ T5749] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 191.886996][ T5635] usb 7-1: Using ep0 maxpacket: 32 [ 191.904022][ T50] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 192.005339][ T6869] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 193.273300][ T6876] loop6: detected capacity change from 0 to 256 [ 193.341778][ T6876] exfat: Deprecated parameter 'utf8' [ 193.396305][ T5635] usb 7-1: device descriptor read/all, error -71 [ 193.441249][ T6876] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 193.485962][ T5749] usb 4-1: Using ep0 maxpacket: 8 [ 193.549712][ T6876] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x0f1fc7f3, utbl_chksum : 0xe619d30d) [ 193.642891][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.655309][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.892989][ T30] audit: type=1800 audit(1783394449.857:6): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.281" name="file2" dev="loop6" ino=1048620 res=0 errno=0 [ 194.049487][ T5825] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.058667][ T6886] siw: device registration error -23 [ 194.105988][ T6886] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 194.275354][ T5749] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 194.283997][ T5749] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.295393][ T5749] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.305481][ T5749] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.315397][ T5749] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.328375][ T5749] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.438194][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.523703][ T5749] usb 4-1: can't set config #16, error -71 [ 194.557462][ T5749] usb 4-1: USB disconnect, device number 6 [ 194.845902][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 195.995524][ T5825] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 196.003719][ T5825] usb 5-1: config 0 has no interface number 0 [ 196.009820][ T5825] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.805001][ T5825] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 197.814065][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.822038][ T5825] usb 5-1: Product: syz [ 197.868960][ T5825] usb 5-1: config 0 descriptor?? [ 197.925884][ T5825] usb 5-1: can't set config #0, error -71 [ 197.959475][ T5825] usb 5-1: USB disconnect, device number 9 [ 199.911425][ T5825] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 201.459166][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 203.038226][ T5825] usb 5-1: unable to read config index 0 descriptor/all [ 203.045270][ T5825] usb 5-1: can't read configurations, error -71 [ 203.145716][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.311'. [ 203.232026][ T6988] syzkaller0: entered promiscuous mode [ 203.237553][ T6988] syzkaller0: entered allmulticast mode [ 203.467919][ T6999] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 204.782195][ T5632] Bluetooth: hci3: link tx timeout [ 204.787824][ T5632] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.870771][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.311'. [ 205.910057][ T7021] loop1: detected capacity change from 0 to 40427 [ 205.972131][ T7021] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 205.979906][ T7021] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 206.154735][ T7021] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 206.170278][ T7021] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 206.177349][ T7021] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 206.694910][ T7021] bio_check_eod: 1015 callbacks suppressed [ 206.694933][ T7021] syz.1.317: attempt to access beyond end of device [ 206.694933][ T7021] loop1: rw=2049, sector=45096, nr_sectors = 8152 limit=40427 [ 206.720809][ T7021] syz.1.317: attempt to access beyond end of device [ 206.720809][ T7021] loop1: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 206.837910][ T7021] syz.1.317: attempt to access beyond end of device [ 206.837910][ T7021] loop1: rw=2049, sector=57344, nr_sectors = 16384 limit=40427 [ 206.863435][ T7021] syz.1.317: attempt to access beyond end of device [ 206.863435][ T7021] loop1: rw=2049, sector=73728, nr_sectors = 8 limit=40427 [ 206.877415][ T7021] syz.1.317: attempt to access beyond end of device [ 206.877415][ T7021] loop1: rw=2049, sector=73736, nr_sectors = 8 limit=40427 [ 206.905853][ T7021] syz.1.317: attempt to access beyond end of device [ 206.905853][ T7021] loop1: rw=2049, sector=73744, nr_sectors = 8 limit=40427 [ 206.919750][ T7021] syz.1.317: attempt to access beyond end of device [ 206.919750][ T7021] loop1: rw=2049, sector=73752, nr_sectors = 8 limit=40427 [ 206.933640][ T7021] syz.1.317: attempt to access beyond end of device [ 206.933640][ T7021] loop1: rw=2049, sector=73760, nr_sectors = 8 limit=40427 [ 206.947484][ T7021] syz.1.317: attempt to access beyond end of device [ 206.947484][ T7021] loop1: rw=2049, sector=73768, nr_sectors = 8 limit=40427 [ 206.961351][ T7021] syz.1.317: attempt to access beyond end of device [ 206.961351][ T7021] loop1: rw=2049, sector=73776, nr_sectors = 8 limit=40427 [ 207.220805][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 207.266282][ T7029] loop0: detected capacity change from 0 to 1024 [ 207.273922][ T7029] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.774209][ T7029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.027411][ T5783] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 208.261360][ T7038] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 208.666426][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.724853][ T5783] usb 4-1: Using ep0 maxpacket: 8 [ 208.755068][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 208.755126][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 208.755148][ T5620] Call Trace: [ 