last executing test programs: 3m14.498228826s ago: executing program 2 (id=3): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x2004000, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x35, 0x39, 0x32, 0x6b, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1, 0xffb0}) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x400c010) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) syz_usb_connect(0x3, 0x9d3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0xc400941b, &(0x7f0000000000)={0x1, 0x50fffe}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) 3m9.289522548s ago: executing program 2 (id=15): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x2, 0x7e5104, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0xd0}}, 0x50) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3m7.279829226s ago: executing program 2 (id=18): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x4, 0x9dc7, 0x0, 0x0, 0xf}) 3m6.778874197s ago: executing program 32 (id=18): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x4, 0x9dc7, 0x0, 0x0, 0xf}) 1m1.538887918s ago: executing program 1 (id=456): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x3c}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.319884506s ago: executing program 1 (id=462): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb4, 0x0, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x2b}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe8) socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) getuid() r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) 57.610147034s ago: executing program 1 (id=464): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0xf3, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8000001f) syz_io_uring_submit(r7, r8, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x1733, 0x6323, 0x20, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 54.059508798s ago: executing program 1 (id=480): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141) 53.48069877s ago: executing program 1 (id=482): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000061, 0x0, 0xffffffffffffff7f) 50.84387248s ago: executing program 1 (id=485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 48.816715669s ago: executing program 33 (id=485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 17.672669616s ago: executing program 5 (id=569): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) madvise(&(0x7f0000d8b000/0x4000)=nil, 0x4000, 0xc) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)={0x2d8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x28c, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x234, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1ec, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 14.323941827s ago: executing program 3 (id=573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x4004040) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x5, 0x62c, &(0x7f0000000c80)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 13.200491125s ago: executing program 0 (id=574): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x205b) r5 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000008c40)="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", 0x2000, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0xfffffffffffffff5, 0x0, {0x6, 0x0, 0x9, 0x0, 0x0, 0x2, {0xfffffffffffffffc, 0x0, 0x0, 0x100000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, r4, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) r6 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r6, 0x0, 0x0, 0x2, 0x0, 0x0) r7 = socket(0x11, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288", 0x11}], 0x1}}], 0x1, 0x24044015) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, 0x0, 0x118) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r10, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x1}, {0x77, 0x6}, {0x5, 0x3}, {0x7a, 0x2}], "7ecd4163b8fccf09"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB], 0x0) 13.20006803s ago: executing program 3 (id=575): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cf, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 13.139505561s ago: executing program 5 (id=576): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = syz_io_uring_setup(0x28cb, &(0x7f0000000200)={0x0, 0xd365, 0x10100, 0x3, 0x80000000}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x225e, 0x2, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x4) 12.976882081s ago: executing program 5 (id=578): syz_80211_inject_frame(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) close(0x3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000300)={[{@mblk_io_submit}, {@minixdf}, {@norecovery}, {@nodelalloc}, {@dax_inode}]}, 0x8, 0x5fb, &(0x7f0000000ac0)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEuBOCP26eKi0EKZTQGi2SWBK8mBgvHkw8eRD/CyXx6sGrBy+eDAkxhoMYImtmO1Om293SX7tbup9PMnSeme48z5R++5199nlmAuhYI9k/acT+iLiaRAyV9nVHvnNk6fvu/3njXLYkUam8/UcSNz5JFsvHSvKvg/mL/xmK5Oc0Yl/X6nrnFq5fmpyZmb6Wl8fmL18dm1u4fvji5ckL0xemr0y8OnHi+LHjJ8aPbOn8ylWfvvX+h0OfnXn3268fJuPf/XomiZPxKP+G7LxqX9u3pZqzn9lIVJY8KG/Pfq4ntnjsneKvoeL35LGkdgM7Vpr/Pv4vIp6Noegq/W8OxadvtrVxQFNVkihyFNBxkk3Ff//2NwRoseI6oHhvX+998Gppk69KgFa4d2qpA2Ap9nsiooj/7qW+weiPbOvA/WRFP08SEVvrmVuS1fHTj2duZUs06IcDmmPxZtHLXZv/k2psDkd/tTRwP10R/2lpyba/tcn6R2rK4h9aZ/FmRDyX5//e2FD8j5Ti/71N1i/+AQAAAAAAYPvcORURr9Qb/5cuj//prTP+ZzAiTm5D/U/+/C+9m68k21AdUHLvVMTrdcf/Lo/xHe7KS/+tjgfoSc5fnJk+ks8ZPBQ9fVl5vOa45RHChz/f91Wj+svj/7Ilq78YC5gf6W53zUTcqcn5ya2eNxBx72bE89XxvwfyLSvH/2T5P6mT/7P4vrrOOva9dPtso31Pjn+gWSrfRBysm/8fX24na9+fY6x6PTBWXBWs9sLHX3zfqH7xD+2T5f+BteO/Lynfr2duY8fvjYijC92VRvs3e/3fm7zTVRw/89Hk/Py18Yje5PTq7RMbazPsVkU8FPGSxf+hF9fu/1u+/i/F4Z6IWFxnnc88Gvyt0T75H9oni/+ptfP/8Mr8v/GVidvDPzSq/+y68v+xak4/lG/R/wdlq+/Hsd4AbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOApl0bEfyJJR5fX03R0NGIwIv4fA+nM7Nz8y+dnP7gyle2rPv8/LZ70O7RUTorn/w+XyhM15aMRsTcivuzaUy2PnpudmWr3yQMAAAAAAAAAAAAAAAAAAMAOMVid81/pq53/n/m9q92tA5quO/8q3qHzdG/6lZW+bW0I0HKbj3/gabf++O9pajuA1msc/w8eVqpa2hyghVz/Q+faZPz7uAB2AfkfOtU6+/T6m90OoB3kfwAAAAAA2FX2HrjzSxIRi6/tqS6Z3nyfwf6wu6XtbgDQNsbwQufqnm13C4B28R4fSJbX/q472b/x6P+kOQ0CAAAAAAAAAAAAAFY5uN/8f+hUa8//N7YfdrM15v/XC363C4BdpPGjP+R+2O28xweelO3N/wcAAAAAAAAAAACAHaD/+qXJmZnpa3MLT9/KGzujGRtbWZzcEc3Y1pVHzTlyT0TsjBNs9UpxC442NqPNf5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl/wYAAP//SlcnIw==") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 12.154260602s ago: executing program 5 (id=579): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1eb482, 0x0) writev(r0, &(0x7f0000000080), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0x4e, &(0x7f00000003c0)=""/78, 0x3236054959490c78, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1616f, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c40), 0x10, 0x2c}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.073084268s ago: executing program 3 (id=580): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r3, 0x1) accept4(r3, 0x0, 0x0, 0x80800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000), 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000002fc0)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 12.020859036s ago: executing program 0 (id=582): mmap(&(0x7f0000220000/0x3000)=nil, 0x3000, 0x300000e, 0x80010, 0xffffffffffffffff, 0x553f7000) mlock2(&(0x7f000027a000/0x4000)=nil, 0x4000, 0x1) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 9.899499388s ago: executing program 0 (id=583): keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001d000)=""/102400, 0x19000) syz_mount_image$fuse(0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_page_free_batched\x00', r4}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) socket(0x27, 0x3, 0x1bf) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) 8.274144123s ago: executing program 0 (id=584): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setreuid(0x0, 0xee01) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f00000001c0)='mnt/encrypted_dir\x00') syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) socket(0x11, 0xa, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 8.142651231s ago: executing program 3 (id=585): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) madvise(&(0x7f0000d8b000/0x4000)=nil, 0x4000, 0xc) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)={0x2d8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x28c, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x234, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1ec, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 6.263594808s ago: executing program 5 (id=586): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x31, 0xf, "051ade0e69810c7c0baccf156ba7f4"}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x2}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x20, 0x7, 0x3, "03d230"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.746281736s ago: executing program 6 (id=486): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000004dc0)={0x2020}, 0x2020) 5.637970513s ago: executing program 4 (id=587): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = syz_io_uring_setup(0x28cb, &(0x7f0000000200)={0x0, 0xd365, 0x10100, 0x3, 0x80000000}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x225e, 0x2, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x4) 5.623666164s ago: executing program 6 (id=588): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) close(r1) 5.557335635s ago: executing program 4 (id=589): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cf, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 4.627945711s ago: executing program 6 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@barrier_val}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$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") 4.543644512s ago: executing program 3 (id=591): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x1000) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) 4.357490821s ago: executing program 4 (id=592): r0 = io_uring_setup(0x6e1e, &(0x7f0000000200)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x83}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], &(0x7f0000001540)}, 0x20) 4.171107717s ago: executing program 4 (id=593): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r4}, 0x18) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) 4.133171319s ago: executing program 6 (id=594): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040), 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r3, 0x1) accept4(r3, 0x0, 0x0, 0x80800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000), 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000002fc0)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3.651835881s ago: executing program 0 (id=595): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 3.59224101s ago: executing program 3 (id=596): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x147141) r1 = dup(r0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x703bc0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000640)=0x1) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000002d70cf314f7ba2000000000006a3cfe446098347fce35a491045c34abeea19dde3a370e920cd3f0dc21afe6d2fde41caf778306dc5ad1254073c5bc07017b016b075faf38a47ceae869d16d5cb10ec68111bed785644daa2aa208301597a468"], 0x24) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000000)) 3.080977594s ago: executing program 5 (id=597): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nojournal_checksum}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 2.844191087s ago: executing program 4 (id=598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) listen(r0, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x64, 0x6, 0x4d4, 0x320, 0x0, 0xc8, 0x320, 0x320, 0x40c, 0x40c, 0x40c, 0x40c, 0x40c, 0x6, 0x0, {[{{@ipv6={@remote, @local, [], [], 'veth1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x3a010000}}, @HL={0x24}}, {{@ipv6={@private1, @loopback, [], [0xffffff00], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x258}}, {{@ipv6={@private0, @remote, [0x0, 0xff], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0xc}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x530) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7980, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x1b19, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f0000000080)={@hyper}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r4, 0xffffffffffffffff, 0x0) 1.314861716s ago: executing program 0 (id=599): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 13.225572ms ago: executing program 4 (id=600): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0xffffffffffffff7b, 0x5}, 0x51, [0x7, 0x33d, 0xe, 0x2, 0x9, 0x8, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x800000000049, 0x1, 0xc]}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 0s ago: executing program 6 (id=601): syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ive [ 81.174589][ T5834] team0: Port device team_slave_0 added [ 81.214756][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.221840][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.248244][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.261388][ T5834] team0: Port device team_slave_1 added [ 81.268079][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.275017][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.301399][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.318521][ T5824] hsr_slave_0: entered promiscuous mode [ 81.325029][ T5824] hsr_slave_1: entered promiscuous mode [ 81.360573][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.367594][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.394397][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.412420][ T5823] hsr_slave_0: entered promiscuous mode [ 81.418847][ T5823] hsr_slave_1: entered promiscuous mode [ 81.424960][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 81.431217][ T5823] Cannot create hsr debugfs directory [ 81.460337][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.467744][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.493955][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.510333][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.517801][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.544314][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.659153][ T5833] hsr_slave_0: entered promiscuous mode [ 81.665524][ T5833] hsr_slave_1: entered promiscuous mode [ 81.671890][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 81.677721][ T5833] Cannot create hsr debugfs directory [ 81.782551][ T5832] hsr_slave_0: entered promiscuous mode [ 81.790100][ T5832] hsr_slave_1: entered promiscuous mode [ 81.796788][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 81.802535][ T5832] Cannot create hsr debugfs directory [ 81.897346][ T5834] hsr_slave_0: entered promiscuous mode [ 81.904172][ T5834] hsr_slave_1: entered promiscuous mode [ 81.911325][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 81.917218][ T5834] Cannot create hsr debugfs