208.755159][ T5620] [ 208.755172][ T5620] dump_stack_lvl+0x100/0x190 [ 208.755220][ T5620] f2fs_stop_checkpoint+0x5e6/0xb30 [ 208.755275][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.755321][ T5620] ? errseq_set+0xe3/0x150 [ 208.755370][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.755424][ T5620] f2fs_write_end_bio+0xf53/0x1340 [ 208.755488][ T5620] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 208.755554][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.755610][ T5620] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 208.755668][ T5620] bio_endio+0x778/0x8e0 [ 208.755743][ T5620] submit_bio_noacct+0x64c/0x1ff0 [ 208.755808][ T5620] f2fs_submit_write_bio+0x133/0x330 [ 208.755864][ T5620] __submit_merged_bio+0x330/0x7b0 [ 208.755920][ T5620] ? rcu_is_watching+0x12/0xc0 [ 208.755976][ T5620] __submit_merged_write_cond+0x3fe/0x510 [ 208.756045][ T5620] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 208.756125][ T5620] ? __pfx___might_resched+0x10/0x10 [ 208.756161][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.756205][ T5620] ? folio_clear_dirty_for_io+0x178/0x960 [ 208.756268][ T5620] f2fs_sync_node_pages+0x13c6/0x1690 [ 208.756336][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.756389][ T5620] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 208.756442][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.756486][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.756531][ T5620] ? __lock_acquire+0xc91/0x1a40 [ 208.756615][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.756661][ T5620] ? down_write+0x146/0x1f0 [ 208.756700][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.756746][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.756797][ T5620] ? up_write+0x2e5/0x5c0 [ 208.756847][ T5620] block_operations+0x932/0xfc0 [ 208.756902][ T5620] ? __pfx_block_operations+0x10/0x10 [ 208.757009][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.757058][ T5620] ? ktime_get+0x22c/0x320 [ 208.757102][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.757147][ T5620] ? rcu_is_watching+0x12/0xc0 [ 208.757205][ T5620] f2fs_write_checkpoint+0x58b/0x53d0 [ 208.757249][ T5620] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.757303][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.757348][ T5620] ? _raw_spin_unlock_irq+0x2e/0x50 [ 208.757397][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.757442][ T5620] ? __wait_for_common+0x1f3/0x4c0 [ 208.757498][ T5620] ? __pfx_schedule_timeout+0x10/0x10 [ 208.757555][ T5620] ? __pfx___wait_for_common+0x10/0x10 [ 208.757615][ T5620] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 208.757658][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.757715][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.757760][ T5620] ? rcu_is_watching+0x12/0xc0 [ 208.757808][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.757852][ T5620] ? kthread_stop+0x280/0x630 [ 208.757911][ T5620] kill_f2fs_super+0x3f1/0x4a0 [ 208.757953][ T5620] ? __pfx_kill_f2fs_super+0x10/0x10 [ 208.758019][ T5620] ? lockdep_hardirqs_on+0x78/0x100 [ 208.758076][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.758129][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.758193][ T5620] deactivate_locked_super+0xc1/0x1b0 [ 208.758235][ T5620] deactivate_super+0xe7/0x110 [ 208.758278][ T5620] cleanup_mnt+0x21f/0x450 [ 208.758330][ T5620] task_work_run+0x150/0x240 [ 208.758391][ T5620] ? __pfx_task_work_run+0x10/0x10 [ 208.758457][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.758512][ T5620] exit_to_user_mode_loop+0x1d8/0x6f0 [ 208.758552][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 208.758597][ T5620] ? rcu_is_watching+0x12/0xc0 [ 208.758657][ T5620] do_syscall_64+0x666/0x870 [ 208.758726][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.758764][ T5620] RIP: 0033:0x7fe5eff9f097 [ 208.758794][ T5620] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 208.758835][ T5620] RSP: 002b:00007ffeaa5b8468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 208.758873][ T5620] RAX: 0000000000000000 RBX: 00007fe5f00332ca RCX: 00007fe5eff9f097 [ 208.758897][ T5620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeaa5b8520 [ 208.758919][ T5620] RBP: 00007ffeaa5b8520 R08: 00007ffeaa5b9520 R09: 00000000ffffffff [ 208.758943][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeaa5b95b0 [ 208.758968][ T5620] R13: 00007fe5f00332ca R14: 0000000000032edb R15: 00007ffeaa5b95f0 [ 208.759027][ T5620] [ 208.759040][ T5620] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 208.791965][ T7046] fuse: fd is not a fuse device [ 209.462342][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.492406][ T5783] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 209.501493][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.770965][ T5783] usb 4-1: config 0 descriptor?? [ 210.226792][ T5783] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 211.164466][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 211.185595][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 211.191746][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 211.200021][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 211.674718][ T5783] usb 4-1: USB disconnect, device number 7 [ 212.647959][ T5769] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 212.947479][ T5769] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.978147][ T5769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.041908][ T5769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.069994][ T5769] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.109203][ T5769] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.139337][ T5769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.168473][ T5769] usb 4-1: config 0 descriptor?? [ 213.896114][ T5769] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 214.656598][ T5769] usb 4-1: USB disconnect, device number 8 [ 214.845146][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.858940][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.867831][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.980778][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.450987][ T7090] netlink: 'syz.5.336': attribute type 10 has an invalid length. [ 215.724323][ T7090] netlink: 40 bytes leftover after parsing attributes in process `syz.5.336'. [ 216.053742][ T7091] loop0: detected capacity change from 0 to 4096 [ 216.097414][ T7090] bridge0: port 3(dummy0) entered blocking state [ 216.248109][ T7090] bridge0: port 3(dummy0) entered disabled state [ 216.309380][ T7090] dummy0: entered allmulticast mode [ 216.389299][ T7090] dummy0: entered promiscuous mode [ 216.395023][ T7090] bridge0: port 3(dummy0) entered blocking state [ 216.405276][ T7090] bridge0: port 3(dummy0) entered forwarding state [ 216.456670][ T7100] binder: 7095:7100 ioctl c0306201 200000000640 returned -22 [ 216.549856][ T7091] ntfs3(loop0): Failed to load $Extend (-22). [ 216.580118][ T7091] ntfs3(loop0): Failed to initialize $Extend. [ 216.699037][ T7106] loop4: detected capacity change from 0 to 256 [ 216.757649][ T7106] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.893818][ T7106] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.910819][ T7110] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 217.241988][ T7117] loop1: detected capacity change from 0 to 1024 [ 217.399597][ T5991] ntfs3(loop0): ino=5, mi_enum_attr [ 217.573910][ T7117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.350712][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.774178][ T7149] netlink: 76 bytes leftover after parsing attributes in process `syz.0.350'. [ 220.075407][ T5626] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 220.285036][ T5626] usb 5-1: Using ep0 maxpacket: 32 [ 220.700839][ T5626] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 220.858615][ T5626] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 220.867713][ T5626] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 221.751273][ T5626] usb 5-1: Product: syz [ 221.760075][ T5626] usb 5-1: Manufacturer: syz [ 221.764692][ T5626] usb 5-1: SerialNumber: syz [ 221.845100][ T5626] usb 5-1: config 0 descriptor?? [ 221.858681][ T7156] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 221.888038][ T5626] hub 5-1:0.0: bad descriptor, ignoring hub [ 221.894012][ T5626] hub 5-1:0.0: probe with driver hub failed with error -5 [ 223.184220][ T5825] usb 5-1: USB disconnect, device number 12 [ 223.573151][ T7221] loop1: detected capacity change from 0 to 2048 [ 223.690627][ T7221] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.439997][ T7225] siw: device registration error -23 [ 224.447025][ T7225] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 224.883824][ T7233] binder: 7228:7233 ioctl c0306201 200000000040 returned -14 [ 224.900028][ T7233] binder: 7228:7233 ioctl c0306201 200000000640 returned -22 [ 225.080351][ T5769] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 225.442301][ T5769] usb 7-1: Using ep0 maxpacket: 16 [ 225.528095][ T5769] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 225.554297][ T5769] usb 7-1: config 0 has no interface number 0 [ 225.560451][ T5769] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 225.603217][ T5626] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 225.737231][ T5769] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 225.875697][ T5769] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 225.884781][ T5769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.943545][ T5626] usb 1-1: Using ep0 maxpacket: 16 [ 225.969152][ T5769] usb 7-1: Product: syz [ 225.973343][ T5769] usb 7-1: Manufacturer: syz [ 225.977978][ T5769] usb 7-1: SerialNumber: syz [ 226.031836][ T5626] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 226.114134][ T5626] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 226.122386][ T5626] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 226.151899][ T5769] usb 7-1: config 0 descriptor?? [ 226.165134][ T7230] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 226.172398][ T7230] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 226.211764][ T5626] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 226.219971][ T5626] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 226.281445][ T5626] usb 1-1: config 0 has no interface number 0 [ 226.287588][ T5626] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 226.343402][ T7260] loop1: detected capacity change from 0 to 256 [ 226.361015][ T5626] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 226.383007][ T7260] exfat: Deprecated parameter 'namecase' [ 226.393685][ T5626] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.436704][ T5626] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.462459][ T7260] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 226.518652][ T7230] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 226.561387][ T5626] usb 1-1: config 0 interface 125 has no altsetting 0 [ 226.568242][ T5626] usb 1-1: config 0 interface 125 has no altsetting 2 [ 226.601777][ T7230] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 226.741994][ T5626] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 226.751104][ T5626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.311172][ T7267] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 227.503581][ T5626] usb 1-1: Product: syz [ 227.507817][ T5626] usb 1-1: Manufacturer: syz [ 227.512436][ T5626] usb 1-1: SerialNumber: syz [ 227.594743][ T5626] usb 1-1: config 0 descriptor?? [ 227.608141][ T5769] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 227.627239][ T5626] usb 1-1: selecting invalid altsetting 2 [ 227.818629][ T5769] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 