directory [ 82.452156][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.469724][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.482019][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.508854][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.587815][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.602298][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.630525][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.641505][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.723781][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.751681][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.769879][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.797350][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.877587][ T5828] Bluetooth: hci0: command tx timeout [ 82.921080][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.934963][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.945777][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.957315][ T5828] Bluetooth: hci1: command tx timeout [ 82.966897][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.037303][ T5828] Bluetooth: hci4: command tx timeout [ 83.037569][ T52] Bluetooth: hci2: command tx timeout [ 83.122824][ T52] Bluetooth: hci3: command tx timeout [ 83.136076][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.169278][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.185726][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.200352][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.211016][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.239104][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.272556][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.279819][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.313767][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.320972][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.352431][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.421406][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.460129][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.499002][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.506175][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.534841][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.550893][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.558054][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.584201][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.591356][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.632166][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.639684][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.656084][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.765304][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.780600][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.835500][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.842768][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.870226][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.894978][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.902215][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.952110][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.959344][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.969006][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.976108][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.000307][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.288588][ T5824] veth0_vlan: entered promiscuous mode [ 84.332476][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.351102][ T5824] veth1_vlan: entered promiscuous mode [ 84.364514][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.523064][ T5834] veth0_vlan: entered promiscuous mode [ 84.583102][ T5834] veth1_vlan: entered promiscuous mode [ 84.603318][ T5824] veth0_macvtap: entered promiscuous mode [ 84.660633][ T5824] veth1_macvtap: entered promiscuous mode [ 84.689214][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.708903][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.759817][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.775373][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.819477][ T3469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.829790][ T3469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.843275][ T5834] veth0_macvtap: entered promiscuous mode [ 84.853498][ T3469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.862454][ T3469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.879226][ T5834] veth1_macvtap: entered promiscuous mode [ 84.958405][ T52] Bluetooth: hci0: command tx timeout [ 84.980038][ T5833] veth0_vlan: entered promiscuous mode [ 85.018213][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.029060][ T5823] veth0_vlan: entered promiscuous mode [ 85.037272][ T52] Bluetooth: hci1: command tx timeout [ 85.058664][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.068824][ T5833] veth1_vlan: entered promiscuous mode [ 85.093794][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.104711][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.118001][ T52] Bluetooth: hci4: command tx timeout [ 85.118009][ T5828] Bluetooth: hci2: command tx timeout [ 85.142892][ T5823] veth1_vlan: entered promiscuous mode [ 85.151330][ T5832] veth0_vlan: entered promiscuous mode [ 85.157961][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.175496][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.197397][ T52] Bluetooth: hci3: command tx timeout [ 85.199187][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.212675][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.238525][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.246690][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.270700][ T5832] veth1_vlan: entered promiscuous mode [ 85.284180][ T5833] veth0_macvtap: entered promiscuous mode [ 85.333291][ T5833] veth1_macvtap: entered promiscuous mode [ 85.379152][ T5823] veth0_macvtap: entered promiscuous mode [ 85.393838][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.419008][ T5823] veth1_macvtap: entered promiscuous mode [ 85.480590][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.504045][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.530981][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.573603][ T5832] veth0_macvtap: entered promiscuous mode [ 85.588633][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.638293][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.649858][ T5832] veth1_macvtap: entered promiscuous mode [ 85.662081][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.670807][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.686188][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.695107][ T3469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.710819][ T3469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.739612][ T3469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.764357][ T3469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.785750][ T3469] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.810002][ T3469] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.861096][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.861339][ T5943] loop3: detected capacity change from 0 to 32768 [ 85.901828][ T3469] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.917228][ T5943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4 (5943) [ 85.944556][ T3469] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.001499][ T5943] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.004273][ T5945] tmpfs: Bad value for 'mpol' [ 86.018007][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.021023][ T5943] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 86.042296][ T5943] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 86.095917][ T1002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.104849][ T1002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.135561][ T1002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.140986][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.157515][ T1002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.224873][ T5943] BTRFS info (device loop3): rebuilding free space tree [ 86.350018][ T5943] BTRFS info (device loop3): disabling free space tree [ 86.377133][ T5943] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.390062][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.400417][ T5943] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.411541][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.476170][ T5943] BTRFS info (device loop3): enabling ssd optimizations [ 86.484873][ T5943] BTRFS info (device loop3): enabling disk space caching [ 86.511979][ T5943] BTRFS info (device loop3): force clearing of disk cache [ 86.522298][ T5943] BTRFS info (device loop3): enabling auto defrag [ 86.534837][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.544078][ T5943] BTRFS info (device loop3): max_inline set to 0 [ 86.553451][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.571263][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.589162][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.744567][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.753839][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.795460][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.805924][ T106] cfg80211: failed to load regulatory.db [ 86.813738][ T12] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 86.823559][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.950890][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.985056][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.992785][ T5968] BTRFS info (device loop3): scrub: started on devid 1 [ 87.038657][ T5968] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 87.046074][ T52] Bluetooth: hci0: command tx timeout [ 87.117259][ T52] Bluetooth: hci1: command tx timeout [ 87.237024][ T52] Bluetooth: hci2: command tx timeout [ 87.249942][ T5828] Bluetooth: hci4: command tx timeout [ 87.384017][ T52] Bluetooth: hci3: command tx timeout [ 88.206936][ T5985] tmpfs: Bad value for 'mpol' [ 88.332156][ T5970] loop2: detected capacity change from 0 to 32768 [ 88.350220][ T5970] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 2d9b3e57-2d0b-4115-a3ac-d7048eb86edc [ 88.407352][ T5970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (5970) [ 88.467489][ T5970] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.497590][ T5970] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 88.506402][ T5970] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 88.620474][ T5970] BTRFS info (device loop2): rebuilding free space tree [ 88.633288][ T5824] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.649382][ T5978] loop0: detected capacity change from 0 to 32768 [ 88.682634][ T5978] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 81f7498d-81fc-429f-8fe9-9ea39ab51380 [ 88.697102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 88.727396][ T5970] BTRFS info (device loop2): disabling free space tree [ 88.740027][ T5970] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.753069][ T5978] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5978) [ 88.773224][ T5970] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 88.795526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 88.868968][ T5978] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.913583][ T5978] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 88.960382][ T5978] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 89.027073][ T5970] BTRFS info (device loop2): enabling ssd optimizations [ 89.075910][ T5970] BTRFS info (device loop2): enabling disk space caching [ 89.130069][ T5970] BTRFS info (device loop2): force clearing of disk cache [ 89.156595][ T5970] BTRFS info (device loop2): enabling auto defrag [ 89.174040][ T5970] BTRFS info (device loop2): max_inline set to 0 [ 89.195692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 89.379129][ T5978] BTRFS info (device loop0): rebuilding free space tree [ 89.481926][ T5978] BTRFS info (device loop0): disabling free space tree [ 89.533985][ T5978] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.587901][ T5978] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.667563][ T5978] BTRFS info (device loop0): enabling ssd optimizations [ 89.687523][ T6030] loop2: detected capacity change from 32768 to 64 [ 89.693676][ T1138] kworker/u8:8: attempt to access beyond end of device [ 89.693676][ T1138] loop2: rw=6145, sector=10544, nr_sectors = 8 limit=64 [ 89.694301][ T5978] BTRFS info (device loop0): enabling disk space caching [ 89.760219][ T5978] BTRFS info (device loop0): force clearing of disk cache [ 89.776706][ T1138] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 89.809640][ T5978] BTRFS info (device loop0): enabling auto defrag [ 89.816132][ T5978] BTRFS info (device loop0): max_inline set to 0 [ 89.819072][ T1138] kworker/u8:8: attempt to access beyond end of device [ 89.819072][ T1138] loop2: rw=6145, sector=10552, nr_sectors = 8 limit=64 [ 89.902667][ T1138] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 89.966904][ T1138] kworker/u8:8: attempt to access beyond end of device [ 89.966904][ T1138] loop2: rw=6145, sector=10560, nr_sectors = 8 limit=64 [ 90.025958][ T1138] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 90.073080][ T1138] kworker/u8:8: attempt to access beyond end of device [ 90.073080][ T1138] loop2: rw=6145, sector=10568, nr_sectors = 8 limit=64 [ 90.126488][ T1138] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 90.161297][ T1138] kworker/u8:8: attempt to access beyond end of device [ 90.161297][ T1138] loop2: rw=6145, sector=10576, nr_sectors = 8 limit=64 [ 90.211960][ T1138] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 90.323864][ T1138] BTRFS: error (device loop2) in btrfs_commit_transaction:2554: errno=-5 IO failure (Error while writing out transaction) [ 90.360357][ T2218] kworker/u8:10: attempt to access beyond end of device [ 90.360357][ T2218] loop2: rw=67108865, sector=13440, nr_sectors = 3192 limit=64 [ 90.429371][ T1138] BTRFS info (device loop2 state E): forced readonly [ 90.431822][ T2218] BTRFS error (device loop2 state E): bdev /dev/loop2 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0 [ 90.467767][ T1138] BTRFS warning (device loop2 state E): Skipping commit of aborted transaction. [ 90.482431][ T6030] BTRFS info (device loop2 state E): scrub: started on devid 1 [ 90.497382][ T1138] BTRFS error (device loop2 state EA): Transaction aborted (error -5) [ 90.513594][ T6030] BTRFS info (device loop2 state EA): scrub: not finished on devid 1 with status: -30 [ 90.525797][ T1138] BTRFS: error (device loop2 state EA) in cleanup_transaction:2036: errno=-5 IO failure [ 90.527804][ T6041] loop0: detected capacity change from 32768 to 64 [ 90.557247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.619217][ T1138] BTRFS error (device loop2 state EA): fail to start transaction for status update: -30 [ 90.636194][ T6038] syz.0.1: attempt to access beyond end of device [ 90.636194][ T6038] loop0: rw=6145, sector=10528, nr_sectors = 8 limit=64 [ 90.718120][ T6038] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 90.749279][ T6027] loop3: detected capacity change from 0 to 32768 [ 90.773150][ T6027] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8 (6027) [ 90.807680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.825109][ T6038] BTRFS: error (device loop0) in btrfs_commit_transaction:2554: errno=-5 IO failure (Error while writing out transaction) [ 90.893545][ T6027] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.896612][ T6038] BTRFS info (device loop0 state E): forced readonly [ 91.014857][ T6027] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 91.042582][ T6027] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 91.069899][ T6038] BTRFS warning (device loop0 state E): Skipping commit of aborted transaction. [ 91.090213][ T6038] BTRFS error (device loop0 state EA): Transaction aborted (error -5) [ 91.110230][ T6038] BTRFS: error (device loop0 state EA) in cleanup_transaction:2036: errno=-5 IO failure [ 91.247842][ T6027] BTRFS info (device loop3): rebuilding free space tree [ 91.319516][ T6057] loop1: detected capacity change from 0 to 2048 [ 91.350054][ T6027] BTRFS info (device loop3): disabling free space tree [ 91.358371][ T6027] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.376543][ T6027] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.401119][ T6057] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 91.401579][ T6027] BTRFS info (device loop3): enabling ssd optimizations [ 91.426675][ T6027] BTRFS info (device loop3): enabling disk space caching [ 91.437699][ T6027] BTRFS info (device loop3): force clearing of disk cache [ 91.458776][ T6027] BTRFS info (device loop3): enabling auto defrag [ 91.467383][ T6027] BTRFS info (device loop3): max_inline set to 0 [ 91.509595][ T6060] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.610676][ T30] audit: type=1326 audit(1764209844.364:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034538f749 code=0x7ffc0000 [ 91.637897][ T30] audit: type=1326 audit(1764209844.364:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f034538f749 code=0x7ffc0000 [ 91.653686][ T6063] loop4: detected capacity change from 0 to 512 [ 91.660966][ T30] audit: type=1326 audit(1764209844.364:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034538f749 code=0x7ffc0000 [ 91.672699][ T6063] ======================================================= [ 91.672699][ T6063] WARNING: The mand mount option has been deprecated and [ 91.672699][ T6063] and is ignored by this kernel. Remove the mand [ 91.672699][ T6063] option from the mount to silence this warning. [ 91.672699][ T6063] ======================================================= [ 91.748273][ T30] audit: type=1326 audit(1764209844.364:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f034538f749 code=0x7ffc0000 [ 91.773926][ T30] audit: type=1326 audit(1764209844.364:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034538f749 code=0x7ffc0000 [ 91.796250][ T30] audit: type=1326 audit(1764209844.364:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034538f749 code=0x7ffc0000 [ 91.814397][ T3493] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 91.832060][ T6064] loop3: detected capacity change from 32768 to 64 [ 91.855955][ T1135] kworker/u8:7: attempt to access beyond end of device [ 91.855955][ T1135] loop3: rw=67108865, sector=13440, nr_sectors = 2048 limit=64 [ 91.912274][ T1135] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 91.947732][ T1135] kworker/u8:7: attempt to access beyond end of device [ 91.947732][ T1135] loop3: rw=67108865, sector=15488, nr_sectors = 976 limit=64 [ 92.004086][ T1135] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 92.110356][ T2989] kworker/u8:11: attempt to access beyond end of device [ 92.110356][ T2989] loop3: rw=67108865, sector=10600, nr_sectors = 8 limit=64 [ 92.127007][ T2989] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 92.142948][ T6027] BTRFS: error (device loop3) in btrfs_commit_transaction:2554: errno=-5 IO failure (Error while writing out transaction) [ 92.163846][ T5823] BTRFS info (device loop0 state EA): last unmount of filesystem 81f7498d-81fc-429f-8fe9-9ea39ab51380 [ 92.175392][ T6027] BTRFS info (device loop3 state E): forced readonly [ 92.276828][ T6027] BTRFS warning (device loop3 state E): Skipping commit of aborted transaction. [ 92.667444][ T6027] BTRFS error (device loop3 state EA): Transaction aborted (error -5) [ 92.700464][ T6027] BTRFS: error (device loop3 state EA) in cleanup_transaction:2036: errno=-5 IO failure [ 92.747522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.758548][ T5833] BTRFS info (device loop2 state EA): last unmount of filesystem 2d9b3e57-2d0b-4115-a3ac-d7048eb86edc [ 92.847017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.741004][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.820667][ T5824] BTRFS info (device loop3 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.926001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.227446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.324550][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.464478][ T6078] loop0: detected capacity change from 0 to 32768 [ 94.547079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.627913][ T6078] XFS (loop0): Mounting V5 filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb in no-recovery mode. Filesystem will be inconsistent. [ 94.731230][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.773720][ T6078] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_inobt block 0x18 [ 94.793292][ T6078] XFS (loop0): Unmount and run xfs_repair [ 94.834722][ T6078] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 94.896589][ T6078] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff IAB3............ [ 94.905531][ T6078] 00000010: 00 00 00 00 00 00 00 18 00 00 00 02 00 00 00 10 ................ [ 94.955351][ T6078] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 94.980360][ T6078] 00000030: 00 00 00 00 f0 ea ad a5 00 00 11 40 00 00 40 37 ...........@..@7 [ 94.990751][ T6078] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 94.992152][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.000090][ T6078] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.019848][ T6078] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.029199][ T6078] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 95.227311][ T6078] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x18 len 8 error 74 [ 95.239128][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.248219][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.275667][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.306201][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.313919][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.334372][ T6078] XFS (loop0): Failed to read root inode 0x1140, error 117 [ 95.408836][ T6078] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 95.423010][ T6103] process 'syz.4.21' launched './file1' with NULL argv: empty string added [ 96.037804][ T12] bridge_slave_1: left allmulticast mode [ 96.103221][ T12] bridge_slave_1: left promiscuous mode [ 96.142214][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.180498][ T12] bridge_slave_0: left allmulticast mode [ 96.195131][ T12] bridge_slave_0: left promiscuous mode [ 96.207904][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.775969][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.803661][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.828478][ T12] bond0 (unregistering): Released all slaves [ 97.406514][ T5828] Bluetooth: hci4: command tx timeout [ 97.738379][ T6135] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 98.065751][ T6100] chnl_net:caif_netlink_parms(): no params data found [ 98.096272][ T6149] 9pnet_virtio: no channels available for device syz [ 98.243760][ T30] audit: type=1804 audit(1764209850.974:8): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.37" name="file0" dev="ramfs" ino=8866 res=1 errno=0 [ 98.367756][ T12] hsr_slave_0: left promiscuous mode [ 98.741036][ T12] hsr_slave_1: left promiscuous mode [ 98.766063][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.806515][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.838546][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.845968][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.153281][ T12] veth1_macvtap: left promiscuous mode [ 99.195540][ T12] veth0_macvtap: left promiscuous mode [ 99.203116][ T12] veth1_vlan: left promiscuous mode [ 99.209037][ T12] veth0_vlan: left promiscuous mode [ 99.394250][ T6165] netlink: 44 bytes leftover after parsing attributes in process `syz.3.43'. [ 99.448211][ T5828] Bluetooth: hci4: command tx timeout [ 101.060750][ T6177] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.297357][ T6178] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.350077][ T6178] block device autoloading is deprecated and will be removed. [ 101.402267][ T6179] binder: 6171:6179 ioctl 0 200000000040 returned -22 [ 101.531649][ T5828] Bluetooth: hci4: command tx timeout [ 102.014193][ T12] team0 (unregistering): Port device team_slave_1 removed [ 102.032282][ T6185] mmap: syz.4.48 (6185) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.376381][ T12] team0 (unregistering): Port device team_slave_0 removed [ 103.597106][ T5828] Bluetooth: hci4: command tx timeout [ 104.247834][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 104.286624][ T6207] netlink: 3 bytes leftover after parsing attributes in process `syz.4.52'. [ 104.422212][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.432976][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.446046][ T6100] bridge_slave_0: entered allmulticast mode [ 104.471986][ T6100] bridge_slave_0: entered promiscuous mode [ 104.693695][ T6207] batadv1: entered allmulticast mode [ 104.730266][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.737748][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.744923][ T6100] bridge_slave_1: entered allmulticast mode [ 104.768993][ T6100] bridge_slave_1: entered promiscuous mode [ 104.783578][ T42] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 104.850460][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.891212][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.985939][ T6100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.014628][ T6100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.297995][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.513528][ T6100] team0: Port device team_slave_0 added [ 105.538259][ T5836] usb 1-1: config 0 has an invalid interface number: 104 but max is 0 [ 105.553761][ T6100] team0: Port device team_slave_1 added [ 105.574419][ T5836] usb 1-1: config 0 has no interface number 0 [ 105.604466][ T5836] usb 1-1: New USB device found, idVendor=1b93, idProduct=1013, bcdDevice=e0.89 [ 105.636792][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.665185][ T5836] usb 1-1: Product: syz [ 105.676510][ T5836] usb 1-1: Manufacturer: syz [ 105.691640][ T5836] usb 1-1: SerialNumber: syz [ 105.734840][ T5836] usb 1-1: config 0 descriptor?? [ 105.805455][ T5836] cp210x 1-1:0.104: cp210x converter detected [ 106.008417][ T5836] cp210x 1-1:0.104: failed to get vendor val 0x370b size 1: -71 [ 106.021849][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.029243][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.078018][ T5836] cp210x 1-1:0.104: querying part number failed [ 106.137668][ T5836] usb 1-1: cp210x converter now attached to ttyUSB0 [ 106.146650][ T6100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.192698][ T5836] usb 1-1: USB disconnect, device number 2 [ 106.213988][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.232194][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.328111][ T5836] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 106.346866][ T5836] cp210x 1-1:0.104: device disconnected [ 106.386887][ T6100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.533061][ T6100] hsr_slave_0: entered promiscuous mode [ 106.562132][ T6100] hsr_slave_1: entered promiscuous mode [ 106.590783][ T6100] debugfs: 'hsr0' already exists in 'hsr' [ 106.617256][ T6100] Cannot create hsr debugfs directory [ 106.726605][ T6228] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 106.733316][ T6228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 106.868412][ T6228] vhci_hcd vhci_hcd.0: Device attached [ 106.912917][ T5828] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 106.926279][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 106.926297][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.926304][ T5828] Workqueue: hci0 hci_rx_work [ 106.926330][ T5828] Call Trace: [ 106.926335][ T5828] [ 106.926341][ T5828] dump_stack_lvl+0x189/0x250 [ 106.926362][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.926377][ T5828] ? __pfx__printk+0x10/0x10 [ 106.926393][ T5828] ? kernfs_path_from_node+0x250/0x290 [ 106.926413][ T5828] ? kernfs_path_from_node+0x2f/0x290 [ 106.926440][ T5828] sysfs_create_dir_ns+0x259/0x280 [ 106.926468][ T5828] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 106.926495][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 106.926521][ T5828] kobject_add_internal+0x6ab/0xcc0 [ 106.926554][ T5828] kobject_add+0x155/0x220 [ 106.926572][ T5828] ? __pfx_kobject_add+0x10/0x10 [ 106.926588][ T5828] ? _raw_spin_unlock+0x3f/0x50 [ 106.926603][ T5828] ? get_device_parent+0x366/0x3a0 [ 106.926619][ T5828] device_add+0x408/0xb80 [ 106.926638][ T5828] hci_conn_add_sysfs+0xd5/0x210 [ 106.926654][ T5828] le_conn_complete_evt+0xf1d/0x1420 [ 106.926670][ T5828] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 106.926679][ T5828] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 106.926692][ T5828] ? __asan_memcpy+0x40/0x70 [ 106.926708][ T5828] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.926720][ T5828] ? skb_pull_data+0xfb/0x200 [ 106.926734][ T5828] hci_le_conn_complete_evt+0x187/0x480 [ 106.926755][ T5828] hci_event_packet+0x78f/0x1260 [ 106.926771][ T5828] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 106.926789][ T5828] ? __pfx_hci_event_packet+0x10/0x10 [ 106.926804][ T5828] ? kcov_remote_start+0x4d3/0x7f0 [ 106.926815][ T5828] ? lockdep_hardirqs_on+0x98/0x140 [ 106.926830][ T5828] ? hci_send_to_monitor+0xe2/0x590 [ 106.926843][ T5828] hci_rx_work+0x3ee/0x1060 [ 106.926863][ T5828] ? process_one_work+0x868/0x15a0 [ 106.926882][ T5828] process_one_work+0x93a/0x15a0 [ 106.926909][ T5828] ? __pfx_process_one_work+0x10/0x10 [ 106.926928][ T5828] ? assign_work+0x3a1/0x410 [ 106.926944][ T5828] worker_thread+0x9b0/0xee0 [ 106.926973][ T5828] kthread+0x711/0x8a0 [ 106.926986][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 106.927000][ T5828] ? __pfx_kthread+0x10/0x10 [ 106.927012][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.927024][ T5828] ? lockdep_hardirqs_on+0x98/0x140 [ 106.927035][ T5828] ? __pfx_kthread+0x10/0x10 [ 106.927046][ T5828] ret_from_fork+0x599/0xb30 [ 106.927061][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 106.927080][ T5828] ? __switch_to_asm+0x39/0x70 [ 106.927090][ T5828] ? __switch_to_asm+0x33/0x70 [ 106.927098][ T5828] ? __pfx_kthread+0x10/0x10 [ 106.927109][ T5828] ret_from_fork_asm+0x1a/0x30 [ 106.927129][ T5828] [ 107.214200][ T5828] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.228500][ T5828] Bluetooth: hci0: failed to register connection device [ 107.366688][ T5941] usb 36-1: SetAddress Request (2) to port 0 [ 107.373588][ T5941] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 107.450049][ T6229] vhci_hcd: connection reset by peer [ 107.521622][ T3552] vhci_hcd vhci_hcd.1: stop threads [ 107.584638][ T3552] vhci_hcd vhci_hcd.1: release socket [ 107.626510][ T3552] vhci_hcd vhci_hcd.1: disconnect device [ 110.469743][ T6100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.557834][ T6100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.571660][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 110.713464][ T6263] netlink: 14 bytes leftover after parsing attributes in process `syz.0.65'. [ 110.787225][ T6264] netlink: 52 bytes leftover after parsing attributes in process `syz.0.65'. [ 110.898330][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.65'. [ 111.030103][ T6100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.109401][ T6262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.124409][ T6262] bond0: (slave bond1): Enslaving as an active interface with an up link [ 111.426080][ T6263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.575496][ T6263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.615790][ T6263] bond0 (unregistering): (slave bond1): Releasing backup interface [ 111.646240][ T6263] bond0 (unregistering): Released all slaves [ 111.864899][ T6284] loop5: detected capacity change from 0 to 7 [ 111.883704][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.893024][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.902896][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.912081][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.920931][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.930108][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.941131][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.950325][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.958867][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.968135][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.978519][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.987700][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 111.998216][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.007952][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.017158][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.025001][ T6284] ldm_validate_partition_table(): Disk read failed. [ 112.025214][ T6100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.039675][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.048839][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.057326][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.066491][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.075083][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 112.083231][ T6284] Dev loop5: unable to read RDB block 0 [ 112.092746][ T6284] loop5: unable to read partition table [ 112.116658][ T6284] loop5: partition table beyond EOD, truncated [ 112.122836][ T6284] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 112.174690][ T6286] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.284024][ T6296] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.479716][ T5941] usb 36-1: device descriptor read/8, error -110 [ 112.571624][ T6100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.879983][ T6100] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.894028][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.901179][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.014181][ T6306] bridge0: port 3(macsec1) entered blocking state [ 113.023962][ T6306] bridge0: port 3(macsec1) entered disabled state [ 113.061365][ T6306] macsec1: entered allmulticast mode [ 113.075562][ T6306] macsec1: left allmulticast mode [ 113.133802][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.141082][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.147631][ T5941] usb usb36-port1: attempt power cycle [ 113.431684][ T6313] Bluetooth: MGMT ver 1.23 [ 113.680532][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 113.860249][ T5941] usb usb36-port1: unable to enumerate USB device [ 116.249997][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.507064][ T6341] 9p: Bad value for 'source' [ 117.972609][ T30] audit: type=1326 audit(1764209870.724:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 118.274980][ T6346] infiniband syz1: set active [ 118.303879][ T6346] infiniband syz1: added syz_tun [ 118.915881][ T6346] RDS/IB: syz1: added [ 118.952635][ T6346] smc: adding ib device syz1 with port count 1 [ 119.010448][ T6346] smc: ib device syz1 port 1 has no pnetid [ 120.391583][ T30] audit: type=1326 audit(1764209870.744:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 120.414211][ T30] audit: type=1326 audit(1764209870.754:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 120.437061][ T30] audit: type=1326 audit(1764209870.754:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 120.460456][ T30] audit: type=1326 audit(1764209870.754:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 120.482706][ T30] audit: type=1326 audit(1764209870.754:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 120.505594][ T30] audit: type=1326 audit(1764209870.754:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 121.478204][ T30] audit: type=1326 audit(1764209870.754:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 121.861958][ T6100] veth0_vlan: entered promiscuous mode [ 121.887468][ T6100] veth1_vlan: entered promiscuous mode [ 122.148251][ T6100] veth0_macvtap: entered promiscuous mode [ 122.248090][ T6100] veth1_macvtap: entered promiscuous mode [ 122.376198][ T6377] netlink: 'syz.0.91': attribute type 4 has an invalid length. [ 122.816586][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.963374][ T6391] netlink: 'syz.0.91': attribute type 4 has an invalid length. [ 122.977074][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 122.988289][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.002288][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.016519][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.024681][ T10] usb 2-1: Product: syz [ 123.037126][ T10] usb 2-1: Manufacturer: syz [ 123.041907][ T10] usb 2-1: SerialNumber: syz [ 123.060794][ T10] usb 2-1: config 0 descriptor?? [ 123.080639][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.090586][ T10] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 123.369109][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.405181][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.509028][ T6200] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.604081][ T6200] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.646811][ T6200] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.669456][ T6200] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.689852][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 123.971603][ T6200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.034806][ T6200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.259949][ T10] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 124.317057][ T10] em28xx 2-1:0.0: board has no eeprom [ 124.789392][ T10] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 124.838192][ T10] em28xx 2-1:0.0: dvb set to bulk mode. [ 124.898078][ T5928] em28xx 2-1:0.0: Binding DVB extension [ 124.958001][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.007074][ T10] usb 2-1: USB disconnect, device number 2 [ 125.023757][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.052173][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 125.109061][ T5928] em28xx 2-1:0.0: Registering input extension [ 125.121103][ T10] em28xx 2-1:0.0: Closing input extension [ 125.175069][ T10] em28xx 2-1:0.0: Freeing device [ 125.688183][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28'. [ 126.550051][ T30] audit: type=1326 audit(1764209879.304:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 126.634140][ T30] audit: type=1326 audit(1764209879.324:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 126.709318][ T30] audit: type=1326 audit(1764209879.324:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 126.816955][ T30] audit: type=1326 audit(1764209879.324:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 126.910015][ T30] audit: type=1326 audit(1764209879.324:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 126.967163][ T30] audit: type=1326 audit(1764209879.324:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 127.073596][ T30] audit: type=1326 audit(1764209879.324:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 127.187086][ T30] audit: type=1326 audit(1764209879.324:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 127.242095][ T30] audit: type=1326 audit(1764209879.324:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 127.318109][ T30] audit: type=1326 audit(1764209879.324:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba7d991667 code=0x7ffc0000 [ 127.881114][ T6448] netlink: 'syz.0.111': attribute type 4 has an invalid length. [ 128.030018][ T6442] could not allocate digest TFM handle sha3-512-generic [ 128.236230][ T6457] fuse: Unknown parameter '0x0000000000000003' [ 129.589087][ T6480] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 130.528223][ T5836] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 130.802812][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.893050][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.976508][ T5836] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 131.008479][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.039465][ T5836] usb 6-1: config 0 descriptor?? [ 131.769923][ T5836] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 131.812870][ T5836] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 131.907569][ T6500] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.928802][ T6500] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 131.936840][ T5836] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 131.947381][ T5836] hid-steam 0003:28DE:1142.0001: No HID_FEATURE_REPORT submitted - nothing to read [ 132.043052][ T5836] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 132.064058][ T5836] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 132.146584][ T6500] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 132.212166][ T6500] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 132.260097][ T6500] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.286777][ T6500] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.353902][ T6500] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 132.461021][ T5836] usb 6-1: USB disconnect, device number 2 [ 132.473144][ T6500] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.498436][ T5836] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 132.527830][ T6500] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.572901][ T6500] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.632552][ T6500] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.672527][ T6500] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.738958][ T6500] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 132.884370][ T6500] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.890701][ T6500] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 132.898424][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.908550][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.937700][ T6500] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.446510][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 134.247117][ T6527] overlayfs: failed to resolve './file1': -2 [ 134.316493][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.466531][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.489190][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.639084][ T9] usb 5-1: config 0 has no interfaces? [ 134.726513][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.956529][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.308330][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 135.320451][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.348392][ T9] usb 5-1: config 0 descriptor?? [ 135.516622][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 135.594109][ T9] usb 5-1: USB disconnect, device number 2 [ 135.968400][ T6544] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 135.977808][ T6544] netlink: 224 bytes leftover after parsing attributes in process `syz.1.136'. [ 136.298103][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 136.397187][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.481517][ T9] usb 5-1: config 0 has no interfaces? [ 136.487120][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 136.507724][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.522794][ T9] usb 5-1: config 0 descriptor?? [ 136.557231][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.731522][ T9] usb 5-1: USB disconnect, device number 3 [ 136.796504][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.133714][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.676675][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 137.996824][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.054433][ T6564] syzkaller0: entered promiscuous mode [ 138.092969][ T6564] syzkaller0: entered allmulticast mode [ 138.478484][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.639172][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.739252][ T6565] bond_slave_0: entered promiscuous mode [ 138.745150][ T6565] bond_slave_1: entered promiscuous mode [ 138.760196][ T6565] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 138.891412][ T5836] usb 5-1: device descriptor read/all, error -71 [ 138.926613][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.032492][ T6565] bond_slave_0: left promiscuous mode [ 139.037976][ T6565] bond_slave_1: left promiscuous mode [ 139.196497][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.365028][ T6572] binder: 6557:6572 ioctl 0 200000000040 returned -22 [ 139.379857][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.145'. [ 139.394999][ T6572] netlink: 'syz.5.145': attribute type 6 has an invalid length. [ 139.402939][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.145'. [ 139.468137][ T6572] Zero length message leads to an empty skb [ 139.486112][ T6198] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.764834][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 140.387417][ T6198] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.396191][ T6198] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.414793][ T6198] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.632608][ T6609] geneve0: entered allmulticast mode [ 144.383282][ T6635] binder: 6623:6635 ioctl 0 200000000040 returned -22 [ 144.407368][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 144.418266][ T6635] netlink: 'syz.4.162': attribute type 6 has an invalid length. [ 144.431632][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 144.584709][ T6608] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.743294][ T6608] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.943579][ T1135] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.040812][ T1135] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.555298][ T6658] 9pnet_virtio: no channels available for device syz [ 148.797427][ T6700] binder: 6678:6700 ioctl 0 200000000040 returned -22 [ 148.811570][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 148.822282][ T6700] netlink: 'syz.1.181': attribute type 6 has an invalid length. [ 148.831503][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 148.957079][ T6006] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.040162][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.145591][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.206850][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.209464][ T6707] 9pnet_virtio: no channels available for device syz [ 150.663466][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.684480][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 150.684498][ T30] audit: type=1326 audit(1764209903.364:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.5.