227.851201][ T5769] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 227.919571][ T5769] asix 7-1:0.34: probe with driver asix failed with error -71 [ 228.021997][ T5769] usb 7-1: USB disconnect, device number 4 [ 228.779899][ T5626] get_1284_register timeout [ 228.790825][ C0] usb 1-1: async_complete: urb error -104 [ 228.796706][ C0] usb 1-1: async_complete: urb error -104 [ 228.811561][ T5769] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 229.477747][ T5626] usb 1-1: USB disconnect, device number 4 [ 229.770721][ T5769] usb 7-1: Using ep0 maxpacket: 32 [ 229.821753][ T7302] loop4: detected capacity change from 0 to 4096 [ 229.856086][ T5769] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 229.959134][ T7302] EXT4-fs (loop4): Test dummy encryption mode enabled [ 229.997761][ T5769] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 230.007075][ T5769] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 230.091492][ T5769] usb 7-1: Product: syz [ 230.095707][ T5769] usb 7-1: Manufacturer: syz [ 230.100304][ T5769] usb 7-1: SerialNumber: syz [ 230.168731][ T7302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.203206][ T5769] usb 7-1: config 0 descriptor?? [ 230.215632][ T7279] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 230.237870][ T5769] hub 7-1:0.0: bad descriptor, ignoring hub [ 230.292848][ T5769] hub 7-1:0.0: probe with driver hub failed with error -5 [ 230.374177][ T7302] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 230.664115][ T7318] input: syz0 as /devices/virtual/input/input7 [ 230.736450][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.023270][ T29] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 231.485506][ T7330] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 231.632824][ T5769] usb 7-1: USB disconnect, device number 5 [ 231.960594][ T7332] loop1: detected capacity change from 0 to 4096 [ 232.394498][ T7334] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.468524][ T7332] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 232.482624][ T7332] Remounting filesystem read-only [ 232.562900][ T7336] loop4: detected capacity change from 0 to 1024 [ 232.627756][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.774956][ T7336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.120565][ T7327] overlayfs: failed to clone upperpath [ 233.122692][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.205596][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 233.575290][ T7351] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 234.029667][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.038856][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.046990][ T29] usb 1-1: Product: syz [ 234.051278][ T29] usb 1-1: Manufacturer: syz [ 234.124747][ T29] usb 1-1: can't set config #1, error -71 [ 234.140013][ T29] usb 1-1: USB disconnect, device number 5 [ 234.243823][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 234.927156][ T24] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 234.940973][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.053777][ T7373] fuse: fd is not a fuse device [ 235.867028][ T24] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 236.042335][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.426086][ T24] usb 4-1: Product: syz [ 236.430274][ T24] usb 4-1: Manufacturer: syz [ 236.434858][ T24] usb 4-1: SerialNumber: syz [ 236.454285][ T24] usb 4-1: config 0 descriptor?? [ 236.539959][ T7380] siw: device registration error -23 [ 236.543958][ T24] usb 4-1: can't set config #0, error -71 [ 236.556335][ T7380] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 236.574096][ T24] usb 4-1: USB disconnect, device number 9 [ 237.224167][ T5769] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 237.761280][ T5769] usb 5-1: Using ep0 maxpacket: 8 [ 237.845104][ T5769] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 237.853661][ T5769] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.880797][ T5769] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.900012][ T7400] loop0: detected capacity change from 0 to 1024 [ 240.096224][ T5769] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.118263][ T5769] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.587072][ T7403] siw: device registration error -23 [ 240.594563][ T7403] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 240.875882][ T5769] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.973644][ T7400] EXT4-fs warning (device loop0): ext4_multi_mount_protect:392: Unable to create kmmpd thread for loop0. [ 241.006975][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.393481][ T5769] usb 5-1: can't set config #16, error -71 [ 242.123233][ T5769] usb 5-1: USB disconnect, device number 13 [ 243.413277][ T7438] binder: 7434:7438 ioctl c0306201 200000000640 returned -22 [ 244.050690][ T7458] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 247.144905][ T7479] loop6: detected capacity change from 0 to 128 [ 247.175071][ T7479] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 247.183264][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 247.317010][ T7479] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.525274][ T59] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.543232][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.757713][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 247.771202][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 247.780672][ T11] usb 1-1: Product: syz [ 247.957444][ T11] usb 1-1: Manufacturer: syz [ 247.962099][ T11] usb 1-1: SerialNumber: syz [ 247.977102][ T7492] fuse: fd is not a fuse device [ 249.819112][ T7497] loop1: detected capacity change from 0 to 1024 [ 250.168305][ T11] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 251.103370][ T7497] EXT4-fs warning (device loop1): ext4_multi_mount_protect:392: Unable to create kmmpd thread