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3418f749 code=0x7ffc0000 [ 151.770426][ T30] audit: type=1326 audit(1764209903.364:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.5.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3418f749 code=0x7ffc0000 [ 151.797932][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 151.804832][ T30] audit: type=1326 audit(1764209903.484:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.5.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d3418f749 code=0x7ffc0000 [ 151.832640][ T30] audit: type=1326 audit(1764209903.484:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.5.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3418f749 code=0x7ffc0000 [ 151.868889][ T5889] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 151.932658][ T5889] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 151.953792][ T30] audit: type=1326 audit(1764209903.484:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.5.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3418f749 code=0x7ffc0000 [ 152.057384][ T5889] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.070935][ T30] audit: type=1326 audit(1764209903.484:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.5.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f7d3418f749 code=0x7ffc0000 [ 152.070992][ T30] audit: type=1326 audit(1764209903.484:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.5.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3418f749 code=0x7ffc0000 [ 152.071038][ T30] audit: type=1326 audit(1764209903.484:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.5.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3418f749 code=0x7ffc0000 [ 152.071076][ T30] audit: type=1326 audit(1764209903.484:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.5.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3418f749 code=0x7ffc0000 [ 152.193396][ T30] audit: type=1326 audit(1764209903.484:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.5.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3418f749 code=0x7ffc0000 [ 152.303585][ T5889] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.316068][ T5889] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 152.336689][ T5889] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 152.361119][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.382008][ T5889] usb 1-1: Product: syz [ 152.394656][ T5889] usb 1-1: Manufacturer: syz [ 152.414576][ T5889] usb 1-1: SerialNumber: syz [ 152.455217][ T5889] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 152.487256][ T5889] imon 1-1:155.0: unable to initialize intf0, err -90 [ 152.516501][ T5889] imon:imon_probe: failed to initialize context! [ 152.544511][ T5889] imon 1-1:155.0: unable to register, err -19 [ 152.956512][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.089356][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 153.136500][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 153.168702][ T5889] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 153.170145][ T6761] random: crng reseeded on system resumption [ 153.209352][ T5889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.261764][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.296518][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.338991][ T5889] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.395238][ T5889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.426581][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.814692][ T5889] usb 2-1: GET_CAPABILITIES returned 0 [ 153.828468][ T5889] usbtmc 2-1:16.0: can't read capabilities [ 153.901488][ T5976] usb 1-1: USB disconnect, device number 3 [ 154.217183][ T6776] block nbd4: not configured, cannot reconfigure [ 154.353064][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.218'. [ 154.366211][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.218'. [ 154.380037][ T6784] netlink: 'syz.3.218': attribute type 6 has an invalid length. [ 154.452395][ T6786] hub 9-0:1.0: USB hub found [ 154.459700][ T6786] hub 9-0:1.0: 1 port detected [ 154.886936][ T5976] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.214496][ T5976] usb 4-1: Using ep0 maxpacket: 16 [ 155.473589][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 155.784649][ T5976] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 155.844750][ T10] usb 2-1: USB disconnect, device number 3 [ 155.906543][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.962588][ T5976] usb 4-1: Product: syz [ 155.984455][ T5976] usb 4-1: Manufacturer: syz [ 156.010644][ T5976] usb 4-1: SerialNumber: syz [ 156.035089][ T5976] usb 4-1: config 0 descriptor?? [ 156.063697][ T6801] vlan1: entered allmulticast mode [ 156.074213][ T5976] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.107481][ T6801] veth0_vlan: entered allmulticast mode [ 156.126834][ T5976] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 156.426678][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.616726][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 156.634618][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 156.647564][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.660472][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.673267][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.686645][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.779568][ T6818] 9pnet_virtio: no channels available for device syz [ 156.979072][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.155512][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.167747][ T5976] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 157.589004][ T5976] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 157.599583][ T5976] em28xx 4-1:0.0: board has no eeprom [ 157.667305][ T5976] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 157.680086][ T5976] em28xx 4-1:0.0: dvb set to bulk mode. [ 157.688661][ T9] em28xx 4-1:0.0: Binding DVB extension [ 157.702604][ T5976] usb 4-1: USB disconnect, device number 2 [ 157.712599][ T5976] em28xx 4-1:0.0: Disconnecting em28xx [ 157.768630][ T9] em28xx 4-1:0.0: Registering input extension [ 157.785317][ T5976] em28xx 4-1:0.0: Closing input extension [ 157.861354][ T5976] em28xx 4-1:0.0: Freeing device [ 157.930083][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.236'. [ 159.118543][ T6848] netlink: 'syz.4.237': attribute type 4 has an invalid length. [ 159.220223][ T10] usb 2-1: usb_control_msg returned -71 [ 159.237009][ T10] usbtmc 2-1:16.0: can't read capabilities [ 159.254971][ T6852] Illegal XDP return value 4294967294 on prog (id 34) dev N/A, expect packet loss! [ 159.294398][ T10] usb 2-1: USB disconnect, device number 4 [ 160.460586][ T6870] 9pnet_virtio: no channels available for device syz [ 163.530923][ T6896] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 164.514181][ T6920] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 164.522031][ T6920] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 164.616688][ T6920] vhci_hcd vhci_hcd.0: Device attached [ 164.733285][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.259'. [ 164.966849][ T106] usb 34-1: SetAddress Request (2) to port 0 [ 164.974099][ T106] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 165.044432][ T6931] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 165.064503][ T6922] vhci_hcd: connection reset by peer [ 165.105527][ T12] vhci_hcd vhci_hcd.0: stop threads [ 165.161306][ T12] vhci_hcd vhci_hcd.0: release socket [ 165.200325][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 165.326635][ T5839] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 165.566523][ T5839] usb 5-1: Using ep0 maxpacket: 32 [ 165.590179][ T5839] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 165.643065][ T5839] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 165.761203][ T5839] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.868920][ T5839] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 165.976213][ T5839] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 166.007777][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.059314][ T5839] usb 5-1: Product: syz [ 166.085423][ T5839] usb 5-1: Manufacturer: syz [ 166.119995][ T5839] usb 5-1: SerialNumber: syz [ 166.155778][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 166.215322][ T5839] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input7 [ 166.366622][ T5839] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 166.523988][ T5839] (id 0x00) [ 166.679836][ T5839] rc_core: IR keymap rc-imon-pad not found [ 166.698278][ T5839] Registered IR keymap rc-empty [ 166.732408][ T5839] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 166.902786][ T5839] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 167.010870][ T6958] bridge0: port 3(erspan0) entered blocking state [ 167.037710][ T5839] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 167.051228][ T6960] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 167.066621][ T6958] bridge0: port 3(erspan0) entered disabled state [ 167.176500][ T6962] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 167.187837][ T6962] netlink: 2 bytes leftover after parsing attributes in process `syz.3.275'. [ 167.209303][ T6958] erspan0: entered allmulticast mode [ 167.231237][ T5839] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input8 [ 167.329672][ T6958] erspan0: entered promiscuous mode [ 167.385649][ T6958] bridge0: port 3(erspan0) entered blocking state [ 167.393822][ T6958] bridge0: port 3(erspan0) entered forwarding state [ 167.437102][ T5839] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:6> initialized [ 167.529986][ T5839] usb 5-1: USB disconnect, device number 6 [ 167.682457][ T6960] batman_adv: batadv0: Adding interface: team0 [ 167.692261][ T6960] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.753908][ T6960] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 167.837043][ T6962] team0: entered promiscuous mode [ 167.883746][ T6962] team_slave_0: entered promiscuous mode [ 167.895691][ T6962] team_slave_1: entered promiscuous mode [ 167.906862][ T6962] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.915124][ T6962] batman_adv: batadv0: Interface activated: team0 [ 167.926543][ T6962] batman_adv: batadv0: Interface deactivated: team0 [ 167.934614][ T6962] batman_adv: batadv0: Removing interface: team0 [ 167.965158][ T6962] bridge0: port 3(team0) entered blocking state [ 167.995217][ T6962] bridge0: port 3(team0) entered disabled state [ 168.010271][ T6962] team0: entered allmulticast mode [ 168.019491][ T6962] team_slave_0: entered allmulticast mode [ 168.031676][ T6962] team_slave_1: entered allmulticast mode [ 168.070160][ T6962] bridge0: port 3(team0) entered blocking state [ 168.078066][ T6962] bridge0: port 3(team0) entered forwarding state [ 168.119925][ T6966] erspan0: left allmulticast mode [ 168.166720][ T6966] erspan0: left promiscuous mode [ 168.196771][ T6966] bridge0: port 3(erspan0) entered disabled state [ 168.347488][ T6977] netlink: 'syz.0.280': attribute type 39 has an invalid length. [ 169.821102][ T6991] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 169.872095][ T6991] kvm: pic: non byte read [ 169.886558][ T6991] kvm: pic: non byte read [ 169.911422][ T6991] kvm: pic: non byte read [ 169.924956][ T6991] kvm: pic: non byte read [ 170.081421][ T106] usb 34-1: device descriptor read/8, error -110 [ 170.509476][ T106] usb usb34-port1: attempt power cycle [ 171.495963][ T106] usb usb34-port1: unable to enumerate USB device [ 176.726915][ T7047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.627154][ T5828] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 178.284894][ T7093] capability: warning: `syz.3.322' uses 32-bit capabilities (legacy support in use) [ 178.482900][ T7096] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 179.325076][ T7098] overlay: ./file1 is not a directory [ 179.520850][ T7112] kernel profiling enabled (shift: 8) [ 181.740167][ T5828] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 181.751352][ T5828] Bluetooth: hci1: Injecting HCI hardware error event [ 181.762271][ T52] Bluetooth: hci1: hardware error 0x00 [ 182.368040][ T7143] 9pnet_virtio: no channels available for device syz [ 183.740918][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 183.836663][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 183.864055][ T7163] Bluetooth: MGMT ver 1.23 [ 185.918948][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 186.460752][ T7196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.704370][ T7224] Bluetooth: MGMT ver 1.23 [ 188.846237][ T7238] 9p: Bad value for 'rfdno' [ 189.609958][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 189.609985][ T30] audit: type=1800 audit(1764209942.334:115): pid=7240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.362" name="/" dev="fuse" ino=1 res=0 errno=0 [ 191.364312][ T52] Bluetooth: hci4: unexpected event for opcode 0x003b [ 192.090001][ T7254] lo speed is unknown, defaulting to 1000 [ 192.319787][ T7254] lo speed is unknown, defaulting to 1000 [ 192.437514][ T7254] lo speed is unknown, defaulting to 1000 [ 192.716351][ T7261] syzkaller0: entered promiscuous mode [ 192.735918][ T7261] syzkaller0: entered allmulticast mode [ 192.823480][ T7254] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 192.950089][ T7254] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 193.537159][ T7263] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 193.545003][ T7263] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 193.575628][ T7263] vhci_hcd vhci_hcd.0: Device attached [ 193.599885][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.365'. [ 193.661606][ T7254] lo speed is unknown, defaulting to 1000 [ 193.842390][ T7273] 9pnet_virtio: no channels available for device syz [ 194.612702][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.626813][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.686547][ T6245] usb 42-1: SetAddress Request (2) to port 0 [ 194.703488][ T7254] lo speed is unknown, defaulting to 1000 [ 194.710668][ T6245] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 194.724542][ T7254] lo speed is unknown, defaulting to 1000 [ 194.734823][ T7254] lo speed is unknown, defaulting to 1000 [ 195.523236][ T7265] vhci_hcd: connection reset by peer [ 195.560176][ T2989] vhci_hcd vhci_hcd.4: stop threads [ 195.580263][ T2989] vhci_hcd vhci_hcd.4: release socket [ 195.621278][ T2989] vhci_hcd vhci_hcd.4: disconnect device [ 195.759589][ T7254] lo speed is unknown, defaulting to 1000 [ 195.787415][ T7254] lo speed is unknown, defaulting to 1000 [ 197.010127][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.376'. [ 197.020897][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.376'. [ 197.784033][ T7312] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 198.173876][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.183354][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.757149][ T6245] usb 42-1: device descriptor read/8, error -110 [ 200.153430][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.193698][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.513248][ T6245] usb usb42-port1: attempt power cycle [ 200.531175][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 200.656405][ T7330] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 200.667829][ T7330] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 200.679308][ T7330] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 200.757318][ T3469] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.786610][ T30] audit: type=1800 audit(1764209953.404:116): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.384" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 200.891623][ T3469] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.157648][ T6245] usb usb42-port1: unable to enumerate USB device [ 201.500186][ T7332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.550847][ T3469] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.622897][ T3469] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.817018][ T3469] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.965162][ T3469] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.175000][ T3469] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.337708][ T7366] loop4: detected capacity change from 0 to 2560 [ 202.350287][ T3469] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.410334][ T7366] buffer_io_error: 5 callbacks suppressed [ 202.410355][ T7366] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 202.773331][ T7366] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 202.807273][ T7366] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 202.818454][ T7366] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 202.965788][ T7366] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 203.166622][ T7366] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 203.190945][ T7366] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 203.228029][ T7366] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 203.245699][ T7366] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 203.261805][ T7366] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 205.511940][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 207.245103][ T7421] ubi31: attaching mtd0 [ 207.606538][ T7421] ubi31: scanning is finished [ 207.629653][ T7421] ubi31: empty MTD device detected [ 209.884662][ T7421] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 209.985436][ T7421] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 210.031547][ T7421] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 210.154281][ T7421] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 210.258153][ T7421] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 210.285840][ T7421] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 210.360711][ T7421] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 236469409 [ 210.422770][ T7421] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 210.506477][ T7442] ubi31: background thread "ubi_bgt31d" started, PID 7442 [ 210.850743][ T7432] lo speed is unknown, defaulting to 1000 [ 212.001385][ T7456] netlink: 64 bytes leftover after parsing attributes in process `syz.3.422'. [ 214.502210][ T7492] ubi31: detaching mtd0 [ 214.773052][ T7492] ubi31: mtd0 is detached [ 215.724916][ T7514] input: syz0 as /devices/virtual/input/input10 [ 215.756322][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 217.558257][ T7540] binder: 7530:7540 ioctl 0 200000000040 returned -22 [ 217.577768][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 217.588455][ T7540] netlink: 'syz.0.445': attribute type 6 has an invalid length. [ 217.598140][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'. [ 218.041902][ T6608] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.126535][ T6608] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.163080][ T6608] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.193855][ T6608] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.431775][ T7552] loop1: detected capacity change from 0 to 8 [ 218.527675][ T7552] SQUASHFS error: lzo decompression failed, data probably corrupt [ 218.791262][ T7558] 9pnet_virtio: no channels available for device syz [ 219.573381][ T7552] SQUASHFS error: Failed to read block 0x82: -5 [ 219.742658][ T7552] SQUASHFS error: Unable to read metadata cache entry [80] [ 219.751899][ T7552] SQUASHFS error: Unable to read inode 0x11f [ 219.774695][ T52] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 220.712788][ T7569] 9pnet_virtio: no channels available for device syz [ 222.148345][ T7574] tipc: Started in network mode [ 222.154519][ T7574] tipc: Node identity ce4f0707878f, cluster identity 4711 [ 222.165125][ T7574] tipc: Enabled bearer , priority 0 [ 222.195188][ T7574] syzkaller0: entered promiscuous mode [ 222.206547][ T7574] syzkaller0: entered allmulticast mode [ 223.692230][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 223.739723][ T6245] tipc: Node number set to 1237321479 [ 223.821794][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 223.957958][ T7594] tipc: Resetting bearer [ 224.047457][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.066968][ T7573] tipc: Resetting bearer [ 224.083647][ T9] usb 4-1: config 254 has an invalid interface number: 117 but max is 0 [ 224.106070][ T9] usb 4-1: config 254 has no interface number 0 [ 224.266175][ T9] usb 4-1: config 254 interface 117 has no altsetting 0 [ 224.278783][ T7573] tipc: Disabling bearer [ 224.310111][ T9] usb 4-1: string descriptor 0 read error: -22 [ 224.322176][ T9] usb 4-1: New USB device found, idVendor=305a, idProduct=1404, bcdDevice=51.0e [ 224.335404][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.379487][ T9] option 4-1:254.117: GSM modem (1-port) converter detected [ 224.488063][ T7603] binder: 7593:7603 ioctl 0 200000000040 returned -22 [ 225.020503][ T7605] 9p: Bad value for 'wfdno' [ 225.242379][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.468'. [ 225.253906][ T7607] netlink: 'syz.5.468': attribute type 5 has an invalid length. [ 225.290681][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.5.468'. [ 225.308528][ T6245] usb 4-1: USB disconnect, device number 3 [ 225.322912][ T6245] option 4-1:254.117: device disconnected [ 225.661197][ T7622] 9pnet_virtio: no channels available for device syz [ 226.971901][ T7607] geneve2: entered promiscuous mode [ 227.035895][ T7607] geneve2: entered allmulticast mode [ 227.213485][ T7605] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 227.221189][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 227.237058][ T65] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 227.303809][ T65] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 227.324859][ T7640] comedi: valid board names for 8255 driver are: [ 227.358050][ T7643] loop1: detected capacity change from 0 to 1024 [ 227.365903][ T65] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 227.383214][ T7640] 8255 [ 227.391194][ T7640] comedi: valid board names for vmk80xx driver are: [ 227.410484][ T7643] EXT4-fs: inline encryption not supported [ 227.427934][ T65] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 227.438920][ T7640] vmk80xx [ 227.452566][ T7640] comedi: valid board names for usbduxsigma driver are: [ 227.490150][ T7640] usbduxsigma [ 227.497252][ T7643] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 227.514355][ T7640] comedi: valid board names for usbduxfast driver are: [ 227.536706][ T7643] System zones: 0-1, 3-12 [ 227.545920][ T7640] usbduxfast [ 227.560912][ T7640] comedi: valid board names for usbdux driver are: [ 227.579381][ T7643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.607923][ T7640] usbdux [ 227.617336][ T7640] comedi: valid board names for ni6501 driver are: [ 227.649910][ T7640] ni6501 [ 227.671373][ T7640] comedi: valid board names for dt9812 driver are: [ 227.698936][ T7640] dt9812 [ 227.714916][ T7640] comedi: valid board names for ni_labpc_cs driver are: [ 227.729153][ T7643] loop1: detected capacity change from 1024 to 64 [ 227.753920][ T7640] ni_labpc_cs [ 227.771917][ T7640] comedi: valid board names for ni_daq_700 driver are: [ 227.824727][ T5834] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /104/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=17104912, rec_len=26982, size=1024 fake=0 [ 227.873216][ T7640] ni_daq_700 [ 227.941241][ T7640] comedi: valid board names for labpc_pci driver are: [ 228.026076][ T7640] labpc_pci [ 228.060432][ T7640] comedi: valid board names for adl_pci9118 driver are: [ 228.114505][ T7652] binder: 7642:7652 ioctl 0 200000000040 returned -22 [ 228.131552][ T7640] pci9118dg [ 228.180089][ T7640] pci9118hg [ 228.214653][ T7640] pci9118hr [ 228.261293][ T7640] comedi: valid board names for 8255_pci driver are: [ 228.354464][ T7640] 8255_pci [ 228.384334][ T7640] comedi: valid board names for s526 driver are: [ 228.435286][ T7640] s526 [ 228.449288][ T7640] comedi: valid board names for multiq3 driver are: [ 228.504975][ T7640] multiq3 [ 228.537093][ T7640] comedi: valid board names for pcmuio driver are: [ 228.572331][ T7640] pcmuio48 [ 228.586633][ T7640] pcmuio96 [ 228.600566][ T7640] comedi: valid board names for pcmmio driver are: [ 228.620776][ T7640] pcmmio [ 228.633068][ T7640] comedi: valid board names for pcmda12 driver are: [ 228.654116][ T7640] pcmda12 [ 228.686468][ T7640] comedi: valid board names for pcmad driver are: [ 228.718294][ T7640] pcmad12 [ 228.722207][ T7640] pcmad16 [ 229.123664][ T7395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.132210][ T7640] comedi: valid board names for ni_labpc driver are: [ 229.156070][ T7640] lab-pc-1200 [ 229.166113][ T7640] lab-pc-1200ai [ 229.176279][ T7640] lab-pc+ [ 229.186374][ T7640] comedi: valid board names for atmio16 driver are: [ 229.209335][ T7640] atmio16 [ 229.212986][ T7640] atmio16d [ 229.226557][ T7640] comedi: valid board names for ni_at_ao driver are: [ 229.239296][ T7640] at-ao-6 [ 229.253018][ T7640] at-ao-10 [ 229.257486][ T7640] comedi: valid board names for ni_at_a2150 driver are: [ 229.265967][ T7640] ni_at_a2150 [ 229.274383][ T7640] comedi: valid board names for adq12b driver are: [ 229.275004][ T7647] bio_check_eod: 4 callbacks suppressed [ 229.275017][ T7647] kmmpd-loop1: attempt to access beyond end of device [ 229.275017][ T7647] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 229.310828][ T7640] adq12b [ 229.314367][ T7640] comedi: valid board names for mpc624 driver are: [ 229.322249][ T7640] mpc624 [ 229.325746][ T7640] comedi: valid board names for c6xdigio driver are: [ 229.333769][ T7640] c6xdigio [ 229.390178][ T7640] comedi: valid board names for aio_iiro_16 driver are: [ 229.414541][ T7647] buffer_io_error: 310 callbacks suppressed [ 229.414602][ T7647] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 229.436542][ T6245] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 229.437857][ T7640] aio_iiro_16 [ 229.461693][ T7640] comedi: valid board names for aio_aio12_8 driver are: [ 229.486659][ T7660] 9pnet_virtio: no channels available for device syz [ 229.508310][ T7640] aio_aio12_8 [ 229.542563][ T7640] aio_ai12_8 [ 229.549383][ T7640] aio_ao12_4 [ 229.571770][ T7640] comedi: valid board names for fl512 driver are: [ 229.589517][ T7640] fl512 [ 229.622921][ T7640] comedi: valid board names for dmm32at driver are: [ 229.639031][ T7640] dmm32at [ 229.647471][ T7640] comedi: valid board names for dt282x driver are: [ 229.667018][ T7640] dt2821 [ 229.675132][ T7640] dt2821-f [ 229.687249][ T7640] dt2821-g [ 229.695556][ T7640] dt2823 [ 229.707684][ T7640] dt2824-pgh [ 229.716343][ T7640] dt2824-pgl [ 229.724599][ T7640] dt2825 [ 229.735849][ T7640] dt2827 [ 229.743694][ T7640] dt2828 [ 229.751873][ T7640] dt2829 [ 229.761172][ T7640] dt21-ez [ 229.769809][ T7640] dt23-ez [ 229.780039][ T7640] dt24-ez [ 229.788240][ T7640] dt24-ez-pgl [ 229.801229][ T7640] comedi: valid board names for dt2817 driver are: [ 229.820973][ T7640] dt2817 [ 229.828844][ T7640] comedi: valid board names for dt2815 driver are: [ 229.847516][ T7640] dt2815 [ 229.854955][ T7640] comedi: valid board names for dt2814 driver are: [ 229.872106][ T7640] dt2814 [ 229.881001][ T7640] comedi: valid board names for dt2811 driver are: [ 229.899985][ T7640] dt2811-pgh [ 229.917535][ T7640] dt2811-pgl [ 229.923951][ T7640] comedi: valid board names for dt2801 driver are: [ 229.942322][ T7640] dt2801 [ 229.951601][ T7640] comedi: valid board names for das6402 driver are: [ 229.970315][ T7640] das6402-12 [ 229.978768][ T7640] das6402-16 [ 229.988520][ T7640] comedi: valid board names for das1800 driver are: [ 230.028635][ T7640] das-1701st [ 230.032965][ T7640] das-1701st-da [ 230.040454][ T7640] das-1702st [ 230.049168][ T7640] das-1702st-da [ 230.060647][ T7640] das-1702hr [ 230.069858][ T7640] das-1702hr-da [ 230.093809][ T7640] das-1701ao [ 230.096496][ T6245] usb 6-1: Using ep0 maxpacket: 16 [ 230.098313][ T7640] das-1702ao [ 230.125335][ T7640] das-1801st [ 230.136500][ T7640] das-1801st-da [ 230.145707][ T7640] das-1802st [ 230.156092][ T7640] das-1802st-da [ 230.172452][ T7640] das-1802hr [ 230.179416][ T7640] das-1802hr-da [ 230.184340][ T7640] das-1801hc [ 230.189941][ T7640] das-1802hc [ 230.194607][ T7640] das-1801ao [ 230.200209][ T7640] das-1802ao [ 230.204382][ T7640] comedi: valid board names for das800 driver are: [ 230.219767][ T7640] das-800 [ 230.223639][ T7640] cio-das800 [ 230.231946][ T7640] das-801 [ 230.235763][ T7640] cio-das801 [ 230.245242][ T7640] das-802 [ 230.249841][ T7640] cio-das802 [ 230.254741][ T7640] cio-das802/16 [ 230.267544][ T7640] comedi: valid board names for isa-das08 driver are: [ 230.276354][ T7640] isa-das08 [ 230.282093][ T7640] das08-pgm [ 230.286130][ T7640] das08-pgh [ 230.294094][ T7640] das08-pgl [ 230.299162][ T7640] das08-aoh [ 230.303325][ T7640] das08-aol [ 230.314672][ T7640] das08-aom [ 230.326019][ T7640] das08/jr-ao [ 230.402512][ T7640] das08jr-16-ao [ 230.482913][ T7640] pc104-das08 [ 230.529393][ T7640] das08jr/16 [ 230.576820][ T7640] comedi: valid board names for das16m1 driver are: [ 230.659101][ T7640] das16m1 [ 230.697188][ T7640] comedi: valid board names for dac02 driver are: [ 230.782427][ T7640] dac02 [ 230.813471][ T7640] comedi: valid board names for rti802 driver are: [ 230.892058][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.910826][ T7640] rti802 [ 230.934070][ T7640] comedi: valid board names for rti800 driver are: [ 230.994931][ T7640] rti800 [ 231.010002][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.053916][ T7640] rti815 [ 231.080688][ T7640] comedi: valid board names for pcm3724 driver are: [ 231.143008][ T7640] pcm3724 [ 231.175698][ T7640] comedi: valid board names for pcl818 driver are: [ 231.255276][ T7640] pcl818l [ 231.295217][ T7640] pcl818h [ 231.325800][ T7640] pcl818hd [ 231.371112][ T7640] pcl818hg [ 231.410499][ T7640] pcl818 [ 231.436262][ T7640] pcl718 [ 231.498707][ T7640] pcm3718 [ 231.522531][ T7640] comedi: valid board names for pcl816 driver are: [ 231.590880][ T7640] pcl816 [ 231.630379][ T7640] pcl814b [ 231.664100][ T7640] comedi: valid board names for pcl812 driver are: [ 231.677359][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.751334][ T7640] pcl812 [ 231.807047][ T7640] pcl812pg [ 231.822975][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.875544][ T7640] acl8112pg [ 231.903603][ T7640] acl8112dg [ 231.926224][ T7640] acl8112hg [ 231.964498][ T7640] a821pgl [ 231.998860][ T7640] a821pglnda [ 232.039174][ T7640] a821pgh [ 232.081557][ T7640] a822pgl [ 232.088570][ T6245] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.134353][ T7640] a822pgh [ 232.201096][ T7640] a823pgl [ 232.240227][ T7640] a823pgh [ 232.254783][ T6245] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 232.266720][ T7640] pcl813 [ 232.279743][ T6245] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.295111][ T6245] usb 6-1: config 0 descriptor?? [ 232.301524][ T7640] pcl813b [ 232.301539][ T7640] acl8113 [ 232.301546][ T7640] iso813 [ 232.301554][ T7640] acl8216 [ 232.301562][ T7640] a826pg [ 232.301570][ T7640] comedi: valid board names for pcl730 driver are: [ 232.301579][ T7640] pcl730 [ 232.301586][ T7640] iso730 [ 232.301593][ T7640] acl7130 [ 232.301601][ T7640] pcm3730 [ 232.301608][ T7640] pcl725 [ 232.301616][ T7640] p8r8dio [ 232.301623][ T7640] acl7225b [ 232.301630][ T7640] p16r16dio [ 232.301636][ T7640] pcl733 [ 232.301643][ T7640] pcl734 [ 232.387456][ T6245] usb 6-1: can't set config #0, error -71 [ 232.486864][ T7640] opmm-1616-xt [ 232.491498][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.509009][ T7640] pearl-mm-p [ 232.512939][ T7640] ir104-pbf [ 232.544388][ T7640] comedi: valid board names for pcl726 driver are: [ 232.546697][ T6245] usb 6-1: USB disconnect, device number 3 [ 232.561317][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.586491][ T7640] pcl726 [ 232.596915][ T7640] pcl727 [ 232.600463][ T7640] pcl728 [ 232.603968][ T7640] acl6126 [ 232.643181][ T7640] acl6128 [ 232.653324][ T7640] comedi: valid board names for pcl724 driver are: [ 232.698115][ T7640] pcl724 [ 232.701679][ T7640] pcl722 [ 232.705190][ T7640] pcl731 [ 232.723996][ T7640] acl7122 [ 232.728583][ T7640] acl7124 [ 232.732219][ T7640] pet48dio [ 232.735942][ T7640] pcmio48 [ 232.756600][ T7640] onyx-mm-dio [ 232.760903][ T7640] comedi: valid board names for pcl711 driver are: [ 232.775381][ T7640] pcl711 [ 232.784104][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.784167][ T7640] pcl711b [ 232.811741][ T7640] acl8112hg [ 232.815996][ T7640] acl8112dg [ 232.820992][ T7640] comedi: valid board names for amplc_pc263 driver are: [ 232.846506][ T7640] pc263 [ 232.846555][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.862391][ T7640] comedi: valid board names for amplc_pc236 driver are: [ 232.862408][ T7640] pc36at [ 232.862417][ T7640] comedi: valid board names for amplc_dio200 driver are: [ 232.862427][ T7640] pc212e [ 232.862435][ T7640] pc214e [ 232.862443][ T7640] pc215e [ 232.862451][ T7640] pc218e [ 232.862458][ T7640] pc272e [ 232.862466][ T7640] comedi: valid board names for comedi_parport driver are: [ 232.862477][ T7640] comedi_parport [ 232.862485][ T7640] comedi: valid board names for comedi_test driver are: [ 232.862495][ T7640] comedi_test [ 232.862503][ T7640] comedi: valid board names for comedi_bond driver are: [ 232.862513][ T7640] comedi_bond [ 232.958509][ T7654] comedi comedi0: No channels found! [ 232.976625][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.989716][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.000479][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.010842][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.127074][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.725580][ T7672] 9pnet_virtio: no channels available for device syz [ 234.458934][ T65] bridge_slave_1: left allmulticast mode [ 234.465748][ T65] bridge_slave_1: left promiscuous mode [ 234.515914][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.824416][ T52] Bluetooth: hci3: command tx timeout [ 235.942484][ T65] bridge_slave_0: left allmulticast mode [ 236.116766][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.554365][ T7716] xt_NFQUEUE: number of queues (51632) out of range (got 109621) [ 238.044247][ T5828] Bluetooth: hci3: command tx timeout [ 238.117092][ T7717] binder: 7686:7717 ioctl 0 200000000040 returned -22 [ 238.499607][ T7713] 9p: Bad value for 'wfdno' [ 238.631645][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 238.659486][ T7718] netlink: 'syz.4.501': attribute type 5 has an invalid length. [ 238.686733][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.501'. [ 239.065403][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.097760][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.127786][ T65] bond0 (unregistering): Released all slaves [ 239.146570][ T7674] lo speed is unknown, defaulting to 1000 [ 239.885741][ T7713] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 239.903185][ T7718] geneve2: entered promiscuous mode [ 239.918650][ T7718] geneve2: entered allmulticast mode [ 240.020585][ T6077] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 240.041863][ T6077] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 240.076657][ T5828] Bluetooth: hci3: command tx timeout [ 240.100304][ T6077] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 240.258661][ T6077] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 240.336263][ T7736] loop0: detected capacity change from 0 to 1024 [ 240.389352][ T7736] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 240.429383][ T7736] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 240.440450][ T7736] EXT4-fs (loop0): orphan cleanup on readonly fs [ 240.451884][ T7736] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.507: Freeing blocks not in datazone - block = 0, count = 4096 [ 240.477663][ T7736] EXT4-fs (loop0): 1 orphan inode deleted [ 240.487820][ T7736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.562003][ T7744] loop5: detected capacity change from 0 to 512 [ 240.571145][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.644363][ T7745] 9pnet_virtio: no channels available for device syz [ 240.655519][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 241.121752][ T7738] comedi comedi0: No channels found! [ 241.136898][ T7744] EXT4-fs (loop5): Test dummy encryption mode enabled [ 241.173779][ T7744] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 241.257458][ T7744] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 241.274432][ T7744] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 242.166957][ T5828] Bluetooth: hci3: command tx timeout [ 243.112051][ T7768] loop5: detected capacity change from 0 to 8 [ 243.275655][ T65] hsr_slave_0: left promiscuous mode [ 243.289333][ T65] hsr_slave_1: left promiscuous mode [ 243.317565][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.354713][ T7769] binder: 7760:7769 ioctl 0 200000000040 returned -22 [ 244.623116][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.632708][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.641976][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.719017][ T65] veth1_macvtap: left promiscuous mode [ 244.741417][ T65] veth0_macvtap: left promiscuous mode [ 244.756623][ T65] veth1_vlan: left promiscuous mode [ 244.762942][ T65] veth0_vlan: left promiscuous mode [ 244.769112][ T5839] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 244.989223][ T5839] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.069113][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.134470][ T5839] usb 6-1: config 0 descriptor?? [ 245.235403][ T5839] cp210x 6-1:0.0: cp210x converter detected [ 245.661308][ T5839] usb 6-1: cp210x converter now attached to ttyUSB0 [ 245.752213][ T7789] 9pnet_virtio: no channels available for device syz [ 246.276993][ T5839] usb 6-1: USB disconnect, device number 4 [ 246.286567][ T30] audit: type=1804 audit(1764209999.044:117): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.519" name="file0" dev="ramfs" ino=19893 res=1 errno=0 [ 246.440653][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.500417][ T7792] loop3: detected capacity change from 0 to 256 [ 246.548561][ T5839] cp210x 6-1:0.0: device disconnected [ 248.047688][ T7802] loop3: detected capacity change from 0 to 128 [ 248.100856][ T7803] loop5: detected capacity change from 0 to 512 [ 248.102903][ T7802] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 248.150130][ T7802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.178569][ T7803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.228351][ T7803] EXT4-fs error (device loop5): __ext4_fill_super:5515: inode #2: comm syz.5.525: inode has both inline data and extents flags [ 248.287873][ T7803] EXT4-fs (loop5): get root inode failed [ 248.294663][ T7803] EXT4-fs (loop5): mount failed [ 248.503128][ T65] team0 (unregistering): Port device team_slave_1 removed [ 248.536285][ T7816] loop0: detected capacity change from 0 to 512 [ 248.607110][ T7816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.650172][ T7816] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.665383][ T65] team0 (unregistering): Port device team_slave_0 removed [ 249.330706][ T7823] binder: 7808:7823 ioctl 0 200000000040 returned -22 [ 250.394127][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.534942][ T7829] netlink: 'syz.5.531': attribute type 1 has an invalid length. [ 250.559645][ T7829] netlink: 224 bytes leftover after parsing attributes in process `syz.5.531'. [ 250.656021][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 250.808342][ T7836] loop0: detected capacity change from 0 to 164 [ 251.015287][ T7810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.524'. [ 251.039861][ T7810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.524'. [ 251.083227][ T7674] chnl_net:caif_netlink_parms(): no params data found [ 251.456610][ T7845] loop3: detected capacity change from 0 to 512 [ 251.486682][ T7845] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.595580][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.624684][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.643590][ T7674] bridge_slave_0: entered allmulticast mode [ 251.702476][ T7674] bridge_slave_0: entered promiscuous mode [ 251.732292][ T30] audit: type=1804 audit(1764210007.486:118): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.538" name="file0" dev="ramfs" ino=19098 res=1 errno=0 [ 251.793756][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.526857][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.576688][ T7674] bridge_slave_1: entered allmulticast mode [ 252.630059][ T7674] bridge_slave_1: entered promiscuous mode [ 252.828931][ T7862] loop3: detected capacity change from 0 to 512 [ 252.837356][ T7862] EXT4-fs: Ignoring removed nobh option [ 252.871607][ T7862] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.542: iget: bad i_size value: 38620345925642 [ 252.891448][ T7862] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.542: couldn't read orphan inode 15 (err -117) [ 252.909070][ T7862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.958491][ T7868] loop5: detected capacity change from 0 to 1024 [ 253.017113][ T7868] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 253.073593][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.097858][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.286691][ T5888] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 253.730223][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.744485][ T7674] team0: Port device team_slave_0 added [ 253.774856][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.794941][ T7674] team0: Port device team_slave_1 added [ 253.802482][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 253.835974][ T5888] usb 1-1: config 1 has no interface number 0 [ 253.870028][ T5888] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.902232][ T7875] loop5: detected capacity change from 0 to 1764 [ 253.922033][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.936135][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.946643][ T5888] usb 1-1: Product: syz [ 253.955886][ T5888] usb 1-1: Manufacturer: syz [ 253.982142][ T5888] usb 1-1: SerialNumber: syz [ 254.002384][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.019904][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.061417][ T5888] usb 1-1: selecting invalid altsetting 1 [ 254.072200][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.089654][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.106737][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.173377][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.545524][ T30] audit: type=1326 audit(1764210013.290:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae18f749 code=0x7ffc0000 [ 254.578679][ T5888] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 255.369164][ T30] audit: type=1326 audit(1764210013.330:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae18f749 code=0x7ffc0000 [ 255.573468][ T30] audit: type=1326 audit(1764210013.330:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ae18f749 code=0x7ffc0000 [ 255.641285][ T5888] cdc_ncm 1-1:1.1: bind() failure [ 255.761549][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.769903][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.827127][ T30] audit: type=1326 audit(1764210013.330:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae18f749 code=0x7ffc0000 [ 256.038977][ T30] audit: type=1326 audit(1764210013.330:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ae18f749 code=0x7ffc0000 [ 256.253219][ T7893] libceph: resolve ' [ 256.253219][ T7893] -&fYǝa2i [ 256.253219][ T7893] .?