for loop1. [ 251.115024][ T11] usb 1-1: USB disconnect, device number 6 [ 251.132263][ T11] usblp0: removed [ 252.137693][ T7519] loop0: detected capacity change from 0 to 32768 [ 252.197022][ T7519] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 252.210112][ T7519] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 252.318920][ T7519] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 252.368243][ T5769] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 252.440213][ T5769] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 252.578276][ T7526] capability: warning: `syz.3.455' uses deprecated v2 capabilities in a way that may be insecure [ 252.618309][ T7526] GUP no longer grows the stack in syz.3.455 (7526): 200000004000-20000000a000 (200000002000) [ 252.703225][ T7526] CPU: 0 UID: 0 PID: 7526 Comm: syz.3.455 Not tainted syzkaller #0 PREEMPT(full) [ 252.703274][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 252.703296][ T7526] Call Trace: [ 252.703307][ T7526] [ 252.703320][ T7526] dump_stack_lvl+0x100/0x190 [ 252.703367][ T7526] gup_vma_lookup.cold+0x83/0x96 [ 252.703431][ T7526] __get_user_pages+0x241/0x32a0 [ 252.703499][ T7526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.703549][ T7526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.703593][ T7526] ? find_held_lock+0x2b/0x80 [ 252.703644][ T7526] ? mtree_load+0x311/0xa90 [ 252.703680][ T7526] ? __pfx___get_user_pages+0x10/0x10 [ 252.703743][ T7526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.703796][ T7526] get_user_pages_remote+0x3d2/0xb10 [ 252.703857][ T7526] ? mas_root_expand+0x6f0/0x750 [ 252.703898][ T7526] ? __pfx_get_user_pages_remote+0x10/0x10 [ 252.703968][ T7526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.704021][ T7526] __access_remote_vm+0x3bb/0x890 [ 252.704087][ T7526] ? __pfx___access_remote_vm+0x10/0x10 [ 252.704158][ T7526] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 252.704199][ T7526] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 252.704248][ T7526] proc_pid_cmdline_read+0x552/0x9a0 [ 252.704294][ T7526] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 252.704339][ T7526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.704384][ T7526] ? rw_verify_area+0xce/0x6d0 [ 252.704426][ T7526] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 252.704466][ T7526] vfs_readv+0x5d8/0x8d0 [ 252.704515][ T7526] ? __pfx_vfs_readv+0x10/0x10 [ 252.704565][ T7526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.704631][ T7526] ? __fget_files+0x21f/0x3d0 [ 252.704692][ T7526] ? do_preadv+0x1ac/0x270 [ 252.704725][ T7526] do_preadv+0x1ac/0x270 [ 252.704765][ T7526] ? __pfx_do_preadv+0x10/0x10 [ 252.704805][ T7526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 252.704858][ T7526] do_syscall_64+0x115/0x870 [ 252.704923][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.704961][ T7526] RIP: 0033:0x7fb848b9de59 [ 252.704990][ T7526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.705025][ T7526] RSP: 002b:00007fb849a0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 252.705059][ T7526] RAX: ffffffffffffffda RBX: 00007fb848e25fa0 RCX: 00007fb848b9de59 [ 252.705084][ T7526] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 252.705106][ T7526] RBP: 00007fb848c33e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 252.705129][ T7526] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 252.705151][ T7526] R13: 00007fb848e26038 R14: 00007fb848e25fa0 R15: 00007ffe252f8bf8 [ 252.705200][ T7526] [ 252.762111][ T7532] netlink: 'syz.4.456': attribute type 1 has an invalid length. [ 253.099549][ T7532] bond1: entered promiscuous mode [ 253.105040][ T7532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.436334][ T5769] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 996ms [ 253.446871][ T7533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.447692][ T5769] gfs2: fsid=syz:syz.0: jid=0: Done [ 253.454080][ T7533] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 253.460193][ T7519] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 253.468618][ T7533] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 253.502647][ T7533] bond1: (slave vti0): making interface the new active one [ 253.509908][ T7533] vti0: entered promiscuous mode [ 253.936079][ T7533] bond1: (slave vti0): Enslaving as an active interface with an up link [ 254.603641][ T7554] netlink: 'syz.4.460': attribute type 10 has an invalid length. [ 254.611411][ T7554] netlink: 40 bytes leftover after parsing attributes in process `syz.4.460'. [ 255.139411][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.293108][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.909340][ T7569] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 260.882135][ T7603] loop1: detected capacity change from 0 to 128 [ 261.029232][ T7603] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.140597][ T7603] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.152831][ T7614] netlink: 'syz.6.476': attribute type 10 has an invalid length. [ 261.163192][ T7614] netlink: 40 bytes leftover after parsing attributes in process `syz.6.476'. [ 261.173340][ T7614] bridge0: port 3(dummy0) entered blocking state [ 261.180448][ T7614] bridge0: port 3(dummy0) entered disabled state [ 261.187007][ T7614] dummy0: entered allmulticast mode [ 261.196831][ T7614] dummy0: entered promiscuous mode [ 261.202783][ T7614] bridge0: port 3(dummy0) entered blocking state [ 261.236959][ T7614] bridge0: port 3(dummy0) entered forwarding state [ 261.557031][ T7603] syz.1.474 (pid 7603) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 262.632926][ T7603] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 262.648395][ T7632] vcan0: tx address claim with different name [ 262.852197][ T5620] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.097569][ T7636] loop6: detected capacity change from 0 to 