&*&' (ret=-3): failed [ 256.452068][ T7674] hsr_slave_0: entered promiscuous mode [ 256.491524][ T30] audit: type=1326 audit(1764210013.330:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae18f749 code=0x7ffc0000 [ 256.624722][ T7674] hsr_slave_1: entered promiscuous mode [ 256.751157][ T7674] debugfs: 'hsr0' already exists in 'hsr' [ 256.822407][ T7674] Cannot create hsr debugfs directory [ 256.848594][ T30] audit: type=1326 audit(1764210013.330:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.4.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae18f749 code=0x7ffc0000 [ 257.138328][ T5888] usb 1-1: USB disconnect, device number 4 [ 257.156124][ T7890] wireguard0: entered promiscuous mode [ 257.168054][ T7890] wireguard0: entered allmulticast mode [ 261.273352][ T30] audit: type=1804 audit(1764210020.020:126): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.559" name="file0" dev="ramfs" ino=19420 res=1 errno=0 [ 261.366370][ T7674] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.431653][ T7674] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.500810][ T7674] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.937404][ T7674] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 263.244204][ T30] audit: type=1326 audit(1764210021.560:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 263.549750][ T30] audit: type=1326 audit(1764210021.560:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 263.851124][ T30] audit: type=1326 audit(1764210021.570:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 264.132870][ T30] audit: type=1326 audit(1764210021.570:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 264.480746][ T30] audit: type=1326 audit(1764210021.570:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 266.833216][ T30] audit: type=1326 audit(1764210021.570:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 266.849295][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.860117][ T30] audit: type=1326 audit(1764210021.700:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba7d92b829 code=0x7ffc0000 [ 266.895090][ T30] audit: type=1326 audit(1764210021.700:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7955 comm="syz.3.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 266.955361][ T7977] loop0: detected capacity change from 0 to 8192 [ 267.003969][ T7984] loop3: detected capacity change from 0 to 1024 [ 267.029790][ T7674] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.227498][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.236088][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.320322][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.328949][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.409621][ T8003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.442593][ T8003] loop5: detected capacity change from 0 to 1024 [ 268.453785][ T8004] loop0: detected capacity change from 0 to 512 [ 268.463878][ T8003] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.475213][ T8004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 268.491556][ T8003] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 268.509678][ T8003] EXT4-fs (loop5): group descriptors corrupted! [ 268.523340][ T8004] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 268.545706][ T8004] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 268.566911][ T8004] EXT4-fs (loop0): 1 truncate cleaned up [ 268.586147][ T8004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.911507][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.118043][ T7674] veth0_vlan: entered promiscuous mode [ 269.137616][ T7674] veth1_vlan: entered promiscuous mode [ 269.218652][ T7674] veth0_macvtap: entered promiscuous mode [ 269.264513][ T7674] veth1_macvtap: entered promiscuous mode [ 269.427613][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.442910][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.639966][ T7674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.719268][ T1111] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.758933][ T1111] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.790080][ T30] audit: type=1804 audit(1764210028.500:135): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.581" name="file0" dev="ramfs" ino=20610 res=1 errno=0 [ 271.210204][ T1111] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.313990][ T1111] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.343125][ T30] audit: type=1326 audit(1764210028.640:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 271.545986][ T30] audit: type=1326 audit(1764210028.640:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 273.113190][ T30] audit: type=1326 audit(1764210028.640:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 273.179353][ T6887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.206541][ T6887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.259492][ T30] audit: type=1326 audit(1764210028.650:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 273.685488][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.764118][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.117700][ T5829] Bluetooth: hci3: command 0x0405 tx timeout [ 275.552406][ T30] audit: type=1326 audit(1764210028.650:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 275.579790][ T30] audit: type=1326 audit(1764210028.660:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7d98f749 code=0x7ffc0000 [ 275.952612][ T5976] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 276.578703][ T5976] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 276.598012][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.708931][ T5976] usb 6-1: config 0 descriptor?? [ 276.727902][ T5976] cp210x 6-1:0.0: cp210x converter detected [ 276.812551][ T8057] loop6: detected capacity change from 0 to 512 [ 276.824783][ T8057] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.853043][ T8060] loop3: detected capacity change from 0 to 512 [ 276.861217][ T8057] EXT4-fs (loop6): orphan cleanup on readonly fs [ 276.873753][ T8057] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.590: Allocating blocks 41-42 which overlap fs metadata [ 276.895241][ T8057] Quota error (device loop6): write_blk: dquota write failed [ 276.906270][ T8057] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 276.918983][ T8057] EXT4-fs error (device loop6): ext4_acquire_dquot:6948: comm syz.6.590: Failed to acquire dquot type 0 [ 276.934486][ T8057] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 276.953941][ T8057] EXT4-fs error (device loop6): ext4_do_update_inode:5635: inode #12: comm syz.6.590: corrupted inode contents [ 276.971715][ T8057] EXT4-fs error (device loop6): ext4_dirty_inode:6520: inode #12: comm syz.6.590: mark_inode_dirty error [ 276.985806][ T8057] EXT4-fs error (device loop6): ext4_do_update_inode:5635: inode #12: comm syz.6.590: corrupted inode contents [ 277.000165][ T8057] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.590: mark_inode_dirty error [ 277.014698][ T8057] EXT4-fs error (device loop6): ext4_do_update_inode:5635: inode #12: comm syz.6.590: corrupted inode contents [ 277.035031][ T8057] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 277.046973][ T8057] EXT4-fs error (device loop6): ext4_do_update_inode:5635: inode #12: comm syz.6.590: corrupted inode contents [ 277.061361][ T8057] EXT4-fs error (device loop6): ext4_truncate:4641: inode #12: comm syz.6.590: mark_inode_dirty error [ 277.075262][ T8057] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 277.086613][ T8057] EXT4-fs (loop6): 1 truncate cleaned up [ 277.093711][ T8057] EXT4-fs (loop6): pa ffff88807ee0d9f8: logic 1, phys. 41, len 23 [ 277.103458][ T8057] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 22, pa_free 23 [ 277.119200][ T8057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.121909][ T8064] loop0: detected capacity change from 0 to 128 [ 277.203843][ T7674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.205276][ T8060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.236411][ T8060] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.254508][ T8064] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.296894][ T8064] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.398397][ T5976] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 277.539106][ T30] audit: type=1326 audit(1764210036.270:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.6.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a85b8f749 code=0x7ffc0000 [ 277.747940][ T5823] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.849932][ T30] audit: type=1326 audit(1764210036.280:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.6.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a85b8f749 code=0x7ffc0000 [ 277.880867][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.913463][ T30] audit: type=1326 audit(1764210036.310:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.6.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a85b8f749 code=0x7ffc0000 [ 278.029729][ T30] audit: type=1326 audit(1764210036.320:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.6.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a85b8f749 code=0x7ffc0000 [ 278.302252][ T30] audit: type=1326 audit(1764210036.320:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.6.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a85b8f749 code=0x7ffc0000 [ 278.584252][ T30] audit: type=1326 audit(1764210036.320:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.6.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a85b8f749 code=0x7ffc0000 [ 279.034500][ T8078] loop5: detected capacity change from 0 to 512 [ 279.278103][ T5976] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 279.420087][ T5829] Bluetooth: hci3: link tx timeout [ 279.427605][ T5829] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.958931][ T5828] Bluetooth: hci3: link tx timeout [ 279.965141][ T5828] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.944856][ T8078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.121354][ T5976] usb 6-1: cp210x converter now attached to ttyUSB0 [ 281.136096][ T5976] usb 6-1: USB disconnect, device number 5 [ 281.154811][ T8078] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.156088][ T5976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 281.177227][ T5976] cp210x 6-1:0.0: device disconnected [ 281.367791][ T30] audit: type=1800 audit(1764210040.120:148): pid=8078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.597" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 281.461727][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 281.476037][ C0] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 281.486154][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 281.497185][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.509252][ C0] RIP: 0010:__queue_work+0xa2/0xf90 [ 281.515511][ C0] Code: 10 31 ff 89 ee e8 ae 11 37 00 85 ed 0f 85 f0 0c 00 00 e8 61 0d 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 23 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 281.529528][ T5828] Bluetooth: hci3: command 0x0405 tx timeout [ 281.539021][ C0] RSP: 0018:ffffc90000147870 EFLAGS: 00010002 [ 281.539044][ C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: ffff88801ceb3d00 [ 281.539057][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.539068][ C0] RBP: 0000000000000000 R08: ffff888029250047 R09: 1ffff1100524a008 [ 281.539080][ C0] R10: dffffc0000000000 R11: ffffed100524a009 R12: dffffc0000000000 [ 281.591588][ C0] R13: ffff888029250040 R14: 00000000000001c0 R15: 0000000000000000 [ 281.601130][ C0] FS: 0000000000000000(0000) GS:ffff888125e88000(0000) knlGS:0000000000000000 [ 281.611826][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.619722][ C0] CR2: 00007ffffffff000 CR3: 0000000030932000 CR4: 00000000003526f0 [ 281.629290][ C0] Call Trace: [ 281.633222][ C0] [ 281.636734][ C0] ? rcu_is_watching+0x15/0xb0 [ 281.642457][ C0] queue_work_on+0x181/0x270 [ 281.647982][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.655583][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 281.661722][ C0] ? __debug_object_init+0x102/0x4b0 [ 281.668078][ C0] ? iomap_dio_done+0x380/0x520 [ 281.673894][ C0] iomap_dio_bio_end_io+0xf4/0x1c0 [ 281.680026][ C0] blk_update_request+0x57e/0xe60 [ 281.686052][ C0] blk_mq_end_request+0x3e/0x70 [ 281.691863][ C0] blk_done_softirq+0x10a/0x160 [ 281.697692][ C0] handle_softirqs+0x27d/0x850 [ 281.703417][ C0] ? run_ksoftirqd+0x9b/0x100 [ 281.709036][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 281.715377][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 281.721411][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 281.727449][ C0] run_ksoftirqd+0x9b/0x100 [ 281.732864][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 281.739006][ C0] smpboot_thread_fn+0x542/0xa60 [ 281.744935][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 281.750952][ C0] kthread+0x711/0x8a0 [ 281.755814][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 281.762342][ C0] ? __pfx_kthread+0x10/0x10 [ 281.767823][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.774041][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 281.780255][ C0] ? __pfx_kthread+0x10/0x10 [ 281.785739][ C0] ret_from_fork+0x599/0xb30 [ 281.791228][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 281.797345][ C0] ? __switch_to_asm+0x39/0x70 [ 281.803034][ C0] ? __switch_to_asm+0x33/0x70 [ 281.808728][ C0] ? __pfx_kthread+0x10/0x10 [ 281.814208][ C0] ret_from_fork_asm+0x1a/0x30 [ 281.819904][ C0] [ 281.823502][ C0] Modules linked in: [ 281.828167][ C0] ---[ end trace 0000000000000000 ]--- [ 281.834698][ C0] RIP: 0010:__queue_work+0xa2/0xf90 [ 281.840926][ C0] Code: 10 31 ff 89 ee e8 ae 11 37 00 85 ed 0f 85 f0 0c 00 00 e8 61 0d 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 23 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 281.864430][ C0] RSP: 0018:ffffc90000147870 EFLAGS: 00010002 [ 281.871686][ C0] RAX: 0000000000000038 RBX: 0000000000000008 RCX: ffff88801ceb3d00 [ 281.881228][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.890767][ C0] RBP: 0000000000000000 R08: ffff888029250047 R09: 1ffff1100524a008 [ 281.900303][ C0] R10: dffffc0000000000 R11: ffffed100524a009 R12: dffffc0000000000 [ 281.909840][ C0] R13: ffff888029250040 R14: 00000000000001c0 R15: 0000000000000000 [ 281.919383][ C0] FS: 0000000000000000(0000) GS:ffff888125e88000(0000) knlGS:0000000000000000 [ 281.930077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.937955][ C0] CR2: 00007ffffffff000 CR3: 0000000030932000 CR4: 00000000003526f0 [ 281.947501][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 281.956490][ C0] Kernel Offset: disabled [ 281.961653][ C0] Rebooting in 86400 seconds..