8192 [ 263.809271][ T7636] loop6: p1 p2 p4 [ 263.957247][ T7636] loop6: p1 start 3959422976 is beyond EOD, truncated [ 263.964245][ T7636] loop6: p2 size 384768 extends beyond EOD, truncated [ 264.593542][ T7636] loop6: p4 size 1073741824 extends beyond EOD, truncated [ 265.998776][ T7665] netlink: 'syz.5.493': attribute type 10 has an invalid length. [ 266.006779][ T7665] netlink: 40 bytes leftover after parsing attributes in process `syz.5.493'. [ 266.097020][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 266.774318][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 267.453863][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.464806][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.474590][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 267.483652][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.759003][ T24] usb 2-1: config 0 descriptor?? [ 267.916847][ T7676] loop3: detected capacity change from 0 to 512 [ 267.927351][ T7676] EXT4-fs (loop3): Test dummy encryption mode enabled [ 267.937759][ T24] usb 2-1: can't set config #0, error -71 [ 267.950780][ T24] usb 2-1: USB disconnect, device number 5 [ 267.984376][ T7676] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.495: inode has both inline data and extents flags [ 267.997657][ T7676] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 268.022479][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 268.038487][ C1] EXT4-fs (loop3): initial error at time 1783394523: ext4_orphan_get:1399: inode 15 [ 268.047909][ C1] EXT4-fs (loop3): last error at time 1783394523: ext4_orphan_get:1399: inode 15 [ 268.081944][ T7679] fuse: fd is not a fuse device [ 268.083511][ T7678] netlink: 256 bytes leftover after parsing attributes in process `syz.4.498'. [ 268.097367][ T7678] netlink: 56 bytes leftover after parsing attributes in process `syz.4.498'. [ 268.107542][ T7676] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.495: couldn't read orphan inode 15 (err -117) [ 268.107813][ T7676] loop3: lost filesystem error report for type 5 error -117 [ 268.149343][ T7676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.198561][ T5638] udevd[5638]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 268.337049][ T7676] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 268.345942][ T5639] udevd[5639]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 270.498609][ T5623] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.748302][ T7716] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 272.756090][ T7716] netlink: 40 bytes leftover after parsing attributes in process `syz.3.506'. [ 272.849356][ T7716] bridge0: port 3(dummy0) entered blocking state [ 272.855871][ T7716] bridge0: port 3(dummy0) entered disabled state [ 272.934248][ T7724] fuse: Bad value for 'fd' [ 272.946270][ T7716] dummy0: entered allmulticast mode [ 273.128294][ T7716] dummy0: entered promiscuous mode [ 273.140760][ T7716] bridge0: port 3(dummy0) entered blocking state [ 273.147310][ T7716] bridge0: port 3(dummy0) entered forwarding state [ 273.374514][ T7716] binder: 7715:7716 ioctl c00c6211 0 returned -14 [ 277.416565][ T7778] netlink: 'syz.5.532': attribute type 10 has an invalid length. [ 277.424334][ T7778] netlink: 40 bytes leftover after parsing attributes in process `syz.5.532'. [ 277.633756][ T7780] loop6: detected capacity change from 0 to 4096 [ 277.761625][ T4934] Bluetooth: hci5: command 0x0406 tx timeout [ 277.952755][ T7780] EXT4-fs (loop6): Test dummy encryption mode enabled [ 278.097710][ T7780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.738201][ T6433] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.807665][ T7808] FAULT_FLAG_ALLOW_RETRY missing 1 [ 280.813044][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.1.543 Not tainted syzkaller #0 PREEMPT(full) [ 280.813090][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 280.813110][ T7808] Call Trace: [ 280.813121][ T7808] [ 280.813133][ T7808] dump_stack_lvl+0x100/0x190 [ 280.813175][ T7808] handle_userfault.cold+0x54/0x65 [ 280.813224][ T7808] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.813265][ T7808] ? do_raw_spin_unlock+0x145/0x1e0 [ 280.813309][ T7808] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.813350][ T7808] ? _raw_spin_unlock+0x28/0x50 [ 280.813395][ T7808] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.813441][ T7808] ? __free_frozen_pages+0x751/0x1090 [ 280.813478][ T7808] ? __pfx_handle_userfault+0x10/0x10 [ 280.813535][ T7808] ? rcu_read_unlock+0x2d/0xb0 [ 280.813576][ T7808] ? rcu_read_unlock+0x2d/0xb0 [ 280.813615][ T7808] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.813666][ T7808] do_anonymous_page+0x1a56/0x2080 [ 280.813719][ T7808] __handle_mm_fault+0x1d2c/0x2a00 [ 280.813765][ T7808] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.813806][ T7808] ? mt_find+0x45e/0x8e0 [ 280.813843][ T7808] ? __pfx___handle_mm_fault+0x10/0x10 [ 280.813880][ T7808] ? __pfx_mt_find+0x10/0x10 [ 280.813939][ T7808] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.813990][ T7808] handle_mm_fault+0x37b/0xa30 [ 280.814038][ T7808] __get_user_pages+0x1178/0x32a0 [ 280.814110][ T7808] ? __pfx___get_user_pages+0x10/0x10 [ 280.814169][ T7808] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.814217][ T7808] populate_vma_page_range+0x267/0x3f0 [ 280.814254][ T7808] ? __pfx_populate_vma_page_range+0x10/0x10 [ 280.814292][ T7808] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.814333][ T7808] ? vma_set_page_prot+0xb1/0x120 [ 280.814391][ T7808] mprotect_fixup+0x955/0xe30 [ 280.814444][ T7808] ? __pfx_mprotect_fixup+0x10/0x10 [ 280.814511][ T7808] ? __pfx_mas_prev+0x10/0x10 [ 280.814548][ T7808] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.814599][ T7808] do_mprotect_pkey+0xa4b/0xef0 [ 280.814653][ T7808] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 280.814710][ T7808] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.814784][ T7808] __x64_sys_mprotect+0x78/0xc0 [ 280.814822][ T7808] ? lockdep_hardirqs_on+0x78/0x100 [ 280.814875][ T7808] do_syscall_64+0x115/0x870 [ 280.814934][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.814970][ T7808] RIP: 0033:0x7fe5eff9de59 [ 280.814996][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.815027][ T7808] RSP: 002b:00007fe5f0e97028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 280.815058][ T7808] RAX: ffffffffffffffda RBX: 00007fe5f0225fa0 RCX: 00007fe5eff9de59 [ 280.815079][ T7808] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 280.815100][ T7808] RBP: 00007fe5f0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 280.815120][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.815139][ T7808] R13: 00007fe5f0226038 R14: 00007fe5f0225fa0 R15: 00007ffeaa5b91f8 [ 280.815183][ T7808] [ 281.364862][ T4934] Bluetooth: hci3: link tx timeout [ 281.567862][ T4934] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 282.637324][ T7814] netlink: 'syz.3.546': attribute type 10 has an invalid length. [ 282.645103][ T7814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.546'. [ 283.364512][ T7825] binder: 7813:7825 ioctl c00c6211 0 returned -14 [ 283.780795][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 286.100701][ T29] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 286.243986][ T7864] siw: device registration error -23 [ 286.334344][ T7864] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 286.874107][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 287.513897][ T29] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 287.522037][ T29] usb 1-1: config 0 has no interface number 0 [ 288.444107][ T29] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 288.453231][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.461237][ T29] usb 1-1: Product: syz [ 288.465545][ T29] usb 1-1: Manufacturer: syz [ 288.470155][ T29] usb 1-1: SerialNumber: syz [ 288.703089][ T29] usb 1-1: config 0 descriptor?? [ 288.794209][ T7897] loop3: detected capacity change from 0 to 128 [ 288.808631][ T29] usb 1-1: can't set config #0, error -71 [ 288.908042][ T29] usb 1-1: USB disconnect, device number 7 [ 289.254635][ T7897] bio_check_eod: 1005 callbacks suppressed [ 289.254663][ T7897] syz.3.567: attempt to access beyond end of device [ 289.254663][ T7897] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 289.407118][ T7912] syz.3.567: attempt to access beyond end of device [ 289.407118][ T7912] loop3: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 289.421092][ T7912] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 289.719180][ T7895] syz.3.567: attempt to access beyond end of device [ 289.719180][ T7895] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 289.732627][ T7895] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 289.773826][ T7928] siw: device registration error -23 [ 289.821245][ T7928] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 290.088479][ T7935] loop1: detected capacity change from 0 to 1024 [ 290.251975][ T7935] EXT4-fs: inline encryption not supported [ 290.329160][ T7935] EXT4-fs: inline encryption not supported [ 290.336243][ T7935] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.424631][ T7939] binder: 7938:7939 ioctl c0306201 200000000040 returned -14 [ 290.533310][ T7935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.644186][ T7951] loop0: detected capacity change from 0 to 256 [ 291.119719][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.133948][ T7951] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 293.019760][ T7984] netlink: 'syz.3.590': attribute type 4 has an invalid length. [ 293.166609][ T7991] netlink: 'syz.3.590': attribute type 4 has an invalid length. [ 293.211175][ T7992] loop6: detected capacity change from 0 to 128 [ 293.276278][ T5825] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 293.511844][ T7992] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 293.525463][ T7992] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.635159][ T6433] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.866715][ T8008] loop6: detected capacity change from 0 to 256 [ 293.978330][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 294.326977][ T8008] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 294.432160][ T8008] FAT-fs (loop6): Filesystem has been set read-only [ 295.162076][ T5825] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 295.170339][ T5825] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.180102][ T5825] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.189867][ T5825] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.199812][ T5825] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.397713][ T5825] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.406804][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.164395][ T5825] usb 1-1: usb_control_msg returned -71 [ 296.170057][ T5825] usbtmc 1-1:16.0: can't read capabilities [ 296.340758][ T8035] loop3: detected capacity change from 0 to 2048 [ 296.349139][ T5825] usb 1-1: USB disconnect, device number 8 [ 296.868612][ T8035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.799041][ T8035] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 298.234248][ T8070] binder: 8067:8070 ioctl c0306201 2000000001c0 returned -14 [ 298.463668][ T48] ------------[ cut here ]------------ [ 298.469626][ T48] kernel BUG at fs/ext4/inode.c:2826! [ 298.475021][ T48] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 298.481463][ T48] CPU: 1 UID: 0 PID: 48 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.492351][ T48] Tainted: [L]=SOFTLOCKUP [ 298.496679][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 298.506743][ T48] Workqueue: writeback wb_workfn (flush-7:3) [ 298.512769][ T48] RIP: 0010:ext4_do_writepages+0x2ddf/0x3ed0 [ 298.518782][ T48] Code: a5 10 ff ff ff 48 c1 ea 03 80 3c 02 00 0f 84 fa e7 ff ff 48 8b bd 28 ff ff ff e8 fc 5c a3 ff e9 e9 e7 ff ff e8 52 dd 33 ff 90 <0f> 0b e8 4a dd 33 ff 89 9d f8 fe ff ff 44 0f b6 ad a3 fe ff ff e9 [ 298.538408][ T48] RSP: 0018:ffffc90000b97260 EFLAGS: 00010293 [ 298.544477][ T48] RAX: 0000000000000000 RBX: ffff8880521054b0 RCX: ffffffff82d5b551 [ 298.552442][ T48] RDX: ffff88801c77dd00 RSI: ffffffff82d5d1ce RDI: ffff88801c77dd00 [ 298.560399][ T48] RBP: ffffc90000b97430 R08: 0000000000000007 R09: 0000000000000000 [ 298.568380][ T48] R10: 0000004000000000 R11: 0000000000000080 R12: 0000000000000001 [ 298.576347][ T48] R13: ffff8880521056a0 R14: 1ffff92000172e6c R15: ffffc90000b97480 [ 298.584326][ T48] FS: 0000000000000000(0000) GS:ffff888123eee000(0000) knlGS:0000000000000000 [ 298.593261][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.599835][ T48] CR2: 00007fe5f0d556b8 CR3: 0000000059a7c000 CR4: 0000000000350ef0 [ 298.607795][ T48] Call Trace: [ 298.611057][ T48] [ 298.613970][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.619610][ T48] ? look_up_lock_class+0x64/0x120 [ 298.624729][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.630374][ T48] ? register_lock_class+0x40/0x560 [ 298.635594][ T48] ? __lock_acquire+0x49f/0x1a40 [ 298.640532][ T48] ? __pfx_ext4_do_writepages+0x10/0x10 [ 298.646080][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.651739][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.657377][ T48] ? ext4_writepages+0x347/0x750 [ 298.662322][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.667977][ T48] ext4_writepages+0x347/0x750 [ 298.672763][ T48] ? __pfx_ext4_writepages+0x10/0x10 [ 298.678075][ T48] ? do_writepages+0x4b5/0x600 [ 298.682873][ T48] ? do_writepages+0x4b5/0x600 [ 298.687667][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.693327][ T48] ? __pfx_ext4_writepages+0x10/0x10 [ 298.698629][ T48] do_writepages+0x278/0x600 [ 298.703242][ T48] ? __pfx_do_writepages+0x10/0x10 [ 298.708373][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.714025][ T48] __writeback_single_inode+0x164/0x1300 [ 298.719666][ T48] ? find_held_lock+0x2b/0x80 [ 298.724390][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.730040][ T48] ? __pfx___writeback_single_inode+0x10/0x10 [ 298.736114][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.741757][ T48] ? do_raw_spin_unlock+0x145/0x1e0 [ 298.746965][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.752614][ T48] writeback_sb_inodes+0x766/0x1c50 [ 298.757843][ T48] ? do_raw_spin_unlock+0x145/0x1e0 [ 298.763148][ T48] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 298.768793][ T48] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 298.774620][ T48] ? debug_object_activate+0x343/0x4b0 [ 298.780090][ T48] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.785500][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.791144][ T48] ? rcu_is_watching+0x12/0xc0 [ 298.795924][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.801570][ T48] ? queue_io+0x287/0x530 [ 298.805925][ T48] wb_writeback+0x1c0/0xb50 [ 298.810444][ T48] ? __pfx_wb_writeback+0x10/0x10 [ 298.815480][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.821141][ T48] ? mark_held_locks+0x40/0x70 [ 298.825962][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.831188][ T48] wb_workfn+0x143/0xc80 [ 298.835448][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.841096][ T48] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 298.846939][ T48] ? __pfx_wb_workfn+0x10/0x10 [ 298.851729][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.857382][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.863030][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.868696][ T48] ? rcu_is_watching+0x12/0xc0 [ 298.873512][ T48] process_one_work+0xa23/0x1940 [ 298.878505][ T48] ? __pfx_process_one_work+0x10/0x10 [ 298.883947][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.889605][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.895260][ T48] worker_thread+0x5ef/0xe50 [ 298.899882][ T48] ? kthread+0x13a/0x450 [ 298.904140][ T48] ? __pfx_worker_thread+0x10/0x10 [ 298.909301][ T48] kthread+0x370/0x450 [ 298.913388][ T48] ? __pfx_kthread+0x10/0x10 [ 298.918004][ T48] ret_from_fork+0x72b/0xd50 [ 298.922610][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 298.927739][ T48] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.933397][ T48] ? __switch_to+0x800/0x10f0 [ 298.938114][ T48] ? __switch_to_asm+0x39/0x70 [ 298.942918][ T48] ? __pfx_kthread+0x10/0x10 [ 298.947533][ T48] ret_from_fork_asm+0x1a/0x30 [ 298.952327][ T48] [ 298.955339][ T48] Modules linked in: [ 299.001261][ T48] ---[ end trace 0000000000000000 ]--- [ 299.064980][ T48] RIP: 0010:ext4_do_writepages+0x2ddf/0x3ed0 [ 299.071195][ T48] Code: a5 10 ff ff ff 48 c1 ea 03 80 3c 02 00 0f 84 fa e7 ff ff 48 8b bd 28 ff ff ff e8 fc 5c a3 ff e9 e9 e7 ff ff e8 52 dd 33 ff 90 <0f> 0b e8 4a dd 33 ff 89 9d f8 fe ff ff 44 0f b6 ad a3 fe ff ff e9 [ 299.125370][ T48] RSP: 0018:ffffc90000b97260 EFLAGS: 00010293 [ 299.131798][ T48] RAX: 0000000000000000 RBX: ffff8880521054b0 RCX: ffffffff82d5b551 [ 299.139799][ T48] RDX: ffff88801c77dd00 RSI: ffffffff82d5d1ce RDI: ffff88801c77dd00 [ 299.147797][ T48] RBP: ffffc90000b97430 R08: 0000000000000007 R09: 0000000000000000 [ 299.162207][ T48] R10: 0000004000000000 R11: 0000000000000080 R12: 0000000000000001 [ 299.170242][ T48] R13: ffff8880521056a0 R14: 1ffff92000172e6c R15: ffffc90000b97480 [ 299.178242][ T48] FS: 0000000000000000(0000) GS:ffff888123eee000(0000) knlGS:0000000000000000 [ 299.187203][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.193808][ T48] CR2: 00007f62bd95bb4c CR3: 000000000e992000 CR4: 0000000000350ef0 [ 299.201797][ T48] Kernel panic - not syncing: Fatal exception [ 299.208114][ T48] Kernel Offset: disabled [ 299.212435][ T48] Rebooting in 86400 seconds..